Stage 7.2: high-yield scheme (Ponzi), prediction/manipulation docs

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

CHANGELOG.md

@@ -2,7 +2,11 @@
 
 ## 未发布
 
-### 第七阶段：预测市场与操纵（7.1 预测市场、7.2 操纵检出）
+### 第七阶段：预测市场与操纵（7.1 预测市场、7.2 操纵检出与高息理财）
+
+- 高息理财（庞氏，Web3 "理财"页签，一个存档一次）：选日息 2 / 4 / 6 / 8 / 10%，付 800 CRC 宣传费（Poinbase 账户）开张。每晚下层新存入 (300 + 15 × 天数) × (日息 / 4%)^1.5 × 声望系数 × 0.6–1.4 的 CRC，池子上限 6000 + 200 × 天数，每晚被取走 3%；利息先用新存入的付，不够从 Poinbase 账户补，补不上挤兑崩盘；每晚被举报概率 = 2% + 0.5 × 日息 + 4% × 池子占上限的比例（封顶 90%），被举报同样崩盘。崩盘或被举报：池子没收，记 FRAUD 1200（单件上限之外，按游戏罪证口径记一条），下层声望清零，报纸报道。随时可"卷走"（点两次确认）：池子进 Poinbase 账户、污点全额，同样记罪证、清零声望。页面显示池子、昨晚存入、今晚利息、自己垫付的利息和"风声"（举报风险的三档提示）。
+- 复核（ops `research/ponzisim`，下层声望 50，每格 2000 局）：日息越高越赚得快也越容易爆；开张第 40 天、日息 6%，熬 5 夜卷走平均净赚约 4000（崩盘概率 30%），熬 10 夜约 4800（53%），熬 20 夜约 2400（80%）；日息 10% 熬 5 夜约 6800（41%），熬 20 夜约 900（89%）。每个选择的标准差和均值相当，"什么时候卷走"才是决策。
+- 游戏内验证：理财页签按日显示；4% 开张后一晚池子 372（昨晚存入 201、今晚利息 14.88）；点两次卷走后 Poinbase CRC 4200 → 4572，污点 372；另一次 6% 开张过 4 夜被举报，池子 456 被没收，产品关闭，页面显示"每个存档只能开一次"，晨间日志与新闻有记录。没有在游戏里验证：下层声望清零的实际数值（用游戏的 `SetReputation(0)`，没读回来看）、罪证数额的实际入账、付不出利息的挤兑路径（单元测试覆盖）、英文界面。
 
 - 操纵检出（7.2 前半）：Poinbase 主池上玩家自己的现货单会累计"推价幅度"（对数），每晚随价格回归衰减，预测盘线索里能看到。幅度超过 2% 后，价格盘押中且方向和推价一致、或 PSC 永续平仓盈利且方向一致，按幅度被查（25% + 6 × (幅度 − 2%)，封顶 95%）：预测盘本金和收益全部没收、永续盈利没收，收益的一半记 FRAUD（上限 400），永续账户冻结 3 天，报纸出一条调查新闻。把规则从最初设想的"单日推价 ≥ 15%"改成了 2% 起：manipsim 显示价格盘阈值离现价只有 3–10%，尾盘买 58 的成本就能赢上千，≥ 15% 的线形同虚设。
 - 复核（ops `research/manipsim`，第 30 天）：先空后砸本身不赚——永续单边滑点加现货来回价差，砸盘 4000–20000 配 5000–20000 的空单平均净亏 66–4400，只有砸盘 4 万（推价 57%）配小空单才勉强为正；尾盘拉价格过价格盘阈值在没有检出时几乎稳赢（成本 40–125，净赚 570–1390，亏钱概率 ≈ 0），加检出后下注 ≤ 1000 平均只赚 100–240、亏钱概率 40–60%，下注 3000 平均亏 400–1500。

