Relayer incentives are misaligned. The protocol assumes altruistic actors will pay transaction fees to submit proof packets for others, but provides no direct fee mechanism. This creates a classic public goods problem where the value of interchain communication is captured by applications, not infrastructure.
Why IBC's Relayer Economics Are a Ticking Time Bomb
A first-principles analysis of the economic incentives underpinning IBC's permissionless relayers. The current model, reliant on altruism and speculation, fails to provide a sustainable fee-for-security mechanism, posing a systemic risk to the Cosmos ecosystem's long-term viability.
The Invisible Subsidy
IBC's permissionless relayers operate on a flawed incentive model that externalizes costs, creating systemic fragility.
The subsidy is unsustainable. Projects like Osmosis and Neutron currently fund relayers via grants or direct payments, an opaque off-chain subsidy. This model breaks at scale; it's the equivalent of expecting Uniswap to manually pay every Ethereum validator.
Compare to intent-based systems. Architectures like Across and UniswapX internalize relay costs into user transaction fees via a solver network. IBC's decoupled model lacks this economic closure, making its security dependent on continuous project goodwill.
Evidence: Relayer centralization risk. Over 50% of IBC traffic flows through a handful of subsidized relayers. This is a direct result of the missing fee market, creating a centralized failure point masked by permissionless entry.
Executive Summary
IBC's security model is elegant, but its economic model for relayers is fundamentally broken, creating systemic risk and stifling adoption.
The Free-Rider Problem
Relayers are unpaid public goods that must pay gas fees to submit proofs. This creates a classic tragedy of the commons where economic activity does not fund its own infrastructure.\n- No fee market: Relayers cannot capture value from the transactions they enable.\n- Altruism is not a business model: Leading to centralization on a handful of subsidized operators.
Latency vs. Cost Death Spiral
To avoid paying gas for empty blocks, relayers batch transactions, introducing unpredictable latency. This makes IBC unsuitable for high-frequency DeFi, ceding ground to LayerZero and Axelar.\n- User experience suffers: Latency can swing from seconds to minutes.\n- Economic disincentive: Faster, more reliable service directly increases the relayer's cost with no upside.
The Solution: Intent-Based Relaying
The fix is to adopt an intent-based architecture where users express a desired outcome (e.g., 'swap A for B on Osmosis') and a solver network competes to fulfill it, internalizing relayer costs. This is the model used by UniswapX and CowSwap.\n- Economic sustainability: Solvers profit from bundle optimization and MEV capture.\n- Better UX: Users get guaranteed execution with no manual relayer management.
The Sovereign Stack Fallacy
Cosmos chains prize sovereignty, but the relayer model creates a hidden centralization vector. A collapse of major relayers would fragment the ecosystem, as seen in the Celestia data availability debate.\n- Single point of failure: Appchains depend on a non-sovereign, underfunded relayer layer.\n- Security != Liveness: IBC packets are provably secure but practically unstoppable if no one relays them.
The Core Argument: Fee-less Security is an Oxymoron
IBC's relayer model fails because it decouples the cost of security from the value being secured.
Security requires economic incentives. IBC's relayers are unpaid infrastructure operators who must pay gas fees on both chains. This creates a classic public goods problem where the network's security is a cost center, not a revenue stream.
Relayers are rational, not altruistic. A rational operator will stop relaying packets when costs exceed any non-financial benefit. This makes cross-chain state liveness dependent on charity, unlike fee-markets in Ethereum or Arbitrum.
The attack vector is economic. An adversary can spam low-value IBC packets to exhaust relayer capital, causing a denial-of-service for high-value transfers. This is a fundamental design flaw not present in fee-extracting bridges like Across or LayerZero.
Evidence: The Cosmos Hub's 2022 outage, where relayers stopped due to high gas costs, proves the model's fragility. Sustainable systems like Polygon's zkEVM or Optimism embed security costs directly into user transaction fees.
