Ethereum Blog

The Search for a Stable Cryptocurrency



Vitalik Buterin


Announcing World Trade Francs: The Official Ethereum Stablecoin 01st April, 2018

Ethereum scalability research and development subsidy programs 02nd January, 2018


The Search for a Stable Cryptocurrency

Posted on .

Special thanks to Robert Sams for the development of Seignorage Shares and insights regarding how to correctly value volatile coins in multi-currency systems

Note: we are not planning on adding price stabilization to ether; our philosophy has always been to keep ether simple to minimize black-swan risks. Results of this research will likely go into either subcurrencies or independent blockchains

One of the main problems with Bitcoin for ordinary users is that, while the network may be a great way of sending payments, with lower transaction costs, much more expansive global reach, and a very high level of censorship resistance, Bitcoin the currency is a very volatile means of storing value. Although the currency had by and large grown by leaps and bounds over the past six years, especially in financial markets past performance is no guarantee (and by efficient market hypothesis not even an indicator) of future results of expected value, and the currency also has an established reputation for extreme volatility; over the past eleven months, Bitcoin holders have lost about 67% of their wealth and quite often the price moves up or down by as much as 25% in a single week. Seeing this concern, there is a growing interest in a simple question: can we get the best of both worlds? Can we have the full decentralization that a cryptographic payment network offers, but at the same time have a higher level of price stability, without such extreme upward and downward swings?

Last week, a team of Japanese researchers made a proposal for an “improved Bitcoin“, which was an attempt to do just that: whereas Bitcoin has a fixed supply, and a volatile price, the researchers’ Improved Bitcoin would vary its supply in an attempt to mitigate the shocks in price. However, the problem of making a price-stable cryptocurrency, as the researchers realized, is much different from that of simply setting up an inflation target for a central bank. The underlying question is more difficult: how do we target a fixed price in a way that is both decentralized and robust against attack?

To resolve the issue properly, it is best to break it down into two mostly separate sub-problems:

  1. How do we measure a currency’s price in a decentralized way?
  2. Given a desired supply adjustment to target the price, to whom do we issue and how do we absorb currency units?

Decentralized Measurement

For the decentralized measurement problem, there are two known major classes of solutions: exogenous solutions, mechanisms which try to measure the price with respect to some precise index from the outside, and endogenous solutions, mechanisms which try to use internal variables of the network to measure price. As far as exogenous solutions go, so far the only reliable known class of mechanisms for (possibly) cryptoeconomically securely determining the value of an exogenous variable are the different variants of Schellingcoin – essentially, have everyone vote on what the result is (using some set chosen randomly based on mining power or stake in some currency to prevent sybil attacks), and reward everyone that provides a result that is close to the majority consensus. If you assume that everyone else will provide accurate information, then it is in your interest to provide accurate information in order to be closer to the consensus – a self-reinforcing mechanism much like cryptocurrency consensus itself.

The main problem with Schellingcoin is that it’s not clear exactly how stable the consensus is. Particularly, what if some medium-sized actor pre-announces some alternative value to the truth that would be beneficial for most actors to adopt, and the actors manage to coordinate on switching over? If there was a large incentive, and if the pool of users was relatively centralized, it might not be too difficult to coordinate on switching over.

There are three major factors that can influence the extent of this vulnerability:

  1. Is it likely that the participants in a schellingcoin actually have a common incentive to bias the result in some direction?
  2. Do the participants have some common stake in the system that would be devalued if the system were to be dishonest?
  3. Is it possible to “credibly commit” to a particular answer (ie. commit to providing the answer in a way that obviously can’t be changed)?

(1) is rather problematic for single-currency systems, as if the set of participants is chosen by their stake in the currency then they have a strong incentive to pretend the currency price is lower so that the compensation mechanism will push it up, and if the set of participants is chosen by mining power then they have a strong incentive to pretend the currency’s price is too high so as to increase the issuance. Now, if there are two kinds of mining, one of which is used to select Schellingcoin participants and the other to receive a variable reward, then this objection no longer applies, and multi-currency systems can also get around the problem. (2) is true if the participant selection is based on either stake (ideally, long-term bonded stake) or ASIC mining, but false for CPU mining. However, we should not simply count on this incentive to outweigh (1).

