@arbitrum/nitro-contracts 2.0.0 → 3.0.0-alpha.0

package/src/rollup/RollupUserLogic.sol

@@ -4,32 +4,32 @@
 
 pragma solidity ^0.8.0;
 
-import "@openzeppelin/contracts-upgradeable/token/ERC20/IERC20Upgradeable.sol";
+import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
 
 import {IRollupUser} from "./IRollupLogic.sol";
 import "../libraries/UUPSNotUpgradeable.sol";
 import "./RollupCore.sol";
 import "./IRollupLogic.sol";
 
-import {ETH_POS_BLOCK_TIME} from "../libraries/Constants.sol";
-
-abstract contract AbsRollupUserLogic is
-    RollupCore,
-    UUPSNotUpgradeable,
-    IRollupUserAbs,
-    IChallengeResultReceiver
-{
-    using NodeLib for Node;
+contract RollupUserLogic is RollupCore, UUPSNotUpgradeable, IRollupUser {
+    using AssertionNodeLib for AssertionNode;
     using GlobalStateLib for GlobalState;
+    using SafeERC20 for IERC20;
+    using EnumerableSetUpgradeable for EnumerableSetUpgradeable.AddressSet;
 
-    modifier onlyValidator() {
-        require(isValidator[msg.sender] || validatorWhitelistDisabled, "NOT_VALIDATOR");
+    modifier onlyValidator(
+        address account
+    ) {
+        require(validators.contains(account) || validatorWhitelistDisabled, "NOT_VALIDATOR");
         _;
     }
 
-    modifier whenNotPausedOrDeprecated() {
-        require(!paused() || address(bridge.rollup()) != address(this), "PAUSED_AND_ACTIVE");
-        _;
+    /// @dev the user logic just validated configuration and shouldn't write to state during init
+    /// this allows the admin logic to ensure consistency on parameters.
+    function initialize(
+        address _stakeToken
+    ) external view override onlyProxy {
+        require(_stakeToken != address(0), "NEED_STAKE_TOKEN");
     }
 
     uint256 internal immutable deployTimeChainId = block.chainid;
@@ -38,19 +38,17 @@ abstract contract AbsRollupUserLogic is
         return deployTimeChainId != block.chainid;
     }
 
-    /**
-     * @notice Extra number of blocks the validator can remain inactive before considered inactive
-     *         This is 7 days assuming a 13.2 seconds block time
-     */
-    uint256 public constant VALIDATOR_AFK_BLOCKS = 45818;
-
     function _validatorIsAfk() internal view returns (bool) {
-        Node memory latestNode = getNodeStorage(latestNodeCreated());
-        if (latestNode.createdAtBlock == 0) return false;
-        if (latestNode.createdAtBlock + confirmPeriodBlocks + VALIDATOR_AFK_BLOCKS < block.number) {
-            return true;
+        AssertionNode memory latestConfirmedAssertion = getAssertionStorage(latestConfirmed());
+        uint256 _validatorAfkBlocks = validatorAfkBlocks; // cache and cast to uint256 to prevent overflow
+        if (_validatorAfkBlocks == 0) return false;
+        if (latestConfirmedAssertion.createdAtBlock == 0) return false;
+        // We consider the validator is gone if the last known assertion is older than VALIDATOR_AFK_BLOCKS
+        // Which is either the latest confirmed assertion or the first child of the latest confirmed assertion
+        if (latestConfirmedAssertion.firstChildBlock > 0) {
+            return latestConfirmedAssertion.firstChildBlock + _validatorAfkBlocks < block.number;
         }
-        return false;
+        return latestConfirmedAssertion.createdAtBlock + _validatorAfkBlocks < block.number;
     }
 
     function removeWhitelistAfterFork() external {
@@ -59,709 +57,354 @@ abstract contract AbsRollupUserLogic is
         validatorWhitelistDisabled = true;
     }
 
+    /**
+     * @notice Remove the whitelist after the validator has been inactive for too long
+     */
     function removeWhitelistAfterValidatorAfk() external {
         require(!validatorWhitelistDisabled, "WHITELIST_DISABLED");
         require(_validatorIsAfk(), "VALIDATOR_NOT_AFK");
         validatorWhitelistDisabled = true;
     }
 
-    function isERC20Enabled() public view override returns (bool) {
-        return stakeToken != address(0);
-    }
-
     /**
-     * @notice Reject the next unresolved node
-     * @param stakerAddress Example staker staked on sibling, used to prove a node is on an unconfirmable branch and can be rejected
+     * @notice Confirm a unresolved assertion
+     * @param confirmState The state to confirm
+     * @param winningEdgeId The winning edge if a challenge is started
      */
-    function rejectNextNode(address stakerAddress) external onlyValidator whenNotPaused {
-        requireUnresolvedExists();
-        uint64 latestConfirmedNodeNum = latestConfirmed();
-        uint64 firstUnresolvedNodeNum = firstUnresolvedNode();
-        Node storage firstUnresolvedNode_ = getNodeStorage(firstUnresolvedNodeNum);
-
-        if (firstUnresolvedNode_.prevNum == latestConfirmedNodeNum) {
-            /**If the first unresolved node is a child of the latest confirmed node, to prove it can be rejected, we show:
-             * a) Its deadline has expired
-             * b) *Some* staker is staked on a sibling
-
-             * The following three checks are sufficient to prove b:
-            */
-
-            // 1.  StakerAddress is indeed a staker
-            require(isStakedOnLatestConfirmed(stakerAddress), "NOT_STAKED");
-
-            // 2. Staker's latest staked node hasn't been resolved; this proves that staker's latest staked node can't be a parent of firstUnresolvedNode
-            requireUnresolved(latestStakedNode(stakerAddress));
-
-            // 3. staker isn't staked on first unresolved node; this proves staker's latest staked can't be a child of firstUnresolvedNode (recall staking on node requires staking on all of its parents)
-            require(!nodeHasStaker(firstUnresolvedNodeNum, stakerAddress), "STAKED_ON_TARGET");
-            // If a staker is staked on a node that is neither a child nor a parent of firstUnresolvedNode, it must be a sibling, QED
-
-            // Verify the block's deadline has passed
-            firstUnresolvedNode_.requirePastDeadline();
-
-            getNodeStorage(latestConfirmedNodeNum).requirePastChildConfirmDeadline();
-
-            removeOldZombies(0);
+    function confirmAssertion(
+        bytes32 assertionHash,
+        bytes32 prevAssertionHash,
+        AssertionState calldata confirmState,
+        bytes32 winningEdgeId,
+        ConfigData calldata prevConfig,
+        bytes32 inboxAcc
+    ) external onlyValidator(msg.sender) whenNotPaused {
+        /*
+        * To confirm an assertion, the following must be true:
+        * 1. The assertion must be pending
+        * 2. The assertion's deadline must have passed
+        * 3. The assertion's prev must be latest confirmed
+        * 4. The assertion's prev's child confirm deadline must have passed
+        * 5. If the assertion's prev has more than 1 child, the assertion must be the winner of the challenge
+        *
+        * Note that we do not need to ever reject invalid assertion because they can never confirm
+        *      and the stake on them is swept to the loserStakeEscrow as soon as the leaf is created
+        */
+
+        // The assertion's must exists and be pending and will be validated in RollupCore.confirmAssertionInternal
+        AssertionNode storage assertion = getAssertionStorage(assertionHash);
+
+        // prevAssertionHash is user supplied, but will be validated in RollupCore.confirmAssertionInternal
+        AssertionNode storage prevAssertion = getAssertionStorage(prevAssertionHash);
+        RollupLib.validateConfigHash(prevConfig, prevAssertion.configHash);
+
+        // Check that deadline has passed
+        require(
+            block.number >= assertion.createdAtBlock + prevConfig.confirmPeriodBlocks,
+            "BEFORE_DEADLINE"
+        );
 