The Incentive Mismatch: IBC vs. Competing Models
A comparison of economic security models for cross-chain messaging, highlighting the passive incentive problem in IBC.
| Economic Model Feature | IBC (Permissionless Relayers) | LayerZero (Decentralized Verifier Network) | Across (Optimistic Verification) | Wormhole (Guardian Network) |
|---|---|---|---|---|
Relayer Compensation Source | User-paid fees (Tx gas + optional tip) | Protocol-owned liquidity (Stargate), User fees | Liquidity pool rewards (LP fees, $ACX emissions) | Protocol treasury (wormhole.org foundation) |
Incentive for Liveness (Uptime) | None (Passive, altruistic) | Staking slashing for downtime | Bond slashing for fraud | Reputation-based (off-chain governance) |
Incentive for Censorship Resistance | None (Relayers can filter packets freely) | Staking slashing for censorship | Bond slashing for censorship | Reputation-based (off-chain governance) |
Capital at Risk (Security Bond) | $0 |
| $2M+ per watcher (fraud bond) | $0 (Foundation-backed) |
Relayer Profit per Tx (Est.) | $0.10 - $0.50 (gas cost + tip) | $0.15 - $1.50 (fee share) | $0.20 - $2.00 (execution reward) | N/A (Foundation-subsidized) |
Economic Security Guarantee | None (Altruism & Liveness Assumption) | Cryptoeconomic (Staked capital slashed for malice) | Cryptoeconomic (Bond slashed for fraud) | Legal/Reputational (Centralized foundation) |
Primary Failure Mode | Liveness collapse (no profitable relays) | Cartel formation (staking dominance) | Bond insufficiency (scale of attack) | Foundation failure/capture |
Deconstructing the Time Bomb
IBC's core security model is undermined by its unsustainable, permissionless relayer economics.
Relayers are unpaid validators. IBC's security depends on relayers to submit proofs, but they earn zero protocol fees. This creates a massive public goods problem where altruism or side-deals must fund critical infrastructure.
The economic model is inverted. Unlike fee-markets in Ethereum or Solana, IBC relayers compete on cost, not service. This race-to-zero guarantees eventual centralization to the few actors who can subsidize operations.
Proof-of-Stake is circumvented. IBC's security inherits from connected chains, but the relayer layer is trust-minimized, not trustless. A centralized relayer cartel becomes a single point of censorship and failure.
Evidence: The Cosmos Hub's governance repeatedly fails to fund relayers via grants, proving the protocol-native incentive gap. Compare this to Across Protocol's bonded relayers or LayerZero's delegated verifiers, which explicitly price security.
The Bear Case: What Breaks First?
IBC's security is predicated on a decentralized, altruistic relay network. Its economic model is its primary vulnerability.
The Free Rider Problem
Relayers are unpaid public goods. They pay gas fees to submit proofs but earn no protocol fees, creating a classic tragedy of the commons.\n- Economic Mismatch: Value accrues to dApps, not infrastructure.\n- Centralization Pressure: Only well-funded entities (e.g., Cosmos Hub validators) can afford to relay, creating bottlenecks.\n- Breakpoint: Under high congestion, critical IBC paths fail as relayers drop unprofitable packets.
The Asymmetric Cost Bomb
Relayer costs scale with chain activity, not value transferred. A single spammy, low-value chain can bankrupt relayers for high-value corridors.\n- Cost Attack Vector: Flooding a channel with $1 transfers costs relayers $100s in gas.\n- No Surcharge Mechanism: Unlike Across or LayerZero, IBC has no native fee market to prioritize packets.\n- Solution Gap: Proposals like Packet Forward Middleware (PFM) increase complexity without solving the underlying incentive flaw.
Interchain Security as a Crutch
The proposed fix—using Interchain Security (ICS) to subsidize relayers—replaces one systemic risk with another. It centralizes economic security into a single provider chain.\n- Single Point of Failure: The Cosmos Hub becomes a too-big-to-fail relayer bank.\n- Cannibalizes Staking Yield: Hub stakers subsidize the whole ecosystem, diluting rewards.\n- Market Distortion: This kills the competitive relay market before it can evolve, unlike the fee-auction models in UniswapX or CowSwap.
Steelman: "The Market Will Fix It"
A defense arguing that market forces will naturally optimize IBC's relay costs, but this ignores the protocol's fundamental incentive misalignment.