(3) is perhaps the hardest; it depends on the precise technical implementation of the Schellingcoin. A simple implementation involving simply submitting the values to the blockchain is problematic because simply submitting one’s value early is a credible commitment. The original SchellingCoin used a mechanism of having everyone submit a hash of the value in the first round, and the actual value in the second round, sort of a cryptographic equivalent to requiring everyone to put down a card face down first, and then flip it at the same time; however, this too allows credible commitment by revealing (even if not submitting) one’s value early, as the value can be checked against the hash.

A third option is requiring all of the participants to submit their values directly, but only during a specific block; if a participant does release a submission early they can always “double-spend” it. The 12-second block time would mean that there is almost no time for coordination. The creator of the block can be strongly incentivized (or even, if the Schellingcoin is an independent blockchain, required) to include all participations, to discourage or prevent the block maker from picking and choosing answers. A fourth class of options involves some secret sharing or secure multiparty computation mechanism, using a collection of nodes, themselves selected by stake (perhaps even the participants themselves), as a sort of decentralized substitute for a centralized server solution, with all the privacy that such an approach entails.

Finally, a fifth strategy is to do the schellingcoin “blockchain-style”: every period, some random stakeholder is selected, and told to provide their vote as a [id, value] pair, where value is the actual valid and id is an identifier of the previous vote that looks correct. The incentive to vote correctly is that only tests that remain in the main chain after some number of blocks are rewarded, and future voters will note attach their vote to a vote that is incorrect fearing that if they do voters after them will reject their vote.

Schellingcoin is an untested experiment, and so there is legitimate reason to be skeptical that it will work; however, if we want anything close to a perfect price measurement scheme it’s currently the only mechanism that we have. If Schellingcoin proves unworkable, then we will have to make do with the other kinds of strategies: the endogenous ones.

Endogenous Solutions

To measure the price of a currency endogenously, what we essentially need is to find some service inside the network that is known to have a roughly stable real-value price, and measure the price of that service inside the network as measured in the network’s own token. Examples of such services include:

  • Computation (measured via mining difficulty)
  • Transaction fees
  • Data storage
  • Bandwidth provision

A slightly different, but related, strategy, is to measure some statistic that correllates indirectly with price, usually a metric of the level of usage; one example of this is transaction volume.

The problem with all of these services is, however, that none of them are very robust against rapid changes due to technological innovation. Moore’s Law has so far guaranteed that most forms of computational services become cheaper at a rate of 2x every two years, and it could easily speed up to 2x every 18 months or 2x every five years. Hence, trying to peg a currency to any of those variables will likely lead to a system which is hyperinflationary, and so we need some more advanced strategies for using these variables to determine a more stable metric of the price.

First, let us set up the problem. Formally, we define an estimator to be a function which receives a data feed of some input variable (eg. mining difficulty, transaction cost in currency units, etc) D[1], D[2], D[3]…, and needs to output a stream of estimates of the currency’s price, P[1], P[2], P[3]… The estimator obviously cannot look into the future; P[i] can be dependent on D[1], D[2]D[i], but not D[i+1]. Now, to start off, let us graph the simplest possible estimator on Bitcoin, which we’ll call the naive estimator: difficulty equals price.

Unfortunately, the problem with this approach is obvious from the graph and was already mentioned above: difficulty is a function of both price and Moore’s law, and so it gives results that depart from any accurate measure of the price exponentially over time. The first immediate strategy to fix this problem is to try to compensate for Moore’s law, using the difficulty but artificially reducing the price by some constant per day to counteract the expected speed of technological progress; we’ll call this the compensated naive estimator. Note that there are an infinite number of versions of this estimator, one for each depreciation rate, and all of the other estimators that we show here will also have parameters.

The way that we will select the parameter for our version is by using a variant of simulated annealing to find the optimal values, using the first 780 days of the Bitcoin price as “training data”. The estimators are then left to perform as they would for the remaining 780 days, to see how they would react to conditions that were unknown when the parameters were optimized (this technique, knows as “cross-validation”, is standard in machine learning and optimization theory). The optimal value for the compensated estimator is a drop of 0.48% per day, leading to this chart:

The next estimator that we will explore is the bounded estimator. The way the bounded estimator works is somewhat more complicated. By default, it assumes that all growth in difficulty is due to Moore’s law. However, it assumes that Moore’s law cannot go backwards (ie. technology getting worse), and that Moore’s law cannot go faster than some rate – in the case of our version, 5.88% per two weeks, or roughly quadrupling every year. Any growth outside these bounds it assumes is coming from price rises or drops. Thus, for example, if the difficulty rises by 20% in one period, it assumes that 5.88% of it is due to technological advancements, and the remaining 14.12% is due to a price increase, and thus a stabilizing currency based on this estimator might increase supply by 14.12% to compensate. The theory is that cryptocurrency price growth to a large extent happens in rapid bubbles, and thus the bounded estimator should be able to capture the bulk of the price growth during such events.