-            // Verify that no staker is staked on this node
+        // Check that prev is latest confirmed
+        require(prevAssertionHash == latestConfirmed(), "PREV_NOT_LATEST_CONFIRMED");
+
+        if (prevAssertion.secondChildBlock > 0) {
+            // if the prev has more than 1 child, check if this assertion is the challenge winner
+            ChallengeEdge memory winningEdge =
+                IEdgeChallengeManager(prevConfig.challengeManager).getEdge(winningEdgeId);
+            require(winningEdge.claimId == assertionHash, "NOT_WINNER");
+            require(winningEdge.status == EdgeStatus.Confirmed, "EDGE_NOT_CONFIRMED");
+            require(winningEdge.confirmedAtBlock != 0, "ZERO_CONFIRMED_AT_BLOCK");
+            // an additional number of blocks is added to ensure that the result of the challenge is widely
+            // observable before it causes an assertion to be confirmed. After a winning edge is found, it will
+            // always be challengeGracePeriodBlocks before an assertion can be confirmed
             require(
-                firstUnresolvedNode_.stakerCount == countStakedZombies(firstUnresolvedNodeNum),
-                "HAS_STAKERS"
+                block.number >= winningEdge.confirmedAtBlock + challengeGracePeriodBlocks,
+                "CHALLENGE_GRACE_PERIOD_NOT_PASSED"
             );
         }
-        // Simpler case: if the first unreseolved node doesn't point to the last confirmed node, another branch was confirmed and can simply reject it outright
-        _rejectNextNode();
 
-        emit NodeRejected(firstUnresolvedNodeNum);
-    }
-
-    function _confirmNextNode(
-        bytes32 blockHash,
-        bytes32 sendRoot,
-        bool isFastConfirm
-    ) internal {
-        requireUnresolvedExists();
-
-        uint64 nodeNum = firstUnresolvedNode();
-        Node storage node = getNodeStorage(nodeNum);
-
-        if (!isFastConfirm) {
-            // Verify the block's deadline has passed
-            node.requirePastDeadline();
-        }
-
-        // Check that prev is latest confirmed
-        assert(node.prevNum == latestConfirmed());
-
-        Node storage prevNode = getNodeStorage(node.prevNum);
-        if (!isFastConfirm) {
-            prevNode.requirePastChildConfirmDeadline();
-        }
-
-        removeOldZombies(0);
-
-        // Require only zombies are staked on siblings to this node, and there's at least one non-zombie staked on this node
-        uint256 stakedZombies = countStakedZombies(nodeNum);
-        uint256 zombiesStakedOnOtherChildren = countZombiesStakedOnChildren(node.prevNum) -
-            stakedZombies;
-        require(node.stakerCount > stakedZombies, "NO_STAKERS");
-        require(
-            prevNode.childStakerCount == node.stakerCount + zombiesStakedOnOtherChildren,
-            "NOT_ALL_STAKED"
-        );
-
-        confirmNode(nodeNum, blockHash, sendRoot);
-    }
-
-    /**
-     * @notice Confirm the next unresolved node
-     * @param blockHash The block hash at the end of the assertion
-     * @param sendRoot The send root at the end of the assertion
-     */
-    function confirmNextNode(bytes32 blockHash, bytes32 sendRoot)
-        external
-        onlyValidator
-        whenNotPaused
-    {
-        _confirmNextNode(blockHash, sendRoot, false);
-    }
-
-    /**
-     * @notice This allow anyTrustFastConfirmer to confirm next node regardless of deadline
-     *         the anyTrustFastConfirmer is supposed to be set only on an AnyTrust chain to
-     *         a contract that can call this function when received sufficient signatures
-     */
-    function fastConfirmNextNode(bytes32 blockHash, bytes32 sendRoot) external whenNotPaused {
-        require(msg.sender == anyTrustFastConfirmer, "NOT_FAST_CONFIRMER");
-        _confirmNextNode(blockHash, sendRoot, true);
+        confirmAssertionInternal(assertionHash, prevAssertionHash, confirmState, inboxAcc);
     }
 
