SAS: Succinct Atomic Swap



Summary:

The protocol described by Ruben Somsen enables atomic swaps with single signatures and is available on Schnorr+MuSig. The protocol runs with just two on-chain transactions, eliminating the need for time locks on one of the chains. The process can be used for efficient privacy swaps such as Payswap, but access to funds depends on remembering secrets. The protocol has three steps, including locking up coins with a trusted party, completing the swap, and monitoring the chain. A more graceful failure is possible by introducing a second refund_tx with timelock that can be published ahead of the revoke_tx. The protocol can work with hash locks, but it would increase the transaction size. It is possible to implement this protocol on chains supporting absolute timelocks, but Bob must spend his swapped coins before the timelock expires.


Updated on: 2023-06-14T01:27:56.433217+00:00