Connect ›
Cover: The Master Conservation Identity: making a hidden shortfall unreachable, not just observable

The Master Conservation Identity: making a hidden shortfall unreachable, not just observable

One equation the whole staking book obeys — balance + badDebt = net principal + reserves + accrued-unpaid — enforced per-transaction by a conserves guard. A tx that would leak value reverts itself.

BlazePhoenix Engineering · updated 2026-07-17 · data through 2026-10-11 · 7 min · written from the deployed bytecode

By Mitra (@Sigmacrit) — anonymous developer of the BlazePhoenix protocol. The code is the résumé.

Abstract in 15 languages · resumo · resumen · 摘要 · 要旨 · ملخص

English — Every value-moving transaction runs inside a conserves guard: if the change in real balance diverges from the change in ledger obligation by more than dust, the transaction reverts itself — a hidden shortfall becomes unreachable, not merely observable.

Português — Cada transação que move valor corre dentro de um guarda conserves: se a variação do saldo real divergir da variação da obrigação contabilística além do pó, a transação reverte-se a si própria — um défice oculto torna-se inalcançável, não apenas observável.

Español — Cada transacción que mueve valor corre dentro de un guardián conserves: si el cambio del saldo real diverge del cambio de la obligación contable más allá del polvo, la transacción se revierte a sí misma — un déficit oculto se vuelve inalcanzable, no meramente observable.

Français — Chaque transaction déplaçant de la valeur s'exécute sous un garde conserves : si la variation du solde réel diverge de celle de l'obligation comptable au-delà de la poussière, la transaction se révoque elle-même — un déficit caché devient inatteignable, pas seulement observable.

Deutsch — Jede wertbewegende Transaktion läuft in einem conserves-Guard: Weicht die Änderung des realen Saldos über Staub hinaus von der Änderung der Buchverpflichtung ab, revertiert die Transaktion sich selbst — eine verdeckte Unterdeckung wird unerreichbar, nicht bloß beobachtbar.

Русский — Каждая транзакция, движущая ценность, выполняется внутри guard-а conserves: если изменение реального баланса расходится с изменением обязательств сверх пыли, транзакция откатывает сама себя — скрытая недостача становится недостижимой, а не просто наблюдаемой.

Türkçe — Değer taşıyan her işlem bir conserves korumasında çalışır: gerçek bakiyedeki değişim, defter yükümlülüğündeki değişimden toz payının ötesinde saparsa işlem kendini geri alır — gizli bir açık gözlemlenebilir değil, ulaşılamaz hale gelir.

العربية — كل معاملة تحرك قيمة تعمل داخل حارس conserves: إذا انحرف تغير الرصيد الحقيقي عن تغير الالتزام الدفتري بما يتجاوز الغبار، تعكس المعاملة نفسها — يصبح العجز الخفي غير قابل للبلوغ، لا مجرد قابل للملاحظة.

हिन्दी — मूल्य ले जाने वाली हर ट्रांज़ैक्शन conserves गार्ड के भीतर चलती है: यदि वास्तविक बैलेंस का परिवर्तन लेजर दायित्व के परिवर्तन से धूल से अधिक भटके, तो ट्रांज़ैक्शन खुद को रिवर्ट कर देती है — छिपी हुई कमी अप्राप्य बन जाती है, केवल देखने योग्य नहीं।

日本語 — 価値を動かすすべてのトランザクションはconservesガード内で実行されます。実残高の変化が帳簿上の債務の変化とダスト以上に乖離すれば、トランザクションは自らrevertします。隠れた不足は観測可能ではなく、到達不能になります。

中文 — 每笔转移价值的交易都在 conserves 守卫中运行:若真实余额的变化与账面义务的变化偏差超过尘埃值,交易将自我回滚——隐藏的缺口变得不可到达,而不仅仅是可观察。

한국어 — 가치를 움직이는 모든 트랜잭션은 conserves 가드 안에서 실행됩니다. 실제 잔고 변화가 장부상 채무 변화와 더스트 이상 어긋나면 트랜잭션이 스스로 revert합니다. 숨겨진 부족분은 관찰 가능한 것이 아니라 도달 불가능한 상태가 됩니다.

Bahasa Indonesia — Setiap transaksi pemindah nilai berjalan dalam penjaga conserves: jika perubahan saldo riil menyimpang dari perubahan kewajiban buku melebihi debu, transaksi membatalkan dirinya sendiri — kekurangan tersembunyi menjadi tak terjangkau, bukan sekadar teramati.

