# openOracle Security — cost of corruption, bounds, attack surface > Evaluate openOracle: programmable cost of corruption, settlement probability and accuracy bounds, censorship and block-stuffing economics, L2 sequencer trust ceiling, integrator guardrails and audit status. Source: https://www.openoracle.org/security # PRICE THE ATTACK. Signer-based oracles ask you to trust a committee. openOracle asks you to check arithmetic. This page is the arithmetic — what an attack costs, what bounds hold, where the protocol is weakest, and what has not been audited yet. 01 Cost of corruption 02 Economic bounds 03 Inclusion & censorship 04 Status & limits ## A number you can put in a risk memo Every oracle game carries a security budget you set. Because escalation is geometric and every round burns a protocol fee, the cost of holding a wrong price open grows faster than any notional it could drain. This is that cost, at your parameters. Cost to delay Estimate Set the game you would deploy and how long an attacker wants to hold it open. Initial liquidity USD Multiplier M × Settlement time T min Protocol fee % Delay target hrs Volatility over window % Cost to delay $4.09M Protocol fees across 12 disputes. The delayer pays them: when the fee exceeds how far the price moves in a window, nobody honest has a reason to dispute. Minimum rounds needed 12 Delay target divided by settlement time. Every dispute restarts the clock at a larger size. Final game size $409.60M Capital the delayer must post in the last dispute, before any escalation halt. Cost to open the game $215 Initial reporter's expected loss, roughly 0.65 · σ(T) · L before gas. Running the game honestly is cheap. Assumes no escalation halt. With a halt, growth stops there and every later round costs the same. These are estimates, not guarantees, and the contracts are unaudited. The worked example from the docs At a 1% protocol fee, a 10-minute settlement time, a multiplier of 2 and $100k of initial liquidity, delaying for two hours takes 12 rounds and burns **$4,095,000** in protocol fees. ▸ Reference [Economic Bounds](https://docs.openoracle.org/openoracle/economic-bounds#minimum-cost-to-delay) ## What actually holds Two results do the heavy lifting. One bounds how long a game can run. The other bounds how far the settled price can sit from the true price. Neither depends on anyone being honest. ### SETTLEMENT PROBABILITY Σ C · (M · P)ⁿ converges ⟺ M · (1 − Q) < 1 ⟹ Q > 1 − 1/M expected rounds to settlement < M / (M − 1) The system-level condition for finite expected escalation cost under proportional per-round costs. If Q violates it, the total cost of the game diverges — so under any parameterisation the equilibrium no-dispute band widens until it holds. ### ACCURACY EV = D − (1 − Q(A)) · A · M − F\_s − F\_p = D − 0.65 · M · σ(T) − F\_s − F\_p settled price ∈ true price ± (0.65 · M · σ(T) + F\_s + F\_p) A disputer earns D from taking a mispriced order but pays the swap fee F\_s and protocol fee F\_p, and risks being counter-disputed at distance A, losing A · M at the escalated size. In a standard normal, (1 − Q(A)) · A peaks at A ≈ 0.84σ where Q ≈ 0.22. Fees widen the band by their own size. ▸ Reference [Oracle Accuracy & Cost](https://docs.openoracle.org/openoracle/oracle-accuracy-cost#accuracy) [Economic Bounds](https://docs.openoracle.org/openoracle/economic-bounds#settlement-probability-inequality) ## Where deeper risk lives Even if disputers are capitalized and trying to correct mispricings, a wrong price can survive if every dispute is kept off the chain for the whole settlement window, or the chain is too congested to make correction profitable. ### Censorship An attacker can bribe block producers to leave disputes out. Longer settlement windows and more initial liquidity make that more expensive. ### Block stuffing An attacker can flood blocks until disputing costs more than it pays. More initial liquidity raises what a dispute earns, and applications can refuse a price that settled while the base fee was too high. ### L2s On an L2 with a single sequencer, one party controls inclusion. That caps what a game there can safely secure, and larger amounts belong on L1. ▸ Reference [Inclusion attack vectors](https://docs.openoracle.org/openoracle/attack-vectors-inclusion#censorship-and-inclusion-attacks) [Attack Vectors](https://docs.openoracle.org/openoracle/attack-vectors#parasitic-open-interest) ![openOracle white](data:image/svg+xml,%3c?xml%20version='1.0'%20encoding='UTF-8'?%3e%3csvg%20id='Layer_1'%20data-name='Layer%201'%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20478.5%20295.21'%3e%3cdefs%3e%3cstyle%3e%20.cls-1%20{%20fill:%20%23fff;%20}%20%3c/style%3e%3c/defs%3e%3cpath%20class='cls-1'%20d='M406.23,112.2c-6.75-9.95-16.99-18.45-30.43-25.08-15.19-7.82-34.48-13.95-57.31-18.17-22.83-4.22-47.98-6.36-74.69-6.36-1.52,0-3.04.06-4.55.06s-3.04-.06-4.56-.06c-26.71,0-51.85,2.14-74.69,6.36-22.83,4.22-42.12,10.35-57.31,18.17-13.44,6.64-23.68,15.13-30.43,25.08-6.75,10.07-10.23,21.82-10.23,34.93,0,.17,0,.34.06.51-.06.17-.06.34-.06.45,0,13.1,3.49,24.86,10.23,34.93,6.75,10.01,16.98,18.45,30.43,25.14,15.18,7.76,34.48,13.89,57.31,18.11,22.83,4.22,47.97,6.36,74.69,6.36,1.52,0,3.04,0,4.56-.06,1.52.06,3.04.06,4.55.06,26.71,0,51.86-2.14,74.69-6.36,22.83-4.22,42.12-10.35,57.31-18.17,13.44-6.64,23.68-15.07,30.43-25.08,6.8-10.07,10.23-21.82,10.23-34.93v-.96c0-13.1-3.43-24.86-10.23-34.93ZM378.61,170.3c-5.62,6.47-14.17,11.87-25.48,16.09-12.65,4.33-29.3,7.7-49.32,10.01-18.95,2.19-40.66,3.43-64.57,3.54-23.9-.11-45.61-1.35-64.51-3.54-20.08-2.31-36.73-5.68-49.38-10.01-11.3-4.22-19.85-9.62-25.48-16.09-5.46-6