Block Revenue Sharing
Summary
A new mechanism is proposed to allow validators to share part of their block revenue with their delegators. Commission rates from validator vote accounts will be used by the protocol to calculate post-commission rewards that will be automatically distributed to delegated stake accounts after an epoch is completed.
Motivation
Delegated stake directly increases the number of blocks that a validator is allocated in an epoch leader schedule but the core protocol doesn't support diverting any of that extra revenue to stake delegators.
Dependencies
This proposal depends on the following previously accepted proposals:
[SIMD-0180]: Use Vote Account Address To Key Leader Schedule
Necessary for looking up a block producer's vote account
[SIMD-0185]: Vote Account v4
Introduces version 4 of the vote account state, which adds new fields for block revenue commission and pending delegation rewards
[SIMD-0232]: Custom Commission Collector Account
Necessary for looking up a block producer's commission collector account
[SIMD-0291]: Commssion Rate in Basis Points
Introduces a new instruction type for setting commission rates in basis points
[SIMD-0392]: Runtime Adjustments for Rent Increase
Updates delegation calculation based on
Rentsysvar parameters
[SIMD-0180]: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0180-vote-account-leader-schedule.md [SIMD-0185]: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0185-vote-account-v4.md [SIMD-0232]: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0232-custom-commission-collector.md [SIMD-0291]: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0291-commission-rate-in-basis-points.md [SIMD-0392]: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0392-rent-increase-adaptations.md
Alternatives Considered
Distribute Rewards as Activated Stake
The runtime could ensure that any distributed stake rewards get activated as well but it would require extra complexity in the protocol to support that feature. Instead, stakers will receive inactive SOL in their stake accounts that they will have to manage themselves. [SIMD-0022] aims to make this experience better for stakers by allowing stake accounts to separately delegate any unstaked balance in their accounts.
[SIMD-0022]: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0022-multi-stake.md
Out of protocol reward distribution
Due to the lack of core protocol support for distributing block revenue to stakers, validators have developed their own solutions which are not enforced by the core protocol. For example, the Cogent validator diverts part of its fee revenue to NFT holders. But it's up the NFT holders to audit and hold Cogent accountable to a specific commission rate.
Another alternative is Jito's mechanism for block "tips" (not fees, but the idea is similar). Jito's validator implementation includes a tip distribution program which it instructs validator operators to divert all of their tips to but cannot enforce perfect compliance. It's up to stakers and the Jito team to audit compliance by validator operators. This mechanism requires trusting a third-party (in this case Jito) to calculate reward distribution in an accurate and fair manner. It also relies on using a merkle tree to distribute fees to all stake accounts and the distributed fees are not automatically staked in recipient stake accounts.
New Terminology
NA
Detailed Design
Runtime: Block Revenue Collection
After all transactions are processed in a block for a given leader, rather than collecting all block revenue into the validator identity account, the protocol will look up the block producer's vote account as described in [SIMD-0180]. Then it MUST check if the validator's vote account has specified a block revenue commission rate and collector addresses in the new vote account version described in [SIMD-0185]. As described in [SIMD-0232], the latest block revenue commission rate and collector address MUST be loaded from the vote account state at the beginning of the previous epoch. This is the same vote account state used to build the leader schedule for the current epoch.
If the block revenue commission rate and collector account aren't set (e.g., the vote account state version has not been updated to v4 yet), all revenue will be collected into the validator's identity account as before. If the block revenue commission rate and collector account are specified, the rewards MUST be distributed according to the commission and delegator rewards collection sections below.
Commission Collection
The commission amount MUST be calculated by first multiplying the amount of revenue by the lesser of the vote account's block revenue commission rate or the maximum of 10,000 basis points. Then use integer division to divide by 10,000 and discard the remainder. If the commission amount is non-zero, the block revenue commission collector account MUST be loaded and checked for the following conditions:
- account is system program owned AND
- account is rent-exempt after depositing the commission.
If the conditions are met, the commission amount MUST be deposited into the block revenue commission collector account. If either of these conditions is violated, the commission amount MUST be burned.
Delegator Rewards Collection
The delegator rewards amount MUST be calculated by subtracting the calculated commission from the block fee revenue. If the delegator rewards amount is non-zero, the vote account must be loaded and checked for the following conditions:
- account is vote program owned AND
- account is initialized with vote state v4 or later
If the conditions are met, the delegator rewards amount MUST be added to the vote state field pending_delegator_rewards and added to the balance of vote account. If either of these conditions is violated, the delegator rewards amount MUST be burned.
Runtime: Block Revenue Distribution
At the beginning of each epoch, pending delegator rewards will be collected from actively staked vote accounts into the epoch rewards sysvar account and then distributed to stake accounts utilizing the existing partitioned rewards distribution mechanism described in [SIMD-0118].
