Chris Beams <chris@beams.io>; Manfred Karrer <mk@nucleo.io> 2017-10-19

Abstract. We present an overview of Bisq, a peer-to-peer exchange network designed for secure, private and censorship-resistant trading of bitcoin for national currencies and other cryptocurrencies. We demonstrate that while Bisq already provides users with a high degree of security and privacy through decentralized architecture and other protections, the project cannot achieve the degree of censorship resistance it requires without first decentralizing its funding and governance. We review the Bisq DAO and BSQ token that have been designed to achieve this goal and we analyze the risks inherent to rolling them out. We conclude by presenting the Phase Zero plan for a pre-release period in which each aspect of the Bisq DAO is operationalized in an incremental and risk-mitigating fashion. Compensation, voting, bonding and other DAO use cases commence immediately as high-trust operations in a testing environment and iterate toward trust-minimized operations in production. BSQ stake is tracked on Bitcoin testnet during Phase Zero such that BSQ may be earned but not traded or spent. Completion of Phase Zero is marked by a BSQ genesis distribution on Bitcoin mainnet and a Bisq application release supporting BSQ trading and other key DAO use cases.

Introduction

Bisq’s peer-to-peer bitcoin exchange network has been in operation for 18 months now. Exchange volumes have grown along the way, and now is the time for Bisq’s community of contributors to grow along with them. We have designed the Bisq DAO, a decentralized autonomous organization,[1] to support that growth by decentralizing the funding and governance aspects of the project. This document is written to provide a clear understanding of both Bisq and the Bisq DAO, and then to lay out a specific plan for bootstrapping the Bisq DAO into operation.

Audience. This document is intended primarily for current and future Bisq contributors, but has been written to be understood by anyone familiar with the Bitcoin ecosystem. If you are interested in working to improve Bisq, or simply interested in where the project is going, read on.

Organization. This document is divided into two major parts followed by several appendices:

Feedback. Please ask questions and provide feedback on this document via issues and pull requests in the bisq-network/docs repository. Alternatively, post questions in the Bisq Forum, chat with us in Slack, or email the authors directly.

Updates. This document will remain open to revision throughout Phase Zero. Watch the bisq-network/docs repository to be notified of changes or subscribe to this document’s Atom feed.

Related materials:

Part I: Understanding Bisq and the Bisq DAO

What Bisq is

Bisq is a decentralized bitcoin exchange best understood in terms of its major component parts:

  1. Bisq is a cross-platform desktop application that allows anyone to buy and sell bitcoin in exchange for national currencies and other cryptocurrencies.

  2. Bisq is a trading protocol that enables individuals to exchange directly with one another over the internet, eliminating the need for trusted third party exchange services.

  3. Bisq is the peer-to-peer network formed by Bisq applications discovering, connecting to, and working with one another to implement the Bisq trading protocol. The Bisq network is fully peer-to-peer in that it requires no centrally-controlled servers and has no single points of failure.

Bisq is not a company. Bisq is free software released under version 3 of the GNU Affero General Public License. Bisq is built by individuals around the world who choose to work together, and Bisq is used by individuals around the world who choose to trade with Bisq over many other exchange alternatives.

Why Bisq exists

Bisq’s mission is to provide a secure, private and censorship-resistant way of exchanging bitcoin for national currencies and other cryptocurrencies over the internet.

When we say secure, we are referring to the safety of users' funds. Today, most bitcoin exchanges are centralized, requiring users to store their bitcoins—​for at least some amount of time—​on exchange servers. When thousands of users do this, it creates extreme incentives for those servers to be hacked and for those users' bitcoins to be stolen. And time and time again these hacks and thefts are exactly what happen.

When we say private, we are referring to users' ability to control access to their own information. Today, most centralized exchanges require users to divulge personally identifying information in order to set up an account, and then in turn link users' trading activity to their respective identities. This practice creates extreme risks for users that their personal details and financial information will be stolen, leaked or otherwise used against their own best interests.

When we say censorship-resistant, we are referring to users' ability to voluntarily trade with one another without interference from a third party. Today, centralized bitcoin exchanges are highly susceptible to such interference. By their nature, they must operate within one legal jurisdiction or another, putting them at risk of being fined or shut down if they do not comply with the laws and other rules of that jurisdiction, which may include restrictions on who can trade and what can be traded, and almost always include requirements to collect personal information as described above.

What’s needed is an exchange where users keep control of funds, that is private by default, and that defends freedom of transaction. We built Bisq to meet these needs.

Where Bitcoin’s motto is "be your own bank," Bisq’s is "be your own exchange."