There are more advanced strategies as well; the best strategies should take into account the fact that ASIC farms take time to set up, and also follow a hysteresis effect: it’s often viable to keep an ASIC farm online if you already have it even when under the same conditions it would not be viable to start up a new one. A simple approach is looking at the rate of increase of the difficulty, and not just the difficulty itself, or even using a linear regression analysis to project difficulty 90 days into the future. Here is a chart containing the above estimators, plus a few others, compared to the actual price:

Note that the chart also includes three estimators that use statistics other than Bitcoin mining: a simple and an advanced estimator using transaction volume, and an estimator using the average transaction fee. We can also split up the mining-based estimators from the other estimators:

See for the source code that produced these results.

Of course, this is only the beginning of endogenous price estimator theory; a more thorough analysis involving dozens of cryptocurrencies will likely go much further. The best estimators may well end up using a combination of different measures; seeing how the difficulty-based estimators overshot the price in 2014 and the transaction-based estimators undershot the price, the two combined could end up being substantially more accurate. The problem is also going to get easier over time as we see the Bitcoin mining economy stabilize toward something closer to an equilibrium where technology improves only as fast as the general Moore’s law rule of 2x every 2 years.

To see just how good these estimators can get, we can note from the charts that they can cancel out at least 50% of cryptocurrency price volatility, and may increase to ~67% once the mining industry stabilizes. Something like Bitcoin, if it becomes mainstream, will likely be somewhat more unstable than gold, but not that much more unstable – the only difference between BTC and gold is that the supply of gold can actually increase as the price goes higher since more can be mined if miners are willing to pay higher costs, so there is an implicit dampening effect, but the supply elasticity of gold is surprisingly not that high; production barely increased at all during the run-ups in price during the 1970s and 2000s. The price of gold stayed within a range of 4.63x ($412 to $1980) in the last decade; logarithmically reducing that by two thirds gives a range of 1.54x, not much higher than EUR/USD (1.37x), JPY/USD (1.64x) or CAD/USD (1.41x); thus, endogenous stabilization may well prove quite viable, and may be preferred due to its lack of tie to any specific centralized currency or authority.

The other issue that all of these estimators have to contend with is exploitability: if transaction volume is used to determine the currency’s price, then an attacker can manipulate the price very easily by simply sending very many transactions. The average transaction fees paid in Bitcoin are about $5000 per day; at that price in a stabilized currency the attacker would be able to halve the price. Mining difficulty, however, is much more difficult to exploit simply because the market is so large. If a platform does not want to accept the inefficiencies of wasteful proof of work, an alternative is to build in a market for other resources, such as storage, instead; Filecoin and Permacoin are two efforts that attempt to use a decentralized file storage market as a consensus mechanism, and the same market could easily be dual-purposed to serve as an estimator.

The Issuance Problem

Now, even if we have a reasonably good, or even perfect, estimator for the currency’s price, we still have the second problem: how do we issue or absorb currency units? The simplest approach is to simply issue them as a mining reward, as proposed by the Japanese researchers. However, this has two problems:

  1. Such a mechanism can only issue new currency units when the price is too high; it cannot absorb currency units when the price is too low.
  2. If we are using mining difficulty in an endogenous estimator, then the estimator needs to take into account the fact that some of the increases in mining difficulty will be a result of an increased issuance rate triggered by the estimator itself.

If not handled very carefully, the second problem has the potential to create some rather dangerous feedback loops in either direction; however, if we use a different market as an estimator and as an issuance model then this will not be a problem. The first problem seems serious; in fact, one can interpret it as saying that any currency using this model will always be strictly worse than Bitcoin, because Bitcoin will eventually have an issuance rate of zero and a currency using this mechanism will have an issuance rate always above zero. Hence, the currency will always be more inflationary, and thus less attractive to hold. However, this argument is not quite true; the reason is that when a user purchases units of the stabilized currency then they have more confidence that at the time of purchase the units are not already overvalued and therefore will soon decline. Alternatively, one can note that extremely large swings in price are justified by changing estimations of the probability the currency will become thousands of times more expensive; clipping off this possibility will reduce the upward and downward extent of these swings. For users who care about stability, this risk reduction may well outweigh the increased general long-term supply inflation.


