The Master Conservation Identity: making insolvency unreachable, not just observable

BlazePhoenix Engineering · updated 2026-07-17 · 7 min · written from the deployed bytecode

Abstract in 15 languages · resumo · resumen · 摘要 · 要旨 · ملخص

EnglishEvery value-moving transaction runs inside a conserves guard: if the change in real balance diverges from the change in ledger obligation by more than dust, the transaction reverts itself — insolvency becomes unreachable, not merely observable.

PortuguêsCada transação que move valor corre dentro de um guarda conserves: se a variação do saldo real divergir da variação da obrigação contabilística além do pó, a transação reverte-se a si própria — a insolvência torna-se inalcançável, não apenas observável.

EspañolCada transacción que mueve valor corre dentro de un guardián conserves: si el cambio del saldo real diverge del cambio de la obligación contable más allá del polvo, la transacción se revierte a sí misma — la insolvencia se vuelve inalcanzable, no meramente observable.

FrançaisChaque transaction déplaçant de la valeur s'exécute sous un garde conserves : si la variation du solde réel diverge de celle de l'obligation comptable au-delà de la poussière, la transaction se révoque elle-même — l'insolvabilité devient inatteignable, pas seulement observable.

DeutschJede wertbewegende Transaktion läuft in einem conserves-Guard: Weicht die Änderung des realen Saldos über Staub hinaus von der Änderung der Buchverpflichtung ab, revertiert die Transaktion sich selbst — Insolvenz wird unerreichbar, nicht bloß beobachtbar.

РусскийКаждая транзакция, движущая ценность, выполняется внутри guard-а conserves: если изменение реального баланса расходится с изменением обязательств сверх пыли, транзакция откатывает сама себя — неплатёжеспособность становится недостижимой, а не просто наблюдаемой.

TürkçeDeğer taşıyan her işlem bir conserves korumasında çalışır: gerçek bakiyedeki değişim, defter yükümlülüğündeki değişimden toz payının ötesinde saparsa işlem kendini geri alır — ödeme aczi gözlemlenebilir değil, ulaşılamaz hale gelir.

العربيةكل معاملة تحرك قيمة تعمل داخل حارس conserves: إذا انحرف تغير الرصيد الحقيقي عن تغير الالتزام الدفتري بما يتجاوز الغبار، تعكس المعاملة نفسها — يصبح الإعسار غير قابل للبلوغ، لا مجرد قابل للملاحظة.

हिन्दीमूल्य ले जाने वाली हर ट्रांज़ैक्शन conserves गार्ड के भीतर चलती है: यदि वास्तविक बैलेंस का परिवर्तन लेजर दायित्व के परिवर्तन से धूल से अधिक भटके, तो ट्रांज़ैक्शन खुद को रिवर्ट कर देती है — दिवालियापन अप्राप्य बन जाता है, केवल देखने योग्य नहीं।

日本語価値を動かすすべてのトランザクションはconservesガード内で実行されます。実残高の変化が帳簿上の債務の変化とダスト以上に乖離すれば、トランザクションは自らrevertします。支払不能は観測可能ではなく、到達不能になります。

中文每笔转移价值的交易都在 conserves 守卫中运行:若真实余额的变化与账面义务的变化偏差超过尘埃值,交易将自我回滚——破产变得不可到达,而不仅仅是可观察。

한국어가치를 움직이는 모든 트랜잭션은 conserves 가드 안에서 실행됩니다. 실제 잔고 변화가 장부상 채무 변화와 더스트 이상 어긋나면 트랜잭션이 스스로 revert합니다. 지급불능은 관찰 가능한 것이 아니라 도달 불가능한 상태가 됩니다.

Bahasa IndonesiaSetiap transaksi pemindah nilai berjalan dalam penjaga conserves: jika perubahan saldo riil menyimpang dari perubahan kewajiban buku melebihi debu, transaksi membatalkan dirinya sendiri — kebangkrutan menjadi tak terjangkau, bukan sekadar teramati.

বাংলামূল্য স্থানান্তরকারী প্রতিটি লেনদেন একটি conserves গার্ডের ভেতরে চলে: প্রকৃত ব্যালেন্সের পরিবর্তন খাতার দায়ের পরিবর্তন থেকে ধুলোর বেশি সরে গেলে লেনদেনটি নিজেই রিভার্ট হয় — দেউলিয়াত্ব অপ্রাপ্য হয়ে যায়, কেবল পর্যবেক্ষণযোগ্য নয়।

FilipinoBawat transaksyong nagpapagalaw ng halaga ay tumatakbo sa loob ng conserves guard: kapag ang pagbabago ng totoong balanse ay lumihis sa pagbabago ng obligasyon sa ledger nang lampas sa alikabok, babalik ang transaksyon sa sarili nito — nagiging hindi maabot ang pagkabangkarote, hindi lamang namamasdan.

Most DeFi protocols can TELL you when they became insolvent. The BlazePhoenix staking engine is built so the state cannot be REACHED: every value-moving entry point runs inside a conserves guard that snapshots the contract's real token balance and its ledger obligation before the call, and reverts the whole transaction if the two changes diverge by more than dust (1e-8 BZPX). A bug that would let the ledger claim more than the contract holds does not produce a bad state to detect later — it produces a revert now.

The obligation side is one equation, the Master Conservation Identity: balanceOf(this) + totalBadDebt = (totalStaked − totalDebt) + rewardReserve + protocolReserve + (rewardsDistributed − rewardsPaid). The right-hand side is what the contract owes; solvency is simply balance ≥ owed. Every public proof — isSolvent(), solvency(), collateralRatio(), auditInvariants() — is this equation re-read from storage.

Per-transaction deltas, not absolute state

The guard compares CHANGES, not totals: Δbalance must equal Δowed within dust. That distinction kills a whole failure mode — DoS-by-invariant. If the guard demanded the absolute identity hold, a few wei of historical rounding drift could brick every user forever. Delta-conservation lets honest users transact over any accumulated dust while still catching the only thing that matters: a transaction that itself leaks value.

And because the guard runs on every deposit, borrow, repay, withdraw and claim, conservation needs no keeper, no monitor and no multisig reaction time. The mechanism that would detect the theft IS the transaction executing it — and it votes revert.

The permissionless circuit breaker

If a genuine shortfall ever appears anyway (a token-level failure outside the contract), tripBreaker() lets ANYONE halt the protocol — but only when the chain itself proves the breach (real balance + dust < owed). The condition is objective and un-spoofable: no one can lower the balance except through flows that lower owed equally, and donations only raise it. A spurious trip is impossible on healthy state, and a transient one is admin-reversible. Compare this to a pause button a team can press on rumor — or refuse to press on theft.

Do not trust this page — reproduce it

Every claim above is checkable against the chain. Start here:

cast call 0x3f60C7aa0c36a78D200405feBE143d2Cf3fA0c77 "solvency()((uint256,uint256,uint256,uint256,bool,uint256,uint256,uint256,uint256,uint256,uint256,uint256,uint256))" --rpc-url https://mainnet.base.org — re-derive the identity term by term

Contracts are verified on every chain we deploy to — addresses in the protocol manifest. Deeper formal treatment: the whitepaper (PDF).

Related engineering