Presenting the Nephrite Manifesto - A truly Censorship-resistant Confidential Stablecoin.
This is the PDF version which is easier to read:
For users who prefer not to download the PDF, the text below is the same.
It will be appreciated if other community members/projects will also host this PDF.
Nephrite: A Confidential Stablecoin
The Nephrite Team 1st July 2022
Abstract
Nephrite is a censorship-resistant, non-custodial, and governance-less confidential stablecoin on the Beam blockchain, pegged to an external asset and overcollateralized by BEAM. Here is why we believe the world needs it.
Bitcoin is not enough
Bitcoin is a significant step in the evolution of money, but it is not money. There are at least two reasons why bitcoin canât become money: volatility and privacy.
Bitcoin has a perfectly inelastic supply which, along with frequent demand shocks, causes high volatility in its price. This volatility is a good feature for speculators but not regular money users. Since its creation, bitcoin has shown eye-popping performance and become a part of corporative treasuries, but this success stops it from becoming money. No one will use an asset as a means of payment if this asset could appreciate. Everyone will hold it and use something else for their everyday purchases. Greshamâs law says that bad money drives out good, but in the case of bitcoin, an asset is just too good to become money.
Bitcoin is pseudonymous, but the whole history of bitcoin transactions is recorded forever in a public database. Today there are paid services allowing one to identify bitcoin and other cryptocurrency holders and track their transaction history. Spying on crypto whales is just the tip of the iceberg. Throughout the history of money, cash has had a transaction privacy feature - this is a core feature of money. Bitcoin is digital, but it is not cash. Even central bankers admit that cash transactions respect our fundamental right to have our privacy, data, and identity protected in financial matters. It is not about shady deals. It is about economic efficiency and human rights.
The issues are apparent, and partial solutions already exist.
Partial solutions
Generally, those two issues of bitcoin are solved separately. Stablecoins become a solution to bitcoin volatility, and privacy coins solve its pseudonymity issues.
Of course, only decentralized stablecoins are in line with the bitcoin philosophy. Decentralization, in this case, means censorship resistance, non-custodial design, and an absence of a single entity controlling a stablecoin.
Censorship resistance is non-excludability - every network participant has equal rights to issue, transfer, and, if applicable, redeem a stablecoin, and no one can ban them from doing this. Non-custodial design refers to non-seizability - a private key owner is the only person who controls a respective stablecoin balance, and, if applicable, collateral that backs this coin. DAOs are usually considered as a way of a single controlling entity elimination. In fact, this is not always true. If a DAO is controlled by governance token holders, then a single entity could control the DAO by accumulating the majority of the tokens. The only way of making a stablecoin truly decentralized is non-upgradeability - stablecoin smart contracts are immutable, i.e. non-upgradeable by any entity.
Privacy coins fix bitcoin pseudonymity issues using different techniques. Amongst them are built-in mixers, ring signatures, stealth addresses, and zero-knowledge proofs, to name a few.
To sum up, we have stablecoins that are not confidential and privacy coins that are not stable. A ridiculous situation when you canât have both at once. Why not combine stability and privacy in one cryptocurrency? Here is where confidential stablecoins come into play.
Choosing stablecoin design
The only working confidential stablecoin we are aware of is xUSD by Haven. This stablecoin utilizes Terraâs UST design and, given the recent UST collapse, this approach doesnât look sufficiently safe. Silk is a project of a confidential stablecoin on Secret Network, trying to overcome UST design flaws by using additional reserves for the peg support. UST also had such reserves, but these enormous reserves didnât help save UST from a death spiral. Banknote redeemability as an automatic stabilization mechanism proved its efficiency back in the days of the gold standard, but the collateral printer is not.
The last but not least confidential coin which we should mention is ZeroStableCoin. Its design is brilliant but infeasible until the discovery of quantum interpersonal DeFi-agnostic computing.
We believe that the only way of building a robust decentralized stablecoin is overcollateralization. DAI by Maker is the most successful and battle-tested decentralized stablecoin, but it has flaws. It has a too complicated design, charges loan interest, is not redeemable, and is not truly decentralized in terms of collateral and governance. Good decentralized stablecoin should have opposite characteristics. LUSD by Liquity is such a stablecoin. DAI and LUSD are compared in Table 1.
These are the reasons why the Nephrite team has chosen Liquity as a reference stablecoin design.
Choosing privacy technology
As long as Nephrite is an overcollateralized stablecoin working on smart contracts - it needs a privacy coin network that supports smart contracts.
We already mentioned that the only non-native confidential stablecoin project we know is building their coin on Secret Network. The two questionable points with this type of network are trusted execution environments and PoS consensus. We prefer old-fashioned and battle-tested PoW, closer to bitcoin. Beam is such a network.
Beam utilizes Mimblewimble, an elegant privacy-preserving solution, together with modified Dandelion (a node IP obfuscation protocol). This is the only confidential PoW chain that supports smart contracts and doesnât require third-party frontends to interact with its Dapps. A stablecoin created on Beam via the Confidential Assets feature can have the same level of privacy as its native token BEAM. These are the reasons why the Nephrite team has chosen Beam as a confidential smart contract platform.
We have chosen a reference stablecoin design and a confidential smart-contract platform - itâs time for Nephrite!
Nephrite: combining stability and privacy
Nephrite uses the base Liquity design, and if one doesnât feel familiar with this concept - Official Liquity Documentation is the best place to fill this gap. Nevertheless, Nephrite is not just a copycat of Liquity on Beam. There are several differences between these stablecoins, presented in Table 2 and elaborated in the respective paragraphs below.