A second approach is the (original implementation of the) “bitassets” strategy used by Bitshares. This approach can be described as follows:

  1. There exist two currencies, “vol-coins” and “stable-coins”.
  2. Stable-coins are understood to have a value of $1.
  3. Vol-coins are an actual currency; users can have a zero or positive balance of them. Stable-coins exist only in the form of contracts-for-difference (ie. every negative stable-coin is really a debt to someone else, collateralized by at least 2x the value in vol-coins, and every positive stable-coin is the ownership of that debt).
  4. If the value of someone’s stable-coin debt exceeds 90% of the value of their vol-coin collateral, the debt is cancelled and the entire vol-coin collateral is transferred to the counterparty (“margin call”)
  5. Users are free to trade vol-coins and stable-coins with each other.

And that’s it. The key piece that makes the mechanism (supposedly) work is the concept of a “market peg”: because everyone understands that stable-coins are supposed to be worth $1, if the value of a stable-coin drops below $1, then everyone will realize that it will eventually go back to $1, and so people will buy it, so it actually will go back to $1 – a self-fulfilling prophecy argument. And for a similar reason, if the price goes above $1, it will go back down. Because stable-coins are a zero-total-supply currency (ie. each positive unit is matched by a corresponding negative unit), the mechanism is not intrinsically unworkable; a price of $1 could be stable with ten users or ten billion users (remember, fridges are users too!).

However, the mechanism has some rather serious fragility properties. Sure, if the price of a stable-coin goes to $0.95, and it’s a small drop that can easily be corrected, then the mechanism will come into play, and the price will quickly go back to $1. However, if the price suddenly drops to $0.90, or lower, then users may interpret the drop as a sign that the peg is actually breaking, and will start scrambling to get out while they can – thus making the price fall even further. At the end, the stable-coin could easily end up being worth nothing at all. In the real world, markets do often show positive feedback loops, and it is quite likely that the only reason the system has not fallen apart already is because everyone knows that there exists a large centralized organization (BitShares Inc) which is willing to act as a buyer of last resort to maintain the “market” peg if necessary.

Note that BitShares has now moved to a somewhat different model involving price feeds provided by the delegates (participants in the consensus algorithm) of the system; hence the fragility risks are likely substantially lower now.


An approach vaguely similar to BitAssets that arguably works much better is the SchellingDollar (called that way because it was originally intended to work with the SchellingCoin price detection mechanism, but it can also be used with endogenous estimators), defined as follows:

  1. There exist two currencies, “vol-coins” and “stable-coins”. Vol-coins are initially distributed somehow (eg. pre-sale), but initially no stable-coins exist.
  2. Users may have only a zero or positive balance of vol-coins. Users may have a negative balance of stable-coins, but can only acquire or increase their negative balance of stable-coins if they have a quantity of vol-coins equal in value to twice their new stable-coin balance (eg. if a stable-coin is $1 and a vol-coin is $5, then if a user has 10 vol-coins ($50) they can at most reduce their stable-coin balance to -25)
  3. If the value of a user’s negative stable-coins exceeds 90% of the value of the user’s vol-coins, then the user’s stable-coin and vol-coin balances are both reduced to zero (“margin call”). This prevents situations where accounts exist with negative-valued balances and the system goes bankrupt as users run away from their debt.
  4. Users can convert their stable-coins into vol-coins or their vol-coins into stable-coins at a rate of $1 worth of vol-coin per stable-coin, perhaps with a 0.1% exchange fee. This mechanism is of course subject to the limits described in (2).
  5. The system keeps track of the total quantity of stable-coins in circulation. If the quantity exceeds zero, the system imposes a negative interest rate to make positive stable-coin holdings less attractive and negative holdings more attractive. If the quantity is less than zero, the system similarly imposes a positive interest rate. Interest rates can be adjusted via something like a PID controller, or even a simple “increase or decrease by 0.2% every day based on whether the quantity is positive or negative” rule.

Here, we do not simply assume that the market will keep the price at $1; instead, we use a central-bank-style interest rate targeting mechanism to artificially discourage holding stable-coin units if the supply is too high (ie. greater than zero), and encourage holding stable-coin units if the supply is too low (ie. less than zero). Note that there are still fragility risks here. First, if the vol-coin price falls by more than 50% very quickly, then many margin call conditions will be triggered, drastically shifting the stable-coin supply to the positive side, and thus forcing a high negative interest rate on stable-coins. Second, if the vol-coin market is too thin, then it will be easily manipulable, allowing attackers to trigger margin call cascades.