Relayers are not miners. They are permissionless, altruistic actors with no protocol-level reward, unlike Proof-of-Work or Proof-of-Stake validators. This creates a pure cost center for a critical security function.
The fee market is broken. Packet fees are optional and denominated in the source chain's token, which the relayer must then sell. This exposes them to volatility risk and liquidity fragmentation, a problem solved by Across Protocol's unified liquidity model.
Market solutions create centralization. The logical 'fix' is for chains to subsidize professional relayers, creating a cartel of subsidized infrastructure. This mirrors the pre-MEV-Boost era of mining pools and contradicts IBC's decentralized ethos.
Evidence: The Cosmos Hub's $250k monthly relayer subsidy program proves the market failed. This is a protocol subsidy, not an organic fee market, setting a precedent for perpetual fiscal burdens.
The Path to Sustainability (If It Exists)
IBC's decentralized relayers are its core innovation and its primary economic vulnerability.
Relayers are public goods that execute the core IBC protocol, submitting proofs and paying destination-chain gas fees. They earn no protocol-level fees, creating a classic free-rider problem where application users benefit without paying the infrastructure cost.
The subsidy model is unsustainable. Current activity relies on Cosmos Hub's token inflation and direct grants from chains like Osmosis. This is a centralized funding mechanism masquerading as a decentralized network, vulnerable to governance capture and treasury depletion.
Fee abstraction is the proposed fix, allowing relayers to be paid via packet fees. This requires complex, non-standardized middleware and introduces new attack vectors. Competing systems like Across and LayerZero bake fees directly into their security models, making them economically self-sustaining from day one.
Evidence: The Cosmos Hub's $ATOM inflation funds the Replicated Security model. Without this subsidy, the current network of 100+ IBC relayers collapses, as seen in early 2023 when Osmosis grants paused and relay activity plummeted.
TL;DR for Protocol Architects
IBC's security model is elegant, but its permissionless relayer incentive mechanism is fundamentally broken, creating systemic fragility.
The Free Rider Problem
Relayers are public goods providers paid only via user-paid fees, leading to chronic under-provisioning. No protocol-level rewards or slashing for liveness.
- Result: Critical paths rely on altruism or CEX-operated relayers.
- Risk: Mass channel closure if major relayers fail, as seen in Osmosis <> Juno outages.
The Asymmetric Cost Bomb
Relayer costs scale with on-chain activity, not transaction value. A $1 IBC transfer costs the same to relay as a $10M one, destroying economic viability.
- Inefficiency: High-volume, low-value chains (e.g., gaming) are economically impossible to relay for.
- Consequence: Relayers prune unprofitable channels, fragmenting network connectivity.
Interchain Security vs. Relayer Security
IBC separates chain security (Interchain Security) from transport security (relayers). This is a critical fault line.
- Vulnerability: A compromised or malicious relayer can censor or delay packets, creating liveness failures.
- Contrast: Competing systems like LayerZero and Axelar use economically secured off-chain agents with stake-based slashing.
The MEV Extraction Vacuum
IBC's design intentionally prevents relayer MEV, forfeiting the primary sustainable incentive in other ecosystems (e.g., Across, UniswapX).
- Missed Opportunity: Relayers cannot profit from cross-chain arbitrage or ordering.
- Result: Forces reliance on unsustainable subsidy models, while intent-based bridges capture value.
Solution: Protocol-Owned Relayer Pools
Chains must directly fund and manage relayer sets for critical connections, treating them as essential infrastructure.
- Implementation: Use a portion of gas fees or treasury to fund a permissioned, incentivized pool.
- Precedent: Mimics how rollup sequencers are managed, ensuring baseline liveness.
Solution: Packet-Level Auction Markets
Introduce a competitive bidding layer where relayers auction for packet bundles, aligning cost with chain demand and value.
- Mechanism: Similar to Ethereum's block builder market or Across' embedded auction.
- Outcome: Enables efficient pricing for high-volume/low-value chains and creates a sustainable fee market.
Get In Touch
today.
Our experts will offer a free quote and a 30min call to discuss your project.