Abstract: Described herein are systems and methods for providing trustworthy consensus information based on data from distributed data sources. An oracle program can be executed by processors in a secure execution environment, and can interact with a pool of warden servers of a blockchain to determine the trustworthy consensus information. The oracle can perform operations including providing requests for off-chain to the warden servers, receiving off-chain data values from the warden servers, and determining reliable consensus information from the received off-chain data values. The reliable consensus information can be provided to a computing device that is external to the secure execution environment.

Abstract: Various aspects of the subject technology relate to systems, methods, and machine-readable media for cross-chain communication in a blockchain platform. Various aspects may include accepting, at a first blockchain, a first transaction including a message and a message payload. Aspects may also include validating, at the first blockchain, the message by signing the message using signature keys of one or more validators in a first set of validators of the first blockchain. Aspects may also include generating an aggregate signature based on the signature keys of the one or more validators in a first set of validators. Aspects may also include submitting a second transaction on to a second blockchain, the second transaction including the message and the aggregate signature. Aspects may include validating, at the second blockchain, the second transaction based on a shared registry.

Abstract: Various aspects of the subject technology relate to systems, methods, and machine-readable media for cross-chain communication in a blockchain platform. Various aspects may include accepting, at a first blockchain, a first transaction including a message and a message payload. Aspects may also include validating, at the first blockchain, the message by signing the message using signature keys of one or more validators in a first set of validators of the first blockchain. Aspects may also include generating an aggregate signature based on the signature keys of the one or more validators in a first set of validators. Aspects may also include submitting a second transaction on to a second blockchain, the second transaction including the message and the aggregate signature. Aspects may include validating, at the second blockchain, the second transaction based on a shared registry.

Abstract: In one implementation, a system to provide a secure crossing network for trading digital blockchain assets outside of an exchange can include a crossing network program that is configured to provide a crossing network for the digital blockchain assets and a computer system with a secure enclave that is configured to provide the trusted execution environment within which processing of programs is secure from observation and manipulation by other operations outside of the secure enclave. The execution of the crossing network program in the secure enclave receiving, from client devices, crossing network orders to trade assets within the crossing network; matching at least a portion of the crossing network orders in an order book; obtaining, using a pricing oracle, pricing information for transactions in the exchange; and determining a reference price for the matched orders within the crossing network based on the pricing information from the exchange.

Abstract: Various aspects of the subject technology relate to systems, methods, and machine-readable media for cross-chain communication in a blockchain platform. Various aspects may include accepting, at a first blockchain, a first transaction including a message and a message payload. Aspects may also include validating, at the first blockchain, the message by signing the message using signature keys of one or more validators in a first set of validators of the first blockchain. Aspects may also include generating an aggregate signature based on the signature keys of the one or more validators in a first set of validators. Aspects may also include submitting a second transaction on to a second blockchain, the second transaction including the message and the aggregate signature. Aspects may include validating, at the second blockchain, the second transaction based on a shared registry.

Abstract: Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a storage device that can store a bridge program that is programmed to perform (i) lock operations that lock native assets from a first blockchain network and mint synthetic assets representing the native assets in a second blockchain network, and (ii) unlock operations that unlock the native assets by transferring the native assets to an address in the first blockchain network in response to the synthetic assets being returned or destroyed. The system can include a computer system that loads and executes the bridge program in a secure computing enclave that provides a trusted execution environment. The computer system can then perform the lock operations and the unlock operations to provide a bridge between the first blockchain network and the second blockchain network.

Abstract: A secure module can be configured to: provide the trusted execution environment; and load secure-software for processing in the trusted execution environment to perform operations. The operations can include generating a private key and a corresponding public key; maintaining the private key in the trusted execution environment; receiving at least one attestation request from at least one attestation server; responding to the received attestation requests with attestation responses generated with the private key; initiating encrypted connections with client devices using the private key, the encrypted connections having an endpoint within the trusted execution environment such that contents of the encrypted connections are secure from observation and manipulation by other operations outside of the secure module and outside of the client devices; and communicating data with the client devices through the encrypted connections.

Abstract: Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a storage device that can store a bridge program that is programmed to perform (i) lock operations that lock native assets from a first blockchain network and mint synthetic assets representing the native assets in a second blockchain network, and (ii) unlock operations that unlock the native assets by transferring the native assets to an address in the first blockchain network in response to the synthetic assets being returned or destroyed. The system can include a computer system that loads and executes the bridge program in a secure computing enclave that provides a trusted execution environment. The computer system can then perform the lock operations and the unlock operations to provide a bridge between the first blockchain network and the second blockchain network.

Abstract: Described herein is technology for providing the secure transfer of assets between blockchain networks. A secure-execution server can be configured to execute a bridge program in a secure execution environment to interact with a first pool of warden servers to facilitate secure transfer of assets between a first blockchain network and a second blockchain network.