src/Decentralized.Domain/Ponzi.cs

@@ -0,0 +1,80 @@
+using System;
+
+namespace Decentralized.Domain
+{
+    /// <summary>夜间发生的事。Kind：collapse（付不出利息，挤兑）/ reported（被举报）；Amount 是被没收的池子。</summary>
+    public sealed class PonziEvent
+    {
+        public string Kind;
+        public double Amount;
+    }
+
+    /// <summary>
+    /// 高息理财（庞氏）：玩家定一个日息，下层的人按日息和下层声望往池子里存 CRC。每晚先拿新存入的钱付利息，不够的从 Poinbase 账户的 CRC 补，
+    /// 补不上就挤兑崩盘；池子越大、日息越高越容易被举报，被举报同样崩盘。崩盘时池子被没收；玩家也可以随时卷走池子（污点全额）。
+    /// 每个存档只能开一次。
+    /// </summary>
+    public sealed class Ponzi
+    {
+        public bool Open, Done;
+        public double Rate, Pool, OwnPaid, AdCost, Inflow;
+        public int OpenDay = -1;
+
+        public static double Cap(int day) => Tuning.PonziCap0 + Tuning.PonziCapPerDay * day;
+
+        /// <summary>每晚新存入（均值）：基数随天数，日息高于 4% 时按指数放大，下层声望越高越多。</summary>
+        public static double InflowMean(int day, double rate, int lowerRep) =>
+            (Tuning.PonziBase0 + Tuning.PonziBasePerDay * day) * Math.Pow(rate / 0.04, Tuning.PonziRateExp) * Math.Max(0.3, Math.Min(1.5, 0.5 + lowerRep / 100.0));
+
+        public static double ReportChance(double rate, double pool, int day) =>
+            Math.Min(0.9, Tuning.PonziReport0 + Tuning.PonziReportRate * rate + Tuning.PonziReportSize * Math.Min(1, pool / Cap(day)));
+
+        public bool CanOpen(int day) => !Open && !Done && day >= Tuning.PonziMinDay;
+
+        /// <summary>开张：宣传费从账户的 CRC 里扣。</summary>
+        public bool Start(Wallet acct, double rate, int day)
+        {
+            if (!CanOpen(day) || acct.Avail(Assets.CRC) + 1e-9 < Tuning.PonziAdCost) return false;
+            acct.Add(Assets.CRC, -Tuning.PonziAdCost);
+            Open = true; Rate = rate; Pool = 0; OwnPaid = 0; AdCost = Tuning.PonziAdCost; OpenDay = day;
+            return true;
+        }
+
+        /// <summary>夜间结算。返回崩盘 / 被举报事件（没有事就返回 null）。</summary>
+        public PonziEvent Night(int day, int lowerRep, Wallet acct, Rng rng)
+        {
+            if (!Open) return null;
+            double mean = InflowMean(day, Rate, lowerRep);
+            double inflow = Math.Min(Cap(day) - Pool, mean * rng.Range(0.6, 1.4));
+            inflow = Math.Max(0, inflow); Inflow = inflow;
+            double interest = Pool * Rate;
+            double fromInflow = Math.Min(interest, inflow), rest = interest - fromInflow;
+            if (rest > acct.Avail(Assets.CRC) + 1e-9)
+            {
+                var ev = new PonziEvent { Kind = "collapse", Amount = Pool + inflow - fromInflow };
+                Open = false; Done = true; Pool = 0;
+                return ev;
+            }
+            if (rest > 0) { acct.Add(Assets.CRC, -rest); OwnPaid += rest; }
+            Pool += inflow - fromInflow;
+            Pool -= Pool * Tuning.PonziWithdraw;
+            if (rng.Chance(ReportChance(Rate, Pool, day)))
+            {
+                var ev = new PonziEvent { Kind = "reported", Amount = Pool };
+                Open = false; Done = true; Pool = 0;
+                return ev;
+            }
+            return null;
+        }
+
+        /// <summary>卷走：池子全部进账户，污点全额（骗局所得）。返回卷走的数额。</summary>
+        public double Rug(Wallet acct)
+        {
+            if (!Open) return 0;
+            double take = Pool;
+            acct.Add(Assets.CRC, take); acct.Taint += take;
+            Open = false; Done = true; Pool = 0;
+            return take;
+        }
+    }
+}

src/Decentralized.Domain/Tuning.cs

@@ -208,6 +208,16 @@ namespace Decentralized.Domain
         public const double ManipFree = 0.02, ManipBase = 0.25, ManipSlope = 6, ManipMax = 0.95;
         public const int ManipFreezeDays = 3;
 
+        /// <summary>高息理财（庞氏）：第几天起开放、开张的宣传费（CRC）、可选日息、每晚新存入的基数（随天数）和对日息的敏感指数、
+        /// 池子上限（随天数）、每晚被取走的比例、每晚被举报概率（基础 + 日息系数 + 池子占上限的比例系数）、卷走或崩盘时记的罪证。</summary>
+        public const int PonziMinDay = 15;
+        public const double PonziAdCost = 800;
+        public static readonly double[] PonziRates = { 0.02, 0.04, 0.06, 0.08, 0.10 };
+        public const double PonziBase0 = 300, PonziBasePerDay = 15, PonziRateExp = 1.5;
+        public const double PonziCap0 = 6000, PonziCapPerDay = 200, PonziWithdraw = 0.03;
+        public const double PonziReport0 = 0.02, PonziReportRate = 0.5, PonziReportSize = 0.04;
+        public const double PonziCrime = 1200;
+
         /// <summary>主交易对（信用点一侧）的深度随天数增长。</summary>
         public static double PoolDepth(int day) => PoolDepth0 * (1 + day / 60.0);
     }