Another concern is, why would vol-coins be valuable? Scarcity alone will not provide much value, since vol-coins are inferior to stable-coins for transactional purposes. We can see the answer by modeling the system as a sort of decentralized corporation, where “making profits” is equivalent to absorbing vol-coins and “taking losses” is equivalent to issuing vol-coins. The system’s profit and loss scenarios are as follows:

  • Profit: transaction fees from exchanging stable-coins for vol-coins
  • Profit: the extra 10% in margin call situations
  • Loss: situations where the vol-coin price falls while the total stable-coin supply is positive, or rises while the total stable-coin supply is negative (the first case is more likely to happen, due to margin-call situations)
  • Profit: situations where the vol-coin price rises while the total stable-coin supply is positive, or falls while it’s negative

Note that the second profit is in some ways a phantom profit; when users hold vol-coins, they will need to take into account the risk that they will be on the receiving end of this extra 10% seizure, which cancels out the benefit to the system from the profit existing. However, one might argue that because of the Dunning-Kruger effect users might underestimate their susceptibility to eating the loss, and thus the compensation will be less than 100%.

Now, consider a strategy where a user tries to hold on to a constant percentage of all vol-coins. When x% of vol-coins are absorbed, the user sells off x% of their vol-coins and takes a profit, and when new vol-coins equal to x% of the existing supply are released, the user increases their holdings by the same portion, taking a loss. Thus, the user’s net profit is proportional to the total profit of the system.

Seignorage Shares

A fourth model is “seignorage shares”, courtesy of Robert Sams. Seignorage shares is a rather elegant scheme that, in my own simplified take on the scheme, works as follows:

  1. There exist two currencies, “vol-coins” and “stable-coins” (Sams uses “shares” and “coins”, respectively)
  2. Anyone can purchase vol-coins for stable-coins or vol-coins for stable-coins from the system at a rate of $1 worth of vol-coin per stable-coin, perhaps with a 0.1% exchange fee

Note that in Sams’ version, an auction was used to sell off newly-created stable-coins if the price goes too high, and buy if it goes too low; this mechanism basically has the same effect, except using an always-available fixed price in place of an auction. However, the simplicity comes at the cost of some degree of fragility. To see why, let us make a similar valuation analysis for vol-coins. The profit and loss scenarios are simple:

  • Profit: absorbing vol-coins to issue new stable-coins
  • Loss: issuing vol-coins to absorb stable-coins

The same valuation strategy applies as in the other case, so we can see that the value of the vol-coins is proportional to the expected total future increase in the supply of stable-coins, adjusted by some discounting factor. Thus, here lies the problem: if the system is understood by all parties to be “winding down” (eg. users are abandoning it for a superior competitor), and thus the total stable-coin supply is expected to go down and never come back up, then the value of the vol-coins drops below zero, so vol-coins hyperinflate, and then stable-coins hyperinflate. In exchange for this fragility risk, however, vol-coins can achieve a much higher valuation, so the scheme is much more attractive to cryptoplatform developers looking to earn revenue via a token sale.

Note that both the SchellingDollar and seignorage shares, if they are on an independent network, also need to take into account transaction fees and consensus costs. Fortunately, with proof of stake, it should be possible to make consensus cheaper than transaction fees, in which case the difference can be added to profits. This potentially allows for a larger market cap for the SchellingDollar’s vol-coin, and allows the market cap of seignorage shares’ vol-coins to remain above zero even in the event of a substantial, albeit not total, permanent decrease in stable-coin volume. Ultimately, however, some degree of fragility is inevitable: at the very least, if interest in a system drops to near-zero, then the system can be double-spent and estimators and Schellingcoins exploited to death. Even sidechains, as a scheme for preserving one currency across multiple networks, are susceptible to this problem. The question is simply (1) how do we minimize the risks, and (2) given that risks exist, how do we present the system to users so that they do not become overly dependent on something that could break?


Are stable-value assets necessary? Given the high level of interest in “blockchain technology” coupled with disinterest in “Bitcoin the currency” that we see among so many in the mainstream world, perhaps the time is ripe for stable-currency or multi-currency systems to take over. There would then be multiple separate classes of cryptoassets: stable assets for trading, speculative assets for investment, and Bitcoin itself may well serve as a unique Schelling point for a universal fallback asset, similar to the current and historical functioning of gold.