Abstract: A system for providing an exchange in a trusted execution environment can include an exchange program that is configured to provide a digital exchange for digital assets and a computer system with a secure enclave that is configured to provide the trusted execution environment within which processing of programs is secure from observation and manipulation by other operations outside of the secure enclave. Execution of the exchange program in the secure enclave can include loading the exchange program into secure memory within the secure enclave, performing an attestation operation on the exchange program loaded into the secure memory within the secure enclave, the attestation operation configured to validate the exchange program, and outputting results of the attestation operation to identify whether the exchange program loaded in the secure enclave is valid.

Abstract: In one implementation, a system to provide a secure crossing network for trading digital blockchain assets outside of an exchange can include a crossing network program that is configured to provide a crossing network for the digital blockchain assets and a computer system with a secure enclave that is configured to provide the trusted execution environment within which processing of programs is secure from observation and manipulation by other operations outside of the secure enclave. The execution of the crossing network program in the secure enclave receiving, from client devices, crossing network orders to trade assets within the crossing network; matching at least a portion of the crossing network orders in an order book; obtaining, using a pricing oracle, pricing information for transactions in the exchange; and determining a reference price for the matched orders within the crossing network based on the pricing information from the exchange.

Abstract: A system for providing an exchange in a trusted execution environment can include an exchange program that is configured to provide a digital exchange for digital assets and a computer system with a secure enclave that is configured to provide the trusted execution environment within which processing of programs is secure from observation and manipulation by other operations outside of the secure enclave. Execution of the exchange program in the secure enclave can include loading the exchange program into secure memory within the secure enclave, performing an attestation operation on the exchange program loaded into the secure memory within the secure enclave, the attestation operation configured to validate the exchange program, and outputting results of the attestation operation to identify whether the exchange program loaded in the secure enclave is valid.

Abstract: Described herein is technology for providing the secure transfer of assets between blockchain networks. A secure-execution server can be configured to execute a bridge program in a secure execution environment to interact with a first pool of warden servers to facilitate secure transfer of assets between a first blockchain network and a second blockchain network.

Abstract: A secure module can be configured to: provide the trusted execution environment; and load secure-software for processing in the trusted execution environment to perform operations. The operations can include generating a private key and a corresponding public key; maintaining the private key in the trusted execution environment; receiving at least one attestation request from at least one attestation server; responding to the received attestation requests with attestation responses generated with the private key; initiating encrypted connections with client devices using the private key, the encrypted connections having an endpoint within the trusted execution environment such that contents of the encrypted connections are secure from observation and manipulation by other operations outside of the secure module and outside of the client devices; and communicating data with the client devices through the encrypted connections.

Abstract: Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a secure-execution server configured to execute a bridge program to cause the secure-execution server to perform operations may include: determining to initiate a migration; receiving a portion of the first master secret; receiving a listing of first and/or second assets generating a second master secret; generating corresponding second portions; deriving address information; generating second transaction-data and first transaction-data; generating a migration-prepared data-object; generating a migration-prepared instruction; sending the corresponding migration-prepared instruction; sending the second portion of the second master secret; and sending a complete migration request.

Abstract: Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a storage device that can store a bridge program that is programmed to perform (i) lock operations that lock native assets from a first blockchain network and mint synthetic assets representing the native assets in a second blockchain network, and (ii) unlock operations that unlock the native assets by transferring the native assets to an address in the first blockchain network in response to the synthetic assets being returned or destroyed. The system can include a computer system that loads and executes the bridge program in a secure computing enclave that provides a trusted execution environment. The computer system can then perform the lock operations and the unlock operations to provide a bridge between the first blockchain network and the second blockchain network.

Abstract: Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a secure-execution server configured to execute a bridge program to cause the secure-execution server to perform operations may include: determining to initiate a migration; receiving a portion of the first master secret; receiving a listing of first and/or second assets generating a second master secret; generating corresponding second portions; deriving address information; generating second transaction-data and first transaction-data; generating a migration-prepared data-object; generating a migration-prepared instruction; sending the corresponding migration-prepared instruction; sending the second portion of the second master secret; and sending a complete migration request.

Abstract: Described herein is technology for providing the secure transfer of assets between blockchain networks. A secure-execution server can be configured to execute a bridge program in a secure execution environment to interact with a first pool of warden servers to facilitate secure transfer of assets between a first blockchain network and a second blockchain network.

Abstract: Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a secure-execution server configured to execute a bridge program to cause the secure-execution server to perform operations may include: determining to initiate a migration; receiving a portion of the first master secret; receiving a listing of first and/or second assets generating a second master secret; generating corresponding second portions; deriving address information; generating second transaction-data and first transaction-data; generating a migration-prepared data-object; generating a migration-prepared instruction; sending the corresponding migration-prepared instruction; sending the second portion of the second master secret; and sending a complete migration request.

Abstract: Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a storage device that can store a bridge program that is programmed to perform (i) lock operations that lock native assets from a first blockchain network and mint synthetic assets representing the native assets in a second blockchain network, and (ii) unlock operations that unlock the native assets by transferring the native assets to an address in the first blockchain network in response to the synthetic assets being returned or destroyed. The system can include a computer system that loads and executes the bridge program in a secure computing enclave that provides a trusted execution environment. The computer system can then perform the lock operations and the unlock operations to provide a bridge between the first blockchain network and the second blockchain network.