Table 2. Nephrite and Liquity comparison
Letâs take a closer look at these differences.
Liquidations
Beam is a way cheaper smart contract platform than Ethereum, so $10 worth of a stablecoin is quite enough for liquidation initiator compensation, and there is no need for charging an additional 0,5% liquidation fee.
A more significant improvement is that Nephrite allows liquidations only in strict order - from the weakest trove to the strongest one. This feature guarantees that liquidators will not liquidate only the most lucrative troves leaving smaller and weaker troves without liquidation.
Recovery mode
The Stability pool could serve as a source of liquidity during times of increased demand for a stablecoin. But during the Recovery mode, it should fulfill its core function - to be a source of stablecoin liquidity for liquidations. Nephrite pauses withdrawals from the Stability pool during the Recovery mode (when the systemâs Total collateral ratio is below 150%). This ensures that the Stability pool depositors will not game the system, collecting rewards during the Regular mode, and runaway once the system switch to the Recovery mode.
Frontends
Liquity functioning requires the participation of economically incentivized frontend operators that provide UI for interaction with Liquity smart contracts. Beam works in another way - every desktop wallet is an independent frontend. Thanks to that, Nephrite increases its censorship resistance and security, and doesnât need to pay third-party services for the UI - all rewards go solely to the Stability pool depositors.
Collateral
Both Nephrite and Liquity are single-collateral stablecoins, but Nephrite uses BEAM instead of ETH. BEAM is more volatile than ETH, but its volatility is relatively the same as other low-cap privacy coins. Table 3 allows comparing their price volatility as of 15 June 2022.
Table 3. Price volatility of ETH, ARRR, BEAM, DERO, FIRO, SCRT, XHV
To retain Liquityâs capital-efficient approach, Nephrite sets the same Minimum Collateral Ratio of 110%. It is up to Nephrite users to choose their desired collateral ratio, balancing their capital efficiency and liquidation risk preferences. Nevertheless, the Nephrite team strongly encourages its users to follow the vast majority of Liquityâs and MakerDAOâs users in maintaining their collateral ratio equal to or above 200%.
Oracles
Liquity uses Chainlink as its primary oracle and Tellor as a fallback oracle (there is a detailed table describing Liquity oracle logic). The LUNA case has shown that the Chainlink price feeds could be unreliable during the market turmoils, and no one should neglect a fallback oracle.
Nephrite also utilizes a two-oracle approach but uses other oracles. The main oracle is BeamX Network Oracle provided by Beam Foundation as a public good, and a fallback one is an oracle maintained by the Nephrite team. Eventually, the fallback oracle would be connected to a decentralized oracle network resilient to LUNA-sudden-drop-like issues.
Secondary token
Liquityâs secondary token, LQTY, is not a governance token - its only utility is to be a pure profit-sharing token. An immutable decentralized application like Liquity doesnât need a governance token, but its pure profit-sharing token could be treated as unregistered security by authorities.
Nephrite plans to distribute collected fees amongst BEAMX holders via BeamX DAO regular revenue distribution procedure. BeamX DAO distributes its revenue as a reward for the DAO management, so these rewards are not passive income. Only the BEAMX holders who vote on all the current proposals are eligible for the DAO rewards.
BeamX DAO will not get Nephriteâs fees for free. Nephriteâs proposal to BeamX DAO is to allocate a share of BEAMX from its Liquity Mining fund to reward Nephriteâs Stability Pool depositors. No investors and team allocation - only the Stability Pool depositor rewards. A respective merging proposal will be published on the Beam governance forum before the Nephrite launch on the mainnet.
Only 33.3% of LQTY total supply will be distributed amongst the Stability pool depositors and frontend operators for 35 months. Nephrite aims to get 6% of BEAMX total supply and distribute these tokens to its Stability Pool depositors for 24 months.
Yes, the eventual share of the Nephrite Stability Pool depositors in the collected fees will be five times less than the Liquity ones. But, in exchange, they get a right to participate in the BeamX DAO governance and an additional source of revenue from the growing number of Dapps launched by this DAO. Besides that, Nephrite gets access to BeamX DAO development, liquidity mining, and promotion resources.
Privacy
Liquity is launched on Ethereum, a pseudonymous smart contract platform. Its collateral, stablecoin, and secondary token are pseudonymous. Nephrite will be launched on Beam, a confidential smart contract platform. Its collateral is BEAM, a privacy coin, its stablecoin, and its secondary token are Confidential Assets that have the same level of privacy as BEAM.
Roadmap
To ensure a smooth and secure transition to immutable mode, Nephrite will go through three phases: Test mode, Limited upgradeable mode, and Immutable mode.
Q3 2022:
â Nephrite Manifesto publication
â Nephrite Dapp launch on Dappnet (Phase 0: Test mode)
â Publishing a security audit
Q4 2022:
â The Merge Proposal submission
â Nephrite Dapp launch on mainnet (Phase 1: Limited upgradeable mode)
â Stability Pool Liquidity Mining launch
Q1 2023:
â Nephrite Dapp final upgrade (Phase 2: Immutable mode)
â BEAMX/NPH Liquidity Mining Proposal submission
â BEAMX/NPH Liquidity Mining launch
The Nephrite team will communicate with the community only via two channels: Twitter and Beam Forum. Keep calm and stay private.