Your research can change the world
More on impact ›

Frontiers in Blockchain

Non-Financial Blockchain


Front. Blockchain, 06 May 2021 |

Monetary Dynamics With Proof of Stake

  • Department of Political Economy and Statistics, University of Siena, Siena, Italy

In recent years blockchain consensus mechanisms based on Proof of Stake gained increasing attention as an alternative to Proof of Work, which requires high energy consumption. In its original version Proof of Stake hinges on the idea that, for a user, the likelihood to confirm the next block is positively related to the amount of currency units held in the wallet, and possibly also on the time length which the money has been unspent for. In a simple framework with risk neutral users we provide some early insights on the monetary equilibrium of Proof of Stake based platforms. In particular, we find that the aggregate demand and supply of currency may not coincide, which implies that users could hold suboptimal quantities of the currency. Furthermore, we also discuss how symmetric stationary states of the system could be implausible. As a consequence, a long run uniform distribution of money would seem unlikely unless appropriate measures are introduced.


The publication of the Satoshi Nakamoto paper (2008), introducing Bitcoin, spurred remarkable activity and interest on cryptocurrencies. A distinguishing feature of Bitcoin, as well as of other currencies, is its consensus mechanism and type of incentive provided to the miners, the nodes who have the right and responsibility for confirming currency transactions in the next block of the chain. To gain such right miners need to exhibit the so-called proof of work (PoW), which requires solving a cryptopuzzle. There is no strategy to find a solution to such puzzle, which for this reason needs to be solved by computational brute force. Consequently, the likelihood to solve the puzzle increases with a miner’s computational power, and the Bitcoin protocol is set in such a way that the difficulty to find a solution is adjusted periodically to keep, on average, a block confirmation about every 10 min. As a reward, and cost compensation, for the mining activity the Bitcoin protocol provides a given number of newly mined currency units, so called coinbase. Moreover, because of block space limitation, users may offer transaction fees to miners as an incentive to prioritize confirmation of their transaction in the next block. Therefore, due to the intense mining competition and computational activity, this type of PoW turned out to be very energy demanding. As a result, in recent years a concern increased on this massive electricity consumption, which being exclusively dedicated to solving cryptopuzzles is considered as a waste.

Hence, alternatives to PoW were proposed in order to save on electricity consumption. One such criterion is the so called Proof of Stake (PoS), originally introduced by King and Nadal (2012), also in combination with PoW (Bentov et al., 2014, 2017) and currently used, or planned to use, by a number cryptocurrrencies (Halaburda and Sarvary, 2016; Gilad et al., 2017; Buterin and Griffith, 2019; Chen and Micali, 2019; Nguyen et al., 2019; Wang et al., 2019; Nijsse and Litchfield, 2020; Saleh, 2020; Xiao et al., 2020; Rijsberger et al., 2021). In its early version (Vasin, 2014), PoS was based on the idea that rights to confirm the next block of transactions depend on two elements, which jointly form the so called coinage.

First the number of currency units held in one’s wallet and, second, the length of time that such units were unspent by the user. The likelihood for a node to be selected to confirm the next block depends on the combination of these two elements. In particular, suppose mt is the number of currency units held by a user at time t and lt the average length of time such units remained unspent in his wallet. Then, broadly speaking, for a user the probability to be drawn to confirm the next block of transactions is given by mtltMtLt, where mtlt is the total time length that units have been unspent in the individual’s wallet (coinage) while MtLt is the overall time period that the total number Mt of units in the system were unspent in the users’ wallets.

Therefore, since for a user what matters is the product mtlt, the same coinage value could be obtained for example by keeping few units in the wallet for a long period and the rest for a very short time, or keeping all the units unspent for some intermediate length of time. In case only the number of units would matter then lt = 1, and a user’s likelihood to be selected becomes mtMt.