     /**
      * @notice Create a new stake
      * @param depositAmount The amount of either eth or tokens staked
+     * @param _withdrawalAddress The new staker's withdrawal address
      */
-    function _newStake(uint256 depositAmount) internal onlyValidator whenNotPaused {
+    function _newStake(
+        uint256 depositAmount,
+        address _withdrawalAddress
+    ) internal onlyValidator(msg.sender) whenNotPaused {
         // Verify that sender is not already a staker
         require(!isStaked(msg.sender), "ALREADY_STAKED");
-        require(!isZombie(msg.sender), "STAKER_IS_ZOMBIE");
-        require(depositAmount >= currentRequiredStake(), "NOT_ENOUGH_STAKE");
-
-        createNewStake(msg.sender, depositAmount);
+        // amount will be checked when creating an assertion
+        createNewStake(msg.sender, depositAmount, _withdrawalAddress);
     }
 
     /**
-     * @notice Move stake onto existing child node
-     * @param nodeNum Index of the node to move stake to. This must by a child of the node the staker is currently staked on
-     * @param nodeHash Node hash of nodeNum (protects against reorgs)
+     * @notice Computes the hash of an assertion
+     * @param state The execution state for the assertion
+     * @param prevAssertionHash The hash of the assertion's parent
+     * @param inboxAcc The inbox batch accumulator
      */
-    function stakeOnExistingNode(uint64 nodeNum, bytes32 nodeHash)
-        public
-        onlyValidator
-        whenNotPaused
-    {
-        require(isStakedOnLatestConfirmed(msg.sender), "NOT_STAKED");
-
-        require(
-            nodeNum >= firstUnresolvedNode() && nodeNum <= latestNodeCreated(),
-            "NODE_NUM_OUT_OF_RANGE"
-        );
-        Node storage node = getNodeStorage(nodeNum);
-        require(node.nodeHash == nodeHash, "NODE_REORG");
-        require(latestStakedNode(msg.sender) == node.prevNum, "NOT_STAKED_PREV");
-        stakeOnNode(msg.sender, nodeNum);
+    function computeAssertionHash(
+        bytes32 prevAssertionHash,
+        AssertionState calldata state,
+        bytes32 inboxAcc
+    ) external pure returns (bytes32) {
+        return RollupLib.assertionHash(prevAssertionHash, state, inboxAcc);
     }
 
     /**
-     * @notice Create a new node and move stake onto it
+     * @notice Create a new assertion and move stake onto it
      * @param assertion The assertion data
-     * @param expectedNodeHash The hash of the node being created (protects against reorgs)
-     */
-    function stakeOnNewNode(
-        Assertion calldata assertion,
-        bytes32 expectedNodeHash,
-        uint256 prevNodeInboxMaxCount
-    ) public onlyValidator whenNotPaused {
-        require(isStakedOnLatestConfirmed(msg.sender), "NOT_STAKED");
-        // Ensure staker is staked on the previous node
-        uint64 prevNode = latestStakedNode(msg.sender);
-
-        {
-            uint256 timeSinceLastNode = block.number - getNode(prevNode).createdAtBlock;
-            // Verify that assertion meets the minimum Delta time requirement
-            require(timeSinceLastNode >= minimumAssertionPeriod, "TIME_DELTA");
-
-            // Minimum size requirement: any assertion must consume at least all inbox messages
-            // put into L1 inbox before the prev node’s L1 blocknum.
-            // We make an exception if the machine enters the errored state,
-            // as it can't consume future batches.
-            require(
-                assertion.afterState.machineStatus == MachineStatus.ERRORED ||
-                    assertion.afterState.globalState.getInboxPosition() >= prevNodeInboxMaxCount,
-                "TOO_SMALL"
-            );
-            // Minimum size requirement: any assertion must contain at least one block
-            require(assertion.numBlocks > 0, "EMPTY_ASSERTION");
-
-            // The rollup cannot advance normally from an errored state
-            require(
-                assertion.beforeState.machineStatus == MachineStatus.FINISHED,
-                "BAD_PREV_STATUS"
-            );
-        }
-        createNewNode(assertion, prevNode, prevNodeInboxMaxCount, expectedNodeHash);
-
-        stakeOnNode(msg.sender, latestNodeCreated());
-    }
-
-    /**
-     * @notice Refund a staker that is currently staked on or before the latest confirmed node
-     * @dev Since a staker is initially placed in the latest confirmed node, if they don't move it
-     * a griefer can remove their stake. It is recomended to batch together the txs to place a stake
-     * and move it to the desired node.
-     * @param stakerAddress Address of the staker whose stake is refunded
-     */
-    function returnOldDeposit(address stakerAddress)
-        external
-        override
-        onlyValidator
-        whenNotPausedOrDeprecated
-    {
-        require(latestStakedNode(stakerAddress) <= latestConfirmed(), "TOO_RECENT");
-        requireUnchallengedStaker(stakerAddress);
-        withdrawStaker(stakerAddress);
-    }
-
-    /**
-     * @notice Increase the amount staked for the given staker
-     * @param stakerAddress Address of the staker whose stake is increased
-     * @param depositAmount The amount of either eth or tokens deposited
+     * @param expectedAssertionHash The hash of the assertion being created (protects against reorgs)
      */
-    function _addToDeposit(address stakerAddress, uint256 depositAmount)
-        internal
-        onlyValidator
-        whenNotPaused
-    {
-        requireUnchallengedStaker(stakerAddress);
-        increaseStakeBy(stakerAddress, depositAmount);
-    }
+    function stakeOnNewAssertion(
+        AssertionInputs calldata assertion,
+        bytes32 expectedAssertionHash
+    ) public onlyValidator(msg.sender) whenNotPaused {
+        // Early revert on duplicated assertion if expectedAssertionHash is set
+        require(
+            expectedAssertionHash == bytes32(0)
+                || getAssertionStorage(expectedAssertionHash).status == AssertionStatus.NoAssertion,
+            "EXPECTED_ASSERTION_SEEN"
+        );
 