src/Decentralized/ModFiles/Localization/en.csv

@@ -268,7 +268,7 @@ black.kind.Contraband.3,Contraband (high)
 black.kind.Tech,High-tech (markup)
 nightlog.bm.ready,"Black market: {0} arrived; a courier will come by once you open."
 item.web3guide.name,Web3 Handbook
-item.web3guide.desc,"Bank: depositing turns credits into CRC in your Poinbase account; withdrawing turns CRC back into credits and goes through compliance screening, which looks at the Poinbase account's taint. Trading: buys are paid in the quote coin, sells in the traded coin. Mixer: pick a coin, amount and rounds; each round takes a fee and lowers taint, rounds equal days of waiting, and the coins come back to the same address; the more you deposit, the worse the cleaning. Hardware wallets: on-chain coins sit in PLEDGER hardware wallets, each with its own balances and taint; open and connect them on the terminal's Wallets page. The Web3 page's trading, black market and mixer use the connected wallet, and coin-paying customers and mining rewards go into it too. Payments (black market, mixer, Ponero desk, listing fees) start as an invoice on the terminal; type the payee address on the wallet and hold ✓ to sign. The last two characters of an address are a checksum, so a one-character typo is usually caught; once in a while it happens to be valid and the coins go to an address nobody uses. DEX swaps also need a signature on the wallet. RatDigg miners (M1 / M2 / M3) are standalone machines with far more hash than a card and a lower power draw per hash; they need a battery, take modules and use no rig slots. Only the black market's miner dealers sell them, gated by black-market standing (M1 40, M2 60, M3 80), sometimes second-hand. When one burns out, repair it by putting electronic components in its repair slot in order; it comes back 20 health lower. Somewhere between day 50 and day 90 a "miner era" arrives, announced in the paper a few days earlier: the big farms halve their power costs, network hash climbs, GPU miners are diluted and low-end cards barely earn, while miners still do fine. Perps: the Perps tab on Poinbase uses your account CRC as margin, up to 5× on PSC and 3× on SPARK, one position per product, never long and short at once. Fills are worse than the quote (more so for bigger orders, like the spot pool) and opening and closing both cost a fee. Liquidation is checked only overnight against the day's average price: equity under 10% of notional wipes the margin. There is also a nightly funding payment; when the price is above its 7-day average, longs pay shorts. If a liquidation loses more than the margin, the insurance fund covers the gap; when it runs dry (a SPARK collapse can do that) winning positions are auto-deleveraged and give up half their profit; anything beyond that becomes your debt. Debt grows 2% a day, is repaid first from CRC in the account every night, blocks new positions and cash-outs, and after seven days items in your shop are seized to cover it; whatever is still short is written off and the perp account is banned for 30 days. Poinbase is a custodial account and can withdraw straight to the connected wallet; depositing from a wallet means sending to Poinbase's deposit address, which takes only CRC and PSC. More hardware wallets are sold by Dr. Jackson; drag one onto the trading terminal to add it, up to 5. The black market has cheaper ones. A wallet you no longer want can be destroyed on the Wallets page once its coins are moved out. Transfers pay a fee: slow, normal or fast, and gas prices rise and fall over roughly a week; when the network is congested fees rise and slow transactions may be dropped from the mempool. Check the full address before sending. Staking: CRA staked in the Revolution pool earns a daily rate that compounds into the stake; withdrawing means requesting first and waiting four days, with no interest while waiting and no way to take it early. The pool pays from a subsidy fund; when it runs low the rate is cut and word of big holders pulling out may spread. Treat that as a warning: once it collapses CRA is worthless within three days and four days of unlocking is too slow. The balance token SPARK can be minted and burned against CRA at the going price (with a fee); its price swings hard and crashes with the collapse. Staking, minting and burning are contract calls and need a signature on the wallet. Black market: coin only, no CRC, 30% above normal channels, with extra markup on high-tech goods and GPUs; the coin you pay leaves its share of taint with the seller and the goods carry no stolen tag; GPUs may be fake, inspect them yourself. Orders are cheaper than spot but take days and may be intercepted; merchants sell by type at their own price factor, 5+ items get 5% off and 10+ get 10% off, and a bulk merchant appears at random with the lowest prices but six days of waiting; escrow costs 5%, is released on delivery and refunded if the seller runs; advance release takes another 10% off, but a scammer keeps the money and only sellers with 30+ trades accept; the platform itself can rug, be taken over by enforcement, or a seller can be arrested, after which your orders get traced and crime logged; forum rumors can be warnings. An intercepted parcel sometLine truncated
+item.web3guide.desc,"Bank: depositing turns credits into CRC in your Poinbase account; withdrawing turns CRC back into credits and goes through compliance screening, which looks at the Poinbase account's taint. Trading: buys are paid in the quote coin, sells in the traded coin. Mixer: pick a coin, amount and rounds; each round takes a fee and lowers taint, rounds equal days of waiting, and the coins come back to the same address; the more you deposit, the worse the cleaning. Hardware wallets: on-chain coins sit in PLEDGER hardware wallets, each with its own balances and taint; open and connect them on the terminal's Wallets page. The Web3 page's trading, black market and mixer use the connected wallet, and coin-paying customers and mining rewards go into it too. Payments (black market, mixer, Ponero desk, listing fees) start as an invoice on the terminal; type the payee address on the wallet and hold ✓ to sign. The last two characters of an address are a checksum, so a one-character typo is usually caught; once in a while it happens to be valid and the coins go to an address nobody uses. DEX swaps also need a signature on the wallet. RatDigg miners (M1 / M2 / M3) are standalone machines with far more hash than a card and a lower power draw per hash; they need a battery, take modules and use no rig slots. Only the black market's miner dealers sell them, gated by black-market standing (M1 40, M2 60, M3 80), sometimes second-hand. When one burns out, repair it by putting electronic components in its repair slot in order; it comes back 20 health lower. Somewhere between day 50 and day 90 a "miner era" arrives, announced in the paper a few days earlier: the big farms halve their power costs, network hash climbs, GPU miners are diluted and low-end cards barely earn, while miners still do fine. Perps: the Perps tab on Poinbase uses your account CRC as margin, up to 5× on PSC and 3× on SPARK, one position per product, never long and short at once. Fills are worse than the quote (more so for bigger orders, like the spot pool) and opening and closing both cost a fee. Liquidation is checked only overnight against the day's average price: equity under 10% of notional wipes the margin. There is also a nightly funding payment; when the price is above its 7-day average, longs pay shorts. If a liquidation loses more than the margin, the insurance fund covers the gap; when it runs dry (a SPARK collapse can do that) winning positions are auto-deleveraged and give up half their profit; anything beyond that becomes your debt. Debt grows 2% a day, is repaid first from CRC in the account every night, blocks new positions and cash-outs, and after seven days items in your shop are seized to cover it; whatever is still short is written off and the perp account is banned for 30 days. Poinbase is a custodial account and can withdraw straight to the connected wallet; depositing from a wallet means sending to Poinbase's deposit address, which takes only CRC and PSC. More hardware wallets are sold by Dr. Jackson; drag one onto the trading terminal to add it, up to 5. The black market has cheaper ones. A wallet you no longer want can be destroyed on the Wallets page once its coins are moved out. Transfers pay a fee: slow, normal or fast, and gas prices rise and fall over roughly a week; when the network is congested fees rise and slow transactions may be dropped from the mempool. Check the full address before sending. Staking: CRA staked in the Revolution pool earns a daily rate that compounds into the stake; withdrawing means requesting first and waiting four days, with no interest while waiting and no way to take it early. The pool pays from a subsidy fund; when it runs low the rate is cut and word of big holders pulling out may spread. Treat that as a warning: once it collapses CRA is worthless within three days and four days of unlocking is too slow. The balance token SPARK can be minted and burned against CRA at the going price (with a fee); its price swings hard and crashes with the collapse. Staking, minting and burning are contract calls and need a signature on the wallet. Black market: coin only, no CRC, 30% above normal channels, with extra markup on high-tech goods and GPUs; the coin you pay leaves its share of taint with the seller and the goods carry no stolen tag; GPUs may be fake, inspect them yourself. Orders are cheaper than spot but take days and may be intercepted; merchants sell by type at their own price factor, 5+ items get 5% off and 10+ get 10% off, and a bulk merchant appears at random with the lowest prices but six days of waiting; escrow costs 5%, is released on delivery and refunded if the seller runs; advance release takes another 10% off, but a scammer keeps the money and only sellers with 30+ trades accept; the platform itself can rug, be taken over by enforcement, or a seller can be arrested, after which your orders get traced and crime logged; forum rumors can be warnings. An intercepted parcel sometLine truncated
 courier.odd1,...Package is here.
 courier.odd2,"(His hand stays in his pocket.) Sign here."
 courier.sign,Sign
@@ -629,3 +629,32 @@ nightlog.predict.manip,"Prediction ruled manipulation: ""{0}"", stake {1} confis
 news.manip.title,Exchange probes unusual trading
 news.manip.desc,Regulators report that someone moved the price with large spot orders and profited from derivatives and predictions; the funds were seized.
 perp.manip,Profit {0} on close ruled price manipulation and seized; perp account frozen for {1} days.
+web3.sub.ponzi,Yield
+ponzi.h,High-yield scheme
+ponzi.acct,Poinbase CRC: {0}
+ponzi.rate,Daily rate {0}%
+ponzi.pool,Pool {0} / cap {1}
+ponzi.inflow,New deposits last night {0}
+ponzi.interest,Interest due tonight {0}
+ponzi.own,Interest paid from your pocket {0}
+ponzi.wind,Word on the street: {0}
+ponzi.wind.low,calm
+ponzi.wind.mid,people are talking
+ponzi.wind.high,regulators are watching
+ponzi.idle,No scheme yet. Pick a daily rate and pay the marketing cost to launch.
+ponzi.done,The scheme is closed; only one per save.
+ponzi.ops,Actions
+ponzi.rug,Rug the pool ({0})
+ponzi.rug.confirm,Click again to confirm rugging {0}
+ponzi.rugged,"Took {0}, fully tainted."
+ponzi.open,Open a scheme
+ponzi.ad,Marketing cost {0} CRC from your Poinbase account.
+ponzi.start,Launch
+ponzi.started,Launched.
+ponzi.err,Not enough CRC in Poinbase for the marketing cost.
+nightlog.ponzi.collapse,"The scheme could not pay interest; run on the pool, {0} confiscated, fraud on record, lower-level standing wiped."
+nightlog.ponzi.reported,"The scheme was reported; pool {0} confiscated, fraud on record, lower-level standing wiped."
+news.ponzi.title,High-yield scheme collapses
+news.ponzi.desc,A high-yield scheme run in the lower levels was reported; investors mobbed it and regulators froze the funds.
+news.ponzi.rug.title,Investment scam
+news.ponzi.rug.desc,The operator of a high-yield scheme has run off with all the funds; lower-level investors lost everything.

