still trying to wrap my head around the glories of fediment. in an effort to understand, i'm hoping someone can explain how sending my sats into a fediment and getting back tokens to be used internally to the fediment with other mint users is any different than, say, sending sats to another chain such as liquid and doing transactions there with other liquid users. i believe the idea is that i can non-custodially hold on to my tokens and redeem them back to sats through the federation when i want. however, if i'm holding sats and the mint(s) goes away, aren't i stuck with unusable tokens and the mint federation has my sats?
i really do want to understand since many people i respect are into fediment. i just don't see the benefit.
Fedimints add a multi-signature aspect to federated custody. Liquid is a sole federation member (Blockstream) that can rug you, leaving little to no recourse. Fedimints would require, depending on your chosen federation's set up, multiple key holders in the multi-signature model to collude to rug all users (including the other key holders), resulting in reputational damage, public ridicule and in some cases physical harm.
The best analogy in fiat world I can think of is the choice between a bank and a credit union. Banks have shareholders outside the institution that influence decisions made within the bank procedures. Credit unions are a bit more personal. You normally need to know someone in the CU to become a member and then the reputation of the credit union is based on how they serve the members, not some arbitrary shareholders (the members ARE the shareholders). It comes down to a social contract, where those who will choose to use fedimints will choose mints where they either know one or multiple of the federation key holders, or they live close enough to them where they can go exact revenge if a rug pull occurs (as NVK likes to call this: Proof of Punch).
The benefit to most who trade-off this collaborative custody model will be privacy, via UTXO obfuscation (once the sats go in the mint, they can be pooled and sent out with little to no fee to the user of the mint). In this scenario, you do not have to trust a single mixing coordinator, since most ecash tokens will be interchangeable between mints.
I am by no means a fedimint expert, but like most things in bitcoin, tradeoffs are in the eye of the coin-holder.
reply
This is not true. Liquid has a federated custody model.
reply
Apparently I am not a Liquid expert either. Thanks for correcting me. Can you elaborate who controls the federation in terms of Liquid? Who determines who can peg in or peg out of liquid?
reply
Wow, I didn't realize how large the federation was. 66 companies or institutions. https://liquid.net/
reply
Yeah, I had no idea all those companies were involved. I still am confused on how each of those member companies interacts with Liquid
reply
The functionaries are actually 15, and 11 out of 15 are required for consensus. The other members are just white listed entities that are allowed to peg out.
reply
I read something about Liquid potentially expanding it beyond 15, is that legit?
reply
No idea, but I think possible since they allow dynamic swapping of members.
46 sats \ 0 replies \ @OT 18 Jan
Liquid has a federation. 15 or so including Block stream, Bitfinex and Boltz
reply
Seems like a nice scaling solution that provides different custody methods/tradeoffs while improving lightning ux. Eric Yates was on tftc recently, he was talking how he see's the lightning/fedi/cashu space playing out, i'd definitely recommend the listen.
reply
Fedimint is kind of like Liquid without the blockchain. Liquid custodies the pegged-in bitcoin using a miltisig quorum of functionaries. The functionaries also take turns building blocks and validating the blocks that other functionaries build. The blockchain is public so anyone in the world could be surveilling your liquid transactions. You can use confidential transactions to conceal the amount and assets of your transactions but the transaction graph is always publicly visible. I don't understand this feature at all because the transaction graph is more important to your privacy than the amounts. If you have some Liquid tokens and the network goes down or turns malicious you get rugged.
Fedimint has a multisig quorum of guardians. They control the bitcoin deposited at the mint and collaborate to validate each ecash transaction. But there is no blockchain, which means there is no public historical record of transactions. There is also currently no way for an outsider to audit the supply of issued ecash (the guardians audit it with every transaction). This sounds bad but there are upsides to the trade-off. Ecash has far superior privacy properties compared to Liquid. When you send ecash to another user the Fedimint guardians (and everyone else in the world, for that matter) are totally blind to the identities of the parties that are transacting. They only know the amounts involved. If you have some ecash and the fedimint goes down or turns malicious you get rugged.
There are a lot of other differences but hopefully this answers your question.
reply
I would say it's not fundamentally different from liquid except that:
  1. It uses Chaumian cash, which means all transactions within the federation are inherently private
  2. There's a greater degree of interoperability external to the mint (lightning and on-chain transfers)
  3. It should be easier to spin up new federations.
If all or a quorum of federation members disappeared, yes, you would be rugged. If you already have sats onchain or a lightning node, I don't think there's much benefit (beyond possibly some anonymity when spending.) If an onchain tx is looking really expensive for you, and you just need to be able to send and receive to a hot wallet cheaply and somewhat privately, this may start to look appealing. Well, more appealing than a traditional custodial wallet certainly.
reply
You're right, its exactly the same as any other exchange issuing a shitcoin IOU for Bitcoin...
an exchange would be infinitely more secure though because the bigger ones use actual multisig setups and have various stakeholders. You have to trust a Fedimint has the guardians it claims to.
I also don't think Fedimints can even say they're offering multisig security until FROST signatures are available. Guardians can only rat on each other, which just as in fiat land they are disincentivized to do.
Internal mint transactions are more private than the alternative of just an SQL database, but that encourages even larger custodians which paradoxically hurt privacy on the overall network.
SQL is better privacy and scaling tech because it encourages family-level custodianship.
SQL doesn't have tons of VC capital from financial institutions though, psyop'ing Bitcoiners into normalizing ECash Dollars in our stacks.
reply
1216 sats \ 1 reply \ @pillar 18 Jan
It isn't.
The simplest explanation I can think of is that an ecash mint is pretty much Wallet of Satoshi, with the difference that the mint doesn't know that you exist and can't keep your transaction history.
Add fedimint's federated approach and then it's WoS with privacy + it's several people holding the keys and having to coordinate to rug pull you.
It's a custodial design. The risk of rug pull is still there. But it's still much better than the custodial services we have today because it provides a tremendous improvement on privacy (plus other little details I won't go into here because it requires a long and boring explanation).
reply
great take
reply
Valid question. I hope I can learn more from the responses too.
reply
FWIW, yes, IMO, it is a separate self-custodial network where users hold their own ecash notes. Though one with price mechanics that closely follow Bitcoin's due to a certain confidence of whether or not you believe you're able to swap back into the bitcoin network at a later time for a certain price.
Also, we're all currently here using a custodial website where we have no privacy and we're trusting a single party. If you want to see a world where that's improved significantly, fedimint is on the road to that. Nobody is suggesting keeping your life savings on a fedimint, but is it better than stacker news, wos, ftx, or coinbase where they have unilateral control of your funds and can shut you down at any point in time?
To take things to the extreme, if a super majority of bitcoin miners turned off their rigs tomorrow or decided to keep colluding in a 51% attack, it would render bitcoin pretty useless similar to a majority of federation members shutting down. What are you going to do with your sats at that point if they don't get mined? At a certain point, you're already trusting a group of other individual companies comprised of other individual users that are not yourself and you have little control of whether bitcoin continues to function. You're trusting that it does, or at least the incentives line up for it to continue so.
I know it's not exactly the same. The idea that federations don't improve things significantly without introducing a BS pump and dump token pricing mechanism is where privileged bitcoins that spend a significant amount of time and money on this tech fall into. If you don't need a custodian, that's great, though you're still using them and they still improve certain aspects of your bitcoin usage and life. It's an exponential improvement the less technical and less wealthy a person is.
I'd be curious to know what alternative practical solutions you'd have for the many unsolved problems in bitcoin & lightning without similar tradeoffs when you dive into it. Hell, you're working on tech that is technically self-custodial too but functionally not, in order to better the experience of lightning. Do you not see a benefit there too? Do you think everyone have to be 100% self-custodial on chain (no lightning, because apparently it's bad to have a multisig with other parties involved sharing the same UTXO) in order see any benefit to bitcoin? Which is actually impossible to have, so the alternative is to exclude people from using Bitcoin.
reply
from what i'm gathering from this and the other great answers in this thread, it sounds like fedimint is aiming to be a great decentralized (federated) and non-custodial alternative to custodial and self-hosted bitcoin/lightning wallets by offering a much better experience in many ways, such as better privacy, improved transaction reliability, and hands-off liquidity management for end users, for those who are fine with the "tradeoffs," such as a little more centralization than running your own node, not technically using or owning sats but instead a token-like voucher or note, and there still being a chance albeit a much smaller chance of a rug-pull than going with a full custodial solution.
in regards to custodial solutions, it sounds like a no-brainer. something like stacker.news running its own fedimint and facilitating value transfer through the mint instead of a custodial solution moving data around in a sql db (like lnbits) or something would be a really cool idea. i wouldn't be surprised if @koob is working on this already.
i disagree that bitcoin lives and dies with the miners. a federation disappearing with some funds is alot more final than miners turning off. i can always just start mining myself. i wouldn't recommend it haha but i could i guess. i can't recover keys within my lifetime to figure out how to undo the vouchers i obtained from a fedimint to try to get my sats back.
i don't have anything against the concept of a federation. a group of people making decisions for the (hopefully) best interest of a community, however you define that, is a scaling solution to a population growing. i also did not mean to imply, if it was taken this way, that fedimint is just a pump and dump "make a token" shitcoin. that wasn't my intent. the origin of my question was really just trying to understand the tech at a 20,000 foot view, which i think i now have thanks to this SN thread.
however, i do still think that it is another token. backed by bitcoin, which is fine, but a token nonetheless. the marketing around fedimints seems to work really hard not to use that word. instead opting for the technical (and probably more correct) name of "chaumian ecash." but at the end of the day, it doesn't sound like i own bitcoin. i own a token that is supposed to have a value that equates to sats in some way. however, it also sounds like there's no way to verify that, which is interesting.
all in all, in sounds like cool tech being worked on by some of the brightest minds in our space, most of, if not all, of who(m?) have only the best of intentions and just want to help bring the benefits of bitcoin to more people. i'm looking forward to seeing how it pans out and what new use-cases can come from it. i hear the module system in fedi is dope.
reply
I believe it's getting less and less likely that the average joe will ever hold real bitcoin in their hands in the future. Of course they'll still have the choice to do so but custodians of various types will grow so big and so slick that 90% of the planet will never even consider self custody for the same reason you wouldn't change your own car engine.