How Bisq works

In a nutshell

Imagine you want to buy bitcoin (BTC) in exchange for US dollars (USD). In Bisq terminology, you are a buyer of BTC looking for a seller of BTC who will accept USD as payment. To complete such a trade using Bisq, you would follow a series of steps similar to these:

  1. You download and run the Bisq application on your laptop or desktop computer

  2. You configure Bisq with your USD payment method details

  3. You browse Bisq’s offer book for existing offers to sell BTC for USD

  4. You take an existing offer, agreeing to buy the seller’s BTC for your USD

  5. You send USD from your bank to the seller’s bank and indicate you have done so in Bisq

  6. You and the seller wait for your USD payment to arrive at the seller’s bank

  7. The seller receives your USD and indicates they have done so in Bisq

  8. You receive the seller’s bitcoin and the trade is complete

These steps can vary in a number of ways depending on whether you wish to buy or sell bitcoin, whether you are the maker or the taker of an offer, which payment methods you have access to, and so on. But in any case, the steps above are rather different than those one would follow to complete a similar trade on a centralized exchange.

How trading with Bisq is different

Beyond the obvious difference that Bisq is a desktop application and not a browser-based web application, the first difference experienced traders will notice is that there is no automatic order matching on the Bisq exchange. Rather, Bisq users manually search for and select specific offers they wish to take. This approach enables truly peer-to-peer trade settlement, and ensures that users are in control of which counterparties they trade with.

Bisq is also unique among decentralized bitcoin exchanges in the way it coordinates out-of-band fiat payments. Bisq does not directly integrate with banks or other national currency payment systems in any way. Rather, Bisq’s trading protocol orchestrates the process of buyer and seller working together to settle fiat payments outside of the Bisq application, as demonstrated in steps 5–7 of the trading example above.

These and other differences result in a key tradeoff for Bisq users—​one in which trade settlement takes longer, but trading itself is far more secure, private and censorship-resistant.

How Bisq keeps funds secure

  • Bisq is entirely non-custodial; users stay in control of fiat and cryptocurrency funds

  • Trades include security deposits from buyer and seller to prevent fraud

  • Trading funds and security deposits are locked in a 2-of-3 multisig escrow

  • Disputes are handled through a decentralized human arbitration system

How Bisq keeps data private

  • Using Bisq requires no registration or centralized identity verification

  • Every Bisq application is a Tor hidden service

  • Bisq has no central servers or databases to record data

  • Data is encrypted such that trade details are readable only by counterparties

How Bisq resists censorship

  • Bisq’s network is a fully distributed P2P network, and thus difficult to shut down

  • Bisq’s network is built on top of Tor, and thus inherits Tor’s own censorship resistance

  • Bisq is code, not a company; it is not incorporated, and it cannot be disincorporated

Bisq’s current status

Track record

After two years of development and testing, Bisq went into production on April 19th, 2016—​18 months ago at time of writing in October 2017. Since then, the network has processed 5,200 trades worth a total of $4.1MM USD without downtime or major incident.

Growth rate

Bisq is still small, but has been growing steadily. The USD volume of bitcoin exchanged through the network has doubled roughly every 3½ months since the project went live, from $36K in April 2016 to $438K in September 2017. This growth has been organic, with minimal marketing.

Bisq Trading Volume in USD
Figure 1. Bisq global monthly trading volume in USD, April 2016–October 2017
For an up-to-date version of the chart above, see the Bisq Trading Volume spreadsheet.

Funding

Bisq is designed to be funded directly by its users through trading fees. Trading fees are paid by both buyer and seller on every trade, and are received by each trade’s arbitrator in compensation for the service they provide. As of October 2017, these trading fees total around one bitcoin per month, distributed to two arbitrators who are also the project’s founders and principal developers. These funds are insufficient to cover expenses and as a result the project remains funded in part by founder savings.

Fortunately, as mentioned above, Bisq trading volumes are growing, and total monthly trading fees are growing along with them. As such, it is reasonable to expect that trading fees will soon be sufficient to cover expenses, and even to compensate additional, non-arbitrator contributors. But as these additional funds come in, a new problem arises with them. As mentioned above, Bisq’s trading fees currently compensate arbitrators in a direct, automatic, and decentralized way, but the current approach is limited in that it only compensates arbitrators. What’s needed is a mechanism that can compensate all kinds of contributors in an equally decentralized fashion.