src/Decentralized/ModFiles/Localization/zh.csv

@@ -267,7 +267,7 @@ black.kind.Contraband.3,违禁品（高）
 black.kind.Tech,高科技物品（加价）
 nightlog.bm.ready,"黑市：{0} 到货，开店后会有快递员上门。"
 item.web3guide.name,Web3 手册
-item.web3guide.desc,"银行：存入把信用点换成 Poinbase 账户里的 CRC；提取把 CRC 换回信用点，要过合规审查，审查看 Poinbase 账户的污点。交易：买入按计价币的数量支付，卖出按所交易币的数量卖出。混币器：选币种、填数量和轮数，每轮扣手续费并降低污点，轮数即等待天数，到期提回同一个地址；存入越多，清洗越差。硬件钱包：链上的币放在 PLEDGER 硬件钱包里，每个钱包的余额和污点各算各的；在终端的钱包页打开、连接。Web3 页的交易、黑市、混币器用已连接的钱包，用币付款的顾客和挖矿收益也进它。付款（黑市、混币器、Ponero 兑换处、上架费）先在终端开账单，再在钱包里手输收款地址、按住 ✓ 签名；地址末尾两位是校验位，输错一位多半会被拦下，偶尔碰巧合法，币就转进了没人用的地址。DEX 兑换也要在钱包上签名。Poinbase 是托管账户，可以直接提到已连接的钱包；从钱包充值要转到 Poinbase 的充值地址，只收 CRC 和 PSC。更多硬件钱包向杰克逊博士购买，拖到交易终端上添加，最多 5 个；黑市上也有更便宜的。不要的钱包可以在钱包页销毁，要先把币转走。转账要付手续费，分慢、普通、快三档，gas 价格大约一周一个起落；网络拥堵时手续费变贵，慢档可能被挤出内存池。转账前核对完整地址。质押：把 CRA 质押进革命军质押池每天有日息，利息并入本金；取出要先申请，等四天才到账，等待期间没有利息，也不能提前拿。质押池靠补贴池付息，补贴池见底会降息，有时还会传出大户撤出的消息，那是预兆：一旦崩盘，三天内 CRA 就一文不值，四天的解锁期来不及。平衡代币 SPARK 可以和 CRA 按价格互相铸销（收手续费），价格波动很大，崩盘时会跟着暴跌。质押、铸销都是合约调用，要在钱包上签名。RatDigg 矿机（M1 / M2 / M3）是独立的机器，算力比显卡大得多、耗电更省，要放电池才挖，可以放模块，不占矿架槽位；只在黑市的矿机商那里有，要黑市声望（M1 40、M2 60、M3 80），偶尔有二手的。暴毙后要往修理槽里放电子元件按顺序修好，修好健康少 20。第 50 到 90 天之间会有一次"矿机时代"，提前几天上报纸预告，之后大矿场的耗电成本砍半，全网算力涨上去，显卡矿工的收益被摊薄，低档显卡几乎不赚钱，矿机还行。永续合约：Poinbase 的"永续"页，用账户里的 CRC 当保证金，PSC 最高 5 倍、SPARK 最高 3 倍，一个品种只有一个仓位，不能同时多空。成交价比现价差一截（单越大差得越多，和现货池一样），开平仓还收手续费。强平只在夜里按当天均价检查，权益不到名义价值的 10% 就被强平，保证金没了；每晚还有资金费，价格比近 7 天均价高时多头付给空头。强平后亏光保证金还不够的缺口，先由保险基金垫，基金见底（SPARK 崩盘这类大行情会抽干它）后盈利的仓位会被自动减仓、少拿一半盈利，再不够就记成你的欠款：欠款每天涨 2%，账户里的 CRC 每晚先拿去还，没还清不能开仓、不能出金，七天不还就没收店里的物品抵债，抵不够的核销并拉黑永续账户 30 天。黑市：只收币，不收 CRC，价格比正常渠道贵 30%，高科技物品和显卡另有加价；付出去的币带着按比例的污点留在卖家那边，货不带赃物标签；显卡不保证真假，自己鉴定。订单比现货便宜，要等几天，路上可能被截获；商家按类型卖货，价格系数各不相同，一次订 5 件以上 95 折、10 件以上 9 折，大宗商家随机出现，价格最低但要等六天；托管多付 5% 托管费，收货后放款，卖家跑路时退款；提前放款再打九折，卖家若是骗子钱就没了，只有成交 30 单以上的卖家接受；平台自己也可能跑路，也可能被执法接管，或者卖家落网，之后你的订单会被追查、记罪证；论坛上的传闻可以当预兆。被截获的包裹有时会变成执法人员上门：签收当场记罪证并查封，拒签只损失货款。出售：在黑市的卖货页把储藏区里的违禁品、高科技物品和显卡上架，标价是参考价的 0.6 到 1.8 倍。倍率越高成交越慢（0.9 以下约一天，1.0 约两天，1.8 约十四天），货款带污点的可能性和比例也越高，近 7 天出售的量越大，污点越重；同时最多上架 10 件，上架收 5% 上架费，上架后可以改价（收 2% 改价费，标价按参考价重算，成交的快慢跟着新倍率走），成交扣 8% 抽成，货款托管 3 天后进钱包；卖假卡可能被买家看穿而退货，拉低好评；平台跑路时上架的货和未放款的货款都没了Line truncated
+item.web3guide.desc,"银行：存入把信用点换成 Poinbase 账户里的 CRC；提取把 CRC 换回信用点，要过合规审查，审查看 Poinbase 账户的污点。交易：买入按计价币的数量支付，卖出按所交易币的数量卖出。混币器：选币种、填数量和轮数，每轮扣手续费并降低污点，轮数即等待天数，到期提回同一个地址；存入越多，清洗越差。硬件钱包：链上的币放在 PLEDGER 硬件钱包里，每个钱包的余额和污点各算各的；在终端的钱包页打开、连接。Web3 页的交易、黑市、混币器用已连接的钱包，用币付款的顾客和挖矿收益也进它。付款（黑市、混币器、Ponero 兑换处、上架费）先在终端开账单，再在钱包里手输收款地址、按住 ✓ 签名；地址末尾两位是校验位，输错一位多半会被拦下，偶尔碰巧合法，币就转进了没人用的地址。DEX 兑换也要在钱包上签名。Poinbase 是托管账户，可以直接提到已连接的钱包；从钱包充值要转到 Poinbase 的充值地址，只收 CRC 和 PSC。