8. BC cost vs investment
The economic shape of the TG3 deal: a €400K investment against the ~€1.0M Blockchain-Commitment obligation it imposes — plus the minimal cost of engineering out the risks on top. How that cost and the risk are allocated between TG3 and the founders is the subject of 9. Risks & risk sharing.
BC cost vs the investment
How much "pure" investment is this, really? TG3 puts in €400K (two tranches). But the architecture it mandates carries a ~€1.0M 15-year commitment (6. Interactive model defaults: build + DeFi-eng + audit + chain = €1.02M ≈ 2.6× the cheque). Net the obligation against the cheque and the capital left for non-BC growth is ≈ −€620K — the commitment consumes the entire €400K by ~Year 8, then runs ~€620K into the red.
| Amount | vs €400K investment | |
|---|---|---|
| Investment (2 tranches) | €400K | 1.0× |
| BC commitment, 15-yr (build + eng + audit + chain) | ~€1.02M | 2.6× |
| Net investment for non-BC growth | ≈ −€620K | −1.5× |
| Investment exhausted by | ~Year 8 | — |
The cost floor — and why it can't be used
The €1.02M above is the responsible operating cost. Strip out everything not strictly required to ship and run — no maintenance, no re-audits, no monitoring — and the floor is just the one-off build, a single initial audit, and the unavoidable on-chain fees:
| Scenario | What's included | 15-yr cost | vs €400K |
|---|---|---|---|
| Floor — build once, run, ignore | build €20K + initial audit €24K + chain fees €198K | ~€242K | 0.6× → net +€158K |
| Responsible | + maintenance (40 eng-days/yr) + re-audits (4 days/yr) | ~€1.02M | 2.6× |
| Risk-hardened | + monitoring, rail fallback, fast-exit, insurance, legal (next section) | ~€1.6–2.7M | 4–7× |
The floor is the only scenario in which the deal is cost-positive — and it is precisely the one no founder under uncapped, return-of-subscription liability can actually choose. Shipping a cross-chain escrow that holds client funds with no monitoring and no re-audits maximises the very risks the SHA makes the founders personally and uncapped liable for. The ~€0.78M gap from floor to responsible is the price of not being reckless; the ~€0.6–1.7M above that is the price of actively reducing the risk. (Reproduce the floor in the interactive model by setting Maint — eng days/yr and re-audit days/yr to 0.)
…and that is before any breach. On top of the negative net sits an uncapped tail risk: a bridge exploit or insolvency can lose the entire escrow TVL held on Etherlink at that moment — the live bridge already locks ~$1.05M — and the SHA, as drafted, imposes uncapped liability for any breach on the founders. So that loss lands on them personally and without limit. The real shape of the deal: a €400K cheque attached to a ~€1.0M obligation and an uncapped, multi-million-dollar third-party risk surface — all on a 60/40 founder cap table, and the cheque itself clawable back on breach (return of subscription).
The asymmetry is stark — and sharper once the breach remedies include return of the subscription. On a breach TG3 can recover its €400K and pursue the founders under uncapped liability — so TG3's effective downside trends toward zero, while the founders hand back the cheque, absorb the ~€1.0M of sunk build + ownership, and stay liable without limit for a loss a third-party bridge caused. One uncontrollable exploit can exceed the whole investment many times over. In that scenario the "investment" functions less like risk capital and more like a fully-secured loan with unlimited recourse to the founders.
Minimal cost of engineering out the risks
The €1.0M base assumes the risks of 9. Risks & risk sharing are simply accepted. Reducing them to a defensible level costs more — and some of it cannot be bought away at any price. Minimal, conservative mitigation, on the model's day-rate basis (€500/day eng, €4,000/day audit):
| Mitigation | Risk it targets | One-off | Per year |
|---|---|---|---|
| Bridge-config monitoring + CCIP fallback + dwell-time minimisation | protocol exploit (likelihood) | ~€15–25K | ~€5–10K |
| Cross-chain solvency monitor + fast-exit tooling | bridge solvency / liquidity | ~€10–20K | ~€5–10K |
| Deeper cross-chain security audit (initial + per-change) | exploit / code | ~€20–40K | folds into re-audits |
| Custody / MiCA legal opinions (Malta + Estonia) | legal / custody | ~€15–30K | ~€5K |
| Smart-contract / bridge-exploit insurance (~$1M cover) | tail loss | — | ~€20–80K |
| Minimal total | ~€60–115K | ~€35–105K/yr |
Over the 15-year term that is ~€0.6–1.7M on top of the €1.02M base — risk-hardening alone can rival or exceed the entire commitment, and is itself multiples of the €400K investment. Insurance — the only real lever on the tail loss — dominates and recurs every year.
And it still does not reach zero. Some risk is irreducible at any spend: insurance carries limits, exclusions, and counterparty risk of its own; a protocol exploit can exceed cover; regulatory reclassification cannot be insured; and the Etherlink bridge's own solvency is entirely outside VF's control. So even maximal spend leaves a residual that can only be carved out or shared — the case made in 9. Risks & risk sharing.
Net: the deal is €400K in (clawable back on breach) against ~€1.0M of committed cost + ~€0.6–1.7M to engineer the risks down + an uncapped, irreducible tail — a cost-and-risk load that is 4–7× the investment before a single thing goes wrong.
Figures are best-effort engineering/market estimates for internal negotiation, drawn from the interactive model defaults; insurance pricing is indicative (DeFi cover commonly ~2–8%/yr of the sum insured). Not a quote or legal advice.