The principle
Every round settles against a price that has been cryptographically signed by an independent, first-party oracle network. That signature is verified by the Prediction Arena smart contract before any payout occurs. If the signature is missing, malformed, expired, or produced by a key not in the oracle’s authorized guardian set, the contract refuses to settle. There is no manual override. There is no admin bypass. There is no “in case of emergency, set price manually” function.Who provides the price
Prediction Arena uses Pyth Network, a first-party oracle published by the same exchanges, market makers, and trading firms that originate the prices in the first place. This is fundamentally different from “scraper” oracles that pull numbers off public APIs and re-publish them — Pyth’s publishers sign the prices they themselves are quoting in their own venues, and the network aggregates and re-signs them. This matters because the security of the price is not “we trust Prediction Arena.” It is not even “we trust Pyth.” It is “we trust the same publishers that the rest of the trading industry already trusts to produce real prices, because they are signing those prices with the same key infrastructure they use for their own businesses.”What our role actually is
Our role in settlement is a liveness role only. We carry signed price bytes from the oracle network to the smart contract and pay the gas to do so. That is it. We cannot:- Substitute a different price.
- Forge a signature.
- Settle a round at a timestamp the oracle did not sign.
- Settle when the oracle’s reported confidence is outside the per-market safety threshold.
- Change which oracle the contract trusts.
