Dark Forest Theory: A Formal Derivation黑暗森林理论：一个形式化推导

0. Introduction

The “Dark Forest Theory” proposed by Liu Cixin in the Three-Body Problem series is a speculative theory about interaction strategies among cosmic civilizations. This article attempts to provide a rigorous formal derivation of the theory using tools from game theory and decision theory, starting from the axioms given in the novel.

The core argument proceeds in three steps: first, we prove that the two original axioms from the novel are insufficient on their own to derive the Dark Forest; then we supplement the necessary structural conditions and construct an incomplete information game model; finally, we derive sufficient conditions for the Dark Forest as a risk-dominant equilibrium and discuss the limitations of this conclusion.

1. Axiomatic System

Let $\mathcal{U}$ be the set of all civilizations in the universe, with $|\mathcal{U}| \geq 2$.

Axiom A1 (Survival Axiom): For any civilization $c_i \in \mathcal{U}$, survival is its highest-priority objective. Let $u_i$ be the utility function of civilization $c_i$, and $S_i$ be the event “civilization $c_i$ persists.” Then:

$$\forall c_i \in \mathcal{U}, \quad \forall X: \quad u_i(S_i) > u_i(X \mid \neg S_i)$$

Survival has lexicographic priority.

Axiom A2 (Finite Resources Axiom): The total amount of matter and energy in the universe is finite. Let $R$ be the total resource quantity of the universe and $r_i(t)$ the resources held by civilization $c_i$ at time $t$. Then:

$$\sum_{i} r_i(t) \leq R, \quad \forall t$$

One civilization’s resource expansion compresses the available resource space of others.

2. Insufficiency of the Axioms

Before proceeding to the formal derivation, it is necessary to address a fundamental question: can the Dark Forest be derived from A1 and A2 alone?

Proposition 0: A1 and A2 alone cannot imply the Dark Forest.

Proof (by counterexample construction): Let two civilizations $c_1, c_2$ satisfy A1 (survival priority) and A2 (finite resources). Consider scenarios in which any of the following additional conditions hold:

(a) Verifiable intentions: There exists a mechanism enabling $c_1$ to reliably verify $c_2$’s goodwill, and vice versa. In this case, both parties can confirm the other’s non-hostility, and cooperation becomes a sustainable equilibrium.

(b) Enforceable contracts: There exists an enforceable interstellar treaty mechanism (e.g., arbitration by a super-civilization or some universe-level locking protocol), such that violators are punished. Cooperation can then be maintained by institutional means.

(c) Defense significantly dominates offense: If technological conditions make first strikes nearly impossible to succeed (defense costs are far lower than offense costs), then a surprise attack has no positive expected payoff, and the security dilemma does not escalate.

(d) Minimal communication delay with frequent interaction: If civilizations can interact at high frequency, then by the Folk Theorem, patient participants can sustain cooperative equilibria in repeated games.

Under any of these conditions, even with finite resources and survival priority, both parties may maintain peace through division of labor, trade, boundary agreements, or deterrence equilibria.

Therefore, A1 and A2 at most imply that “conflict pressure exists” or “a security dilemma may arise,” but they cannot imply “one must remain silent and destroy upon discovery.” $\square$

Implication: The Dark Forest is not a direct logical consequence of the two axioms. To complete the derivation, additional conditions regarding information structure, communication constraints, and capability evolution must be supplied.

3. Structural Conditions

The following five conditions, together with A1 and A2, constitute the minimal sufficient assumption set for the Dark Forest. Each condition is independent — it cannot be derived from the others — and removing any one may open a channel to cooperative equilibrium.

Condition B1 (Anarchic Structure): There exists no supra-sovereign institution in the universe capable of enforcing adjudication, punishing contract violations, or imposing peace. Formally, there is no external enforcement function $E$ such that any agreement $A_{ij}$ between civilizations can be credibly enforced.