更多硬件钱包向杰克逊博士购买，拖到交易终端上添加，最多 5 个；黑市上也有更便宜的。不要的钱包可以在钱包页销毁，要先把币转走。转账要付手续费，分慢、普通、快三档，gas 价格大约一周一个起落；网络拥堵时手续费变贵，慢档可能被挤出内存池。转账前核对完整地址。质押：把 CRA 质押进革命军质押池每天有日息，利息并入本金；取出要先申请，等四天才到账，等待期间没有利息，也不能提前拿。质押池靠补贴池付息，补贴池见底会降息，有时还会传出大户撤出的消息，那是预兆：一旦崩盘，三天内 CRA 就一文不值，四天的解锁期来不及。平衡代币 SPARK 可以和 CRA 按价格互相铸销（收手续费），价格波动很大，崩盘时会跟着暴跌。质押、铸销都是合约调用，要在钱包上签名。RatDigg 矿机（M1 / M2 / M3）是独立的机器，算力比显卡大得多、耗电更省，要放电池才挖，可以放模块，不占矿架槽位；只在黑市的矿机商那里有，要黑市声望（M1 40、M2 60、M3 80），偶尔有二手的。暴毙后要往修理槽里放电子元件按顺序修好，修好健康少 20。第 50 到 90 天之间会有一次"矿机时代"，提前几天上报纸预告，之后大矿场的耗电成本砍半，全网算力涨上去，显卡矿工的收益被摊薄，低档显卡几乎不赚钱，矿机还行。永续合约：Poinbase 的"永续"页，用账户里的 CRC 当保证金，PSC 最高 5 倍、SPARK 最高 3 倍，一个品种只有一个仓位，不能同时多空。成交价比现价差一截（单越大差得越多，和现货池一样），开平仓还收手续费。强平只在夜里按当天均价检查，权益不到名义价值的 10% 就被强平，保证金没了；每晚还有资金费，价格比近 7 天均价高时多头付给空头。强平后亏光保证金还不够的缺口，先由保险基金垫，基金见底（SPARK 崩盘这类大行情会抽干它）后盈利的仓位会被自动减仓、少拿一半盈利，再不够就记成你的欠款：欠款每天涨 2%，账户里的 CRC 每晚先拿去还，没还清不能开仓、不能出金，七天不还就没收店里的物品抵债，抵不够的核销并拉黑永续账户 30 天。黑市：只收币，不收 CRC，价格比正常渠道贵 30%，高科技物品和显卡另有加价；付出去的币带着按比例的污点留在卖家那边，货不带赃物标签；显卡不保证真假，自己鉴定。订单比现货便宜，要等几天，路上可能被截获；商家按类型卖货，价格系数各不相同，一次订 5 件以上 95 折、10 件以上 9 折，大宗商家随机出现，价格最低但要等六天；托管多付 5% 托管费，收货后放款，卖家跑路时退款；提前放款再打九折，卖家若是骗子钱就没了，只有成交 30 单以上的卖家接受；平台自己也可能跑路，也可能被执法接管，或者卖家落网，之后你的订单会被追查、记罪证；论坛上的传闻可以当预兆。被截获的包裹有时会变成执法人员上门：签收当场记罪证并查封，拒签只损失货款。出售：在黑市的卖货页把储藏区里的违禁品、高科技物品和显卡上架，标价是参考价的 0.6 到 1.8 倍。倍率越高成交越慢（0.9 以下约一天，1.0 约两天，1.8 约十四天），货款带污点的可能性和比例也越高，近 7 天出售的量越大，污点越重；同时最多上架 10 件，上架收 5% 上架费，上架后可以改价（收 2% 改价费，标价按参考价重算，成交的快慢跟着新倍率走），成交扣 8% 抽成，货款托管 3 天后进钱包；卖假卡可能被买家看穿而退货，拉低好评；平台跑路时上架的货和未放款的货款都没了Line truncated
 courier.odd1,……东西到了。
 courier.odd2,"（他的手一直放在口袋里）在这儿签个字。"
 courier.sign,签收
@@ -628,3 +628,32 @@ nightlog.predict.manip,预测被判操纵：「{0}」，本金 {1} 没收，记
 news.manip.title,交易所调查异常交易
 news.manip.desc,监管部门通报，有人用大额现货单推动价格，从合约和预测里获利，涉事资金已被追缴。
 perp.manip,平仓盈利 {0} 被判操纵价格，已没收，永续账户冻结 {1} 天。
+web3.sub.ponzi,理财
+ponzi.h,高息理财
+ponzi.acct,Poinbase CRC：{0}
+ponzi.rate,日息 {0}%
+ponzi.pool,池子 {0} / 上限 {1}
+ponzi.inflow,昨晚新存入 {0}
+ponzi.interest,今晚要付利息 {0}
+ponzi.own,自己垫付的利息 {0}
+ponzi.wind,风声：{0}
+ponzi.wind.low,平静
+ponzi.wind.mid,有人在议论
+ponzi.wind.high,监管盯上了
+ponzi.idle,还没有理财产品。选一个日息，付宣传费开张。
+ponzi.done,理财产品已关闭，每个存档只能开一次。
+ponzi.ops,操作
+ponzi.rug,卷走池子（{0}）
+ponzi.rug.confirm,再点一次确认卷走 {0}
+ponzi.rugged,卷走 {0}，污点全额。
+ponzi.open,开一个理财产品
+ponzi.ad,宣传费 {0} CRC，用 Poinbase 账户的钱。
+ponzi.start,开张
+ponzi.started,开张了。
+ponzi.err,Poinbase 里的 CRC 不够宣传费。
+nightlog.ponzi.collapse,理财付不出利息，挤兑，池子 {0} 被没收，记诈骗罪证，下层声望清零。
+nightlog.ponzi.reported,理财被举报，池子 {0} 被没收，记诈骗罪证，下层声望清零。
+news.ponzi.title,高息理财爆雷
+news.ponzi.desc,下层有人发行的高息理财被举报，投资人围堵，资金已被监管冻结。
+news.ponzi.rug.title,理财骗局
+news.ponzi.rug.desc,一款高息理财的发行人卷走了全部资金，下层的投资人血本无归。