.13-8.15-13.55-8.32-22.66.17-9.11,2.87-16.59,8.32-22.72,5.62-6.47,14.17-11.87,25.48-16.09,12.65-4.33,29.3-7.7,49.38-10.01,18.9-2.19,40.61-3.43,64.51-3.54,23.9.11,45.61,1.35,64.57,3.54,20.02,2.31,36.67,5.68,49.32,10.01,11.31,4.22,19.85,9.62,25.48,16.09,5.45,6.13,8.16,13.61,8.32,22.72-.17,9.11-2.87,16.53-8.32,22.66Z'/%3e%3cpath%20class='cls-1'%20d='M478.44,145.78c-.17-16.93-4.78-32.06-13.72-45.05-6.41-9.34-15.24-17.72-26.21-24.91-3.26-30.15-6.47-33.74-7.54-34.93-8.04-9.06-20.19-16.7-36.22-22.61h-.06c-17.49-5.85-40.27-10.4-67.77-13.55C301.34,1.8,271.81.17,239.25,0c-32.56.17-62.09,1.8-87.68,4.72-27.5,3.15-50.28,7.7-67.77,13.55h-.06c-16.03,5.91-28.18,13.55-36.22,22.61-1.07,1.18-4.27,4.78-7.54,34.93-10.97,7.2-19.8,15.58-26.21,24.91C4.84,113.72.23,128.85.06,145.78h-.06v3.66h.06c.17,16.93,4.78,32.06,13.72,45.05,6.41,9.34,15.24,17.72,26.21,24.91,3.26,30.15,6.47,33.74,7.54,34.93,8.04,9.06,20.19,16.7,36.22,22.61h.06c17.49,5.85,40.27,10.4,67.77,13.55,25.59,2.92,55.12,4.56,87.68,4.72,32.56-.17,62.09-1.8,87.68-4.72,27.5-3.15,50.28-7.71,67.77-13.55h.06c16.03-5.91,28.18-13.55,36.22-22.61,1.07-1.18,4.27-4.78,7.54-34.93,10.97-7.2,19.8-15.58,26.21-24.91,8.94-12.99,13.55-28.12,13.72-45.05h.05v-3.66h-.05ZM435.02,217.32c-3.99,2.53-8.32,4.95-12.88,7.2-20.25,10.24-46,18.22-76.6,23.79-30.65,5.57-64.4,8.38-100.39,8.38h-11.81c-35.99,0-69.74-2.81-100.39-8.38-30.59-5.57-56.35-13.55-76.54-23.79-4.61-2.25-8.94-4.67-12.88-7.2V77.89c3.94-2.53,8.27-4.95,12.82-7.2,20.25-10.24,46-18.22,76.6-23.79,30.65-5.57,64.4-8.38,100.39-8.38h11.81c35.99,0,69.74,2.81,100.39,8.38,30.59,5.57,56.35,13.55,76.54,23.79,4.61,2.25,8.94,4.67,12.93,7.2v139.42Z'/%3e%3c/svg%3e) ![openOracle red](data:image/svg+xml,%3c?xml%20version='1.0'%20encoding='UTF-8'?%3e%3csvg%20id='Layer_1'%20data-name='Layer%201'%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20478.5%20295.21'%3e%3cdefs%3e%3cstyle%3e%20.cls-1%20{%20fill:%20%23fff;%20}%20%3c/style%3e%3c/defs%3e%3cpath%20class='cls-1'%20d='M406.23,112.2c-6.75-9.95-16.99-18.45-30.43-25.08-15.19-7.82-34.48-13.95-57.31-18.17-22.83-4.22-47.98-6.36-74.69-6.36-1.52,0-3.04.06-4.55.06s-3.04-.06-4.56-.06c-26.71,0-51.85,2.14-74.69,6.36-22.83,4.22-42.12,10.35-57.31,18.17-13.44,6.64-23.68,15.13-30.43,25.08-6.75,10.07-10.23,21.82-10.23,34.93,0,.17,0,.34.06.51-.06.17-.06.34-.06.45,0,13.1,3.49,24.86,10.23,34.93,6.75,10.01,16.98,18.45,30.43,25.14,15.18,7.76,34.48,13.89,57.31,18.11,22.83,4.22,47.97,6.36,74.69,6.36,1.52,0,3.04,0,4.56-.06,1.52.06,3.04.06,4.55.06,26.71,0,51.86-2.14,74.69-6.36,22.83-4.22,42.12-10.35,57.31-18.17,13.44-6.64,23.68-15.07,30.43-25.08,6.8-10.07,10.23-21.82,10.23-34.93v-.96c0-13.1-3.43-24.86-10.23-34.93ZM378.61,170.3c-5.62,6.47-14.17,11.87-25.48,16.09-12.65,4.33-29.3,7.7-49.32,10.01-18.95,2.19-40.66,3.43-64.57,3.54-23.9-.11-45.61-1.35-64.51-3.54-20.08-2.31-36.73-5.68-49.38-10.01-11.