A simple, though very important, implication of such criterion is the following. Paying/receiving currency units may be seen to have a double effect on the user’s welfare. The first could be defined as a direct effect, given by the possibility to buy/sell assets, goods and services. The second may be called an indirect effect, given by the externality on the probability of being selected to confirm the next block and receive a reward. For example, suppose a user pays and receives the same amount of money, say 1 currency unit, at some date. If this is the only variation in her wallet then while the overall amount of money remains the same, the total length of time that money in the wallet has been unspent for typically decreases or, at best, remains unaltered. Indeed, while the paid currency unit must have been in the wallet for at least one period of time, the unit received by the individual has been in her wallet for one period only. While such transaction induces no direct effect it does have a, typically, negative indirect effect since it decreases the probability for being selected to confirm the next block. The above considerations suggest that, with coinage based PoS, users may find it profitable to first spend those units which have been in the wallet for a shorter period of time, and then those which have been held for a longer period (Vasin, 2014). Indeed, by doing so they minimize the negative externality induced by the payment. In case time length does not matter then the direct effect only would be at work.

Since the early proposals, a main concern with PoS has been its security and the possibility of attacks such as malicious forking and double spending (Houy, 2014; BitFury Group, 2015; Narayanan et al., 2016; Kiayias et al., 2017; Brown-Cohen et al., 2018; Fan and Zhou, 2018; Deirmentzoglou et al., 2019). In this paper we focus instead on the system monetary dynamics with PoS, that is on understanding how users may behave in terms of money holding and, based on this, how the whole monetary system would characterize and evolve. More specifically, we shall be interested in asking if PoS implies a monetary equilibrium of the system, where aggregate currency demand and supply coincide. Moreover, we’ll investigate if PoS leads to a concentration or instead to a more uniform distribution of money, across users, with no dominating positions.

There is a recent, growing, literature on the economic dynamics of PoS based platforms. In particular, Fanti et al. (2019) and Wang et al. (2020) compare the long run behavior of alternative reward rules, more specifically a constant reward rule vs. a geometric reward rule in terms of their asymptotic effect on the users’ shares of currency. Saleh (2020) discusses the role of the reward to generate consensus in a PoS economy, while Rosu and Saleh (2021) enquire the dynamics of shares of currency holdings when users can choose between a risky cryptocurrency and a safe, alternative, asset.

As anticipated, in this paper we shall also be interested in the long run behavior of currency shares held by users. However, our work differs from the above contributions along two main dimensions. The first is an explicit consideration of the money utility, to buy and sell assets, goods and services, which is taken into account when modeling the preferences of a representative agent. That is money, in a PoS economy, may not be only accumulated by users but also transferred to other users, in exchange of goods/services, etc. Secondly, based on this, we investigate the existence of a monetary equilibrium for the whole economy, by considering aggregate demand and supply of the currency.

The model that we present in the paper takes inspiration from the early PoS ideas, and it does not exactly coincide with currently circulating proposals. In a comprehensive recent survey Ferdous et al. (2020) discuss the large variety of PoS consensus procedures adopted by different cryptocurrencies. Because of such wide range of proposals, it perhaps would be too ambitious to have an all-encompassing model capturing the economics of all of them. This is the main reason why we decided to focus on the very initial, fundamental, versions of PoS which, in any case, remain key to any subsequent proposal. An additional reason for our choice is because we only focus on economic aspects and do not discuss security related issues against attacks, etc., which motivated many of the more recent PoS models.

In particular it differs from Casper, the Ethereum proposal (Buterin and Griffith, 2019) in that we do not analyze the possibility that coins are slashed from the wallet of a block validator, in case of untruthful validation. The Algorand version of PoS (Gilad et al., 2017; Chen and Micali, 2019) also differs from ours since we do not consider committees for validating transactions. PeerCoin (King and Nadal, 2012) and BlackCoin (Vasin, 2014) cryptocurrencies adopt hybrid PoW and PoS models, and so also differ from our framework. NxT coin is in turn partly different because we do not introduce transactions fees, rather newly minted coin units only as a reward for confirming new blocks. We also do not consider participation costs. Despite all such differences, we believe that our model may capture some economic fundamentals of PoS and we hope that it could represent a useful benchmark to gain some relevant insights, also on several of its variations.

We study a very simple and pure PoS economy, that is with no PoW hybridization. In analogy with Bitcoin, confirmation of a new block of transactions entitles the selected user to a reward, represented by some newly minted coins. However, entitlement to confirm a block is based on the number of currency units held by an individual in her wallet, rather than on solving a cryptopuzzle. For this reason, a PoS framework would basically eliminate the distinction between miners and users, which characterizes Bitcoin.

