A Sealed-bid Auction with Fund Binding: Preventing Maximum Bidding Price Leakage

Kota Chin,Keita Emura,Kazumasa Omote,Shingo Sato
2023-12-13
Abstract:In an open-bid auction, a bidder can know the budgets of other bidders. Thus, a sealed-bid auction that hides bidding prices is desirable. However, in previous sealed-bid auction protocols, it has been difficult to provide a ``fund binding'' property, which would guarantee that a bidder has funds more than or equal to the bidding price and that the funds are forcibly withdrawn when the bidder wins. Thus, such protocols are vulnerable to false bidding. As a solution, many protocols employ a simple deposit method in which each bidder sends a deposit to a smart contract, which is greater than or equal to the bidding price, before the bidding phase. However, this deposit reveals the maximum bidding price, and it is preferable to hide this information. In this paper, we propose a sealed-bid auction protocol that provides a fund binding property. Our protocol not only hides the bidding price and a maximum bidding price, but also provides fund binding, simultaneously. For hiding the maximum bidding price, we pay attention to the fact that usual Ethereum transactions and transactions for sending funds to a one-time address have the same transaction structure, and it seems that they are indistinguishable. We discuss how much bidding transactions are hidden. We also employ DECO (Zhang et al,. CCS 2020) that proves the validity of the data to a verifier in which the data are taken from a source without showing the data itself. Finally, we give our implementation which shows transaction fees required and compare it to a sealed-bid auction protocol employing the simple deposit method.
Cryptography and Security,Computer Science and Game Theory
What problem does this paper attempt to address?
### Problems the Paper Attempts to Solve The paper aims to address several key issues in conducting sealed-bid auctions in a blockchain environment: 1. **Fund Binding**: Traditional sealed-bid protocols struggle to ensure that bidders have sufficient funds to pay their bid prices and can enforce the extraction of these funds upon winning. Consequently, such protocols are susceptible to false bids. 2. **Highest Bid Price Disclosure**: While some protocols use simple deposit methods (i.e., bidders must submit a deposit at least equal to their bid price), this approach exposes the highest bid price, thereby affecting the final sale price. ### Solution Overview The paper proposes a new sealed-bid auction protocol that not only hides bid prices but also provides fund binding functionality. Specifically: - **Price Hiding**: Ensures that no one can know other bidders' bid prices before the reveal phase, particularly hiding the highest bid price. - **Fund Binding**: Ensures that bidders have at least the amount of funds equal to their bid price and can enforce the extraction of these funds upon winning. ### Implementation Method To achieve this goal, the authors utilize the following technologies: - **One-Time Address**: Bidders can compute a one-time address and send funds to this address. Assuming that regular Ethereum transactions and transactions sending funds to a one-time address are indistinguishable, this helps hide the highest bid price. - **DECO (Decentralized Oracle)**: Each bidder needs to prove that the balance on the one-time address equals the bid price without revealing the balance or the address itself. Through DECO, bidders can prove this in a zero-knowledge state. ### Experimental Results The authors implemented the protocol and compared it with the simple deposit method. The results show that the transaction fees required by both methods are almost the same. This indicates that the newly proposed protocol is feasible in practical applications.