New PoS Security Model Reveals Hidden Risks in Token Reserve Runways

A new paper from researchers Paolo Penna and Manvir Schneider (arXiv:2606.03587) tackles a critical but overlooked vulnerability in proof-of-stake (PoS) systems: the finite reserve of tokens used to reward validators. Many PoS protocols rely on a combination of transaction fees and a pre-mined reserve to fund security. Early on, fees are often too low, so the reserve must bridge the gap until fee revenue becomes sufficient. The authors model this as a discrete-time stochastic game where token price and transaction demand fluctuate, and validators strategically choose whether to participate.

The key contribution is an exact state-dependent reserve threshold that determines minimal reserves needed to sustain a target security level. The threshold defines three regimes: infeasibility (reserve too low for any security), reserve-dependent security (validators rely on remaining reserve), and fee-only security (fees alone suffice, making the reserve redundant). The paper derives stress-test guarantees that convert lower confidence bands for token price and demand into reserve requirements. Crucially, they show that a large nominal reserve can still be close to failure after adverse shocks, and that once the fee-only region is reached, the reserve becomes irrelevant. This provides a tractable framework for stress-testing the transition, with implications for protocol design and risk management.