In a simple dynamic model with risk neutral agents, a main finding of the paper is that aggregate money supply and demand may not coincide, and so the system could not always be in equilibrium. For this reason, money allocation across individuals might be suboptimal. We also discuss how symmetric stationary equilibrium states are unlikely to take place in the system, which implies that a long run uniform distribution of currency units may be implausible. Indeed, in our model a stationary symmetric equilibrium can exist only if the quantity of money in the system does not grow, which would require incentives other than money reward for block confirmation to sustain the system functioning.

The paper is structured as follows. In section “The Model Fundamentals” we introduce the model fundamentals. In section “Optimal Currency Holdings and the System Monetary Equilibrium” we discuss users’ optimal money holding and the system monetary equilibrium while section “Conclusion” concludes the paper.

The Model Fundamentals

Suppose i, with i = 1,2,..,n, is the generic user in the system and that t = 0,1,2,…., stands for the time index. We suppose the number of users to be time independent, although it would be simple to extend the model to a time varying number of users.

Consider now the time period between two consecutive dates, t and t+1, and assume the following. At the beginning of that period we define mit to be the number of currency units held at t by user i, in her wallet. Hence

M t b = i = 1 n m i t (1)

is the total quantity of money held in the economy at the beginning of the period.

Moreover suppose sitand zit are, respectively, the number of currency units the user spends and receives between t and t+1. Hence xit = sitzit represents her net expenses in that period, before the random drawing for next block confirmation has taken place. Below we see that xit is a choice variable in our model for the user, but that its desired level may differ from the actual level due to market constraints and money availability in the system.

We do not allow for borrowing and, for this reason, 0≤mitxit is a necessary condition to avoid double spending. We also require the number of units held by a user to satisfy mitxitMte, where Mte is the total quantity of money that users holds at the end of the period, before the random drawing, defined as

M t e = i = 1 n ( m i t - x i t ) (2)

Therefore, if i=1nxit0 then MtbMte. Namely, at the end of the period users in the economy may hold more/less money, as a whole, than what they had at the beginning of the same period. As we shall see below, this depends on whether or not the desired level of xit is satisfied. It is worth anticipating that this point will be further elaborated below, when discussing Eq. (7).

Henceforth, we shall define Mt = Mte and refer to it as the quantity of money in the system at time t.

Furthermore, suppose lit = 1,..,t is the average time length that currency units mitxit have been unspent for, in player is wallet. More explicitly if lijt is the time period during which currency unit j, with j = 1,..,(mitxit), has not been spent by i,then lit is given by

l i t = j = 1 ( m i t - x i t ) l i j t ( m i t - x i t ) (3)

Therefore, (mitxit)lit is the total length of time that is currency units have not been spent for, that is her coinage at time t, before the next block of transactions at time (t + 1) is confirmed.

It is worth observing that the same level of coinage (mitxit)lit could be obtained by keeping few currency units unspent for some time or, for example, by holding most units unspent for a short time.

Finally, the following expression stands for the total time that the whole set of currency units in the system has been unspent for.

M t L t = i = 1 n ( m i t - x i t ) l i t (4)

where, as above, Mt is the total number of currency units, money held by users, in the system at the end of the period, just before the random draw is performed, and Lt the average period of time that each unit has not been spent for.

Finally, suppose at (t + 1) a user is selected to confirm the next block, receiving as reward a number rt≥0 of newly minted currency units.

We suppose that the total quantity of money Mt in the system evolves with time according to two different assumptions.

Exogenous, Supply Driven, Quantity of Money

In this case we assume the total quantity of money to be exogenously determined by the platform, regardless of whether or not such quantity corresponds to the desired, aggregate, demand for money by the users. As a consequence, aggregate monetary supply and demand may differ and, due to this, the economy may not be in a monetary equilibrium. That is, the quantity of money held by users may be larger or smaller than what they consider to be optimal for them.

Hence we suppose that the total quantity of money Mt evolves according to the following dynamics.