If that were to happen, and particularly if the stronger version of price stability based on Schellingcoin strategies could take off, the cryptocurrency landscape may end up in an interesting situation: there may be thousands of cryptocurrencies, of which many would be volatile, but many others would be stable-coins, all adjusting prices nearly in lockstep with each other; hence, the situation could even end up being expressed in interfaces as a single super-currency, but where different blockchains randomly give positive or negative interest rates, much like Ferdinando Ametrano’s “Hayek Money”. The true cryptoeconomy of the future may have not even begun to take shape.


Vitalik Buterin


Author Simon de la Rouviere

Posted at 11:28 pm November 11, 2014.

Very interesting. On a related note: I’ve been exploring the use of time in a blockchain to determine value them without requiring exchange. It came from the thought experiment: “If there are millions of coins? How do we value them? Having thousands of paired currencies with low volumes are unfeasible.”

I haven’t come to any conclusions, but hope that if I share this, it could lead to more ideation. Something that sets cryptocurrencies apart from fiat, is that one can prove how long money has been held dormant. There are “days destroyed” which is of course how much accumulated time per tx has been spent. Then there is another metric, which I haven’t seen a lot of, is the “kinetic” potential of a blockchain: the total accumulated time at a snapshot that is in the utxo (which can be destroyed).

The concept is to determine an equation that when you combine what *could* be destroyed, vs how much has been destroyed and how frequently, you could determine some external value to that blockchain. This is based on the assumption that the more valuable and useful a blockchain is, the more it gets used (which might not be an entirely right assumption).

For example. If a cryptocurrency is used often, you will see that kinetic days (as a percentage of all time in the blockchain) would be lower than less successful blockchains. ie, people are not accumulating a lot. I remember there’s some correlation to the amount of possible inputs to possible outputs also required, but I don’t have my notes with me now.

By this definition, the “best” blockchain would be one where in each block, every output gets spent, so as to keep the kinetic time to zero. However, this is not reasonable. But theoretically, a ratio can exist which compares a blockchain to this ideal. It would then result in something like saying: “Bitcoin’s time is: 0.4 days: 1 days”. And Dogecoin is “0.3:1” for example. (“Days” are normalized according to nominal units).

Additional metrics could be employed such as comparing it to a “no-use” chain (only block rewards forever), a “full-use” chain (all outputs get spent in each block). I’m sure mining over time could also add to this.

The hopefully emergent factor from measuring their value in terms of time, is that creates a new unit of account: time itself. I’ve done a shoddy sample (asking friends over beers) how much they’ll pay for various things in “time”, and I think we have a certain to understanding how much things are worth in terms of time… But that may just have been drunk talk.

So, yes. As you can see. My thoughts aren’t fully formed around this, but I do think there’s some value in the blockchain in terms of using how the money moves over time as a metric for its worth.


Author Tymat

Posted at 3:58 am November 12, 2014.

Author Christoph Jentzsch

Posted at 10:38 am November 12, 2014.

Nice overiew of existing methods. But they may have very less to do with the actual trading price on an exchange. Is it still true, that the value of something is the amount of money someone is willing to pay for it. If a Dapp developer desperatly needs Ethers for his Dapp, and the miners wont let go of their Ether, speculating that Ether will gain in value, the price will increase regardless of above mentioned techniques. And both can not be forced to take part in the price finding via a SchellingCoin or something likewise. Also introducing a technique bound to some existing fiat (Dollar) does not make sense to me. I think we should not start to try to “regulate”, the distribution algorithm was fixed during the pre sale and we should stay with it and should not try to emulate a central bank. I think there is a better way to fight volatility. We have the unique opportunity to offer smart wallets, they could be connected to an “official”/recommended/standard non-profit decentralized exchange offering automated hedge contracts. I think natural market force is the only thing we can rely on and we should keep the system as simple as possible, but having the possibility to have a lot of Add-ons (Dapps).


    Author Vitalik Buterin

    Posted at 2:47 pm November 12, 2014.

    I’m not talking about ether, I’m talking about making separate stabilized currencies either inside Ethereum or on separate blockchains.

    > Also introducing a technique bound to some existing fiat (Dollar) does not make sense to me.