Governance

Bisq’s technology is fully decentralized, but its governance is not. Today, the Bisq project consists of a small team of active contributors, where most maintenance, operation and administration duties are carried out by project founders, and where those founders make virtually all major decisions. While this approach has worked well enough to bring the project to its current state, it is no longer sustainable if Bisq is to continue to grow. First, because it does not scale; project founders have become bottlenecks incapable of addressing all user needs. Second, because it introduces censorship risk to have responsibility centralized in a small group of people. What’s needed is a way to decentralize responsibility and high-trust duties away from project founders and into the hands of other competent and reputable contributors.

Summary: What Bisq needs now

As mentioned above, Bisq’s mission is to provide a secure, private and censorship-resistant way to exchange bitcoin for national currencies and other cryptocurrencies over the internet. Today, Bisq is delivering on the first two aspects of this mission—​indeed, we believe Bisq to be among the most secure and private exchange options currently available. Where Bisq falls short on this mission is in the third aspect of censorship resistance. Bisq’s P2P architecture, use of Tor as a transport layer, and other built-in protections give the project a significant degree of technical censorship resistance, but with regard to funding and governance, the Bisq project remains vulnerable so long as these two critical factors remain centralized.

To fully realize its mission, what Bisq needs now are four things:

  1. Continued trading volume growth to increase capacity to compensate contributions

  2. More contributors and contributions to improve Bisq and foster that volume growth

  3. A decentralized funding model to feasibly incentivize those contributors

  4. A decentralized governance model to avoid censorship and other centralization risks

In the next section, we’ll see how the Bisq DAO and BSQ token have been designed to address these needs.

The Bisq DAO and BSQ token

The BSQ token

We introduce a token, BSQ, designed to facilitate a transfer of value from the traders using Bisq to the contributors maintaining it.

BSQ is Bisq’s own custom implementation of the colored coin concept.[2] Using 2.5 of the 25 bitcoin (BTC) that have been donated to the project since its inception in March 2014, we create 2.5 million BSQ tokens, such that each BSQ token is represented on the Bitcoin blockchain by 0.00000100 BTC, or 100 satoshis.

Initial BSQ distribution
Figure 2. Initial distribution of BSQ tokens from BTC donations

We distribute these 2.5 million BSQ to 144 opted-in past contributors to the Bisq project, as a way of rewarding these individuals for their efforts over the years. Stake is distributed according to the relative value each contributor has added to the project over time. As will be described further below, BSQ tokens are used to vote on and make decisions about the Bisq DAO itself, and by initially distributing BSQ to past contributors, we intentionally establish the Bisq DAO as a meritocracy in which those who have contributed the most value to the project in the past are those who have the most say over its future.

Why BSQ is needed

Today, without BSQ, traders use Bisq and pay Bisq trading fees in BTC. At the same time, contributors work to improve Bisq, and in turn make Bisq more useful to traders. This ultimately causes more traders to use Bisq more often, and a cycle of growth perpetuates. There is a limit, however, on how much growth can occur, because while trading fees paid in BTC automatically compensate arbitrators, other contributors are currently not compensated at all.

Limitations
Figure 3. Limitations of Bisq’s current funding model

Bisq’s current funding model has worked well enough so far mainly because the Bisq team has been so small. Bisq’s founders have played most key roles in the system, including that of arbitrator, such that compensating arbitrators with trading fees has, in practice, meant compensating the project’s primary contributors as well. The problem is that this approach breaks down quickly as more contributors get involved, and as explained above, it is critical to the success of the project to grow the number of contributors and to distribute responsibilities amongst them.

What’s needed is a decentralized way to transfer value from traders using Bisq to contributors maintaining it, and there is no practical way to achieve this with Bitcoin alone. Accumulating and distributing trading fees using multisignature addresses and transactions could in theory provide part of the solution, but in practice these tools are still too primitive to achieve the fully decentralized and meritocratic approach required to successfully operate the Bisq DAO.

Furthermore, for a system of compensation to be fully decentralized and meritocratic, an equally decentralized and meritocratic system of governance is required in order to decide which contributions should be compensated and which should not; and this, too, is not practical to implement with Bitcoin alone.

It is for these reasons that BSQ is needed. As we’ll see in the sections that follow, the BSQ token has been designed to overcome the challenges described above and to provide a fully decentralized and meritocratic funding and governance model for Bisq.

How BSQ is used

The BSQ token has five uses, also known as utilities or functions, within the Bisq DAO:

BSQ uses
Figure 4. Uses of the BSQ token within the Bisq DAO
  1. Trading. Using the Bisq exchange, (a) stakeholders sell BSQ, to (b) traders who buy it.

