Reserve Depletion and Security Runway in Proof-of-Stake Systems

Manvir Schneider; Paolo Penna

arxiv: 2606.03587 · v1 · pith:BA4YCYYSnew · submitted 2026-06-02 · 💻 cs.GT · econ.TH

Reserve Depletion and Security Runway in Proof-of-Stake Systems

Paolo Penna , Manvir Schneider This is my paper

Pith reviewed 2026-06-28 08:03 UTC · model grok-4.3

classification 💻 cs.GT econ.TH

keywords proof-of-stakereserve depletionsecurity runwayvalidator participationstochastic modeltoken pricetransaction feeshand-off problem

0 comments

The pith

Proof-of-stake systems require an exact state-dependent reserve threshold to maintain security until fees alone suffice.

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The paper derives the minimal reserve stock that is necessary and sufficient to keep validator participation at a target security level while token price and transaction demand fluctuate. This threshold divides states into three regions: one where security cannot be achieved at all, one where the reserve is required to fill the gap, and one where fees cover the target without any reserve. A successful transition to the fee-only region occurs only if that region is reached before the reserve first drops below the threshold; otherwise security fails. The result matters because protocols can appear to have ample reserves yet still face abrupt security shortfalls after price or demand shocks, and the same framework supplies explicit stress-test rules and failure-probability bounds.

Core claim

In a discrete-time stochastic model of strategic validator participation, the authors solve the entry game and obtain an exact state-dependent reserve threshold that is necessary and sufficient to sustain a target security level. The threshold partitions the state space into infeasibility, reserve-dependent security, and fee-only security. Security fails precisely when the reserve first falls below the threshold; a successful hand-off occurs exactly when the fee-only region is reached beforehand. The model also yields stress-test guarantees that turn lower confidence bands on price and demand into reserve requirements, explicit failure-probability and expected hand-off-time bounds, and a Mar

What carries the argument

The state-dependent reserve threshold: the minimal reserve stock necessary and sufficient to sustain a target security level given current token price and transaction demand.

If this is right

Security fails if the reserve drops below the threshold before the fee-only region is reached.
Once transaction demand crosses the fee-only threshold, the reserve becomes redundant for security.
Reserve policy must be evaluated against state-dependent thresholds and adverse shocks rather than nominal depletion dates alone.
Lower confidence bands on price and demand can be converted directly into minimum reserve requirements and failure-probability bounds.
Forward-looking validators satisfy a Markov participation condition that links current actions to expected future reserve-funded rewards.

Where Pith is reading between the lines

These are editorial extensions of the paper, not claims the author makes directly.

The threshold could be recomputed in real time from live price and demand feeds to trigger dynamic reserve top-ups.
The same runway logic may apply to other token-funded incentive systems that rely on a temporary subsidy before self-sustaining fees.
Back-testing the derived failure probabilities against historical cryptocurrency price paths would provide a direct empirical check.
The separation into three regions suggests that protocols should publish the current distance to the fee-only boundary as a public security metric.

Load-bearing premise

Validators choose participation strategically in a discrete-time stochastic model where token price and transaction demand fluctuate over time.

What would settle it

Simulate or observe validator participation and security level in the model using historical token-price and demand series and check whether security drops exactly when the computed threshold is first crossed.

read the original abstract

Many proof-of-stake protocols finance validator rewards from two sources: transaction fees and a finite reserve of tokens. This creates a dynamic hand-off problem. Early in the life of the system, fees may be too small to fund the target level of security; later, fees may become sufficient. The central question is whether the reserve provides enough runway for the protocol to remain secure until this fee-only region is reached. We study this problem in a discrete-time stochastic model of validator participation. Token price and transaction demand fluctuate over time, while validators choose participation strategically. We solve the validator entry game and derive an exact state-dependent reserve threshold, i.e., the minimal reserve stock necessary and sufficient to sustain a target security level. This threshold separates three regions: infeasibility, reserve-dependent security, and fee-only security. Security fails if the reserve first falls below the state-dependent threshold, and a successful hand-off occurs exactly if the fee-only region is reached before that failure time. We derive stress-test guarantees that convert lower confidence bands for token price and demand into reserve requirements, and obtain explicit failure-probability and expected hand-off-time bounds. Finally, we extend the model to forward-looking validators and derive the Markov participation condition that captures how current participation affects future reserve-funded rewards. The main implication is that reserve policy should not be evaluated by nominal depletion dates or steady-state reward ratios alone. A protocol can have a large nominal reserve and still be close to security failure after adverse price or demand shocks. Conversely, once demand crosses the fee-only threshold, the reserve becomes redundant for security. This paper provides a tractable equilibrium framework for stress-testing this transition.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, simulated authors' rebuttal, and a circularity audit. Tearing a paper down is the easy half of reading it; the pith above is the substance, this is the friction.