src/Decentralized/Night.cs

@@ -232,6 +232,15 @@ namespace Decentralized
             var predictEvents = PredictGame.Available(day) || d.Predict.Markets.Count > 0
                 ? d.Predict.Night(day, PredictGame.ActiveIds(), m => PredictGame.Outcome(m, d), d.WalletAt, d.Rng, PredictGame.ClosePush) : new List<PredictEvent>();
             d.Predict.Drift(day, m => PredictGame.PublicProb(m, d, day), d.Rng);
+            var ponzi = d.Ponzi.Night(day, StoreReputation.GetStoreReputation(StoreReputation.FACTION_LOWER_LEVEL)?.GetReputation() ?? 0, d.Poinbase, d.Rng);
+            if (ponzi != null)
+            {
+                ps.secData.CommitCrime("FRAUD", (int)Tuning.PonziCrime);
+                StoreReputation.GetStoreReputation(StoreReputation.FACTION_LOWER_LEVEL)?.SetReputation(0);
+                ps.AddNightLog(L.T(ponzi.Kind == "collapse" ? "nightlog.ponzi.collapse" : "nightlog.ponzi.reported", Fmt.Credits(ponzi.Amount)), "cc7755");
+                News.Show("pd_news_ponzi_" + day, L.T("news.ponzi.title"), L.T("news.ponzi.desc"), 4);
+                Log.Info($"理财崩盘：{ponzi.Kind}，池子 {ponzi.Amount:0} 被没收");
+            }
             foreach (var e in predictEvents)
             {
                 if (e.Kind == "win") ps.AddNightLog(L.T("nightlog.predict.win", PredictGame.Question(e.Market), Fmt.Credits(e.Amount)));

