I. Introduction
Byzantine Fault Tolerance (BFT) has attracted much attention over the last two decades [1],[2],[3],[4],[5],[6], and has now moved into the public spotlight following the rise of blockchain platforms. BFT systems typically rely on advanced replication protocols to ensure consistency between their replicas and withstand arbitrary failures and malicious behavior. Unfortunately, traditional BFT replication protocols struggle to scale beyond a few tens of replicas [7], while the proof-of-work technique used by many blockchain-based systems suffers from large computing and storage overheads.