-    /**
-     * @notice Reduce the amount staked for the sender (difference between initial amount staked and target is creditted back to the sender).
-     * @param target Target amount of stake for the staker. If this is below the current minimum, it will be set to minimum instead
-     */
-    function reduceDeposit(uint256 target) external onlyValidator whenNotPausedOrDeprecated {
-        requireUnchallengedStaker(msg.sender);
-        uint256 currentRequired = currentRequiredStake();
-        if (target < currentRequired) {
-            target = currentRequired;
-        }
-        reduceStakeTo(msg.sender, target);
-    }
+        require(isStaked(msg.sender), "NOT_STAKED");
 
-    /**
-     * @notice Start a challenge between the given stakers over the node created by the first staker assuming that the two are staked on conflicting nodes. N.B.: challenge creator does not necessarily need to be one of the two asserters.
-     * @param stakers Stakers engaged in the challenge. The first staker should be staked on the first node
-     * @param nodeNums Nodes of the stakers engaged in the challenge. The first node should be the earliest and is the one challenged
-     * @param machineStatuses The before and after machine status for the first assertion
-     * @param globalStates The before and after global state for the first assertion
-     * @param numBlocks The number of L2 blocks contained in the first assertion
-     * @param secondExecutionHash The execution hash of the second assertion
-     * @param proposedBlocks L1 block numbers that the two nodes were proposed at
-     * @param wasmModuleRoots The wasm module roots at the time of the creation of each assertion
-     */
-    function createChallenge(
-        address[2] calldata stakers,
-        uint64[2] calldata nodeNums,
-        MachineStatus[2] calldata machineStatuses,
-        GlobalState[2] calldata globalStates,
-        uint64 numBlocks,
-        bytes32 secondExecutionHash,
-        uint256[2] calldata proposedBlocks,
-        bytes32[2] calldata wasmModuleRoots
-    ) external onlyValidator whenNotPaused {
-        require(nodeNums[0] < nodeNums[1], "WRONG_ORDER");
-        require(nodeNums[1] <= latestNodeCreated(), "NOT_PROPOSED");
-        require(latestConfirmed() < nodeNums[0], "ALREADY_CONFIRMED");
-
-        Node storage node1 = getNodeStorage(nodeNums[0]);
-        Node storage node2 = getNodeStorage(nodeNums[1]);
-
-        // ensure nodes staked on the same parent (and thus in conflict)
-        require(node1.prevNum == node2.prevNum, "DIFF_PREV");
-
-        // ensure both stakers aren't currently in challenge
-        requireUnchallengedStaker(stakers[0]);
-        requireUnchallengedStaker(stakers[1]);
-
-        require(nodeHasStaker(nodeNums[0], stakers[0]), "STAKER1_NOT_STAKED");
-        require(nodeHasStaker(nodeNums[1], stakers[1]), "STAKER2_NOT_STAKED");
-
-        // Check param data against challenge hash
+        // requiredStake is user supplied, will be verified against configHash later
+        // the prev's requiredStake is used to make sure all children have the same stake
+        // the staker may have more than enough stake, and the entire stake will be locked
+        // we cannot do a refund here because the staker may be staker on an unconfirmed ancestor that requires more stake
+        // excess stake can be removed by calling reduceDeposit when the staker is inactive
         require(
-            node1.challengeHash ==
-                RollupLib.challengeRootHash(
-                    RollupLib.executionHash(machineStatuses, globalStates, numBlocks),
-                    proposedBlocks[0],
-                    wasmModuleRoots[0]
-                ),
-            "CHAL_HASH1"
+            amountStaked(msg.sender) >= assertion.beforeStateData.configData.requiredStake,
+            "INSUFFICIENT_STAKE"
         );
 
+        bytes32 prevAssertion = RollupLib.assertionHash(
+            assertion.beforeStateData.prevPrevAssertionHash,
+            assertion.beforeState,
+            assertion.beforeStateData.sequencerBatchAcc
+        );
+        getAssertionStorage(prevAssertion).requireExists();
+
+        // Staker can create new assertion only if
+        // a) its last staked assertion is the prev; or
+        // b) its last staked assertion have a child
+        bytes32 lastAssertion = latestStakedAssertion(msg.sender);
         require(
-            node2.challengeHash ==
-                RollupLib.challengeRootHash(
-                    secondExecutionHash,
-                    proposedBlocks[1],
-                    wasmModuleRoots[1]
-                ),
-            "CHAL_HASH2"
+            lastAssertion == prevAssertion || getAssertionStorage(lastAssertion).firstChildBlock > 0,
+            "STAKED_ON_ANOTHER_BRANCH"
         );
 
-        // Calculate upper limit for allowed node proposal time:
-        uint256 commonEndBlock = getNodeStorage(node1.prevNum).firstChildBlock +
-            // Dispute start: dispute timer for a node starts when its first child is created
-            (node1.deadlineBlock - proposedBlocks[0]) +
-            extraChallengeTimeBlocks; // add dispute window to dispute start time
-        if (commonEndBlock < proposedBlocks[1]) {
-            // The 2nd node was created too late; loses challenge automatically.
-            completeChallengeImpl(stakers[0], stakers[1]);
-            return;
+        (bytes32 newAssertionHash, bool overflowAssertion) =
+            createNewAssertion(assertion, prevAssertion, expectedAssertionHash);
+        _stakerMap[msg.sender].latestStakedAssertion = newAssertionHash;
+
+        if (!overflowAssertion) {
+            uint256 timeSincePrev = block.number - getAssertionStorage(prevAssertion).createdAtBlock;
+            // Verify that assertion meets the minimum Delta time requirement
+            require(timeSincePrev >= minimumAssertionPeriod, "TIME_DELTA");
         }
-        // Start a challenge between staker1 and staker2. Staker1 will defend the correctness of node1, and staker2 will challenge it.
-        uint64 challengeIndex = createChallengeHelper(
-            stakers,
-            machineStatuses,
-            globalStates,
-            numBlocks,
-            wasmModuleRoots,
-            // convert from block counts to real second based timestamps
-            (commonEndBlock - proposedBlocks[0]) * ETH_POS_BLOCK_TIME,
-            (commonEndBlock - proposedBlocks[1]) * ETH_POS_BLOCK_TIME
-        ); // trusted external call
-
-        challengeStarted(stakers[0], stakers[1], challengeIndex);
-
-        emit RollupChallengeStarted(challengeIndex, stakers[0], stakers[1], nodeNums[0]);
-    }
 