src/Decentralized/Session.cs

@@ -35,6 +35,8 @@ namespace Decentralized
         public PerpBook Perps = new PerpBook();
         /// <summary>预测市场：盘口、持仓、观测记录（下注资金用 Poinbase 账户的 CRC）。</summary>
         public PredictBook Predict = new PredictBook();
+        /// <summary>高息理财（庞氏）：一个存档只能开一次。</summary>
+        public Ponzi Ponzi = new Ponzi();
         /// <summary>近几天的 gas 指数（每晚记明天的），情报线索里显示；最近一份局势简报。</summary>
         public List<double> GasHist = new List<double>();
         public List<string> Brief = new List<string>();

src/Decentralized/TerminalWindow.cs

@@ -349,6 +349,74 @@ namespace Decentralized
             });
         }
 
+        private static bool PonziVisible => Session.Data != null && (Session.Data.Ponzi.Open || Session.Data.Ponzi.Done || StoreStation.GetDayCounter() >= Tuning.PonziMinDay);
+        private static double _ponziRate = 0.04;
+        private static bool _ponziConfirm;
+
+        private static int LowerRep() => StoreReputation.GetStoreReputation(StoreReputation.FACTION_LOWER_LEVEL)?.GetReputation() ?? 0;
+
+        /// <summary>理财页：开一个高息理财产品，下层的人往里存钱；池子随时可以卷走，但每晚都有被举报的风险。用 Poinbase 账户的 CRC，不用签名。</summary>
+        private static void PonziPage(CustomUIBuilder b)
+        {
+            var d = Session.Data;
+            var pz = d.Ponzi;
+            int day = StoreStation.GetDayCounter();
+            Columns(b, l =>
+            {
+                l.AddHeader(L.T("ponzi.h"));
+                l.AddLabel(L.T("ponzi.acct", Fmt.Num(d.Poinbase.Avail(Assets.CRC))));
+                l.AddSeparator();
+                if (pz.Open)
+                {
+                    l.AddLabel(L.T("ponzi.rate", (pz.Rate * 100).ToString("0", CultureInfo.InvariantCulture)));
+                    l.AddLabel(L.T("ponzi.pool", Fmt.Num(pz.Pool), Fmt.Num(Ponzi.Cap(day))));
+                    l.AddLabel(L.T("ponzi.inflow", Fmt.Num(pz.Inflow)));
+                    l.AddLabel(L.T("ponzi.interest", Fmt.Num(pz.Pool * pz.Rate)));
+                    l.AddLabel(L.T("ponzi.own", Fmt.Num(pz.OwnPaid)));
+                    double risk = Ponzi.ReportChance(pz.Rate, pz.Pool, day);
+                    l.AddLabel(L.T("ponzi.wind", L.T(risk < 0.05 ? "ponzi.wind.low" : risk < 0.10 ? "ponzi.wind.mid" : "ponzi.wind.high")));
+                }
+                else l.AddLabel(L.T(pz.Done ? "ponzi.done" : "ponzi.idle", Tuning.PonziMinDay));
+            }, r =>
+            {
+                if (pz.Open)
+                {
+                    r.AddHeader(L.T("ponzi.ops"));
+                    r.AddButton(_ponziConfirm ? L.T("ponzi.rug.confirm", Fmt.Num(pz.Pool)) : L.T("ponzi.rug", Fmt.Num(pz.Pool)), () =>
+                    {
+                        if (!_ponziConfirm) { _ponziConfirm = true; Open(); return; }
+                        _ponziConfirm = false;
+                        double take = pz.Rug(d.Poinbase);
+                        PlayerStore.Instance.secData.CommitCrime("FRAUD", (int)Tuning.PonziCrime);
+                        StoreReputation.GetStoreReputation(StoreReputation.FACTION_LOWER_LEVEL)?.SetReputation(0);
+                        News.Show("pd_news_ponzi_rug_" + day, L.T("news.ponzi.rug.title"), L.T("news.ponzi.rug.desc"), 4);
+                        Log.Info($"卷走理财池 {take:0}，自己垫的利息 {pz.OwnPaid:0}");
+                        _message = L.T("ponzi.rugged", Fmt.Num(take));
+                        Session.Save();
+                        Open();
+                    });
+                    return;
+                }
+                if (pz.Done) return;
+                r.AddHeader(L.T("ponzi.open"));
+                r.BeginRow();
+                foreach (double rate in Tuning.PonziRates)
+                {
+                    double rt = rate;
+                    string t = (rate * 100).ToString("0", CultureInfo.InvariantCulture) + "%";
+                    r.AddButton(Math.Abs(rt - _ponziRate) < 1e-9 ? "[" + t + "]" : t, () => { _ponziRate = rt; Open(); });
+                }
+                r.End();
+                r.AddLabel(L.T("ponzi.ad", Fmt.Num(Tuning.PonziAdCost)));
+                r.AddButton(L.T("ponzi.start"), () =>
+                {
+                    _message = pz.Start(d.Poinbase, _ponziRate, day) ? L.T("ponzi.started") : L.T("ponzi.err");
+                    Session.Save();
+                    Open();
+                });
+            });
+        }
+
         private static int _predPick;
         private enum PredTab { Markets, Intel }
         private static PredTab _predTab = PredTab.Markets;
@@ -737,10 +805,11 @@ namespace Decentralized
                 if (_web3Tab == Web3Tab.Mixer && !Unlock.MixerUnlocked) _web3Tab = Web3Tab.Trade;
                 if (_web3Tab == Web3Tab.Black && !Unlock.BlackUnlocked) _web3Tab = Web3Tab.Trade;
                 if (_web3Tab == Web3Tab.Predict && !PredictGame.Available(StoreStation.GetDayCounter())) _web3Tab = Web3Tab.Trade;
+                if (_web3Tab == Web3Tab.Ponzi && !PonziVisible) _web3Tab = Web3Tab.Trade;
                 b.BeginRow();
                 foreach (Web3Tab t in Enum.GetValues(typeof(Web3Tab)))
                 {
-                    if ((t == Web3Tab.Mixer && !Unlock.MixerUnlocked) || (t == Web3Tab.Black && !Unlock.BlackUnlocked) || (t == Web3Tab.Predict && !PredictGame.Available(StoreStation.GetDayCounter()))) continue;
+                    if ((t == Web3Tab.Mixer && !Unlock.MixerUnlocked) || (t == Web3Tab.Black && !Unlock.BlackUnlocked) || (t == Web3Tab.Predict && !PredictGame.Available(StoreStation.GetDayCounter())) || (t == Web3Tab.Ponzi && !PonziVisible)) continue;
                     var tab = t;
                     string name = L.T("web3.sub." + t.ToString().ToLowerInvariant());
                     b.AddButton(tab == _web3Tab ? $"[{name}]" : name, () => { _web3Tab = tab; _message = null; _edit = null; Open(); });
@@ -748,6 +817,7 @@ namespace Decentralized
                 b.End();
                 if (_web3Tab == Web3Tab.Stake) { StakePage(b); return; }
                 if (_web3Tab == Web3Tab.Predict) { PredictPage(b); return; }
+                if (_web3Tab == Web3Tab.Ponzi) { PonziPage(b); return; }
                 if (_web3Tab == Web3Tab.Mining) { ReportPage(b); return; }
                 if (_web3Tab == Web3Tab.Mixer) { MixerPage(b); return; }
                 if (_web3Tab == Web3Tab.Black) { BlackPage(b); return; }
@@ -1212,7 +1282,7 @@ namespace Decentralized
             Open();
         }
 