    It’s only one approach. If my empirical analysis and math is correct, then we should be able to give stability almost as good as fiat (eg. ) with endogenous estimators which are not technically tied to anything.


      Author Christoph Jentzsch

      Posted at 2:54 pm November 12, 2014.

      Ok, than I misunderstood. I thought this was about Ether. Creating a new stable currency within Ethereum would be great.


Author Moritz

Posted at 10:27 pm November 12, 2014.

SchellingDollar defiinitely seems like a better approach to cryptocurrency than all those AltCoins are taking these days. Why don’t they create a SchellingDollar-like coin?
But seriously, if it would be possible to turn Bitcoin to SchellingDollar, that would be great. Because Bitcoin has all the adoption which will definitely increase the stability of a SchellingDollar-like system.


Author Marc

Posted at 11:15 pm November 12, 2014.

Anyone who has read a page or two of Mises’ books knows how imbecile is the tentative of trying to control the price of money. Money is a commodity like any other, and it’s subject to valuations made by individuals when they compare the value of this particular commodity to other market goods.

Trying to control the price of ethers compared to dollars is like trying control the price of dollars compared to shoes, microwaves or banana units.


    Author Eugene Wang

    Posted at 3:26 am January 14, 2015.

    In an ideal case, money’s value is only in being spent. So people’s valuations of money value are based on how much money is floating around. If there’s more money than there are goods to pay for with it, then the extra money drives up the price like in an auction, and the value of money goes down as a result. On the other hand, if there isn’t much money going around, then people will have to take the lower price or not have anything at all, and if this is sustained, this eventually results in deflation.


Author Guest

Posted at 3:31 pm November 14, 2014.

On Seigniorage shares

” Thus, here lies the problem: if the system is understood by all parties to be “winding down” (eg. users are abandoning it for a superior competitor), and thus the total stable-coin supply is expected to go down and never come back up, then the value of the vol-coins drops below zero, so vol-coins hyperinflate, and then stable-coins hyperinflate.”

I would say one market test will be a group of speculators short-selling to break the peg. (George Soros scenario) Once the peg breaks, stablecoin falls and short sellers make money.

Make total stablecoin market cap = 500 million, shares market cap = 50 million & 10:1 leverage available for short sellers. It could be a realistic scenario. Because stable coin derives value from being “stable” breaching of a peg could be more critical than a technical price level breach for Bitcoin.


Author lotsoflight

Posted at 6:27 am November 15, 2014.

“Bitcoin holders have lost about 67% of their wealth”

Depends if you measure wealth in dollars or bitcoins. Personally I measure my wealth as the percentage of the total bitcoin supply I own and that hasn’t changed at all.


    Author Raythma

    Posted at 1:18 pm December 10, 2014.

    I thought wealth is measured in the personal purchasing power !


Author Jonathan Cross

Posted at 3:49 pm November 16, 2014.

> …provide their vote as [id, value] pair, where value is the actual *valid* and id is an identifier…



Author Sean Head

Posted at 4:22 am November 17, 2014.

BItcoin is always stable in its absolute self. It is always a unitary value. The minute we want to compare then we will have value shifts. Then we will ask, stabilize compared to what? The USD?

Then it begs the question of why should we be stabilizing with USD and not take it on its own?

I think we need to solve the root problem rather than attempting to cure the symptoms of the problem. Like a sickness, curing the symptom will not guarantee there is no recurrence.


    Author Vitalik Buterin

    Posted at 4:26 pm January 4, 2015.

    Stabilize with respect to the CPI.


Author J T

Posted at 8:48 pm December 6, 2014.

My perspective has been about the stability that could possibly be achieved by linking all or most significant currencies on a decentralized exchange. As discussed in “ideal money” we expect this to limit “central authorities” ability to over issue their currency supply. This in relation to one currency that has a fixed monetary supply becomes a type of stability not necessarily or otherwise measured previously in the history of our “economics”.

From Ideal Money:

” …beyond that there is the natural and logical concept of internationally
based comparisons. The currencies being compared, like now the euro,
the dollar, the yen, the pound, the swiss franc, the swedish kronor,
etc., can be viewed with critical eyes by their users and by those who
may have the option of whether or not or how to use one of them. This
can lead to pressure for good quality and consequently for a lessened
inflationary depreciation in value.””

We this phenomenon it seems would eventually bring about a stability which would allow us to properly price our currency at its true market value. There may or may not be a stability of “price”, but it seems to me that it is the very nature and caution of the problem: we cannot predict price, and any attempts at doing so are a corruption of the free market valuation system.

