> For the complete documentation index, see [llms.txt](https://anubis-network.gitbook.io/anubis-network/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://anubis-network.gitbook.io/anubis-network/consensus-mechanism.md). # Consensus Mechanism Anubis' consensus layer must not only guarantee state consistency and immutability, but also support the critical functionality of a Threshold Encrypted Mempool (TEM), fundamentally addressing the MEV threat faced by privacy blockchains. Anubis employs a Proof-of-Stake (PoS)-based BFT consensus algorithm, combining cryptographic lottery and threshold decryption techniques.21 #### 8.1 Core Consensus Parameters and Architecture * **Consensus algorithm**\ It adopts a variant of IBFT 2.0 (Istanbul Byzantine Fault Tolerance) and has been pipelined for ultra-fast 2-second block production. * **Validator set**\ At the initial mainnet launch, the active validator set is capped at 100, with re-elections occurring every Epoch (100 blocks) via VRF (Verifiable Random Function). * **Finality**\ Single-block finality. Once a block is signed and confirmed by 2/3+ validators, it is considered irreversible. This is crucial for cross-chain interoperability of privacy assets, eliminating the time window of waiting for multiple confirmations. #### 8.2 Threshold Encrypted Memory Pool In traditional blockchains, transactions in the mempool are in plaintext, allowing validators to censor, preempt, or perform sandwich attacks based on transaction content. On privacy blockchains, while transaction payloads are encrypted, metadata (such as gas prices and contract call addresses) can still potentially reveal intent. Anubis introduces TEM to defer the visibility of transaction content until after transaction ordering.16 **8.2.1 Cryptographic primitives: Distributed Key Generation (DKG)** * **Curve selection**\ TEM uses BLS12-381 curves, due to their pairing-friendly nature, are well-suited for implementing threshold signatures and encryption schemes. * **Setup process**\ At the beginning of each Epoch, the elected set of validators performs a DKG ceremony once. * Generate a joint public key ![](/files/BUmujzneCwnnARcR64A2). The public key is broadcast to the entire network. * Each validator ![](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB4AAAArCAYAAABvhzi8AAADWElEQVR4AeyXS6hNURjH1yXl1c0rElIkUh5lIAZKGMirxAATZEQyRGIgz2IiQyIpyR1IjImkGAgRUfKWyPuR9+937l2nfc7Ze5991HEn9/b/r2/vtb7v/Pda+1vfXrdb6KS/LuH/tvBdS9211E1bgU5Pru5MbTAcmkPH9cOlBvY7nhXfszoizngyAw/h8xzeYGwkTMM0Op/BrPiZjFUgCj+idwVcCs/AiN9cHIT2L8M+hmm4SedyeB5G6LuFm/nwIqxAFH5N72nYBg/BiBdc7IX2X8D+hGn4QOcpuA3qcxg7Du6C5+BnWIEonOx8yc1XKPrTDIFF0AunjfA61Mbf4LYWacKfcItB/pjidNXFQjzmQJf3DTYXacLviFAcE1poWmE9mNFbcToBfSWYfKQJfyTEDMeUMKbUZjc+3HqGB8Cd8AesizThb0SZbJgS6gm7FdfhuR8+gIWQJmxWJrPQ9+ys0n6wB52boYJHsYWRJmzwHZsODsP2gWlYQKdJVSih8C0jS/hp2SOEEVynCZtQ2xkrnFD4lpElbEGITr25qBZ26U0o9/g+xgslFH5lZAlbc790eLViq/dyTKg9jN2GefAD0a/aIUv4LY5x1s7YZaWrhEYSajgRVrJ72LGwjCxhszrOWGf3qFYupimaUObHKPxvQUsxph15wk/aXUqtT+6FM2+kQl0hyJi52PewjCzh6iIynoiYUM6+cIUiTsGa5MsStohYs4krYRDtdLgBFq1QJtVA/H1gTCWyhPW6b9NBi4jf5bvc16tQCq3Fz4TygHGS676wAkWFJxHl8aZIhZqN7zw4EXoQWISdACuQJ+x2+pPwPsJ18mjDbQ1c3jX07oDf4QzoJzb52ugKIU/YvRwPBB6BLBa++1JgRqPwZcbcPqOxU6EPm3xtdOULW73i59Ga7BeoFJTTOLMDjDvLJVgrVlsIoeaB82bsgeAqwSbTcWwjsMT6nk2uS2mBecI+tcfaVQR6jSkMl3gK3mehK+e7djty24484XaPxtsWQjxLY4JHZv/LWB1CSCZqbnLh+0/wo+KZ2pLrl8vtZe2/lvy1ZsxYkWOImFge7DdxvRtWJFgzhNEICvt/1kpuZsHkiYbbEJol7I+7tV5x8QvWoJnCNWLJjk4T/gsAAP//pwwdkAAAAAZJREFUAwATQaRXuvLJUgAAAABJRU5ErkJggg==) holds only one private key fragment ![](data:image/png;base64,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). * Rebuilding the private key requires at least ![](data:image/png;base64,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) slices (threshold ![](/files/f99PGfAoWtwAj6sRS3Td)). Any collusion of fewer than ![](data:image/png;base64,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) validators will be unable to decrypt the transaction.22 **8.2.2 TEM process in the transaction lifecycle** * **User encryption**\ The user constructs transaction ![](data:image/png;base64,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) locally and encrypts the transaction payload (including the recipient, data, and even Gas Limit) using the joint public key ![](/files/ve3W7iNFntIGZlwX9BSf) of the current Epoch to generate ciphertext ![](data:image/png;base64,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). Only a very small amount of public metadata (such as the highest Gas Price commitment used to pay fees) is retained for sorting purposes. * **Blind sorting**\ The block proposer selects high-priority ciphertext ![](data:image/png;base64,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) from the memory pool. They are packaged into the block body and the block header is broadcast. At this point, the proposer has no idea about the specific content of the transactions and cannot perform targeted MEV extraction.16 * **Consensus confirmed**\ Validators vote on the block header. Once a 2/3+ majority consensus is reached, the block order is locked. * **Threshold Decryption** * After a block is confirmed, each validator broadcasts its own decrypted fragment for the ciphertext list of that block. * Once ![](data:image/png;base64,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) shards are collected, any node can aggregate the plaintext transaction list. * These plaintext transactions are then executed in the EVM in a predetermined order. **8.2.3 Trade-off between activity and safety** The biggest risk of introducing TEM is Activity Failure. If the decryption committee is offline or refuses to provide a decryption fragment, the block cannot be executed. Anubis has designed multi-tiered timeout fallback and dynamic threshold mechanisms to mitigate this risk:
Mechanism LevelTriggering ConditionsResponse StrategiesResult
Normal ModeInternet healthThreshold t = 2n/3 Lower limitStrong resistance to censorship,
strong privacy
Timeout DowngradeDecryption delay > 4sOnce a view change is triggered, the next proposer can re-initiate the decryption request.Slight delay,
no change in security
Emergency ModeDecryption failed for 5 consecutive blocksThe protocol temporarily lowers the threshold to the lower bound of t=n/2+1 and marks unresponsive nodes.Prioritizes activity, reduces resistance to collusion
Rollback ModeExtreme network paralysisSuspend TEM, allowing plaintext transactions to be submitted (Level 0).Privacy is downgraded to pseudo-anonymity to ensure network uptime
Table 8-1 Comparison of Activity and Safety Trade-off Models #### 8.3 Bulk Proof of Privacy Status To support light client verification and cross-chain interoperability, the Anubis block header includes a special field, privacyStateRoot, and its validity proof. * **Recursive Proof**\ Block proposers not only package transactions but also run an aggregation circuit. This circuit takes the ZK Proofs of all privacy transactions within the block and their corresponding Merkle Root update operations as input to generate a single, concise recursive proof ![](/files/i2sHKnmPYnfqKHKZPNC4). * **Minimalist Verification**\ Any external observer (such as a cross-chain bridge contract on the Ethereum mainnet) only needs to verify ![](/files/rjGEHOIY4twJvGgRs06t). This ensures that all privacy asset transfers within the block are legitimate and that the Note Tree's state transitions are correct. This enables Anubis to achieve decentralized, trustless cross-chain bridging.24