Settlement probability inequality
is the system-level condition for finite expected escalation cost under proportional per-round costs.Derivation
Assume some proportional cost per dispute round (e.g. a burn fee or capital cost). With multiplier and per-round settlement probability , the dispute probability is . The total expected cost of the oracle game is:
For this geometric series to converge, :
If violates this inequality, the total cost of the oracle game diverges. Under any oracle parameterization, the equilibrium no-dispute band widens as needed to ensure the inequality holds for the choice of .
Since each round settles with probability , expected rounds to settlement is . The inequality bounds this:
Any committed oracle manipulation or delay strategy that loses money internally in each round blows up divergently if this condition is violated, even if the other participants are net profitable.
Note that the escalation halt breaks the divergence by capping the oracle game size. However, as long as the escalation halt is high enough relative to external notional, the cost to manipulate through the geometric growth phase is economically similar — the manipulator still faces near-divergent costs before reaching the halt.
The per-round cost is assumed positive in the derivation above, but in practice a given participant’s effective per-round cost can be net negative when external notional dynamics or continuation value subsidize the dispute. In these regimes, the divergence argument does not directly bind that participant, and the settlement probability inequality becomes a necessary but not sufficient condition for finite manipulation cost. See Attack Vectors for the full treatment.
Distribution-agnostic proof
From Oracle Accuracy & Cost, the disputer’s break-even is derived against the worst-case adversarial counter-dispute. Define:
where is the double-no-touch probability at barriers under whatever price process governs the settlement period. A dispute at distance is profitable when . When disputers are profitable, this implies .
Since is the maximum of over all , evaluating at gives:
Dividing by :
This holds for any distribution — the only requirement is that is the maximum of . The settlement probability inequality is a direct consequence of the definition of the adversarial optimum, not a property of any particular distributional family.
Minimum cost to delay
Assume a protocol fee that is either burned on each dispute or routed to oracle game dependents. The oracle game liquidity at round is:Total system burn
If disputes occur (from any source), the total protocol fee burned across those rounds is:
This closed form is pre-escalation halt; with halt the cost becomes piecewise (geometric growth then flat).
The number of rounds required to delay for some target horizon given settlement time per round is:
Attacker-paid versus honest-paid split
Not all rounds are paid for by the attacker. Honest market activity — arbitrageurs correcting price movements — also resets the settlement timer at no cost to the attacker. In the honest-only process, expected rounds to settlement is , capped by . If the attacker only disputes when the game would otherwise settle (which happens with per-round probability ), the expected cost splits cleanly:
Applying the settlement probability inequality :
The attacker pays at least of the total burn and the honest network pays at most . For small (e.g. ), the floor is only ~9.1% — most of the burn comes from honest activity. For , the attacker bears the majority. For delay targets within the honest baseline of expected rounds, the attacker’s cost can be significantly lower than .
Any swap fee or protocol fee meaningfully higher than zero widens the no-dispute band (see Oracle Accuracy & Cost), which pushes higher. Higher means fewer honest rounds per attacker dispute and a larger share of the total burn falling on the attacker.
Honest disputes also yield less delay per round than attacker disputes. Honest disputes fire as soon as the price moves past the dispute barrier, so their mean time per round is less than . An attacker maximizing delay would wait until the end of the settlement window, getting close to of delay per dispute.
Example
Assume , minutes, , and $100k. An attacker tries to delay for 2 hours, requiring rounds.
Over $4 million in protocol fees are burned across 12 rounds. With , , so the attacker pays strictly more than half of the total burn in expectation.