-    function createChallengeHelper(
-        address[2] calldata stakers,
-        MachineStatus[2] calldata machineStatuses,
-        GlobalState[2] calldata globalStates,
-        uint64 numBlocks,
-        bytes32[2] calldata wasmModuleRoots,
-        uint256 asserterTimeLeft,
-        uint256 challengerTimeLeft
-    ) internal returns (uint64) {
-        return
-            challengeManager.createChallenge(
-                wasmModuleRoots[0],
-                machineStatuses,
-                globalStates,
-                numBlocks,
-                stakers[0],
-                stakers[1],
-                asserterTimeLeft,
-                challengerTimeLeft
+        if (!getAssertionStorage(newAssertionHash).isFirstChild) {
+            // We assume assertion.beforeStateData is valid here as it will be validated in createNewAssertion
+            // only 1 of the children can be confirmed and get their stake refunded
+            // so we send the other children's stake to the loserStakeEscrow
+            // NOTE: if the losing staker have staked more than requiredStake, the excess stake will be stuck
+            IERC20(stakeToken).safeTransfer(
+                loserStakeEscrow, assertion.beforeStateData.configData.requiredStake
             );
+        }
     }
 
     /**
-     * @notice Inform the rollup that the challenge between the given stakers is completed
-     * @param winningStaker Address of the winning staker
-     * @param losingStaker Address of the losing staker
+     * @notice Refund a staker that is currently staked on an assertion that either has a chlid assertion or is the latest confirmed assertion.
      */
-    function completeChallenge(
-        uint256 challengeIndex,
-        address winningStaker,
-        address losingStaker
-    ) external override whenNotPaused {
-        // Only the challenge manager contract can call this to declare the winner and loser
-        require(msg.sender == address(challengeManager), "WRONG_SENDER");
-        require(challengeIndex == inChallenge(winningStaker, losingStaker), "NOT_IN_CHAL");
-        completeChallengeImpl(winningStaker, losingStaker);
-    }
-
-    function completeChallengeImpl(address winningStaker, address losingStaker) private {
-        uint256 remainingLoserStake = amountStaked(losingStaker);
-        uint256 winnerStake = amountStaked(winningStaker);
-        if (remainingLoserStake > winnerStake) {
-            // If loser has a higher stake than the winner, refund the difference
-            remainingLoserStake -= reduceStakeTo(losingStaker, winnerStake);
-        }
-
-        // Reward the winner with half the remaining stake
-        uint256 amountWon = remainingLoserStake / 2;
-        increaseStakeBy(winningStaker, amountWon);
-        remainingLoserStake -= amountWon;
-        // We deliberately leave loser in challenge state to prevent them from
-        // doing certain thing that are allowed only to parties not in a challenge
-        clearChallenge(winningStaker);
-        // Credit the other half to the loserStakeEscrow address
-        increaseWithdrawableFunds(loserStakeEscrow, remainingLoserStake);
-        // Turning loser into zombie renders the loser's remaining stake inaccessible
-        turnIntoZombie(losingStaker);
+    function returnOldDeposit() external override onlyValidator(msg.sender) whenNotPaused {
+        _requireInactiveAndWithdrawStaker(msg.sender);
     }
 
     /**
-     * @notice Remove the given zombie from nodes it is staked on, moving backwords from the latest node it is staked on
-     * @param zombieNum Index of the zombie to remove
-     * @param maxNodes Maximum number of nodes to remove the zombie from (to limit the cost of this transaction)
+     * @notice From the staker's withdrawal address,
+     * refund a staker that is currently staked on an assertion that either has a chlid assertion or is the latest confirmed assertion.
      */
-    function removeZombie(uint256 zombieNum, uint256 maxNodes)
-        external
-        onlyValidator
-        whenNotPaused
-    {
-        require(zombieNum < zombieCount(), "NO_SUCH_ZOMBIE");
-        address zombieStakerAddress = zombieAddress(zombieNum);
-        uint64 latestNodeStaked = zombieLatestStakedNode(zombieNum);
-        uint256 nodesRemoved = 0;
-        uint256 latestConfirmedNum = latestConfirmed();
-        while (latestNodeStaked >= latestConfirmedNum && nodesRemoved < maxNodes) {
-            Node storage node = getNodeStorage(latestNodeStaked);
-            removeStaker(latestNodeStaked, zombieStakerAddress);
-            latestNodeStaked = node.prevNum;
-            nodesRemoved++;
-        }
-        if (latestNodeStaked < latestConfirmedNum) {
-            removeZombie(zombieNum);
-        } else {
-            zombieUpdateLatestStakedNode(zombieNum, latestNodeStaked);
-        }
+    function returnOldDepositFor(
+        address stakerAddress
+    ) external override onlyValidator(stakerAddress) whenNotPaused {
+        require(msg.sender == withdrawalAddress(stakerAddress), "NOT_WITHDRAWAL_ADDRESS");
+        _requireInactiveAndWithdrawStaker(stakerAddress);
     }
 
     /**
-     * @notice Remove any zombies whose latest stake is earlier than the latest confirmed node
-     * @param startIndex Index in the zombie list to start removing zombies from (to limit the cost of this transaction)
+     * @dev Require that the staker is inactive and withdraw their stake
      */
-    function removeOldZombies(uint256 startIndex) public onlyValidator whenNotPaused {
-        uint256 currentZombieCount = zombieCount();
-        uint256 latestConfirmedNum = latestConfirmed();
-        for (uint256 i = startIndex; i < currentZombieCount; i++) {
-            while (zombieLatestStakedNode(i) < latestConfirmedNum) {
-                removeZombie(i);
-                currentZombieCount--;
-                if (i >= currentZombieCount) {
-                    return;
-                }
-            }
-        }
+    function _requireInactiveAndWithdrawStaker(
+        address stakerAddress
+    ) internal {
+        requireInactiveStaker(stakerAddress);
+        withdrawStaker(stakerAddress);
     }
 