M t + 1 = M t + r t = M 0 + k = 0 t r k w i t h t = 0 , 1 , 2 , 3 , . . (5)

where Mt is decided at each date by the platform. If rt = r then

M t + 1 = M 0 + ( t + 1 ) r (6)

Therefore, Mt grows with time unless rt = 0, for all tT≥0

Endogenous, Demand Driven, Quantity of Money

Alternatively, we also consider the possibility that the total quantity of money in the system mostly determined, endogenously, by the aggregate money demand. That is, at each date the quantity Mt perfectly adjusts to the users’ demand, while only the reward rt is predetermined by the platform. In this case

M t = M t e = i = 1 n ( m i t - x i t ) (7)

where, as we shall see below, xit are optimal for the users. More explicitly, we assume the platform injects money in the system, or withdraws money from the system, according to Mt as defined in Eq. (7). That is, we imagine the platform can perfectly equalise the quantity of money to the aggregate demand.

Monetary transactions could affect the likelihood of being selected since, as well as affecting the amount of money held by users, they will typically impact on the average period that currency units have been unspent for in the wallet.

We can now specify the relevant timing of decisions and events.

At time t=0, at the beginning of the first time period, mi0 is the money held by user i and so

M 0 b = i = 1 n m i 0 (8)

is the total money in users’ wallet. In the model we consider mi0 as given and do not discuss how it is determined. At the end of the period, however, before the first random draw for confirming the initial block, mi0xi0is the money held by user i, hence

M 0 = M 0 e = i = 1 n ( m i 0 - x i 0 ) (9)

is the quantity of money in the system at t=0.

Finally, at t=1 the user knows whether she’s selected to confirm the first block. Therefore, from the perspective of date t=0, the number of units mi1 held by the user at time t=1 is a (conditional to mi0)random variable defined as follows

m i 1 = { m i 0 - x i 0 + r 0 i f m i 0 - x i 0 > 0 w i t h p r o b a b i l i t y ( m i 0 - x i 0 ) l i 0 M 0 L 0 m i 0 - x i 0 i f m i 0 - x i 0 > 0 w i t h p r o b a b i l i t y 1 - ( m i 0 - x i 0 ) l i 0 M 0 L 0 0 i f m i 0 - x i 0 = 0 (10)

Hence, before t=1 the user decides mi0xi0, and so li0. Based on (mi0xi0)li0, still before date t = 1, with probability (mi0-xi0)li0M0L0 the individual is selected to confirm the next block and to receive r0 newly minted currency units otherwise, if not selected, receives 0 units.

In general, based on the above timing and conditional to having chosen mitxit, before selecting the node to confirm the next block, the number of currency units owned by individual i at time t+1 is a random variable defined as

m i ( t + 1 ) = { m i t - x i t + r t i f m i t - x i t > 0 w i t h p r o b a b i l i t y ( m i t - x i t ) l i t M t L t m i t - x i t f m i t - x i t > 0 w i t h p r o b a b i l i t y i     1 - ( m i t - x i t ) l i t M t L t 0 i f m i t - x i t = 0 (11)

To simplify notation, henceforth subscript i will be removed. It follows that the conditional expectation on the number of units Et(mt + 1|mt) = E(mt + 1), held by the generic individual i at time (t + 1) is

E ( m t + 1 ) = { m t - x t + r t ( m t - x t ) l t M t L t i f m t - x t > 0 0 i f m t - x t = 0 (12)

As an illustration suppose, for example, that mt = 10, xt = 3,rt = 1,lt = 2,Mt = 100 and Lt = 4. Then

E ( m t + 1 ) = 7 + 14 400 = 7.035 (13)

with the probability of being selected to confirm the next block being equal to 0.035, slightly higher than 3%.

Expression (12) implies also that when mtxt > 0 it is E(mt + 1) > mt if

z t + r t ( m t - x t ) l t M t L t > s t (14)

that is when, at (t + 1), the sum of currency units received from other users and those awarded for possible block registration, weighted by (mt-xt)ltMtLt, is higher than the number of currency units spent by the individual.

Moreover, for example with an endogenous quantity of money, it is

d E ( m t + 1 ) d m t = 1 + r t ( M t L t - ( m t - x t ) l t ) l t ( M t L t ) 2 > 1 f o r a l l m t - x t > 0 (15)


l i m ( m t - x t ) 0 d E ( m t + 1 ) d m t = 1 + r t l t M t L t > 1 (16)

The reason why the above derivatives are larger than one is simple, being due to the positive expected reward for block confirmation.


d E ( m t + 1 ) d l t = r t ( m t - x t ) ( M t L t - ( m t - x t ) l t ) ( M t L t ) 2 > 0 f o r a l l m t - x t > 0 (17)

which is also positive.