3-4.22-19.85-9.62-25.48-16.09-5.46-6.13-8.15-13.55-8.32-22.66.17-9.11,2.87-16.59,8.32-22.72,5.62-6.47,14.17-11.87,25.48-16.09,12.65-4.33,29.3-7.7,49.38-10.01,18.9-2.19,40.61-3.43,64.51-3.54,23.9.11,45.61,1.35,64.57,3.54,20.02,2.31,36.67,5.68,49.32,10.01,11.31,4.22,19.85,9.62,25.48,16.09,5.45,6.13,8.16,13.61,8.32,22.72-.17,9.11-2.87,16.53-8.32,22.66Z'/%3e%3cpath%20class='cls-1'%20d='M478.44,145.78c-.17-16.93-4.78-32.06-13.72-45.05-6.41-9.34-15.24-17.72-26.21-24.91-3.26-30.15-6.47-33.74-7.54-34.93-8.04-9.06-20.19-16.7-36.22-22.61h-.06c-17.49-5.85-40.27-10.4-67.77-13.55C301.34,1.8,271.81.17,239.25,0c-32.56.17-62.09,1.8-87.68,4.72-27.5,3.15-50.28,7.7-67.77,13.55h-.06c-16.03,5.91-28.18,13.55-36.22,22.61-1.07,1.18-4.27,4.78-7.54,34.93-10.97,7.2-19.8,15.58-26.21,24.91C4.84,113.72.23,128.85.06,145.78h-.06v3.66h.06c.17,16.93,4.78,32.06,13.72,45.05,6.41,9.34,15.24,17.72,26.21,24.91,3.26,30.15,6.47,33.74,7.54,34.93,8.04,9.06,20.19,16.7,36.22,22.61h.06c17.49,5.85,40.27,10.4,67.77,13.55,25.59,2.92,55.12,4.56,87.68,4.72,32.56-.17,62.09-1.8,87.68-4.72,27.5-3.15,50.28-7.71,67.77-13.55h.06c16.03-5.91,28.18-13.55,36.22-22.61,1.07-1.18,4.27-4.78,7.54-34.93,10.97-7.2,19.8-15.58,26.21-24.91,8.94-12.99,13.55-28.12,13.72-45.05h.05v-3.66h-.05ZM435.02,217.32c-3.99,2.53-8.32,4.95-12.88,7.2-20.25,10.24-46,18.22-76.6,23.79-30.65,5.57-64.4,8.38-100.39,8.38h-11.81c-35.99,0-69.74-2.81-100.39-8.38-30.59-5.57-56.35-13.55-76.54-23.79-4.61-2.25-8.94-4.67-12.88-7.2V77.89c3.94-2.53,8.27-4.95,12.82-7.2,20.25-10.24,46-18.22,76.6-23.79,30.65-5.57,64.4-8.38,100.39-8.38h11.81c35.99,0,69.74,2.81,100.39,8.38,30.59,5.57,56.35,13.55,76.54,23.79,4.61,2.25,8.94,4.67,12.93,7.2v139.42Z'/%3e%3c/svg%3e) ![openOracle black](data:image/svg+xml,%3c?xml%20version='1.0'%20encoding='UTF-8'?%3e%3csvg%20id='Layer_1'%20data-name='Layer%201'%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20478.5%20295.21'%3e%3cdefs%3e%3cstyle%3e%20.cls-1%20{%20fill:%20%230c0c0d;%20}%20%3c/style%3e%3c/defs%3e%3cpath%20class='cls-1'%20d='M406.23,112.2c-6.75-9.95-16.99-18.45-30.43-25.08-15.19-7.82-34.48-13.95-57.31-18.17-22.83-4.22-47.98-6.36-74.69-6.36-1.52,0-3.04.06-4.55.06s-3.04-.06-4.56-.06c-26.71,0-51.85,2.14-74.69,6.36-22.83,4.22-42.12,10.35-57.31,18.17-13.44,6.64-23.68,15.13-30.43,25.08-6.75,10.07-10.23,21.82-10.23,34.93,0,.17,0,.34.06.51-.06.17-.06.34-.06.45,0,13.1,3.49,24.86,10.23,34.93,6.75,10.01,16.98,18.45,30.43,25.14,15.18,7.76,34.48,13.89,57.31,18.11,22.83,4.22,47.97,6.36,74.69,6.36,1.52,0,3.04,0,4.56-.06,1.52.06,3.04.06,4.55.06,26.71,0,51.86-2.14,74.69-6.36,22.83-4.22,42.12-10.35,57.31-18.17,13.44-6.64,23.68-15.07,30.43-25.08,6.8-10.07,10.23-21.82,10.23-34.93v-.96c0-13.1-3.43-24.86-10.23-34.93ZM378.61,170.3c-5.62,6.47-14.17,11.87-25.48,16.09-12.65,4.33-29.3,7.7-49.32,10.01-18.95,2.19-40.66,3.43-64.57,3.54-23.9-.11-45.61-1.35-64.51-3.