  2. Spending. Traders spend BSQ on trading fees at a discounted rate vs. BTC.

  3. Earning. Contributors (a) submit compensation requests for their work and, when approved by voting, (b) earn the requested amount of BSQ.

  4. Voting. Stakeholders vote with their BSQ to approve compensation requests.

  5. Bonding. Contributors (a) post BSQ bonds to take on high-trust roles, eg. arbitration, and (b) earn BSQ interest on those bonds over time.

Together, these interlocking functions of the BSQ token are designed to create, regulate, and perpetuate an internal economy for the Bisq network. We call this economy the Bisq DAO.

How BSQ is issued and destroyed

When traders spend BSQ on trading fees, they are in fact destroying those BSQ. The spent tokens are not paid to or otherwise received by any individual contributor or group of contributors; rather they are burned, or made to be unspendable by being decolored. In this way, spending BSQ on trading fees decreases the total supply of BSQ.

Likewise, when contributors submit compensation requests for BSQ, they are in fact requesting the right to issue, or create those BSQ. Each compensation request revolves around a Bitcoin transaction in the amount of satoshis required to represent the requested amount of BSQ, and when that compensation request is approved by voting, those satoshis are colored such that the BSQ network validates them as spendable BSQ. In this way, earning BSQ through compensation requests increases the total supply of BSQ.

How BSQ is issued and destroyed
Figure 5. How BSQ is issued and destroyed

How BSQ decentralizes compensation and enables monetary policy

As we’ve seen above, BSQ is destroyed when traders spend it, and created when contributors earn it. A key benefit of this approach is that spent BSQ need not—indeed, cannot—be stored, protected, or later distributed by any individual or group. By eliminating the need to hold and later distribute BSQ, we also eliminate a set of difficult problems and risks, including determining who should maintain control over these funds, and how they should be protected and disbursed.

Overall, this approach makes it possible to transfer value from traders to contributors in a decentralized way. The transfer happens indirectly through the process of destruction and creation, but this indirection is precisely what makes it decentralized. The creation side of the transfer is intermediated by voting on compensation requests, but this is not a problem given that voting itself is a decentralized and meritocratic process.

An important property of this approach is that BSQ creation and destruction need not necessarily occur at the same rate. For example, in any given month it may be the case that more BSQ are spent by traders than are earned by contributors. In this case, the net supply of BSQ would decrease during that month. Likewise, given a month in which fewer BSQ are spent by traders than are earned by contributors, the net supply of BSQ would increase. What emerges is a form of monetary policy for the Bisq DAO in which:

  1. Traders control how much BSQ is destroyed through spending;

  2. Contributors control the upper bound on BSQ creation through compensation requests;

  3. Stakeholders control how much BSQ is actually created through voting.

Of these three roles, the third is the most important from a policy perspective, as it allows stakeholders a direct means of controlling inflation (i.e. growth in the supply of BSQ). It may be prudent, especially in the early days of the Bisq DAO to operate at a certain rate of inflation in order to fund the development of features that will later result in increased trading volumes (i.e. growth in the demand for BSQ). In the long run, however, we believe the ideal steady state for the Bisq DAO will be one in which the amount of BSQ earned in any given month matches or falls just below the amount of BSQ spent, resulting in a stable or slightly deflationary supply of BSQ over time.

Not an ICO

Given current trends, it is important to state explicitly that BSQ is not associated with an ICO (initial coin offering), nor will there be any kind of crowdsale or other crowdfunding event. BSQ is a utility token being introduced into an already functioning system to make it function even better, and raising a large amount of capital up front is neither required nor desired.

Risks of launching the Bisq DAO

It is one thing to design a token-based economy like the Bisq DAO; it is another thing to successfully operationalize it. There are a number of risks inherent to simply "going live" with BSQ and the Bisq DAO, including but not limited to the following:

  • Valuation risk: token value falls too low to be viable (or rises too high too quickly)

  • Control risk: any kind of non-meritocratic takeover of stakeholder voting power

  • Censorship risk: founders are pressured before governance is fully decentralized

  • Credibility risk: founder-heavy initial distribution, small team, etc cause doubts

  • Solvency risk: trading volumes do not grow quickly enough to cover compensation

  • Stability risk: implementation errors cause loss of funds or other major problems

Any of these risks could be existential. What’s needed is a conservative and incremental approach to bootstrapping the Bisq DAO that accounts for and mitigates these risks. In the next part, we’ll see how the Phase Zero plan is designed to do that.

Part II: The Phase Zero Plan

Phase Zero is an extended pre-release period for the Bisq DAO in which the BSQ token may be earned, but not traded or spent; in which voting and other DAO operations commence in simplistic, high-trust systems and iterate toward production-ready, trust-minimized systems.