     /**
-     * @notice Calculate the current amount of funds required to place a new stake in the rollup
-     * @dev If the stake requirement get's too high, this function may start reverting due to overflow, but
-     * that only blocks operations that should be blocked anyway
-     * @return The current minimum stake requirement
+     * @notice Increase the amount staked for the given staker
+     * @param stakerAddress Address of the staker whose stake is increased
+     * @param depositAmount The amount of either eth or tokens deposited
      */
-    function currentRequiredStake(
-        uint256 _blockNumber,
-        uint64 _firstUnresolvedNodeNum,
-        uint256 _latestCreatedNode
-    ) internal view returns (uint256) {
-        // If there are no unresolved nodes, then you can use the base stake
-        if (_firstUnresolvedNodeNum - 1 == _latestCreatedNode) {
-            return baseStake;
-        }
-        uint256 firstUnresolvedDeadline = getNodeStorage(_firstUnresolvedNodeNum).deadlineBlock;
-        if (_blockNumber < firstUnresolvedDeadline) {
-            return baseStake;
-        }
-        uint24[10] memory numerators = [
-            1,
-            122971,
-            128977,
-            80017,
-            207329,
-            114243,
-            314252,
-            129988,
-            224562,
-            162163
-        ];
-        uint24[10] memory denominators = [
-            1,
-            114736,
-            112281,
-            64994,
-            157126,
-            80782,
-            207329,
-            80017,
-            128977,
-            86901
-        ];
-        uint256 firstUnresolvedAge = _blockNumber - firstUnresolvedDeadline;
-        uint256 periodsPassed = (firstUnresolvedAge * 10) / confirmPeriodBlocks;
-        uint256 baseMultiplier = 2**(periodsPassed / 10);
-        uint256 withNumerator = baseMultiplier * numerators[periodsPassed % 10];
-        uint256 multiplier = withNumerator / denominators[periodsPassed % 10];
-        if (multiplier == 0) {
-            multiplier = 1;
-        }
-        return baseStake * multiplier;
+    function _addToDeposit(
+        address stakerAddress,
+        address expectedWithdrawalAddress,
+        uint256 depositAmount
+    ) internal onlyValidator(stakerAddress) whenNotPaused {
+        require(isStaked(stakerAddress), "NOT_STAKED");
+        require(
+            withdrawalAddress(stakerAddress) == expectedWithdrawalAddress,
+            "WRONG_WITHDRAWAL_ADDRESS"
+        );
+        increaseStakeBy(stakerAddress, depositAmount);
     }
 
     /**
-     * @notice Calculate the current amount of funds required to place a new stake in the rollup
-     * @dev If the stake requirement get's too high, this function may start reverting due to overflow, but
-     * that only blocks operations that should be blocked anyway
-     * @return The current minimum stake requirement
+     * @notice Reduce the amount staked for the sender (difference between initial amount staked and target is creditted back to the sender).
+     * @param target Target amount of stake for the staker.
      */
-    function requiredStake(
-        uint256 blockNumber,
-        uint64 firstUnresolvedNodeNum,
-        uint64 latestCreatedNode
-    ) external view returns (uint256) {
-        return currentRequiredStake(blockNumber, firstUnresolvedNodeNum, latestCreatedNode);
-    }
-
-    function owner() external view returns (address) {
-        return _getAdmin();
-    }
-
-    function currentRequiredStake() public view returns (uint256) {
-        uint64 firstUnresolvedNodeNum = firstUnresolvedNode();
-
-        return currentRequiredStake(block.number, firstUnresolvedNodeNum, latestNodeCreated());
+    function reduceDeposit(
+        uint256 target
+    ) external onlyValidator(msg.sender) whenNotPaused {
+        requireInactiveStaker(msg.sender);
+        // amount will be checked when creating an assertion
+        reduceStakeTo(msg.sender, target);
     }
 
     /**
-     * @notice Calculate the number of zombies staked on the given node
-     *
-     * @dev This function could be uncallable if there are too many zombies. However,
-     * removeZombie and removeOldZombies can be used to remove any zombies that exist
-     * so that this will then be callable
-     *
-     * @param nodeNum The node on which to count staked zombies
-     * @return The number of zombies staked on the node
+     * @notice This allow the anyTrustFastConfirmer to force confirm any pending assertion
+     *         the anyTrustFastConfirmer is supposed to be set only on an AnyTrust chain to
+     *         a contract that can call this function when received sufficient signatures
      */
-    function countStakedZombies(uint64 nodeNum) public view override returns (uint256) {
-        uint256 currentZombieCount = zombieCount();
-        uint256 stakedZombieCount = 0;
-        for (uint256 i = 0; i < currentZombieCount; i++) {
-            if (nodeHasStaker(nodeNum, zombieAddress(i))) {
-                stakedZombieCount++;
-            }
-        }
-        return stakedZombieCount;
+    function fastConfirmAssertion(
+        bytes32 assertionHash,
+        bytes32 parentAssertionHash,
+        AssertionState calldata confirmState,
+        bytes32 inboxAcc
+    ) public whenNotPaused {
+        require(msg.sender == anyTrustFastConfirmer, "NOT_FAST_CONFIRMER");
+        // this skip deadline, prev, challenge validations
+        confirmAssertionInternal(assertionHash, parentAssertionHash, confirmState, inboxAcc);
     }
 