Optimal Currency Holdings and the System Monetary Equilibrium

In this section we discuss how the relevant monetary quantities of the model are optimally determined by users and, based on them, how the system evolves with time. To simplify the discussion we assume that only the amount of money matters for confirming a block, and so lt = 1. To study demand for money and the monetary equilibrium evolution of the system, for each individual we now introduce preferences through a utility function, which we assume to be time-independent. In choosing xt a user faces the following, fundamental, trade-off. On the one hand, the larger xt the higher his welfare while, on the other hand, the lower the probability of being selected to confirm the next block and obtain additional currency units. The reason why we assume the user’s welfare to increase with xt is because we suppose that the larger the expenditure the higher the level of purchased goods/services, and/or financial assets other than the cryptocurrency. This can take place either buying directly by means of the cryptocurrency, or exchanging it with some other currency first.

Though this is what we assume in the work, admittedly it may not be only way to model preferences. Indeed, for example, rather than being increasing with xt we could assume welfare to increase with st + zt, that is with the total amount of currency units exchanged. This would capture the idea that any in/out transaction, being voluntary, improves the welfare level of the user. In this case, for example, xt = 0 would not necessarily imply that the user’s welfare is stable, since it may be the outcome of in/out transactions being positive and equal.

At each date t, a simple utility function capturing the above trade- off can be the following

U ( x t , E m t + 1 ) = a v ( x t ) + b δ E m t + 1 (18)

with v′ > 0 and v″ ≤0, where 0≤δ≤1 is the user’s discount rate and a,b≥0 are weights quantifying, respectively, the importance of v(xt) and Emt+1 in the utility function. For example, a=0 means that the user cares only about Emt+1 while b=0 implies that only xt matters. More in general, ab expresses the relative importance of the two components for the user. Considering Eq. (12) the utility function in Eq. (18) can be written as

U ( x t , E m t + 1 ) = a v ( x t ) + b δ ( m t - x t + r t ( m t - x t ) M t ) (19)

Since at time t the quantity mt is a given for the user, once xt is chosen the random draw for block confirmation will determine, with probability (mt-xt)Mt, whether or not the user will receive rt additional units, finalizing the value of mt+1. Hence, for a single user the only decision variable in Eq. (19) is xt and, to simplify notation, we can write U(xt,Emt + 1) = U(xt)

For this reason, the user’s problem can be formulated as

M a x x t U ( x t ) s u b j e c t t o  0 m t - x t M t (20)

In what follows we are going to discuss problem (20) by considering both an exogenous and an endogenous Mt, which appears in Eq. (19).

In the former case Mt is the total quantity of money exogenously introduced in the system by the platform, and held by users, at time t. As a consequence Mt for the users is independent of their money demand and, treating it as a constant, from Eq. (19) the first order derivative with respect to xt is given by

a v ( x t ) - b δ ( 1 + r t M t ) (21)

In the latter case Mt would be the aggregate endogenous demand for money, obtained by summing up the individual monetary demands, just before the random draw. For this reason, now the quantity of money Mt before the random draw is no longer a constant for the users and will be defined by summing up all the individuals’ money demand.

Replacing Eq. (19) into Eq. (20) and differentiating it with respect to xt we obtain the following first derivative

a v ( x t ) + b δ ( - 1 + r t ( - M t + ( m t - x t ) M t 2 ) (22)

Risk Neutral Users

To gain a better understanding of Eq. (21), Eq. (22) and the model functioning consider as an example, v(xt) = xt for all the users, who because of this are risk neutral. Then Eq. (21) becomes

a - b δ ( 1 + r t M t ) (23)

and it follows that the optimal xt is given by

x t = { m t          i f a b > δ ( 1 + r t M t ) [ - ( M t - m t ) , m t ] i f a b = δ ( 1 + r t M t ) - ( M t - m t )      i f a b < δ ( 1 + r t M t ) (24)

Expression (24) suggests that if v(xt) = xt is sufficiently more important than E(mt + 1), that is ab is large enough, then the user will want to hold no money in his wallet before the random draw for confirming the next block. Since we assume identical users, It follows that this is true for all them and the aggregate demand for money is

n ( m t - x t ) = 0 (25)

Hence the system may not be in a monetary equilibrium, since the aggregate demand for money will be equal to 0 while the quantity of money in the economy is Mt > 0.

