Grinding the Beacon: Why Ethereum’s RANDAO Randomness Is Biasable by a Proposer Willing to Burn a Slot
Ethereum’s beacon chain derives its in-protocol randomness from a RANDAO accumulator. Every block proposer contributes a single, verifiable value — a BLS signature over the current epoch number — and the protocol mixes it into the accumulator with XOR. The design...