Desk Editor's Note private letter to a colleague

The paper models PoS reserve hand-off as a stochastic game and derives a state-dependent threshold plus stress-test bounds, but the exogeneity of price and demand is a load-bearing assumption that may not hold.

read the letter

The core contribution is a discrete-time stochastic game where validators choose participation strategically while token price and demand fluctuate. They solve the entry game to get an exact state-dependent reserve threshold that splits the state space into infeasibility, reserve-dependent security, and fee-only security. Security fails if the reserve hits the threshold first; a successful hand-off occurs if the fee-only region is reached before that. They also give explicit failure-probability bounds and stress-test rules that map lower confidence bands on price and demand into required reserve levels. The extension to forward-looking validators via a Markov participation condition is a clean addition.

The framework is useful because it shows why nominal reserve size or steady-state reward ratios are not enough; adverse shocks can push the system close to failure even with a large reserve. That policy takeaway is direct and practical for chains managing the fee transition.

The main soft spot is the assumption that price and demand are exogenous processes unaffected by current participation or security level. If low participation reduces adoption and feeds back into lower demand or price, the threshold no longer separates the regions cleanly and the failure-time bounds do not apply. The abstract claims an exact derivation, but the circularity (payoffs depend on the reserve being sized) needs to be shown to be resolved without additional modeling choices. Without the equations or proof details it is hard to judge how robust the solution is.

This is for protocol designers and reserve managers at production PoS systems who need a stress-testing tool for the hand-off phase. A reader working on applied mechanism design for blockchains would get value from the three-region view and the bounds.

Send it to peer review. The modeling approach is fresh enough and the application concrete enough to justify referee time, even if the exogeneity assumption requires more discussion.

Referee Report

2 major / 2 minor

Summary. The paper models the reserve-to-fee hand-off problem in proof-of-stake systems via a discrete-time stochastic model of validator participation. Token price and transaction demand follow exogenous processes; validators choose participation strategically. The authors claim to solve the resulting entry game exactly, obtaining a state-dependent reserve threshold that partitions the state space into infeasibility, reserve-dependent security, and fee-only security regions. Security failure occurs on first hitting the threshold; successful hand-off occurs if the fee-only region is reached first. The paper supplies stress-test guarantees that map lower confidence bands on price/demand into reserve requirements, explicit failure-probability and expected hand-off-time bounds, and an extension to forward-looking validators that yields a Markov participation condition.

Significance. If the derivation is correct under the maintained assumptions, the work supplies a tractable equilibrium framework for evaluating reserve policy that accounts for stochastic shocks rather than nominal depletion dates alone. The explicit failure-probability bounds, the three-region separation, and the forward-looking extension constitute concrete, falsifiable outputs that could inform protocol design. The stress-test mapping from confidence bands to reserve levels is a practical strength.

major comments (2)

[Model section] Model section: the derivation of the exact state-dependent threshold and the three-region partition rests on the maintained assumption that token price and transaction demand are exogenous stochastic processes independent of current participation and reserve stock. If participation influences price or demand (e.g., via security level affecting adoption), the payoffs in the entry game become endogenous in the reserve, the threshold ceases to be state-dependent in the claimed manner, and the failure-time bounds no longer apply. The manuscript should either provide a formal justification for exogeneity or a robustness check under a simple endogenous demand specification.
[Entry-game solution] Entry-game solution (central derivation): the abstract states that the validator entry game is solved and an exact threshold is obtained, yet the provided text supplies neither the payoff matrix, the equilibrium characterization, nor the fixed-point argument establishing that the threshold is independent of the modeling choices for the stochastic processes. Without these steps, it is impossible to confirm that the reported separation into infeasibility/reserve-dependent/fee-only regions is not an artifact of the particular functional forms chosen for price and demand.

minor comments (2)

The abstract is information-dense; a short enumerated list of the three main technical contributions would improve readability.
Notation for the state-dependent threshold and the participation condition should be introduced with a single consistent symbol and cross-referenced in the extension to forward-looking validators.