Goal

As discussed throughout this document, the goal of the Bisq DAO is to decentralize the funding and governance of the Bisq project. The goal of Phase Zero is to operationalize the Bisq DAO while minimizing risk. Like most projects in the cryptocurrency ecosystem, the Bisq DAO is an experiment; we have one shot to get it "right enough" to achieve viability, and there is no need to rush. For these reasons, Phase Zero is designed conservatively, introducing safeguards and approaching the implementation of each aspect of the DAO in an incremental fashion.

How Phase Zero mitigates risk

To address valuation risk, we eliminate the possibility of trading BSQ during Phase Zero. A fair market value for the token must still be established in order to compensate contributors, but this value can be estimated initially and then adjusted throughout Phase Zero. On completion of Phase Zero, the value of BSQ will become entirely subject to market forces, but the fact that many contributors worked throughout Phase Zero at a given fair market value should provide a stronger price foundation for BSQ than would be present if we were to simply enable trading from day one.

To address control risk, we ensure that only those who have contributed value to the project are able to vote during Phase Zero. This, too, is a result of prohibiting BSQ trading: because the only way to acquire BSQ during Phase Zero is to earn it, it becomes impossible to simply purchase voting power. Furthermore, it gives us time during Phase Zero to design and implement a longer-term solution for control risk in which we introduce a reputation factor into the BSQ-based voting process.

To address censorship risk, we systematically eliminate formal leadership roles during Phase Zero. We define the roles and responsibilities required to maintain and operate the Bisq network, and we delegate those roles to contributors who have earned enough BSQ to "bond into" them. We make it an explicit exit criteria of Phase Zero that no one contributor is responsible for more than three of these roles, and we ultimately relegate the role of "founder" to an historical one. While this approach does not eliminate the possibility of individual contributors being censored, it minimizes the damage that any given censorship can inflict on the project and maximizes the ability for pseudonymous contributors to replace those who have been censored.

To address credibility risk, we use Phase Zero as an opportunity to grow the set of contributors working on Bisq, by incentivizing them to earn BSQ through bounties and compensation requests. We make it an explicit exit criteria of Phase Zero to redistribute enough BSQ from founders to other contributors to fill all bonded contributor roles. This redistribution goal will take time and a considerable volume of contributions from non-founders to achieve; this is the primary reason that, as detailed below in the Roadmap section, we estimate that Phase Zero will take no less than six months to complete.

To address solvency risk, we let the current organic growth rate of the exchange continue to play out over the Phase Zero period. By distributing well-defined units of work to a growing number of contributors, we aim to increase development velocity, implementing additional features more quickly and making the Bisq exchange that much more attractive to traders, which should in turn increase trading volume and therefore increase trading fee revenues. In any case, we "buy ourselves time" with Phase Zero to observe actual growth trends and correct course as necessary to ensure that we are growing in a way that will be likely to support the level of BSQ demand required to sustain the Bisq DAO after Phase Zero.

To address stability risk, we use the Phase Zero period to thoroughly test the aspects of the Bisq DAO that have already been implemented, and to implement and test the outstanding aspects that remain. As each aspect is implemented, we put it into use during Phase Zero, moving from simplistic prototypes, e.g. tracking voting by spreadsheet, to trust-minimized, production-ready systems, e.g. tracking voting on-chain with Bitcoin transactions. We protect ourselves against critical implementation errors, e.g. those that could cause loss of funds, by issuing BSQ on Bitcoin testnet during Phase Zero.

Actions

Identify past contributors

In July 2017 we put out a call inviting past contributors to opt in to the initial BSQ distribution. We defined a past contributor to be anyone who had spent at least four hours of their time on improving or supporting the Bisq project; we also considered market makers to be past contributors, including in that group anyone with a history of more than 20 trades.

Status: complete with 144 past contributors opted-in.

Distribute BSQ to past contributors

On October 6th, 2017, we distributed 25 testnet bitcoins to 144 past contributors across 180 BSQ addresses in the initial tBSQ genesis distribution. This action marked the inception of Phase Zero.

Status: complete.

Define and communicate the Phase Zero plan

In addition to writing and publishing this document, we have also been engaging in outreach via talks, podcasts and other media to ensure that potential contributors are aware of the Bisq DAO and Phase Zero plan. See this [Twitter thread](https://twitter.com/bisq_network/status/946723541298360320) for a list of these resources.

Status: in progress.

