This guide explains BIP 180 fraud proof in plain English. It covers the problem behind the BIP, why it matters and whether the proposal is part of Bitcoin today.
TL;DR
- What it is: BIP 180 proposed a fraud proof that would let light clients detect blocks exceeding size or SegWit weight limits without downloading every transaction. A proof combined transaction-size evidence and Merkle links to show a lower bound above the permitted maximum.
- Why it matters: BIP 180 was a closed design for proving oversized blocks to light clients. Its commitment and availability lessons remain valuable, but its proof format is not a deployed Bitcoin security guarantee.
- Current position: The BIP is Closed and was not deployed; ordinary Bitcoin light clients cannot rely on its message format or proof semantics.
BIP 180 fraud proof in simple English
BIP 180 fraud proof: Block headers commit to a transaction Merkle root but do not directly commit to total serialized size or weight.
Simple example
A node operator is checking BIP 180 fraud proof. A light client sees proof of work yet normally lacks enough data to verify resource limits.
Key terms in plain English
- BIP:
- Bitcoin Improvement Proposal: a document describing a proposed rule, standard or process. Its status must be checked separately.
- Node:
- A computer running Bitcoin software that checks data and communicates with other peers.
What the client wants to prove
Block headers commit to a transaction Merkle root but do not directly commit to total serialized size or weight. A light client sees proof of work yet normally lacks enough data to verify resource limits. The proposal constructed evidence that committed transactions necessarily exceeded a bound.
Size components
A component could be a Merkle link with represented height or a transaction full-size proof based on SHA-256 midstate and tail data. Combining components covered groups of transactions. Every count, ordering rule and boundary had to map unambiguously to the header commitment.
Stripped and full size
SegWit block weight depends on stripped bytes and total bytes. Separate proof components established lower bounds for those quantities before applying the weight formula. Confusing serialized size, stripped size, virtual size and weight would make a verifier accept the wrong claim.
Fraud-proof asymmetry
A compact proof can show a violation when one exists, but absence of a received proof does not prove validity. Light clients depend on at least one honest observer to construct and deliver evidence, plus a transport that an attacker cannot suppress completely. Network eclipse remains relevant.
How specialists test it
Developers test the proposal with made-up data on an isolated test network. They check normal cases and deliberately invalid cases. Different implementations should reach the same result before anyone relies on the proposal.
Closed status
No current node advertises BIP 180 as a deployed guarantee. Prototype implementations belong on isolated networks and should be treated as archival research. A verifier agreeing with its own generator does not establish independent correctness or Bitcoin interoperability.
Modern relevance
The proposal illustrates how committed data can support succinct invalidity evidence and why data availability matters separately. Current light-client security should be assessed from supported protocols, peer diversity and full-node validation, not from an unimplemented historical BIP. Build a revision-pinned evidence pack on an isolated node, wallet or protocol harness.
Frequently asked questions
What is the main point of BIP 180 fraud proof?
BIP 180 fraud proof: Block headers commit to a transaction Merkle root but do not directly commit to total serialized size or weight.
For BIP 180 fraud proof, what should a beginner know about what the client wants to prove?
Block headers commit to a transaction Merkle root but do not directly commit to total serialized size or weight.
For BIP 180 fraud proof, what should a beginner know about size components?
A component could be a Merkle link with represented height or a transaction full-size proof based on SHA-256 midstate and tail data.
For BIP 180 fraud proof, what should a beginner know about stripped and full size?
SegWit block weight depends on stripped bytes and total bytes. Separate proof components established lower bounds for those quantities before applying the weight formula.
Conclusion
BIP 180 was a closed design for proving oversized blocks to light clients. Its commitment and availability lessons remain valuable, but its proof format is not a deployed Bitcoin security guarantee.
Primary sources
Check the current specification status and the documentation for the exact implementation you operate before moving production funds or changing a mining node.
Join the ASIC Mining Discussion
Members can read and join the discussion
Log in to read comments from other miners. Create a free account if you would like to ask a question or share your experience.
Membership helps us protect the discussion from spam and keep answers useful.