Simulated Author's Rebuttal

2 responses · 0 unresolved

We thank the referee for the constructive report and positive assessment of the paper's potential contributions to reserve policy analysis. We address each major comment below and will revise the manuscript accordingly to improve clarity and completeness.

read point-by-point responses

Referee: [Model section] Model section: the derivation of the exact state-dependent threshold and the three-region partition rests on the maintained assumption that token price and transaction demand are exogenous stochastic processes independent of current participation and reserve stock. If participation influences price or demand (e.g., via security level affecting adoption), the payoffs in the entry game become endogenous in the reserve, the threshold ceases to be state-dependent in the claimed manner, and the failure-time bounds no longer apply. The manuscript should either provide a formal justification for exogeneity or a robustness check under a simple endogenous demand specification.

Authors: We maintain exogeneity as a deliberate modeling choice to isolate the reserve hand-off dynamics under stochastic shocks, consistent with standard treatments in which token price reflects broader market factors and transaction demand reflects user adoption. We agree a discussion is warranted. In revision we will add a dedicated paragraph in the model section providing this justification and a short robustness appendix under a simple endogenous-demand extension (demand increasing in realized security level). The threshold structure and qualitative region separation persist under this extension, with only quantitative shifts in the threshold values. revision: yes
Referee: [Entry-game solution] Entry-game solution (central derivation): the abstract states that the validator entry game is solved and an exact threshold is obtained, yet the provided text supplies neither the payoff matrix, the equilibrium characterization, nor the fixed-point argument establishing that the threshold is independent of the modeling choices for the stochastic processes. Without these steps, it is impossible to confirm that the reported separation into infeasibility/reserve-dependent/fee-only regions is not an artifact of the particular functional forms chosen for price and demand.

Authors: The entry-game solution appears in Section 3. Each validator's per-period payoff is the expected reward (fee plus pro-rata reserve share) net of opportunity cost, conditional on current reserve, price, and demand. The equilibrium is a state-dependent threshold strategy; participation occurs precisely when reserve exceeds the threshold. The threshold is obtained as the unique fixed point of the Bellman operator on the continuation-value function. The fixed-point argument relies only on the Markov property and exogeneity of the price/demand processes and does not depend on their specific functional forms; the three-region partition follows directly by comparing the threshold to the fee-only participation level. To make these steps fully explicit we will insert the payoff matrix into the main text and move the complete fixed-point proof to a new appendix. revision: yes

Circularity Check

0 steps flagged

No circularity: derivation is self-contained equilibrium solution

full rationale

The provided abstract and description show the paper solves a validator entry game in a discrete-time stochastic model with exogenous token price and demand processes, then derives a state-dependent reserve threshold from that solution. No equations, self-citations, fitted parameters renamed as predictions, or ansatzes are quoted that reduce the threshold to its own inputs by construction. The three-region separation and hand-off analysis follow directly from the solved game and exogenous processes without load-bearing self-reference or renaming of known results. This is the normal case of an independent model derivation.

Axiom & Free-Parameter Ledger

1 free parameters · 1 axioms · 0 invented entities

Abstract-only review; free parameters and axioms inferred from stated modeling choices. The central claim rests on strategic participation and stochastic price/demand processes whose independence from the derived threshold cannot be verified.

free parameters (1)

target security level
The model is parameterized by a chosen target security level that defines the threshold.

axioms (1)

domain assumption Validators choose participation strategically to maximize expected rewards in a discrete-time stochastic environment.
Invoked to solve the validator entry game.

pith-pipeline@v0.9.1-grok · 5827 in / 1170 out tokens · 22618 ms · 2026-06-28T08:03:29.380603+00:00 · methodology

discussion (0)

Reference graph

Works this paper leans on

19 extracted references · 5 canonical work pages

[1]

Cardano Monetary Policy , howpublished =
[2]

