Skip to main content
DracoBFT is a leader-based, view-driven BFT consensus protocol implementing Fast-HotStuff two-chain finality rule. It achieves sub-second finality with linear view-change complexity and O(m) state commitment costs. DracoBFT Architecture

System Model

The protocol operates under the partially synchronous network model:
  • n = 3f + 1 validators, tolerating up to f Byzantine faults.
  • Partial Synchrony: After GST, message delivery bounded by a known constant.
  • Authenticated Channels: All messages signed with digital signatures.
  • Collision-Resistant Hashing: SHA256 for state commitments.

Two-Chain Finality

A block B at view v is finalized when a child block B’ at view v+1 contains a QC for B. Finality time: 2 rounds (versus 3 rounds for standard HotStuff). Two-Round Commit Protocol

Vote Rule

Validators only vote for blocks that directly extend a certified block:
proposal.block.view == proposal.block.qc.view + 1
This enforces consecutive views, ensuring the Fast-HotStuff safety property.

Change-Log Hash (CLH)

Instead of computing global state roots, DracoBFT commits only to state modifications.

The State Root Performance Problem

Traditional Merkle Patricia Tries incur O(n log n) costs for global state updates. The bottleneck is disk I/O, not computation. For a binary MPT with billions of keys, this translates to dozens of random disk reads per state update. Recent analysis shows that state root computation can cause up to 10x slowdown in block building.

DracoBFT Approach

DracoBFT replaces state root computation with Change-Log Hashes computed during block execution. Rather than committing to the entire state, CLH commits only to state modifications.

Block-Level Aggregation

If 400 transactions modify the same key, CLH hashes it once (final value), not 400 times.
SystemHash Operations (400 txns, 1 key)
Ethereum MPT~4,000
Tendermint IAVL~2,000
Naive CLH400
DracoBFT CLH1
For order book updates where a single price level may be modified by hundreds of trades within a block, this optimization eliminates 99.75% of hashing operations.

Chained CLH

chainedCLH_B = H(chainedCLH_prev + finalizedCLH_B)
Links finalized state across blocks for fork detection and historical verification.

Auxiliary Verification Loops

DracoBFT processes external operations in parallel with consensus through a modular global event management system. Pipelined Operation

Phase 1: Proof Collection

Collect external action proofs (zkTLS or ZK execution).

Phase 2: Verification

Verify proofs using appropriate verifier, generate verification certificate.

Phase 3: Consensus Integration

Package verified action as transaction, submit to mempool.

Phase 4: Finalization

On block finalization, apply state transition atomically.

Trustless Verification Architecture

zkTLS for Off-Chain Data

For public or private API calls to external services, DracoBFT leverages zero-knowledge Transport Layer Security (zkTLS) proofs. These proofs provide cryptographic verification of HTTPS responses without requiring the external service to be aware of the blockchain. Validators can verify:
  • The response came from the claimed server (via TLS certificate chain).
  • The response content matches specific claims (via ZK proof).
  • The data was not tampered with (via server signature).
This enables trustless integration of traditional APIs including asset price feeds, identity verification services, and any HTTPS endpoint.

ZK Execution Proofs for On-Chain State

For verification of state or events on other blockchains (for example, Ethereum):
  1. zkTLS-based RPC proofs: Efficient verification (under 100ms generation, under 10ms verification) with RPC provider trust.
  2. Zero-knowledge execution proofs: Full trustlessness via recursive block header and state verification.

Validator-as-Service-Provider Model

Beyond traditional block validation, the auxiliary verification architecture enables validators to function as permissioned access points to external services.

Routing Mechanism

The system matches end-users to specific validators based on:
  • Validator stake (economic security collateral).
  • Historical performance and uptime metrics.
  • Geographic proximity and regional service coverage.
  • Quality-of-service parameters (latency, availability).
  • Supported service integrations (payment rails, fiat currencies, banking partners).

Regulatory Compliance

The validator-as-service architecture accommodates regulatory diversity through geographic validator distribution and selective service provision. Validators opt in to specific services based on their regulatory compliance capabilities.

View-Change Protocol

Linear complexity O(n) view change:
procedure OnTimeout(v):
    send NEWVIEW(v+1, highQC, signature) to leader(v+1)
    view = v+1

procedure OnNewViewMessages(v+1):
    wait for 2f+1 NEWVIEW messages
    select highest QC among received
    propose block using aggregated QC

Weighted Leader Selection

Deterministic weighted random selection with epoch-based computation:
  • Proportional probability: Stake s gives probability s/totalStake.
  • Determinism: All validators compute identical schedule.
  • Efficiency: O(n) per epoch.
  • Dynamic updates: Recomputed on validator set changes.

Protocol Comparison

ProtocolOptimistic PathView-ChangeState Commitment
PBFT3 roundsO(n^2) msgsO(n)
HotStuff3 roundsO(n) msgsO(n log n)
Tendermint3 roundsO(n^2) msgsO(n log n)
DracoBFT2 roundsO(n) msgsO(m)
Where m = unique keys modified per block, typically m is much less than n.

Use Cases

Trustless Bridges

Verify deposit events on external blockchains without trusted relayers or multisig committees. ZK execution proofs provide cryptographic verification of deposit transactions.

Verifiable Oracle Feeds

Obtain price data, identity verification, or real-world events from traditional APIs with zkTLS proofs. Validators verify cryptographic proofs rather than trusting oracle providers.

Financial Service Access

Validators provide permissioned access to payment processors, banking APIs, foreign exchange platforms, and card issuance services. zkTLS proofs verify service delivery including payment authorization responses within required latency windows (under 300ms for card transactions).

Cross-Chain State Queries

Access state from external blockchains (token balances, contract storage, historical events) with cryptographic verification, enabling DeFi applications that span multiple chains.

Architecture Summary

ComponentComplexityBenefit
ConsensusO(n)Linear message complexity.
View ChangeO(n)No quadratic bottleneck.
State CommitmentO(m)Eliminates trie I/O.
Finality2 roundsSub-second confirmation.
DracoBFT achieves the theoretical guarantees of BFT consensus with practical performance for high-frequency financial workloads.