Define bounty issues

A bounty is a well-defined unit of work that potentially any contributor—​especially new ones—​can work on with as little prior context as possible. We post bounties in the form of issues labeled '$BSQ bounty' in repositories throughout the bisq-network GitHub organization.

Initially, we post these bounties with a set price in BSQ. As quickly thereafter as possible, we move to an "open price" bounty model in which contributors specify a requested amount of BSQ when submitting compensation requests. This approach is consistent with our overall decentralization goals, and more importantly, creates a desirable set of incentives for contributors to determine what they believe to be a fair price for work, requiring them to ask around, look through prior contribution requests, and to generally "do their homework" as to what work is worth when contributing to Bisq. Ultimately, the open price bounty model is intended to foster a marketplace among contributors doing work and stakeholders voting on that work such that a market price for Bisq work is discovered.

Completed work for a bounty is, whenever appropriate, submitted as a GitHub pull request. We follow a C4-based process in which each repository in the bisq-network GitHub organization has one or more designated maintainers responsible for merging or rejecting pull requests.[3] Merged pull requests do not imply or guarantee in any way that the contributor will be compensated in BSQ for their work; compensation requests are managed separately from pull requests.

Status: pending. See https://github.com/bisq-network/dao/issues/11 for details.

Define bonded contributor roles

We enumerate and define the roles necessary to operate, maintain and administrate the Bisq project, Bisq network and Bisq DAO, such that responsibilities can be transferred from founders to other reputable contributors. Because each of these roles requires a degree of trust, filling the role requires putting up a BSQ bond. Initially, founders will use their BSQ stake to bond into these roles, and will then transfer those roles to contributors who (a) wish to take the role over and (b) have earned sufficient BSQ to do so.

Status: in progress. Each role has been enumerated in the form of a GitHub issue in the bisq-network/roles repository, and we continue to add to and modify these roles as appropriate. Bonding is not yet in place for any role.

Establish and refine the fair market value of the BSQ token

Given that BSQ trading is prohibited during Phase Zero, it is not possible for normal market forces to discover a price for the BSQ token. Still, an estimated price for BSQ is required in order to compensate contributors, and we call this estimated price the fair market value of BSQ, borrowing a term from traditional valuation processes.

Presently, we are working with a valuation of 1 BSQ == 1 USD. As Phase Zero progresses, we expect this estimate and the model behind it to evolve, with the goal of arriving at a maximally credible fair market value for BSQ by the completion of Phase Zero. As mentioned in the risk management section above, this process should significantly mitigate valuation risk when BSQ goes live on Bitcoin mainnet.

Status: ongoing.

Submit compensation requests and other proposals throughout each month

Status: ongoing. As of October 2017, all contributions should be captured in one or more compensation requests. See contributor use cases for details.

Vote on the first 3 days of each month

On the first three days of each month, stakeholders vote on contribution requests and other proposals that have been submitted throughout the previous month.

Status: ongoing.

Distribute responsibility from founders to bonded contributor roles

Initially, founders use their BSQ stake to assume all bonded contributor roles, reflecting the fact that they do already "have all the keys" and do already carry out most of these duties. As contributors earn sufficient BSQ for bonding, they can approach founders and request to take these roles over. Contributors have a twofold incentive to do so: (1) the BSQ they earn by carrying out the duties of the role, and (2) the interest they earn on their BSQ bond over time.

Status: in progress. Founders are distributing responsibility to contributors by having them take on bonded contributor roles, but bonding itself is not yet in place, and may not be until BSQ goes live. We are still sorting out exactly how to handle this during phase zero.

Grow exchange volume organically

We keep marketing to a minimum during the Phase Zero period, and observe whether our current growth trend continues to play out on its own. Rather than focusing on growing our user base, we now focus on growing our contributor base. The goal is to foster continued organic growth by making Bisq ever more useful and relevant. In any case, we will track the growth trend and adjust course as necessary should it change.

Status: in progress.

Techniques

Prohibit BSQ trading and spending

We prohibit buying, selling and spending BSQ tokens during Phase Zero in three ways:

  1. by issuing on testnet and rendering their underlying bitcoin value worthless;

  2. by disabling BSQ trading and spending functionality in the Bisq application;

  3. by re-issuing a new testnet genesis distribution at the start of every month.

As a result, BSQ utility is limited to earning, voting and bonding during Phase Zero. See the risk mitigation section for rationale.

A note to past contributors: When you registered as a past contributor, you provided Bisq’s founders with a mainnet BSQ address. As part of the testnet genesis distribution, we have generated a testnet BSQ address on your behalf and correlated it with the mainnet address you’ve already given us.