     /**
-     * @notice Calculate the number of zombies staked on a child of the given node
-     *
-     * @dev This function could be uncallable if there are too many zombies. However,
-     * removeZombie and removeOldZombies can be used to remove any zombies that exist
-     * so that this will then be callable
+     * @notice This allow the anyTrustFastConfirmer to immediately create and confirm an assertion
+     *         the anyTrustFastConfirmer is supposed to be set only on an AnyTrust chain to
+     *         a contract that can call this function when received sufficient signatures
+     *         The logic in this function is similar to stakeOnNewAssertion, but without staker checks
      *
-     * @param nodeNum The parent node on which to count zombies staked on children
-     * @return The number of zombies staked on children of the node
+     *         We trust the anyTrustFastConfirmer to not call this function multiple times on the same prev,
+     *         as doing so would result in incorrect accounting of withdrawable funds in the loserStakeEscrow.
+     *         This is because the protocol assume there is only 1 unique confirmable child assertion.
      */
-    function countZombiesStakedOnChildren(uint64 nodeNum) public view override returns (uint256) {
-        uint256 currentZombieCount = zombieCount();
-        uint256 stakedZombieCount = 0;
-        for (uint256 i = 0; i < currentZombieCount; i++) {
-            Zombie storage zombie = getZombieStorage(i);
-            // If this zombie is staked on this node, but its _latest_ staked node isn't this node,
-            // then it must be staked on a child of this node.
-            if (
-                zombie.latestStakedNode != nodeNum && nodeHasStaker(nodeNum, zombie.stakerAddress)
-            ) {
-                stakedZombieCount++;
+    function fastConfirmNewAssertion(
+        AssertionInputs calldata assertion,
+        bytes32 expectedAssertionHash
+    ) external whenNotPaused {
+        // Must supply expectedAssertionHash to fastConfirmNewAssertion
+        require(expectedAssertionHash != bytes32(0), "EXPECTED_ASSERTION_HASH");
+        AssertionStatus status = getAssertionStorage(expectedAssertionHash).status;
+
+        bytes32 prevAssertion = RollupLib.assertionHash(
+            assertion.beforeStateData.prevPrevAssertionHash,
+            assertion.beforeState,
+            assertion.beforeStateData.sequencerBatchAcc
+        );
+        getAssertionStorage(prevAssertion).requireExists();
+
+        if (status == AssertionStatus.NoAssertion) {
+            // If not exists, we create the new assertion
+            (bytes32 newAssertionHash,) =
+                createNewAssertion(assertion, prevAssertion, expectedAssertionHash);
+            if (!getAssertionStorage(newAssertionHash).isFirstChild) {
+                // only 1 of the children can be confirmed and get their stake refunded
+                // so we send the other children's stake to the loserStakeEscrow
+                // NOTE: if the losing staker have staked more than requiredStake, the excess stake will be stuck
+                IERC20(stakeToken).safeTransfer(
+                    loserStakeEscrow, assertion.beforeStateData.configData.requiredStake
+                );
             }
         }
-        return stakedZombieCount;
-    }
 
-    /**
-     * @notice Verify that there are some number of nodes still unresolved
-     */
-    function requireUnresolvedExists() public view override {
-        uint256 firstUnresolved = firstUnresolvedNode();
-        require(
-            firstUnresolved > latestConfirmed() && firstUnresolved <= latestNodeCreated(),
-            "NO_UNRESOLVED"
+        // This would revert if the assertion is already confirmed
+        fastConfirmAssertion(
+            expectedAssertionHash,
+            prevAssertion,
+            assertion.afterState,
+            bridge.sequencerInboxAccs(assertion.afterState.globalState.getInboxPosition() - 1)
         );
     }
 
-    function requireUnresolved(uint256 nodeNum) public view override {
-        require(nodeNum >= firstUnresolvedNode(), "ALREADY_DECIDED");
-        require(nodeNum <= latestNodeCreated(), "DOESNT_EXIST");
-    }
-
-    /**
-     * @notice Verify that the given address is staked and not actively in a challenge
-     * @param stakerAddress Address to check
-     */
-    function requireUnchallengedStaker(address stakerAddress) private view {
-        require(isStaked(stakerAddress), "NOT_STAKED");
-        require(currentChallenge(stakerAddress) == NO_CHAL_INDEX, "IN_CHAL");
-    }
-}
-
-contract RollupUserLogic is AbsRollupUserLogic, IRollupUser {
-    /// @dev the user logic just validated configuration and shouldn't write to state during init
-    /// this allows the admin logic to ensure consistency on parameters.
-    function initialize(address _stakeToken) external view override onlyProxy {
-        require(_stakeToken == address(0), "NO_TOKEN_ALLOWED");
-        require(!isERC20Enabled(), "FACET_NOT_ERC20");
-    }
-
-    /**
-     * @notice Create a new stake on an existing node
-     * @param nodeNum Number of the node your stake will be place one
-     * @param nodeHash Node hash of the node with the given nodeNum
-     */
-    function newStakeOnExistingNode(uint64 nodeNum, bytes32 nodeHash) external payable override {
-        _newStake(msg.value);
-        stakeOnExistingNode(nodeNum, nodeHash);
-    }
-
-    /**
-     * @notice Create a new stake on a new node
-     * @param assertion Assertion describing the state change between the old node and the new one
-     * @param expectedNodeHash Node hash of the node that will be created
-     * @param prevNodeInboxMaxCount Total of messages in the inbox as of the previous node
-     */
-    function newStakeOnNewNode(
-        Assertion calldata assertion,
-        bytes32 expectedNodeHash,
-        uint256 prevNodeInboxMaxCount
-    ) external payable override {
-        _newStake(msg.value);
-        stakeOnNewNode(assertion, expectedNodeHash, prevNodeInboxMaxCount);
-    }
-
-    /**
-     * @notice Increase the amount staked eth for the given staker
-     * @param stakerAddress Address of the staker whose stake is increased
-     */
-    function addToDeposit(address stakerAddress)
-        external
-        payable
-        override
-        onlyValidator
-        whenNotPaused
-    {
-        _addToDeposit(stakerAddress, msg.value);
+    function owner() external view returns (address) {
+        return _getAdmin();
     }
 
