Accuracy
An unaligned arbitrageur will take one of the two limit orders when the true price is different enough from the limit order price (dispute distance). A disputer earns from taking a mispriced limit order, but risks being disputed at some adversarial distance , losing at the escalated size. The chance they get disputed is . Assuming perfect and continuous transaction inclusion, and no swap fees, protocol fees, or gas fees in the oracle game, and the disputer not engaging in a self-dispute strategy, the disputer’s expected value is:
Where:
- is the dispute distance (profit from taking the limit order)
- is the adversarial dispute distance (where someone disputes you)
- is the probability the price does not reach over the settlement time
- is the multiplier
Therefore, if , the disputer is profitable. We expect the settled oracle price to be within of the true price at time of settlement.
In practice, honest dispute barriers tend to be tighter than this bound. The figure assumes a normal distribution, which appears to often be the worst case. Given a driftless assumption, under leptokurtic and certain jump-diffusion processes, the honest dispute barriers can tighten: fat-tailed (leptokurtic) distributions are characterized by more center mass, and jumpy regimes have a lower diffusion component for fixed total volatility.
Skewness alone does not appear to move by much: Donsker’s theorem suggests that any driftless iid process converges to Brownian motion in the continuous-time limit, granted this doesn’t apply to jumpy distributions.
In terms of bimodals, in our tested 2-component Gaussian-mixture model (fixed total variance), increasing mode separation did not increase above 0.65; allocating more variance to directional mean shifts leaves less diffusion variance, reducing barrier crossings.
This is not a theorem covering all possible distributions, and we did not test every family. Behavior can differ under real-world price action, but empirically the result appears reasonably robust.
If we define , drift can produce :
Where is the swap fee and is the protocol fee. As a conservative threshold, fees are purely additive to required edge, so dispute distance shifts from to roughly .
Self-consistent honest barrier
The threshold is a conservative upper bound. It maximizes over all possible adversarial distances , peaking at . But when (i.e. in a normal), the honest dispute barrier is below , so the price never actually reaches . Someone disputes at first, preempting the adversary. This means the relevant is always evaluated below the global maximum, and the honest barrier tightens. In this context, every honest disputer uses the same barrier . Since the next honest disputer also disputes at , the marginal disputer’s EV at the self-consistent barrier is:
which simplifies to:
This is similar to the inequality from economic bounds, but here it appears as the marginal honest disputer indifference condition. Next, we find the that satisfies and denote this .
The self-consistent barrier is tighter than when (i.e. in a normal):
Accuracy under manipulation
Under selective delay, a manipulator can choose to start another round if they don’t like where the price is about to settle. This turns the “safe” interior of the barriers into an additional source of loss for the honest disputer from the swap portion of the counter-dispute. As a conservative threshold, we can assume the honest disputer does not try to calculate the attacker’s optimal policy, and just assumes they always get counter-disputed at the end of the period. The honest disputer’s EV now picks up an extra term:
Where is the conditional surviving mean. This is the expected absolute return at the end of the settlement window, given that the price never left .
Simplifying:
Applying the same self-consistent logic as the honest barrier above, we set at the marginal barrier where the next counter-dispute also occurs at :
Under Brownian motion, for moderate barrier levels. In this regime, the manipulation equation simplifies: dividing both sides by ,
which is the same clean form as the no-manipulation case, just with a rescaled threshold.
The full manipulation damage function is monotonically increasing, asymptoting to . Unlike the vanilla which peaks at , there is no finite argmax. The damage to the honest disputer increases with wider barriers. This means honest preemption always tightens the barrier under manipulation, for all .
For small , the approximation holds and the self-consistent barriers are: