Yes, those "bozos" are the developers... they happen to be well respected in the bitcoin community for their work on btcsuite.
Being good at copying things doesn't mean we should trust them (you) with knives, i.e. consensus algorithm design.
They (you) should stay near the girls at the xerox machine.
That vulnerability is discussed in our whitepaper, which you can read here (you obviously didn't):
https://decred.org/dtb001.pdfConducting such an attack would require one to hold over 50% of active staking tickets (which would cost upwards of 18 million usd at this point in time assuming all tickets were purchase at the 30 day vwap [ once again... extremely difficult to do without significantly increasing ticket prices / the price of the attack])
It would also require a large percentage of the PoW hashrate to be controlled by the attacker... again, prohibitively expensive.
Obviously you didn't read what I wrote.
There is no way you will keep any where near 50% of the users online and participating in staking.So run the numbers with a more realistic participation percentage and you can see that this design can't possibly scale up to mass adoption. In the power-law distribution only about 33% of the wealth will be serious owners and of them many are not going to bother staking since that will end up pretty much an unprofitable activity due to competition. So in reality the math is going to look more like:
((1/0.33 - 1) × 0.20)3 = 0.06Where the attacking whales only need 6% of the hashrate to double-spend. And I didn't even get into the math of selfish-mining attacks which are much much more damning. The security is absolute dogshit.The only way this design makes any sense is for a very centralized stake where we trust that overlord. Which is precisely what you guys are counting on and you damn well know it. Else you are really really bozos if you can't do some simple math.
This is simply not true! If users are not online when their tickets are called to vote, they lose the subsidy. It's not like traditional PoS where you only receive subsidy when you are staking. There is a heavy monetary incentive to be online 100% of the time. This is why Decred has stake pools to allow for offline staking.
From the whitepaper (that you still did not read):
"It should also be noted that many well known mining
attacks, such as selfish mining [26] and stubborn mining
[27], will no longer function advantageously in a system
where there is effective decentralization of stake mining
and no PoW-PoS miner collusion. This is simply
because it is impossible to generate secret extensions
to blockchains without the assistance of stake miners."
I'm not here to argue with you about vulnerabilities. Every system has them. Hell, there are several ways to attack bitcoin.
But people just don't want to spend 18 million usd to destroy decred (and lose their investment). Over time, it will only become more expensive.