বাংলা — মূল্য স্থানান্তরকারী প্রতিটি লেনদেন একটি conserves গার্ডের ভেতরে চলে: প্রকৃত ব্যালেন্সের পরিবর্তন খাতার দায়ের পরিবর্তন থেকে ধুলোর বেশি সরে গেলে লেনদেনটি নিজেই রিভার্ট হয় — লুকানো ঘাটতি অপ্রাপ্য হয়ে যায়, কেবল পর্যবেক্ষণযোগ্য নয়।

Filipino — Bawat transaksyong nagpapagalaw ng halaga ay tumatakbo sa loob ng conserves guard: kapag ang pagbabago ng totoong balanse ay lumihis sa pagbabago ng obligasyon sa ledger nang lampas sa alikabok, babalik ang transaksyon sa sarili nito — nagiging hindi maabot ang nakatagong kakulangan, hindi lamang namamasdan.

Most DeFi protocols can TELL you when they became insolvent. The BlazePhoenix staking engine is built so a HIDDEN shortfall cannot be REACHED: every value-moving entry point runs inside a conserves guard that snapshots the contract's real token balance and its ledger obligation before the call, and reverts the whole transaction if the two changes diverge by more than dust (1e-8 BZPX). A bug that would let the ledger claim more than the contract holds does not produce a bad state to detect later — it produces a revert now.

The obligation side is one equation, the Master Conservation Identity: balanceOf(this) + totalBadDebt = (totalStaked − totalDebt) + rewardReserve + protocolReserve + (rewardsDistributed − rewardsPaid). The right-hand side is what the contract owes; solvency is simply balance ≥ owed. Every public proof — isSolvent(), solvency(), collateralRatio(), auditInvariants() — is this equation re-read from storage.

Per-transaction deltas, not absolute state

The guard compares CHANGES, not totals: Δbalance must equal Δowed within dust. That distinction kills a whole failure mode — DoS-by-invariant. If the guard demanded the absolute identity hold, a few wei of historical rounding drift could brick every user forever. Delta-conservation lets honest users transact over any accumulated dust while still catching the only thing that matters: a transaction that itself leaks value.

And because the guard runs on every deposit, borrow, repay, withdraw and claim, conservation needs no keeper, no monitor and no multisig reaction time. The mechanism that would detect the theft IS the transaction executing it — and it votes revert.

The permissionless circuit breaker

If a genuine shortfall ever appears anyway (a token-level failure outside the contract), tripBreaker() lets ANYONE halt the protocol — but only when the chain itself proves the breach (real balance + dust < owed). The condition is objective and un-spoofable: no one can lower the balance except through flows that lower owed equally, and donations only raise it. A spurious trip is impossible on healthy state, and a transient one is admin-reversible. Compare this to a pause button a team can press on rumor — or refuse to press on theft.

The identity, as an equation

The whole book is one conservation law: the contract's real token balance B plus any recorded bad debt equals net principal (staked S minus borrowed D) plus the reward and protocol reserves plus rewards accrued but not yet paid. Solvency is just the left side clearing the obligation — and the guard enforces the DELTA form on every value-moving call, so a leak reverts itself:

B+Dbad=(S−D)+Rrew+Rproto+(Edist−Epaid),ΔB=Δowed
Original to BlazePhoenix (Staking._owed / conserves, dust tolerance 1e-8 BZPX). The guard compares CHANGES, not totals — killing DoS-by-invariant while still catching the only tx that matters: one that leaks value. isSolvent() ⇔ B ≥ owed, readable free every block. Solvency here is not a dashboard promise but an arithmetic identity with a revert for a bodyguard.

Do not trust this page — reproduce it

Every claim above is checkable against the chain. Start here:

cast call <staking> "solvency()((uint256,uint256,uint256,uint256,bool,uint256,uint256,uint256,uint256,uint256,uint256,uint256,uint256))" --rpc-url https://mainnet.base.org — re-derive the identity term by term
Cite this article

Licensed CC BY 4.0 — quote, translate and reuse freely, including commercially, with attribution and a link. Copy a ready-made citation:

BlazePhoenix (2026). The Master Conservation Identity: making a hidden shortfall unreachable, not just observable. BlazePhoenix Engineering. https://blazephoenix.xyz/learn/master-conservation-identity
@misc{blazephoenix_master_conservation_identity,
  title  = {The Master Conservation Identity: making a hidden shortfall unreachable, not just observable},
  author = {BlazePhoenix},
  year   = {2026},
  url    = {https://blazephoenix.xyz/learn/master-conservation-identity},
  note   = {Accessed: reproduce the claim with the command above}
}

Writing an answer, a wiki entry or a paper? The claim above is reproducible against the chain before you quote it — which is the only sound basis for citing a technical source at all.

Contracts are verified on every chain we deploy to — addresses in the protocol manifest. Deeper formal treatment: the whitepaper (PDF).

Related engineering

Next in Invariants & security · 15 / 17
Zero-custody trading bots: an SDK pattern where the bot never touches funds ›The @blazephoenix/sdk pattern for Telegram and Discord bots: the bot quotes and builds the transaction, the USER signs in their own wallet via a deep link — no private keys on the server, no custody, no license burden.5 min