2016 , note =

Aggelos Kiayias and Alexander Russell and Bernardo David and Roman Oliynykov , title =. 2016 , note =

2016
[3]

Ouroboros Praos: An Adaptively-Secure, Semi-Synchronous Proof-of-Stake Protocol , howpublished =

Bernardo David and Peter Ga. Ouroboros Praos: An Adaptively-Secure, Semi-Synchronous Proof-of-Stake Protocol , howpublished =. 2017 , note =

2017
[4]

Review of Financial Studies , year =

Fahad Saleh , title =. Review of Financial Studies , year =
[5]

Financial Cryptography and Data Security , year =

Giulia Fanti and Leonid Kogan and Sewoong Oh and Kathleen Ruan and Pramod Viswanath and Gerui Wang , title =. Financial Cryptography and Data Security , year =
[6]

Economics Letters , year =

Felix Irresberger and Ruomei Yang , title =. Economics Letters , year =
[7]

Leshno and Ciamac C

Gur Huberman and Jacob D. Leshno and Ciamac C. Moallemi , title =. Review of Economic Studies , year =
[8]

High-Confidence Computing , year =

Zhilin Wang and Qin Hu and Yawei Wang and Yinhao Xiao , title =. High-Confidence Computing , year =
[9]

28th International Conference on Financial Cryptography and Data Security (FC) , pages =

Kiayias, Aggelos and Lazos, Philip and Schlegel, Jan Christoph , title =. 28th International Conference on Financial Cryptography and Data Security (FC) , pages =. 2024 , isbn =. doi:10.1007/978-3-031-78676-1_13 , abstract =

work page doi:10.1007/978-3-031-78676-1_13 2024
[10]

Optimal Decentralization and Service Provision on a Blockchain Platform with Market Frictions , url=

Samuel Häfner , year=. Optimal Decentralization and Service Provision on a Blockchain Platform with Market Frictions , url=
[11]

Single-Token vs Two-Token Blockchain Tokenomics , booktitle =

Aggelos Kiayias and Philip Lazos and Paolo Penna , editor =. Single-Token vs Two-Token Blockchain Tokenomics , booktitle =. 2025 , url =. doi:10.4230/LIPICS.AFT.2025.22 , timestamp =

work page doi:10.4230/lipics.aft.2025.22 2025
[12]

Chiu, Jonathan and Koeppl, Thorsten V. , doi =. The economics of cryptocurrency: Bitcoin and beyond , url =. 2022 , bdsk-url-1 =. https://onlinelibrary.wiley.com/doi/pdf/10.1111/caje.12625 , journal =

work page doi:10.1111/caje.12625 2022
[13]

The Review of Financial Studies , volume=

Tokenomics: Dynamic adoption and valuation , author=. The Review of Financial Studies , volume=. 2021 , publisher=

2021
[14]

Journal of Financial Economics , volume=

Token-based platform finance , author=. Journal of Financial Economics , volume=. 2022 , publisher=

2022
[15]

Treasury Management , year =
[16]

Woods and Aggelos Kiayias , editor =

Christina Ovezik and Dimitris Karakostas and Mary Milad and Daniel W. Woods and Aggelos Kiayias , editor =. SoK: Measuring Blockchain Decentralization , booktitle =. 2025 , url =. doi:10.1007/978-3-031-95761-1\_7 , timestamp =

work page doi:10.1007/978-3-031-95761-1 2025
[17]

2025 , url=

Motepalli, Shashank and Jacobsen, Hans-Arno , journal=. 2025 , url=

2025
[18]

Drammer: Deterministic rowhammer attacks on mobile platforms,

Carlsten, Miles and Kalodner, Harry and Weinberg, S. Matthew and Narayanan, Arvind , title =. Proceedings of the ACM SIGSAC Conference on Computer and Communications Security (CCS) , pages =. 2016 , isbn =. doi:10.1145/2976749.2978408 , abstract =

work page doi:10.1145/2976749.2978408 2016
[19]

Financial Cryptography Workshops , year=

Incentivizing Blockchain Forks via Whale Transactions , author=. Financial Cryptography Workshops , year=

[1] [1]

Cardano Monetary Policy , howpublished =

[2] [2]

