SDGP-33 Switch Snapshot space to shielded voting/secret ballots using Shutter threshold encryption

Author: 0xJakub

Summary

This is a proposal to Stake DAO to toggle on encryption/shielded voting in the Snapshot admin settings. “Shielded voting” is a Snapshot feature using Shutter’s threshold encryption DKG and Keyper set. Shielded Voting is developed by Snapshot and Shutter in tandem. More on the release of the feature here: https://twitter.com/SnapshotLabs/status/1580674555710181378

Description

The proposal focuses on the introduction of the Shutter Governance to Stake DAO. Shutter Governance enables Shielded Voting to be set up when voting on the Snapshot platform. We think shielded/secret ballot voting is superior to open voting in many ways, especially around preventing strategic voting/misbehavior and voter apathy, factors that, in our view, negatively affect the overall voting structure in the DAO environment. Above all, we believe that Shutter Governance will restore awareness in the participation of the individual for the good of the whole and bring positive, democratic values. The use of Shutter Governance is entirely free of charge, and it only takes a couple of clicks from the admin side when setting up the proposal.

About Shutter

Shutter promotes base layer neutrality and information symmetry using threshold encryption and a decentralized Keyper set. The protocol has 2 primary applications:

  • Rolling Shutter prevents malicious MEV (front running, sandwich attacks) and censorship on L1s and Ethereum L2s by encrypting transactions as they are created and then decrypting them after the transaction order in the block has been fixed.

  • [Shielded Voting] increases the fairness and integrity of votes on Snapshot and other voting platforms by encrypting all votes as they are cast and then decrypting them when the voting period has ended.

MEV and front running are recognized to be among the final unsolved fundamental issues in the blockchain space. Ethereum is vulnerable mainly because of the block producer’s ability to arbitrarily reorder transactions in the blocks they produce.

Rationale

At Shutter, combating front-running and malicious Maximal Extractable Value (MEV) by threshold encryption remains our core mission, however, we could not pass up the opportunity to extend the positive effects of our solution to other areas of the Ethereum environment. This is why we developed Shutter Governance, a tool for governance platforms which allows the use of shielded voting for their users.

We think by default - similarly to how voting works for political elections - all DAO voters for a given DAO vote should be able to access the same information beforehand. Shouldn’t we, who are using crypto governance, also have that option?

To be more specific, these are some of the benefits that we’re hoping shielded voting adds to the voting process:

  • Pre-voting information symmetry,
  • And added layer of censorship resistance,
  • Partial privacy

This might sound a little theoretical, so let’s have a look at these two examples:

  1. Consider a contentious vote in which a minority is pushing the poll early in one direction. Voters that don’t have a strong opinion already formed might see this and think the outcome is already decided. Thus they’ll be discouraged from voting and also from researching/forming an opinion. This could then lead to the vote going in favor of the minority due to voter apathy, which would not be a good outcome, given that the goal of the poll is to represent the majority opinion.
  2. Consider a whale with malicious intent observing and waiting for a vote to play out. Only to come in at the last minute, borrowing/buying just the right amount of tokens needed to sway the vote, and doing this at a time when there’s no more time for the rest of the community to react.

In both of these scenarios, having the vote shielded could improve the situation massively. The first example covers how this feature can help with incentivizing people to vote, leading to a higher voter turnout. In the second scenario, we show how shielded voting protects the proposal from manipulation.

Specification & Implementation

With Shutter Governance, votes are encrypted during the voting period and revealed after the poll closes, similar to secret ballot political elections in which we would not like to reveal the voting results before the polling stations close. To vote on a proposal with Shutter Governance, the user first requests the Eon key with the Keypers signature, there is then a signature check against the Keyper registry to prevent the system operator from giving out a fake key that they control. After this step, the votes get encrypted with the Proposal key, derived from the Eon key and the proposal ID.

Shutter Governance had its official launch on the Snapshot platform on October 13, 2022. From then on, all Snapshot DAOs have the option to choose Shutter as a voting privacy option in the Snapshot admin settings. With this in mind, the use of Shielded Voting does not require any work or technical input from anyone at DAOs, the entire solution is fully implemented on Snapshot and whether organizations will use it is just a matter of choice.

Proposal specifications:
Admin(s): veSDT holders
Community feedback: 3 days min
Voting duration: 7 days

1 Like

thanks for this proposal, it is a very interesting one. I don’t have a strong view, kind of find it convenient to see who voted, and who votes what. Also, each individual voter having a different number of votes, I imagine you can still identified who pushed which vote, unless vote results are only aggregated? Would you have example of DAOs using Shutter?

3 Likes

Thanks for the comment!

The votes and results are encrypted only during the time of the vote. When the voting is done, everyone can see the voting power of individuals, their choices and the general result.

Some of DAOs that are using or have been using Shielded Voting on Snapshot are: Bankless DAO, Arbitrum DAO, Aave DAO, ShapeShift DAO and of course Shutter DAO 0x36.

Two proposals with Shielded Voting:

  1. Snapshot

  2. Snapshot

1 Like

We are in the middle of restructuring our voting structure, to find a more decentralised way to exerce governance, so it’s great that you came, I would just postpone this decision until we know whether we keep using snapshot, wdyt?

1 Like