     /**
-     * @notice Withdraw uncommitted funds owned by sender from the rollup chain
+     * @notice Deprecated, use the function with `withdrawalAddress` instead
+     *         Using this default `withdrawalAddress` to msg.sender
      */
-    function withdrawStakerFunds()
-        external
-        override
-        onlyValidator
-        whenNotPausedOrDeprecated
-        returns (uint256)
-    {
-        uint256 amount = withdrawFunds(msg.sender);
-        // This is safe because it occurs after all checks and effects
-        // solhint-disable-next-line avoid-low-level-calls
-        (bool success, ) = msg.sender.call{value: amount}("");
-        require(success, "TRANSFER_FAILED");
-        return amount;
-    }
-}
-
-contract ERC20RollupUserLogic is AbsRollupUserLogic, IRollupUserERC20 {
-    /// @dev the user logic just validated configuration and shouldn't write to state during init
-    /// this allows the admin logic to ensure consistency on parameters.
-    function initialize(address _stakeToken) external view override onlyProxy {
-        require(_stakeToken != address(0), "NEED_STAKE_TOKEN");
-        require(isERC20Enabled(), "FACET_NOT_ERC20");
+    function newStakeOnNewAssertion(
+        uint256 tokenAmount,
+        AssertionInputs calldata assertion,
+        bytes32 expectedAssertionHash
+    ) external {
+        newStakeOnNewAssertion(tokenAmount, assertion, expectedAssertionHash, msg.sender);
     }
 
     /**
-     * @notice Create a new stake on an existing node
+     * @notice Create a new stake on a new assertion
      * @param tokenAmount Amount of the rollups staking token to stake
-     * @param nodeNum Number of the node your stake will be place one
-     * @param nodeHash Node hash of the node with the given nodeNum
+     * @param assertion Assertion describing the state change between the old assertion and the new one
+     * @param expectedAssertionHash Assertion hash of the assertion that will be created
+     * @param _withdrawalAddress The address the send the stake back upon withdrawal
      */
-    function newStakeOnExistingNode(
+    function newStakeOnNewAssertion(
         uint256 tokenAmount,
-        uint64 nodeNum,
-        bytes32 nodeHash
-    ) external override {
-        _newStake(tokenAmount);
-        stakeOnExistingNode(nodeNum, nodeHash);
+        AssertionInputs calldata assertion,
+        bytes32 expectedAssertionHash,
+        address _withdrawalAddress
+    ) public {
+        require(_withdrawalAddress != address(0), "EMPTY_WITHDRAWAL_ADDRESS");
+        // _newStake makes sure the validator is whitelisted if the whitelist is enabled
+        _newStake(tokenAmount, _withdrawalAddress);
+        stakeOnNewAssertion(assertion, expectedAssertionHash);
         /// @dev This is an external call, safe because it's at the end of the function
         receiveTokens(tokenAmount);
     }
 
     /**
-     * @notice Create a new stake on a new node
-     * @param tokenAmount Amount of the rollups staking token to stake
-     * @param assertion Assertion describing the state change between the old node and the new one
-     * @param expectedNodeHash Node hash of the node that will be created
-     * @param prevNodeInboxMaxCount Total of messages in the inbox as of the previous node
+     * @notice Create a new stake without creating a new assertion.
+     *         Token amount can be zero if the staker wants to use `addToDeposit` from another account
+     * @param tokenAmount Amount to stake (can be zero)
+     * @param _withdrawalAddress The address the send the stake back upon withdrawal
      */
-    function newStakeOnNewNode(
-        uint256 tokenAmount,
-        Assertion calldata assertion,
-        bytes32 expectedNodeHash,
-        uint256 prevNodeInboxMaxCount
-    ) external override {
-        _newStake(tokenAmount);
-        stakeOnNewNode(assertion, expectedNodeHash, prevNodeInboxMaxCount);
+    function newStake(uint256 tokenAmount, address _withdrawalAddress) external whenNotPaused {
+        require(_withdrawalAddress != address(0), "EMPTY_WITHDRAWAL_ADDRESS");
+        // _newStake makes sure the validator is whitelisted if the whitelist is enabled
+        _newStake(tokenAmount, _withdrawalAddress);
         /// @dev This is an external call, safe because it's at the end of the function
-        receiveTokens(tokenAmount);
+        if (tokenAmount > 0) receiveTokens(tokenAmount);
     }
 
     /**
      * @notice Increase the amount staked tokens for the given staker
      * @param stakerAddress Address of the staker whose stake is increased
+     * @param expectedWithdrawalAddress The expected withdrawal address of the staker (protects depositor from a staker changing their withdrawal address)
      * @param tokenAmount the amount of tokens staked
      */
-    function addToDeposit(address stakerAddress, uint256 tokenAmount)
-        external
-        onlyValidator
-        whenNotPaused
-    {
-        _addToDeposit(stakerAddress, tokenAmount);
+    function addToDeposit(
+        address stakerAddress,
+        address expectedWithdrawalAddress,
+        uint256 tokenAmount
+    ) external whenNotPaused {
+        _addToDeposit(stakerAddress, expectedWithdrawalAddress, tokenAmount);
         /// @dev This is an external call, safe because it's at the end of the function
         receiveTokens(tokenAmount);
     }
@@ -769,23 +412,17 @@ contract ERC20RollupUserLogic is AbsRollupUserLogic, IRollupUserERC20 {
     /**
      * @notice Withdraw uncommitted funds owned by sender from the rollup chain
      */
-    function withdrawStakerFunds()
-        external
-        override
-        onlyValidator
-        whenNotPausedOrDeprecated
-        returns (uint256)
-    {
+    function withdrawStakerFunds() external override whenNotPaused returns (uint256) {
         uint256 amount = withdrawFunds(msg.sender);
+        require(amount > 0, "NO_FUNDS_TO_WITHDRAW");
         // This is safe because it occurs after all checks and effects
-        require(IERC20Upgradeable(stakeToken).transfer(msg.sender, amount), "TRANSFER_FAILED");
+        IERC20(stakeToken).safeTransfer(msg.sender, amount);
         return amount;
     }
 
-    function receiveTokens(uint256 tokenAmount) private {
-        require(
-            IERC20Upgradeable(stakeToken).transferFrom(msg.sender, address(this), tokenAmount),
-            "TRANSFER_FAIL"
-        );
+    function receiveTokens(
+        uint256 tokenAmount
+    ) private {
+        IERC20(stakeToken).safeTransferFrom(msg.sender, address(this), tokenAmount);
     }
 }