-        private enum Web3Tab { Trade, Stake, Predict, Mining, Mixer, Black }
+        private enum Web3Tab { Trade, Stake, Predict, Ponzi, Mining, Mixer, Black }
         private static Web3Tab _web3Tab = Web3Tab.Trade;
         private static string _mixAsset = Assets.PSC;
         private static int _mixRounds = 2;

tests/Decentralized.Domain.Tests/Program.cs

@@ -1267,6 +1267,40 @@ internal static class Program
             Check(Math.Abs(manip - expect) < 40 && manip + win == 200 && noPush == 200, $"推价 6% 约 {expect:0} 次被判，被判 {manip}，没被判 {win}");
         });
 
+        Test("高息理财：开张条件、每晚存入与利息、崩盘、被举报、卷走", () =>
+        {
+            var acct = new Wallet { Address = "pb" }; acct.Add(Assets.CRC, 5000);
+            var p = new Ponzi();
+            Check(!p.Start(acct, 0.04, Tuning.PonziMinDay - 1), "没到开放日不能开");
+            Check(p.Start(acct, 0.04, Tuning.PonziMinDay) && Math.Abs(acct.Get(Assets.CRC) - (5000 - Tuning.PonziAdCost)) < 1e-9, "开张扣宣传费");
+            Check(!p.CanOpen(Tuning.PonziMinDay + 1), "已经开着不能再开");
+            // 池子增长不超过上限；利息先用新存入的付，不够才动账户
+            var rng = new Rng(3);
+            double maxPool = 0; bool ended = false;
+            for (int d = Tuning.PonziMinDay; d < Tuning.PonziMinDay + 40 && p.Open; d++)
+            {
+                var ev = p.Night(d, 50, acct, rng);
+                maxPool = Math.Max(maxPool, p.Pool);
+                Check(p.Pool <= Ponzi.Cap(d) + 1e-6, "池子不超过上限");
+                if (ev != null) { ended = true; Check(ev.Amount >= 0 && p.Done && !p.Open && p.Pool == 0, "崩盘后池子清零、产品关闭"); }
+            }
+            Check(maxPool > 0 && ended, "池子涨起来、最后会崩盘（40 晚内）");
+            Check(!p.CanOpen(100) && p.Rug(acct) == 0, "崩盘后不能重开也不能卷走");
+            // 付不出利息就挤兑
+            var poor = new Wallet { Address = "x" }; poor.Add(Assets.CRC, Tuning.PonziAdCost);
+            var q = new Ponzi(); q.Start(poor, 0.10, 20);
+            q.Pool = 100000; var ev2 = q.Night(20, 50, poor, new Rng(1));
+            Check(ev2 != null && ev2.Kind == "collapse", "账户里没钱补利息：崩盘");
+            // 卷走：池子进账户、污点全额
+            var w = new Wallet { Address = "y" }; w.Add(Assets.CRC, 2000);
+            var r = new Ponzi(); r.Start(w, 0.04, 20); r.Pool = 5000;
+            double cash = w.Get(Assets.CRC);
+            Check(Math.Abs(r.Rug(w) - 5000) < 1e-9 && Math.Abs(w.Get(Assets.CRC) - cash - 5000) < 1e-9 && Math.Abs(w.Taint - 5000) < 1e-9 && r.Done, "卷走：池子进账户，污点全额");
+            // 被举报概率随日息和池子升高
+            Check(Ponzi.ReportChance(0.10, 5000, 20) > Ponzi.ReportChance(0.02, 5000, 20) && Ponzi.ReportChance(0.04, 9000, 20) > Ponzi.ReportChance(0.04, 100, 20), "日息越高、池子越大越容易被举报");
+            Check(Ponzi.InflowMean(20, 0.08, 50) > Ponzi.InflowMean(20, 0.04, 50) * 2, "日息高于 4% 时存入按指数放大");
+        });
+
         Test("预测市场：先验概率", () =>
         {
             Check(Math.Abs(PredictMath.PurityAtLeast(8500, 8000, 8999) - 0.5) < 1e-9, "纯度 8500 以上一半");