So SINCE society is destined to give custody of their keys to others, the game is all about how to make those others as trustworthy as possible. Token or not, Fedimints really do sound like one of the best ways to find trustworthiness in a custodian.
Liquid is great but the world doesn't know those 15 signatories personally. They can't actually trust them, even though mathematically they should be more trustworthy than your mom or preacher. But they do know their mothers and preachers and many other people in their society and assign them trust already. Fedi is here to take advantage of that trust and those existing relationships.
reply
/You're trusting that it does, or at least the incentives line up for it to continue so./
fucking nailed that line. ITS ALL ABOUT INCENTIVES
reply
Based on what I have read and understood, the main difference is that custody is not only held by one "person", but by several.
reply
Coinbase has a lot of employees and shareholders. I still won't trust them with my bitcoin despite their perfect track record.
reply
The benefit is that you can identify who belongs to the federation, and then you can decide if you can trust them.
For me, fedimint allows you to create "banks" within bitcoin. These banks will be managed by people who may or may not be trustworthy. I think it's a better solution than liquid or custodial wallets, but it's still not the perfect solution.
reply
In answering my own question, I like the idea of fediment with people I actually know. A person whose house I can drive to.
reply
TLDR: EVERYTHING HAS TRADEOFFS!
reply
I think the concept of a token is currently viewed as extremely negative due to historic attempted applications of "tokens" when it comes to digital currencies. Tokens tend to equal rugpull because they are representiative of something, in control by a centralised entity.
This is fair I think, and we should all look at it with suspicion and scrutinise it, but not let it mislead us from a potential, fairly good solution to scaling sats - Not stating you are, just stating.
Personally, I'm extremely suspicious of anything fedimint ecash. It seems backwards when we have a decentralised layer 1 that just works, it just has "high" fees and "high" confirmation times - Two things anyone would think we could find a perfectly plausible solution to whilst retaining the Layer 1's amazing properties.
Alas, years later, we have Nostr apps, Alby and even SN introducting and normalising fully-custodial solutions. Anyone not looking to give up custody, needs technical-know-how and infrastructrue to run their own LN nodes. I run my own LN Node and will for the foreseeable future. I will likely always choose the self-hostable self-custody option.
But I've come to realise most people won't. And I think that comes with a lot of risk. And so, the gears have shift from "How do we fix this pretty much entirely?" to "How do we improve this just enough to mitigate risk and balance custody?".
I'm starting to be of the mind that a federated network mostly run by community, accessible to be run by the community (LET ME RUN MY OWN, in essence, just like we do with Bitcoin nodes to help enforce honesty on others inc. miners), BASED ON the online/offline statuses of self-custody wallets actually strikes a fairly good balance. Risk solely increases based on offline time. As long as the self-custody wallets presented by apps have the option to withdraw directly to the timechain, somehow, someway.
reply
How transparent can fedimints be? As that in my opinion will ultimately be what holds them back if they can’t provide the correct level to users.
Proof of reserves / liabilities at a user level would need to be baked into the system so it can monitor any kind of inflation/theft.
reply
reply
Lyn Alden, Obi Nwosu, and Eric Yakes all explained it pretty well in podcasts I've listened to recently
reply
Fedimints don't have tokens ecash is not a token, it's not another blockchain it's more like a redeemable voucher that gives you sats. So there is no token, there is a redeemable note, that you can use offchain and send to anyone via message if you want. Liquid has its own token that works like any other blockchain token, you pay fees etc. then you can swap back to bitcoin. Yes if the Fedi goes out your cash is probably gone, with liquid maybe the biggest risk might be one day regulators may order freezing the peg outs or enforce KYC to Fedi it's the same but anyone can run one so it's harder to regulate. Fedi and ecash you are always working with bitcoin lightning, you don't need swaps. So Fedi it's a better user experience. Fedi also offers more things, they hold bitcoin onchain, you got lightning, a lightning address, ecash and I think nostr integration, this are the best advantages. It's a whole package that integrates seemless with bitcoin.
reply
it is a voucher of which has a value in another coin called sats which can be turned in to get the sats instead if i'd like. sounds like a token built on top of bitcoin.
reply
A voucher that is redeemable for sats. It does not have a value in another coin it's sats, sats is not another coin it's bitcoin , the voucher itself is only an iou for sats, a promise, there is no swap from one coin to another. Liquid has its own token L-BTC that you can use independently and has its own blockchain. You can buy L-BTC on an exchange. It's a completely different token from Bitcoin. The only rule is that for 1 L-BTC to exist there must be 1BTC locked in Liquid.
reply
deleted by author
reply