Enhancing the Security of Rollup Sequencers Using Decentrally Attested TEEs

IF 4.8 2区计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS

IEEE Transactions on Emerging Topics in Computing Pub Date : 2026-04-01 Epub Date: 2026-03-17 DOI:10.1109/TETC.2026.3671408

Giovanni Maria Cristiano;Salvatore D’Antonio;Jonah Giglio;Giovanni Mazzeo;Luigi Romano

{"title":"Enhancing the Security of Rollup Sequencers Using Decentrally Attested TEEs","authors":"Giovanni Maria Cristiano;Salvatore D’Antonio;Jonah Giglio;Giovanni Mazzeo;Luigi Romano","doi":"10.1109/TETC.2026.3671408","DOIUrl":null,"url":null,"abstract":"The growing scalability demand of public Blockchains led to the rise of Layer-2 solutions, such as <italic>Rollups</i>. Rollups improve transaction throughput by processing operations off-chain and posting the results on-chain. A critical component in Rollups is the <italic>Sequencer</i>, responsible for receiving, ordering and batching transactions before they are submitted to the Layer-1 blockchain. While essential, the centralized nature of the Sequencer makes it vulnerable to attacks, such as censorship, transaction manipulation and tampering. To enhance its security, there exist solutions in the literature that shield the Sequencer inside a <italic>Trusted Execution Environment (TEE)</i>. However, the attestation of TEEs introduces additional centralization, which is in contrast with the core Blockchain principle. In this paper, we proposed a TEE-secured Sequencer equipped with a decentralized attestation mechanism. Design and implementation details of the proposed solution are given, with a focus on the system architecture, the TEE integration, and the decentralization of the attestation process. Additionally, we conducted an experimental evaluation on a realistic Rollup testnet. Experimental results showed that this approach ensures Sequencer integrity without sacrificing compatibility or deployability in existing Layer-2 architectures.","PeriodicalId":13156,"journal":{"name":"IEEE Transactions on Emerging Topics in Computing","volume":"14 2","pages":"440-455"},"PeriodicalIF":4.8000,"publicationDate":"2026-04-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Transactions on Emerging Topics in Computing","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11440051/","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"2026/3/17 0:00:00","PubModel":"Epub","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}

引用次数: 0

Abstract

The growing scalability demand of public Blockchains led to the rise of Layer-2 solutions, such as Rollups. Rollups improve transaction throughput by processing operations off-chain and posting the results on-chain. A critical component in Rollups is the Sequencer, responsible for receiving, ordering and batching transactions before they are submitted to the Layer-1 blockchain. While essential, the centralized nature of the Sequencer makes it vulnerable to attacks, such as censorship, transaction manipulation and tampering. To enhance its security, there exist solutions in the literature that shield the Sequencer inside a Trusted Execution Environment (TEE). However, the attestation of TEEs introduces additional centralization, which is in contrast with the core Blockchain principle. In this paper, we proposed a TEE-secured Sequencer equipped with a decentralized attestation mechanism. Design and implementation details of the proposed solution are given, with a focus on the system architecture, the TEE integration, and the decentralization of the attestation process. Additionally, we conducted an experimental evaluation on a realistic Rollup testnet. Experimental results showed that this approach ensures Sequencer integrity without sacrificing compatibility or deployability in existing Layer-2 architectures.

查看原文本刊更多论文

利用分散认证tee增强Rollup测序器的安全性

公共区块链不断增长的可扩展性需求导致了第二层解决方案（如rollup）的兴起。rollup通过在链下处理操作并在链上发布结果来提高事务吞吐量。rollup中的一个关键组件是Sequencer，它负责在事务提交到Layer-1区块链之前接收、排序和批处理事务。虽然必不可少，但Sequencer的集中性质使其容易受到攻击，例如审查，交易操纵和篡改。为了增强其安全性，文献中存在将Sequencer保护在可信执行环境（TEE）中的解决方案。然而，tee的认证引入了额外的中心化，这与核心区块链原则相反。在本文中，我们提出了一种配备分散认证机制的tee安全测序器。给出了所建议的解决方案的设计和实现细节，重点是系统架构、TEE集成和证明过程的分散化。此外，我们还在实际Rollup测试网络上进行了实验评估。实验结果表明，该方法在不牺牲现有第二层架构的兼容性和可部署性的情况下保证了Sequencer的完整性。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

IEEE Transactions on Emerging Topics in Computing Computer Science-Computer Science (miscellaneous)

CiteScore

12.10

自引率

5.10%

发文量

113

期刊介绍： IEEE Transactions on Emerging Topics in Computing publishes papers on emerging aspects of computer science, computing technology, and computing applications not currently covered by other IEEE Computer Society Transactions. Some examples of emerging topics in computing include: IT for Green, Synthetic and organic computing structures and systems, Advanced analytics, Social/occupational computing, Location-based/client computer systems, Morphic computer design, Electronic game systems, & Health-care IT.