Is BitVM the Holy Grail of Bitcoin？ Its Complicated, Developers Say

A once-vaunted scaling innovation for Bitcoin may be much more limited in practice than its early proponents once claimed, according to developers.

Since its introduction in October, BitVM—described as a “computing paradigm” to express smart contracts on Bitcoin—has been pitched as a potential way to bridge BTC to other blockchains in a truly decentralized manner. If so, it could unlock a world of applications for BTC holders that are currently exclusive to other chains, including privacy, scalability, and dApps.

However, such bridges will introduce a key limitation that critics claim the technologys supporters have been elusive about.

“BitVM bridges are inherently economically unstable,” wrote Bitcoin developer Tyler Whittle on Twitter on Friday.

“Unlike other bridge designs where users put funds in an escrow managed by a bridge operator, BitVM relies on what we call ‘optimistic reimbursement,’” he explained.

Under this system, a bridge operator must first prove that they‘ve paid out all withdrawal requests to users trying to withdraw their coins back to Bitcoin’s main chain before unlocking the BTC deposited to the actual bridge. In short, bridge operators must front withdrawal payments with their own liquidity.

If an operator doesnt have the liquidity to process all pending withdrawal requests, then user funds could be in serious jeopardy, and users may only be paid back on the main chain with “pennies on the dollar.”

Taproot Wizards co-founder Eric Wall promoted BitVM bridges in January, but grew more skeptical of them upon learning of this limitation—and getting booted from a group.

“I just got banned from the BitVM builders chat for asking more questions,” he tweeted. “As far as I know, they did ask multiple people first, [who] are all in agreement that the bridge is unsafe.”

update: i just got banned from the BitVM builders chat for asking more questions ????‍♂️

— Eric Wall | OP_???? (@ercwl) April 6, 2024

BitVM proponents, however, say that Whittle‘s criticisms don’t take into account the risk mitigation strategies available to bridge operators.

“The criticism is correct, but exaggerated,” said Edan Yago, a developer working on a separate BitVM-based Bitcoin rollup system, to Decrypt.

In a Twitter Spaces hosted on Friday, Yago explained that some bridge models can simply impose limits on how much Bitcoin can be withdrawn at once, to match the liquidity limits of bridge operators.

To address bottlenecks during heavy withdrawal periods, the bridge could increase its number of operators, or more operator sets could manage the bridge. “In practice, it is not a major flaw,” he said.

Meanwhile, BitVM creator Robin Linus showed frustration with Wall and other critics, claiming their assertions about BitVM were made in bad faith.

“You better try to understand BitVM before you write sensational articles, unfairly attacking our work,” Linus wrote to Twitter. “Otherwise, you just come across like all the other shitcoin thingies trying to spam our group with ‘questions.’”

Debating trolls is lame. Neither insightful nor entertaining. Sorry, @ercwl. Let's do something fun instead and have a chess boxing fight.

If you win I'll invest in your NFTs, but when you lose you have to rename your company to 'Taproot Clowns'.

— яobin linus (@robin_linus) April 7, 2024

Typically, bridged versions of BTC are backed by coins controlled by a custodian or federation inside of a multi-sig wallet. Liquid (LBTC) and Rootstock (RBTC) are examples of Bitcoin sidechains that use this model.

The downside？ Users of these chains must trust a majority of federation members not to collude and steal their Bitcoin. Even so, since custodians are in control of all coins at all times, they dont suffer from the security issues that could arise if users of a poorly designed BitVM chain tried to withdraw all funds at once.

Edited by Ryan Ozawa.