54-20.08-2.31-36.73-5.68-49.38-10.01-11.3-4.22-19.85-9.62-25.48-16.09-5.46-6.13-8.15-13.55-8.32-22.66.17-9.11,2.87-16.59,8.32-22.72,5.62-6.47,14.17-11.87,25.48-16.09,12.65-4.33,29.3-7.7,49.38-10.01,18.9-2.19,40.61-3.43,64.51-3.54,23.9.11,45.61,1.35,64.57,3.54,20.02,2.31,36.67,5.68,49.32,10.01,11.31,4.22,19.85,9.62,25.48,16.09,5.45,6.13,8.16,13.61,8.32,22.72-.17,9.11-2.87,16.53-8.32,22.66Z'/%3e%3cpath%20class='cls-1'%20d='M478.44,145.78c-.17-16.93-4.78-32.06-13.72-45.05-6.41-9.34-15.24-17.72-26.21-24.91-3.26-30.15-6.47-33.74-7.54-34.93-8.04-9.06-20.19-16.7-36.22-22.61h-.06c-17.49-5.85-40.27-10.4-67.77-13.55C301.34,1.8,271.81.17,239.25,0c-32.56.17-62.09,1.8-87.68,4.72-27.5,3.15-50.28,7.7-67.77,13.55h-.06c-16.03,5.91-28.18,13.55-36.22,22.61-1.07,1.18-4.27,4.78-7.54,34.93-10.97,7.2-19.8,15.58-26.21,24.91C4.84,113.72.23,128.85.06,145.78h-.06v3.66h.06c.17,16.93,4.78,32.06,13.72,45.05,6.41,9.34,15.24,17.72,26.21,24.91,3.26,30.15,6.47,33.74,7.54,34.93,8.04,9.06,20.19,16.7,36.22,22.61h.06c17.49,5.85,40.27,10.4,67.77,13.55,25.59,2.92,55.12,4.56,87.68,4.72,32.56-.17,62.09-1.8,87.68-4.72,27.5-3.15,50.28-7.71,67.77-13.55h.06c16.03-5.91,28.18-13.55,36.22-22.61,1.07-1.18,4.27-4.78,7.54-34.93,10.97-7.2,19.8-15.58,26.21-24.91,8.94-12.99,13.55-28.12,13.72-45.05h.05v-3.66h-.05ZM435.02,217.32c-3.99,2.53-8.32,4.95-12.88,7.2-20.25,10.24-46,18.22-76.6,23.79-30.65,5.57-64.4,8.38-100.39,8.38h-11.81c-35.99,0-69.74-2.81-100.39-8.38-30.59-5.57-56.35-13.55-76.54-23.79-4.61-2.25-8.94-4.67-12.88-7.2V77.89c3.94-2.53,8.27-4.95,12.82-7.2,20.25-10.24,46-18.22,76.6-23.79,30.65-5.57,64.4-8.38,100.39-8.38h11.81c35.99,0,69.74,2.81,100.39,8.38,30.59,5.57,56.35,13.55,76.54,23.79,4.61,2.25,8.94,4.67,12.93,7.2v139.42Z'/%3e%3c/svg%3e) ## WHAT WE DO NOT CLAIM The protocol is research stage. Stating that plainly is more useful to you than a badge would be. Phase Target State Scope Core protocol design Q4 2025 Complete Oracle lifecycle, escalation model, first Base deployment. Research stage launch Q1 2026 Complete Mainnet contracts on Base, incentive testing in production. Security & audits Q2 2026 Active Smart contract audit, game theory and statistics review, bug bounty, parameter tuning. DeFi integration Q3 2026 Planned SDK and developer documentation, lending integrations, multi-chain expansion. ### EXPLICIT NON-GUARANTEES - ✕ The contracts have not been audited - ✕ The game theory and statistics have not been audited, and errors are likely - ✕ Users should be prepared to lose all funds - ✕ Misconfigured parameters can cause loss with no recourse - ✕ L2 deployments inherit sequencer trust assumptions Against that: the contracts have no admin keys, no upgradeability and no privileged roles, and they are MIT licensed. There is nobody to subpoena and nothing to pause — which cuts both ways, and you should price both.