I think that people generally want stability for the wrong reasons in the wrong place. Globally we have never had a cohesive stability, and the way to bring it about has never been through price targeting of any kind.


Author desrever

Posted at 10:08 pm December 7, 2014.

What do you think about NuBits mechanisms? It has been stable at 1$ since its introduction early in September with large volumes. I think it is worth mentioning since you are referring to theories like Robert’s and Ametrano’s thare are already applied in Nu. I have seen you replied on reddit about the solution of “nothing at stake” some days ago, so you must be aware of this project. Why did you choose not to mention it?

NuShare price is up some figures, so the market already notice. What is your idea?


Author Joshua Pritikin

Posted at 12:21 am December 28, 2014.

Typo? “Anyone can purchase vol-coins for stable-coins or vol-coins for stable-coins”


Author Mark the Webalyst

Posted at 10:46 pm February 23, 2015.

A way to reduce volatility which you don’t mention is to have a coin that is linked to an asset – this is a bit like the algorithmic approaches you describe.

This mechanism comes for free with a Proof of Resource consensus model, where the coin is convertable from resources (farming) and to resources (consuming). An example of this is the non-blockchain autonomous network technology (ANT Technology) and Safecoin developed by MaidSafe.


Author Derick Smith

Posted at 12:13 am August 29, 2015.

I suspect this article was written by someone with an overactive imagination. Denmark is part of the EU, and cannot simply stop using Euros.


Author Meher Roy

Posted at 4:14 pm September 24, 2015.

A question

Short version:

I came across the idea of using a scaled prediction market to create a tracker asset. Why does your article not cover this technique? Is there a flaw in this approach?

Long version:

The way it could work is:

The price of a USD today is 1.22 ether. Let’s say someone creates a scaled prediction market with the limits as:

Lower bound (m): The price of a USD on 12:00 PST 30 June will be 0.1 ether.
Upper bound (M): The price of a USD on 12:00 PST 30 June will be 5 ether.

The scale is 0.1 units, so 50 units between 0.1 ether and 0.5 ether. The security pays off 1 ether per scaled unit.

If the price is 0.2 ether per USD on 30 June – security will pay off 1 ether.

If the price is 5.0 ether per USD on 30 June – security will pay off 49 ether.
Between these 2 bounds, the security pays off in accordance with the price of a USD in ether on 30 June.

The security will then trade at the price the market expects the Ether-USD to settle at after accounting for the effect of interest rates. This security should ‘track the USD dollar’ with a final payoff in the equivalent of ethers.

Can a stable currency be created by pooling similar securities in different amounts?

What are the disadvantages / flaws of this approach?


Paul Sztorc for discussing this approach on his blog. He generally seems dismissive of the BitUSD, so I thought I’d post here for a different view.


Author Jonathan Cross

Posted at 2:47 am November 21, 2015.

“…provide their vote as a [id, value] pair, where value is the actual valid and id is an identifier…”

Should this be “…where value is the actual value…” ?


Author thermo

Posted at 7:35 pm July 29, 2016.

In conclusion I bet you meant “stable assets for saving, volatile assets for trading…” 😀


Author loganspappy

Posted at 5:26 pm September 28, 2016.

Let transaction fee per coin control coins per block issued and never let difficulty fall. Problem solved? A base fee per transaction and fee per byte would also be needed. A standard PID controller on the transaction “error signal” would be used. Difficulty can easily get too high, but there is no incentive for attacks to make it go high because they can’t profit on downturns. Large miners can’t profit from random difficulty swings or manipulate it for profit. If difficulty is too high, miners will get out if fees are not high enough. But surviving this demonstrates the system is not a Ponzi scheme that will end when mining ends. A decrease in network hash rate might adjust the set point that the transaction fee error signal needs. With the right feedback (checks and balances) developers would not be required (or allowed) to choose any aspects of coin issuance (not total quantity, schedule, coins/block, difficulty, or fees). The market should be able to dictate everything without anyone needing to explicitly vote except by their marketplace choices (miners getting in or out, and transaction fees). If the market for the coin starts to dry up (it’s fees were too high to sustain miners) then it merely shows a more efficient coin is taking its place, and it should dry up. But the quantity of the at the point is constant.


Leave a Reply to lotsoflight
Cancel Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

View Comments (23) ...