Track stake, voting and bonding via spreadsheet

At the beginning of Phase Zero, we use simplistic, high-trust systems such as spreadsheets to track BSQ stake, voting and bonding, and we issue BSQ on Bitcoin testnet vs mainnet. These are pragmatic decisions designed to allow our small team to move quickly and iterate toward trust-minimized, production-ready solutions. Note that the on-chain systems that will replace these spreadsheets have already been designed, and to a certain degree, already implemented. We will migrate to them as they become ready; in the meantime, spreadsheets are easy for everyone to understand and easy to change as we learn through practice what it really means to operate the Bisq DAO.

See vote on compensation requests for instructions.

Submit compensation requests as GitHub issues

Eventually, compensation requests will be modeled around Bitcoin transactions. As Phase Zero begins, however, they are modeled as GitHub issues in the bisq-network/compensation repository.

See submit a compensation request for instructions.

Principles

Avoid contentious voting

Any conceivable change to the Bisq DAO can be submitted as a proposal, and any proposal can be put to a vote. With that said, the goal should be to vote as infrequently as possible. Where good proposals are submitted, and rough consensus is achieved, no vote is necessary.[4] If rough consensus has not been achieved, then further work is necessary to either improve the proposal or to change minds about it. Voting on a contentious proposal should be seen as a last resort, after all attempts to achieve consensus have failed.

With the exception of compensation requests (which must be voted on in order for BSQ to be issued), voting should be regarded as a crude tool to be used only when absolutely necessary.

Keep it meritocratic

The Bisq DAO is founded as a meritocracy, and we believe it is critical to the long-term success of the project that it remain one. Whenever submitting or voting on a proposal to change the way the DAO works, look closely for unintended consequences that may negatively impact this meritocratic foundation.

Work on what you want

It is not required to work on an existing bounty issue to contribute to Bisq, and no one is here to tell you what to do. Contributors who have their own ideas are free to work in their own forks on whatever they wish, however they wish, and without any permission from Bisq stakeholders.

With that said, it’s a good idea to consult with stakeholders via the Bisq forum, mailing list, or other communication channels before setting out on any serious contribution effort. Do this in order to ensure your contribution is:

  1. something that the relevant maintainer(s) would be likely to merge;

  2. something that stakeholders would likely vote to approve as a compensation request;

  3. subjected to as much feedback as possible while still an idea and thus cheap to change or abort.

Remember: every contributor is free to work on what they want, including maintainers who may or may not want to review and merge your pull request if they don’t have any prior context for it, or reason to believe it’s worth spending their time on.

Exit criteria

The following criteria must be fulfilled in order to exit Phase Zero:

  • Key DAO features have been implemented, including compensation requests, voting and bonding (see bisq-network/exchange#1264)

  • All bonded contributor roles are filled

  • No one contributor plays more than three bonded roles

  • [TBD] Specific volume growth target or trend

  • [TBD] Specific BSQ fair market value target or trend

Roadmap

Inception

Phase Zero began on October 6th, 2017 with the distribution of 25 testnet bitcoins to 144 past contributors in the initial tBSQ genesis distribution.

Duration

Phase Zero is expected to last at least six months. We estimate this to be the minimum amount of time necessary for contributors to earn enough BSQ to fill all bonded roles.

Completion

When the exit criteria for Phase Zero have been met, a vote will be put to stakeholders whether to complete the phase by (a) issuing the official genesis distribution of BSQ on Bitcoin mainnet; and (b) releasing a version of Bisq that enables BSQ trading, BSQ trading fee payment, and all other DAO use cases.

Appendix A: Roles

The following are roles that individuals play when using Bisq or otherwise participating in the Bisq DAO. One individual may play any number of these roles, with the exception of bonded contributor roles, where no individual may play more than three.

Trader

A trader is anyone who uses Bisq to exchange with others. Traders have no specific role to play during Phase Zero, other than continuing to use Bisq as per usual. When Phase Zero is complete, traders will be able to buy BSQ tokens and spend them on Bisq trading fees at a discounted rate.

Contributor

A contributor is any individual who works to improve Bisq. Contributors submit their work as pull requests to appropriate repositories in the bisq-network GitHub organization. Contributors may additionally submit compensation requests to be paid for their contributions in BSQ.

Stakeholder

A stakeholder is any individual who possesses BSQ. Because BSQ cannot be bought or sold during Phase Zero, the only ways to become a stakeholder during Phase Zero are (a) to be a past contributor included in the testnet BSQ genesis distribution, or (b) to contribute new work, issue compensation requests for it, and be paid in BSQ. That is, the only way to become a stakeholder during Phase Zero is to earn it.

