The Hedera network reaches consensus on transactions through a token-weighted process, in which a particular transaction becomes final when nodes holding an aggregate of over two-thirds of tokens have validated that transaction. This means that an attacker could disrupt the network by owning or controlling one-third of the tokens. This is the reason we initially have a very slow token release schedule. By having almost 65% of tokens held by Hedera treasury and proxy-staked to trusted nodes (that is, nodes hosted by Hedera Council members), an attack becomes virtually impossible. To protect the Hedera network from certain classes of attack, we anticipate that the circulating supply of tokens will remain below 10% of the total token supply for the first year and below 33% of the total token supply for at least five years.