Delegator Rewards Calculation
Delegator rewards MUST be calculated during the beginning of the first block of an epoch N where the first block is any block with a parent in the previous epoch. Rewards MUST be recalculated if a node is restarted during the partitioned rewards distribution period as described in [SIMD-0118].
For each vote account, get its total active stake delegation during the reward epoch N - 1. Let this value be A.
Then for each vote account, get its pending delegator rewards from the pending_delegator_rewards field in the vote state at the end of reward epoch N - 1. Let this value be P. If P is zero, skip this vote account as there is nothing to be distributed.
Lastly, if this is the first block of epoch N, the vote state’s pending_delegator_rewards field MUST be reset to 0. Then, if A (active stake) is zero, the delegator rewards will effectively returned to the voter after the pending_delegator_rewards field is reset to 0. Otherwise, if A is non-zero, P lamports MUST be debited from the vote account’s lamport balance and credited to the epoch rewards sysvar account’s lamport balance before any transactions or votes are processed.
Note that unlike inflation rewards distribution, block revenue distribution will not impact any internal epoch rewards sysvar state fields like total_rewards or distributed_rewards since block revenue will instead be tracked via the epoch rewards sysvar lamport balance.
Individual Delegator Reward
For each individual stake account with an active non-zero delegation, multiply its active stake in reward epoch N - 1 by P, and divide the result by A using integer division to get the individual stake account’s block revenue reward distribution amount, truncating any sub-lamport portion.
Delegator Rewards Distribution
The reward distribution amounts for each stake account can then be used to construct a list of stake reward entries which MUST be partitioned according to [SIMD-0118] which describes which stake rewards are distributed in each block during the partitioned rewards distribution period.
During partitioned reward distribution for a given slot, when reward entries are used to distribute block revenue rewards, the epoch rewards sysvar account’s lamport balance MUST be debited by the block revenue reward distribution amount to keep capitalization consistent.
[SIMD-0118]: https://github.com/solana-foundation/solana-improvement-documents/blob/main/proposals/0118-partitioned-epoch-reward-distribution.md
Stake Delegation Adjustment
The new delegation amount for a stake account MUST account for individual delegator rewards, by adapting the calculation from [SIMD-0392]:
post_delegation = min(
delegation + stake_rewards,
balance + stake_rewards + block_rewards - rent_exempt_reserve
)
Where block_rewards represents the individual block rewards earned by the stake account in that epoch.
All other variables are the same as before, as described in SIMD-0392.
Delegator Rewards Completion
After distributing all partitioned delegator rewards, the epoch rewards sysvar balance MUST be reset to its rent exemption balance and any surplus lamports are burned.
Vote Program
Withdraw
Since pending delegator rewards will be stored in the validator's vote account until distribution at the next epoch boundary, those funds will be unable to be withdrawn.
The Withdraw instruction must be modified so that if the balance indicated by the pending_delegator_rewards field is non-zero, the vote account will no longer be closeable by fully withdrawing funds. The withdrawable balance when pending_delegator_rewards is non-zero will be equal to the vote account's balance minus pending_delegator_rewards and the minimum rent exempt balance.
UpdateCommissionBps
The UpdateCommissionBps instruction added in [SIMD-0291] must be updated to add support for updating the block revenue commission rate.
When the specified commission kind is CommissionKind::BlockRevenue, update the block_revenue_commission_bps field instead of the previous behavior of returning an InstructionError::InvalidInstructionData.
Note that the commission rate is allowed to be set and stored as any u16 value but as detailed above, it will capped at 10,000 during the actual commission calculation.
DepositDelegatorRewards
A new instruction for distributing lamports to stake delegators will be added to the vote program with the enum discriminant value of 19u32 little endian encoded in the first 4 bytes.
pub enum VoteInstruction {
/// # Account references
/// 0. `[WRITE]` Vote account to be updated with the deposit
/// 1. `[SIGNER, WRITE]` Source account for deposit funds
DepositDelegatorRewards { // 19u32
deposit: u64,
},
}
Perform the following checks:
- If the number of account inputs is less than 2, return
InstructionError::NotEnoughAccountKeys - If the vote account (index
0) fails to deserialize, returnInstructionError::InvalidAccountData - If the vote account is not initialized with state version 4, return
InstructionError::InvalidAccountData
Then the processor should perform a system transfer CPI of deposit lamports from the source account (index 1) to the vote account. Lastly, increment the pending_delegator_rewards value by deposit.
Impact
Stake delegators will receive additional income when delegating to validators who adopt this new feature by setting a block revenue commission rate less than the default of 100%.
Security Considerations
NA
Backwards Compatibility
A feature gate will be used to enable block revenue reward distribution at an epoch boundary.