Proof-of-Stake Cryptographic Mechanisms

Proof-of-Work (PoW) secures blockchains through computational expenditure: miners race to find a hash below a target, and the winner appends the next block. This burns electricity proportional to network security. Proof-of-Stake (PoS) replaces compute with economic stake — validators lock up cryptocurrency as collateral, and the protocol selects block proposers in proportion to their stake. Ethereum's transition from PoW to PoS (The Merge, September 2022) reduced energy consumption by over 99.9%.

In Ethereum's PoS (Gasper consensus), validators stake 32 ETH by sending a deposit transaction to a smart contract on the execution layer. This deposit includes a BLS public key (the validator's identity), a withdrawal credential, and a signature proving key ownership. The deposit contract emits a log event; the consensus layer reads these logs and queues validators for activation after a delay (roughly 12-24 hours under normal conditions). The 32 ETH collateral is locked until withdrawal is enabled.

Ethereum validators use two key pairs: a BLS12-381 signing key for consensus duties (attestations, block proposals, sync committee) and a separate withdrawal key for moving funds. BLS (Boneh-Lynn-Shacham) signatures over BN-254 or BLS12-381 curves support efficient aggregation: hundreds of thousands of validator signatures can be combined into a single 96-byte signature. This aggregation is critical for scalability — without it, every slot would require gigabytes of signature data.

Ethereum's consensus timeline is divided into slots (12 seconds each) and epochs (32 slots = 6.4 minutes). In each slot, one validator is pseudo-randomly selected as block proposer. All active validators are divided into committees (typically 512 validators each) that attest to the head of the chain. Committee assignments rotate every epoch using a RANDAO-based shuffling algorithm (Fisher-Yates with RANDAO as entropy source) to prevent manipulation of committee composition.

Validator selection in PoS requires unpredictable, unmanipulable randomness. Ethereum uses RANDAO, a commit-reveal scheme built into the protocol. Each block proposer must include a BLS signature over the current epoch number — this signature contributes fresh entropy by XORing into the accumulated RANDAO value. The RANDAO output is used to select the next slot proposer and shuffle committees. An adversary who controls the last revealer in an epoch can bias RANDAO slightly by withholding their block, but only at the cost of their block reward.

PoS security depends on validators behaving honestly. Slashing punishes two specific misbehaviors: equivocation (signing two different blocks for the same slot) and surround voting (casting conflicting attestations). Slashing evidence is submitted on-chain as a transaction containing two signed messages with conflicting content but the same validator key. The offending validator loses a portion of their stake (minimum 1/32, potentially entire stake if many validators slash simultaneously) and is forcibly exited.

Ethereum's finality mechanism is Casper the Friendly Finality Gadget (FFG), layered on top of the LMD-GHOST fork choice rule. Every epoch, validators cast checkpoint votes (source, target) where source is the last justified checkpoint and target is the current epoch boundary block. A checkpoint is justified when 2/3 of stake attests to it; a justified checkpoint is finalized when the next checkpoint is also justified. Once finalized, a block cannot be reverted without burning at least 1/3 of all staked ETH — making reversion economically catastrophic.

Between finalized checkpoints, validators must agree on the canonical chain head. Ethereum uses LMD-GHOST (Latest Message Driven Greedy Heaviest Observed SubTree). Each validator's latest attestation counts as a vote; the fork choice algorithm follows the branch with the most accumulated stake weight at each fork point, counting only each validator's most recent message. The combination of LMD-GHOST (liveness) and Casper FFG (finality) forms Gasper — Ethereum's complete consensus protocol.

Ethereum validator keys use deliberate cryptographic separation. The BLS signing key is hot (used every slot for attestations) and therefore higher risk. The withdrawal credential is a hash of a separate key (or an Ethereum execution address after EIP-4895). This separation means a compromised signing key cannot steal staked ETH — the attacker can only be slashed, losing the validator's stake. Only the withdrawal key can initiate fund movement, and it can be kept cold in hardware.

Distributed Validator Technology (DVT) addresses the single-point-of-failure risk in solo staking. Using threshold BLS signatures, a single validator key is split among multiple operators (e.g., 3-of-5). A block proposal or attestation requires threshold agreement before a combined BLS signature is produced. No single operator holds the complete key. Projects like Obol Network and SSV Network implement DVT, improving fault tolerance and enabling institutional staking without centralized key custody.

Different PoS chains implement the cryptographic mechanisms differently. Solana uses a Tower BFT variant with VDF-like timestamps (Proof of History) to establish ordering before consensus. Cardano uses Ouroboros, a provably secure PoS protocol with formal cryptographic security proofs in the universal composability model. Cosmos chains use Tendermint BFT — a classical BFT protocol with 2/3 quorum finality in one round. Each design makes different trade-offs between security, liveness, decentralization, and throughput.

What is the primary cryptographic evidence used to slash an Ethereum validator?

Proof-of-Stake replaces PoW computation with economic collateral. Ethereum validators use BLS12-381 keys for aggregatable attestations. RANDAO provides protocol-internal randomness for proposer selection and committee shuffling. Casper FFG provides finality via 2/3 supermajority checkpoint votes. LMD-GHOST drives fork choice between checkpoints. Slashing punishes equivocation and surround voting using on-chain evidence of contradictory signed messages. DVT improves resilience via threshold BLS key splitting.