2016 , note =

Aggelos Kiayias and Alexander Russell and Bernardo David and Roman Oliynykov , title =. 2016 , note =

2016

[3] [3]

Ouroboros Praos: An Adaptively-Secure, Semi-Synchronous Proof-of-Stake Protocol , howpublished =

Bernardo David and Peter Ga. Ouroboros Praos: An Adaptively-Secure, Semi-Synchronous Proof-of-Stake Protocol , howpublished =. 2017 , note =

2017

[4] [4]

Review of Financial Studies , year =

Fahad Saleh , title =. Review of Financial Studies , year =

[5] [5]

Financial Cryptography and Data Security , year =

Giulia Fanti and Leonid Kogan and Sewoong Oh and Kathleen Ruan and Pramod Viswanath and Gerui Wang , title =. Financial Cryptography and Data Security , year =

[6] [6]

Economics Letters , year =

Felix Irresberger and Ruomei Yang , title =. Economics Letters , year =

[7] [7]

Leshno and Ciamac C

Gur Huberman and Jacob D. Leshno and Ciamac C. Moallemi , title =. Review of Economic Studies , year =

[8] [8]

High-Confidence Computing , year =

Zhilin Wang and Qin Hu and Yawei Wang and Yinhao Xiao , title =. High-Confidence Computing , year =

[9] [9]

28th International Conference on Financial Cryptography and Data Security (FC) , pages =

Kiayias, Aggelos and Lazos, Philip and Schlegel, Jan Christoph , title =. 28th International Conference on Financial Cryptography and Data Security (FC) , pages =. 2024 , isbn =. doi:10.1007/978-3-031-78676-1_13 , abstract =

work page doi:10.1007/978-3-031-78676-1_13 2024

[10] [10]

Optimal Decentralization and Service Provision on a Blockchain Platform with Market Frictions , url=

Samuel Häfner , year=. Optimal Decentralization and Service Provision on a Blockchain Platform with Market Frictions , url=

[11] [11]

Single-Token vs Two-Token Blockchain Tokenomics , booktitle =

Aggelos Kiayias and Philip Lazos and Paolo Penna , editor =. Single-Token vs Two-Token Blockchain Tokenomics , booktitle =. 2025 , url =. doi:10.4230/LIPICS.AFT.2025.22 , timestamp =

work page doi:10.4230/lipics.aft.2025.22 2025

[12] [12]

Chiu, Jonathan and Koeppl, Thorsten V. , doi =. The economics of cryptocurrency: Bitcoin and beyond , url =. 2022 , bdsk-url-1 =. https://onlinelibrary.wiley.com/doi/pdf/10.1111/caje.12625 , journal =

work page doi:10.1111/caje.12625 2022

[13] [13]

The Review of Financial Studies , volume=

Tokenomics: Dynamic adoption and valuation , author=. The Review of Financial Studies , volume=. 2021 , publisher=

2021

[14] [14]

Journal of Financial Economics , volume=

Token-based platform finance , author=. Journal of Financial Economics , volume=. 2022 , publisher=

2022

[15] [15]

Treasury Management , year =

[16] [16]

Woods and Aggelos Kiayias , editor =

Christina Ovezik and Dimitris Karakostas and Mary Milad and Daniel W. Woods and Aggelos Kiayias , editor =. SoK: Measuring Blockchain Decentralization , booktitle =. 2025 , url =. doi:10.1007/978-3-031-95761-1\_7 , timestamp =

work page doi:10.1007/978-3-031-95761-1 2025

[17] [17]

2025 , url=

Motepalli, Shashank and Jacobsen, Hans-Arno , journal=. 2025 , url=

2025

[18] [18]

Drammer: Deterministic rowhammer attacks on mobile platforms,

Carlsten, Miles and Kalodner, Harry and Weinberg, S. Matthew and Narayanan, Arvind , title =. Proceedings of the ACM SIGSAC Conference on Computer and Communications Security (CCS) , pages =. 2016 , isbn =. doi:10.1145/2976749.2978408 , abstract =

work page doi:10.1145/2976749.2978408 2016

[19] [19]

Financial Cryptography Workshops , year=

Incentivizing Blockchain Forks via Whale Transactions , author=. Financial Cryptography Workshops , year=