As a consequence, perhaps some users may indeed satisfy their money demand before the random drawing, but not all of them. Likewise, if ab is sufficiently low then users will find it optimal to hold all the available quantity of money. Hence, for analogous reasons as above, this would also not lead to a monetary equilibrium since the aggregate demand will be nMt, larger than the aggregate supply of money Mt. Finally, only if the extreme case of ab=δ(1+rtMt) holds than the economy may be in equilibrium.

Suppose now that aggregate money supply completely, and instantaneously, adjusts to the aggregate money demand, and that users know this. From Eq. (22) it follows that the first order condition for the optimal xt is given by

a = b δ ( 1 + r t M t - ( m t - x t ) M t 2 ) (26)

which, it can be checked, identifies a maximum.

Since we assume identical users it is n(mtxt) = Mt and so

M t - ( m t - x t ) = ( n - 1 ) ( m t - x t ) = ( n - 1 ) M t n (27)

Hence, summing up both sides of Eq. (26) over all users we obtain

a n = n b δ + b δ r t ( n - 1 ) M t (28)

It follows that

M t = { b δ r t ( n - 1 ) ( a - b δ ) n i f a b > δ 0 i f a b δ (29)

which represents the aggregate demand for currency units, as well as the aggregate quantity of money in the model. Notice that expression (12) increases with n, rt and δ. Hence, the higher the discount factor, the more important is the future for the users, the larger is their money demand.

Since preferences are the same across individuals, then Eq. (29) implies

m t - x t = M a x ( 0 , b δ r t ( n - 1 ) ( a - b δ ) n 2 ) (30)

and therefore

M a x ( 0 , m t - b δ r t ( n - 1 ) ( a - b δ ) n 2 ) = x t (31)

To obtain additional insights on the model, consider the following numerical example: m0 = 10,n = 10,a=b=1,δ=12 and rt = 1.

Then from Eq. (31) it follows that m0-x0=9100 and therefore x0 = 9.91. That is, users’ net expenditures will count for 99.1% of their initial money holdings, while the remaining sum will be kept in their wallet, counting for the random draw to confirm the next block. In this case the aggregate quantity of money, before the random drawing for confirming the first block, is given by the aggregate money demand and to M0 = 0.91, hence much lower than nm0 = 100, the amount of money initially introduced in the system.

The Symmetric Stationary Equilibrium States of the System

To further investigate the system evolution, in what follows we briefly discuss the symmetric stationary equilibrium states (SSES) of system (12), with exogenous money supply. The SSES we consider is particularly restrictive since we shall require users’ monetary holding to satisfy the following notion of time independence E(mt) = mt = m. That is, our stationarity condition implies that mt would stop being a random variable, which is admittedly a strong request. We shall see that the findings are consistent with such a demanding assumption.

Additionally, at our SSES we shall require that the remaining quantities are also time independent: hence lt = l, rt = r,st = s,zt = z and mtltMtLt=1n.

Based on the above assumptions, the following holds

Proposition Supposer = 0. Ifm0 = 0 only SSES withm > 0 is the only SSES. Supposer = 0: ifM0 = M = Mt then the only SSES withm > 0 ism=Mn, s=z, andl = L.

Proof Assume r > 0 and m0 = 0; then from Eq. (12) it follows that mt = 0 for all t = 1,2,…. Suppose now m0 > 0; then, from Eq. (12) the condition for a SSES m > 0becomes

E ( m ) = m = m - s + z + r n (32)

Hence Eq. (32) implies s=rn+z. However, since r > 0 then Mt = Mt−1 + r > Mt−1 which, as said, entails that Mt is increasing, due to r additional currency units introduced in the system at each date. But in equilibrium Mt = (mtxt)n while a SSES requires Mt = (mx)n, which is impossible since Mt increases with t while (mx)n is constant, with respect to t.

Assume now r=0; then, again, from Eq. (32) it follows that s=rn+z=z. Finally, since mlML=1n and M=mn it follows that l=L which concludes the proof.

