The chain of trust
- Independent publishers — major exchanges, market makers, and trading firms — produce real-time prices in their own venues using their own infrastructure.
- They sign those prices with their own keys, keys whose security they have already invested heavily in for their own businesses.
- Those signed prices are aggregated and re-signed by the Pyth Network guardian set.
- When an Prediction Arena round needs to settle, the signed price for the round-end timestamp is fetched and submitted to our smart contract.
- The contract independently verifies the signature against the guardian set. If verification fails, settlement reverts. There is no fallback path.
What we can do
- We can pay gas to relay a signed price from the oracle network to the contract.
- That’s it.
What we cannot do
- We cannot mint our own price.
- We cannot forge an oracle signature.
- We cannot bribe the contract to accept an unsigned number.
- We cannot change which oracle network the contract trusts.
- We cannot settle at a timestamp the oracle did not sign for.
- We cannot bypass the per-market confidence-interval safety threshold.
- We cannot settle “manually” if the oracle is down. We wait, like everyone else.