Founder

A founder is one of the individuals responsible for establishing the Bisq project and/or designing the Bisq DAO. Bisq’s founders are Manfred Karrer and Chris Beams. A goal of Phase Zero is to distribute responsibility away from the founder role and into smaller, better-defined roles played by a larger number of (bonded) contributors.

Bonded contributor roles

This section has been superseded by the Roles document.

Maintainer

This section has been superseded by the Maintainer section of the Roles document.

Operator

This section has been superseded by the Operator section of the Roles document.

Administrator

This section has been superseded by the Administrator section of the Roles document.

Appendix B: Resources

GitHub

bisq-network organization

The repositories in the bisq-network GitHub organization are where changes to Bisq software and documentation are integrated and staged for release. The only contributors who have write access to these repositories are their respective maintainers. Work on bug fixes, features and other improvements is done in contributors' personal forks of these repositories and changes are then submitted via pull request. Our approach to collaboration is based closely on the C4 process.[3]

roles repository

See the Roles document for full details.

Spreadsheets

BSQ stake and vote tracking spreadsheet

Other

Slack

Feel free to discuss the Bisq DAO, BSQ token and Phase Zero plan in the #dao channel of the Bisq Slack workspace.

BSQ transaction explorer

Testnet BSQ transactions can be explored at https://explorer.bisq.network/testnet.

Appendix C: Use Cases

What follows are the various actions, or use cases each Bisq DAO user role can engage in during Phase Zero.

This section is a work in progress; use cases have been called out so far as we have identified them, and specific instructions will be filled in as they become clear.

As a contributor, I can…

search for open bounties

The following GitHub Issues search query will display all open issues in the bisq-network organization with the label $BSQ bounty:

Contributors can browse this list to find open bounties they are interested in working on. Note that the list is currently empty. See the Define bounty issues section above.

signal my intent to work on a bounty

Once you have found a bounty issue you would like to work on, it’s a good idea to let others know that you plan to work on it.

  1. Add a comment to the bounty issue letting others know you plan to work on it

  2. If you have questions about the nature of the work, ask! Use the GitHub issue comments, or take the conversation to Slack, the mailing list, or any other medium you prefer.

work on a bounty

  1. Fork the repository in question

  2. Create a topic branch (from master) specific to the bounty in question

  3. Work in that topic branch until complete

  4. Submit a pull request from your topic branch to the master branch of the upstream bisq-network repository (see the next section)

submit a pull request

Pull requests must be well-formed. Follow the guidelines in CONTRIBUTING.md.

submit a compensation request

submit a proposal

As a stakeholder, I can…

put a proposal to a vote

During Phase Zero, we do not formally vote on any proposals other than compensation requests. Generic proposal voting will come online with the first production software release of the Bisq DAO, i.e. when we exit Phase Zero.

vote on compensation requests

  1. open the BSQ stake and vote tracking spreadsheet

  2. request editing permissions (if you have not done so already)

  3. find the row for your BSQ address

  4. on that row, select -1, 0, or 1 in the vote column for each compensation request, where:

    • -1 means you are voting "no" on this compensation request

    • 0 means you are abstaining from voting on this compensation request

    • 1 means you are voting "yes" on the compensation request

It is important to vote "no" if you believe a request should not be approved! Keep in mind that compensation requests can always be adjusted and submitted again in the next round of voting.

fill any vacant bonded contributor role

request to take over an occupied contributor role

As a founder, I can…

define bonded contributor roles and initial bond amounts

issue monthly BSQ genesis distributions on Bitcoin testnet

issue the final BSQ genesis distribution on Bitcoin mainnet

modify this plan

Post-phase zero use cases

As a stakeholder, I can sell BSQ on the Bisq exchange

As a trader, I can buy BSQ on the Bisq exchange

As a trader, I can spend BSQ on discounted Bisq trading fees

Other use cases not listed here

Each specific contributor role not listed here—e.g. GitHub administrator or Twitter account operator—defines use cases specific to that role. See the bisq-network/roles repository for details.


1. Wikipedia, "Decentralized autonomous organization", https://en.wikipedia.org/wiki/Decentralized_autonomous_organization, October 2017
2. Bitcoin wiki, "Colored coins," https://en.bitcoin.it/wiki/Colored_Coins, November 2015.
3. Unprotocols, "Collective Code Construction Contract (C4)", https://rfc.unprotocols.org/spec:1/C4, June 2016
4. RFC 7282, "On Consensus and Humming in the IETF", https://tools.ietf.org/html/rfc7282, June 2014