The above proposition suggests that the only possibility for a system to exhibit a symmetric stationary equilibrium state, assuming exogenous money supply, the population of users to be constant and according to our definition of SSES, is to have a constant amount of money in the economy, and so no reward for block confirmation. This, however, may raise an issue with the provision of the right incentives to the users for blocks confirmation. Based on these considerations, our types of SSES seem to be rather implausible states of the system.


In the paper we considered a basic framework to gain some early insights on the monetary dynamics of PoS based platforms. In a simplest model where, for risk neutral users, the likelihood to confirm the next block depends only on the amount of currency held in the wallet we find that, with an exogenous quantity of money, aggregate demand and supply of currency may not coincide. For this reason, some users could be unable to hold in their wallet the desirable quantity of money. This might be due to the money supply evolving according to a rule predefined by the platform, which may not necessarily coincide with the aggregate demand of money.

Indeed, the model considers symmetric users, that is with exactly the same preferences, which suggests that with exogenous money a monetary equilibrium may require users with heterogenous, rather than homogeneous, preferences. Finally, according to our definition, symmetric stationary equilibrium states of the system do not seem plausible, because they either require users to hold no money in their wallet or provide no currency reward for confirming a block. Despite its simplicity we believe the model may present some interesting insights underlying the economic functioning of a system based on PoS.

Data Availability Statement

The original contributions presented in the study are included in the article/supplementary material, further inquiries can be directed to the corresponding author.

Author Contributions

The author confirms being the sole contributor of this work and has approved it for publication.

Conflict of Interest

The author declares that the research was conducted in the absence of any commercial or financial relationships that could be construed as a potential conflict of interest.


Bentov, I., Gabizon, A., and Mizrahi, A. (2017). Cryptocurrencies without proof of work. arXiv [preprint]. Available online at: (accessed January 31, 2019).

Google Scholar

Bentov, I., Lee, C., Mizrahi, A., and Rosenfeld, M. (2014). Proof of activity: extending Bitcoin’s proof of work via proof of stake. ACM Sigmetr. 42, 34–37. doi: 10.1145/2695533.2695545

CrossRef Full Text | Google Scholar

BitFury Group (2015). Proof of Stake Versus Proof of Work. Amsterdam: BitFury Group.

Google Scholar

Brown-Cohen, J., Narayanan, A., Psomas, C.-A., and Weinberg, S. (2018). Formal barriers to longest-chain proof-of-stake protocols. arXiv [preprint]. Available online at: (accessed March 31, 2019).

Google Scholar

Buterin, V., and Griffith, V. (2019). Casper the friendly finality gadget. arXiv [Preprint]. Available online at: (accessed January 10, 2020).

Google Scholar

Chen, J., and Micali, S. (2019). Algorand. Theoret. Comp. Sci. 177, 155–183. doi: 10.1016/j.tcs.2019.02.001

CrossRef Full Text | Google Scholar

Deirmentzoglou, E., Papakyriakopoulos, G., and Patsakis, C. (2019). A survey on long-range attacks for proof of stake protocols. IEEE Access 7, 28712–28725. doi: 10.1109/access.2019.2901858

CrossRef Full Text | Google Scholar

Fan, L., and Zhou, H. (2018). A scalable proof-of-stake blockchain in the open setting. Available online at: (accessed February 15, 2021).

Google Scholar

Fanti, G., Kogan, L., Oh, S., Ruan, K., Viswanath, P., and Wang, G. (2019). “Compounding of wealth in proof-of-stake cryptocurrencies,” in Financial Cryptography 2019, Vol. 11598, eds I. Goldberg and T. Moore (Berlin: Springer), 42–61. doi: 10.1007/978-3-030-32101-7_3

CrossRef Full Text | Google Scholar

Ferdous, S., Chowdury, M., Hoque, M., and Colman, A. (2020). Blockchain consensus algorithms: a survey. arXiv [preprint]. Available online at: (accessed February 15, 2021).

Google Scholar

Gilad, Y., Hemo, R., Micali, S., Vlachos, G., and Zeldovich, N. (2017). Algorand: Scaling Byzantine Agreements for Cryptocurrencies, SOSP’17. Shanghai: SOSP.

Google Scholar

Halaburda, H., and Sarvary, M. (2016). Beyond Bitcoin. London: Palgrave McMillan.

Google Scholar

Houy, N. (2014). It will cost you nothing to ‘kill’ a proof-of-stake crypto-currency. Econ. Bull. 34, 1038–1044.

Google Scholar

Kiayias, A., Russell, A., David, B., and Oliynykov, R. (2017). “Ouroboros: A provably secure proof-of-stake blockchain protocol,” in Proceedings of the Annual International Cryptology Conference, (Springer), 357–388. doi: 10.1007/978-3-319-63688-7_12

CrossRef Full Text | Google Scholar

King, S., and Nadal, S. (2012). PPCoin: Peer-to-peer Cryptocurrency with Proof-of-stake.

Google Scholar

Narayanan, A., Bonneau, J., Felten, E., Miller, A., and Goldfeder, S. (2016). Bitcoin and Cryptocurrency Technologies. Princeton, NJ: Princeton University Press.

Google Scholar

Nguyen, C., Hoang, D., Nguyen, D., Niyato, D., Nguyen, H., and Dutkiewicz, E. (2019). Proof-of-Stake consensus mechanisms for future blockchain networks: fundamentals, applications and opportunities. IEEE Access 7, 85727–85745. doi: 10.1109/access.2019.2925010

CrossRef Full Text | Google Scholar

Nijsse, J., and Litchfield, A. (2020). A taxonomy of blockchain consensus methods. Cryptography 4:32. doi: 10.3390/cryptography4040032

CrossRef Full Text | Google Scholar

Rijsberger, D., Szalachowki, P., Ke, J., Li, Z., and Zhou, J. (2021). LaKSA: a probabilistic proof-of-stake protocol. arXiv [preprint]. Available online at:,on%20its%20implementation%20and%20evaluation (accessed February 15, 2021).

Google Scholar

Rosu, I., and Saleh, F. (2021). Evolution of shares in a proof of stake cryptocurrency. Manag. Sci. 67, 661–672. doi: 10.1287/mnsc.2020.3791

PubMed Abstract | CrossRef Full Text | Google Scholar

Saleh, F. (2020). Blockchain without waste: proof of stake. Rev. Financial Stud. 34, 1156–1190. doi: 10.1093/rfs/hhaa075

CrossRef Full Text | Google Scholar

Vasin, P. (2014). Blackcoin’s proof of stake protocol v2. Available online at: (accessed January 31, 2019).

Google Scholar

Wang, W., Hoang, D., Xiong, Z., Niyato, D., Wang, P., Hu, P., et al. (2019). A survey on consensus mechanisms and mining management in blockchain networks. IEEEAccess 7, 22328–22369. doi: 10.1109/access.2019.2896108

CrossRef Full Text | Google Scholar

Wang, Y., Yang, G., Bracciali, A., Leung, H., Tian, H., Ke, L., et al. (2020). Incentive compatible and anti-compounding of wealth in proof-of-stake. Inform. Sci. 530, 85–94. doi: 10.1016/j.ins.2020.03.098

CrossRef Full Text | Google Scholar

Xiao, Y., Zhang, N., Lou, W., and Hou, Y. (2020). A survey of distributed consensus protocols for blockchain networks. IEEE Commun. Surv. Tutor. 22, 1432–1465. doi: 10.1109/comst.2020.2969706

CrossRef Full Text | Google Scholar

Keywords: Proof of Stake, blockchain, cryptocurrency, money demand, monetary equilibrium

Citation: Dimitri N (2021) Monetary Dynamics With Proof of Stake. Front. Blockchain 4:443966. doi: 10.3389/fbloc.2021.443966

Received: 04 January 2019; Accepted: 16 March 2021;
Published: 06 May 2021.

Edited by:

Claudio J. Tessone, University of Zurich, Switzerland

Reviewed by:

Francesco Tiezzi, University of Camerino, Italy
Patrick Lehner, Zurich University of Applied Sciences, Switzerland Florian Spychiger, ZHAW School of Management and Law, Center for Organizational Viability,
in collaboration with reviewer PL

Copyright © 2021 Dimitri. This is an open-access article distributed under the terms of the Creative Commons Attribution License (CC BY). The use, distribution or reproduction in other forums is permitted, provided the original author(s) and the copyright owner(s) are credited and that the original publication in this journal is cited, in accordance with accepted academic practice. No use, distribution or reproduction is permitted which does not comply with these terms.

*Correspondence: Nicola Dimitri,