Condition B2 (Unverifiable Intentions): For any two civilizations $c_i, c_j$, $c_i$ cannot reliably infer the true type $\theta_j \in {\text{benign}, \text{hostile}, \text{neutral}}$ of $c_j$. Let $m_j$ be any signal emitted by $c_j$. Then:

$$P(\theta_j \mid m_j) = P(\theta_j), \quad \forall m_j$$

Communication is cheap talk and carries no verifiable information about intentions. Benign and hostile civilizations can emit identical signals.

Condition B3 (Light-Speed Lag): Information propagation speed is bounded (at most the speed of light $c$). Let $d_{ij}$ be the distance between civilizations $c_i$ and $c_j$. The minimum round-trip communication delay is $\tau_{ij} \geq 2d_{ij}/c$. This implies:

• Verification cycles are extremely long: any information about the other party’s current state is already outdated.
• Repeated game frequency is extremely low: the Folk Theorem requires sufficiently high interaction frequency and sufficiently low discount rates. When $\tau_{ij}$ is very large, the effective discount factor $\delta \approx e^{-r\tau_{ij}} \to 0$, making the Folk Theorem’s cooperation conditions hard to satisfy.
• This is a physical constraint, independent of civilizations' willingness or technological level.

Condition B4 (Technological Explosion): A civilization’s technological capability may undergo exponential growth in a time span far shorter than a communication cycle. Let $x_i(t)$ be the strategic capability of civilization $c_i$ at time $t$, with evolution:

$$x_i(t + \tau) = x_i(t) \cdot e^{g_i \tau + \xi_i}$$

where $g_i$ is the base growth rate and $\xi_i$ is a random term with positive variance $\sigma^2 > 0$. Since $\sigma^2 > 0$, a current $x_j(t) \ll x_i(t)$ does not constitute a reliable upper bound on $x_j(t + \tau)$.

Condition B5 (First-Mover Advantage): Once both parties have located each other, a first strike can, under certain parameter conditions, significantly increase the attacker’s survival probability. Let $q_i$ be the probability of a successful first strike and $K_i$ the cost of striking. There exists a non-empty parameter interval in which the expected utility of a first strike exceeds that of restraint.

4. Formal Model

4.1 Utility Function

Let the extinction loss be $M$ (taken to be extremely large), the first-strike cost be $K_i$, and the ordinary gains from cooperation/trade be $G_i$. The utility of civilization $c_i$ is:

$$U_i = -M \cdot \mathbf{1}{\text{extinction}} - K_i \cdot \mathbf{1}{\text{first strike}} + \varepsilon G_i$$

where $M \gg K_i \gg \varepsilon G_i$. This structure directly reflects A1: survival overrides everything — no cooperation gain, however large, outweighs “not being annihilated.”

4.2 Threat Probability

Define the following probabilities:

• $p$: prior probability that the other party is currently hostile
• $\gamma$: probability that the other party, currently non-hostile, evolves into a lethal threat within the verification window $\tau$ (driven by B4)
• Base threat probability: $\pi = 1 - (1-p)(1-\gamma)$

$\pi$ integrates two types of risk: the other party is dangerous now, or the other party is not dangerous now but will become so soon. By B4 ($\sigma^2 > 0$), $\gamma > 0$; by B2 (unverifiable intentions), $p$ cannot be updated to 0. Therefore $\pi > 0$.

5. Core Derivation

Proposition 1: Peace Declarations Cannot Constitute Credible Commitments

By B2, signals carry no verifiable information. Any “I have no hostile intent” declaration is cheap talk: benign and hostile civilizations alike can emit identical signals.

Therefore, for any peace declaration $m$, as long as $\pi > 0$:

$$0 < P(\text{the other is a threat} \mid m) < 1$$

Communication cannot eliminate fear. Not because no one would express goodwill, but because hostile parties would express goodwill too.

Proposition 2: The Chain of Suspicion Drives Subjective Threat Probability Toward 1

Under the constraints of B2 and B3, $c_i$ faces not only first-order uncertainty about “whether the other is dangerous,” but also recursive higher-order uncertainty:

• Order 0: The other party may be a threat, with probability $\pi$
• Order 1: Even if the other party is not a base threat, it may preemptively strike out of fear of me
• Order 2: Even if the other party does not fear me, it may fear that I fear it…

Linearly approximating the “strike out of fear” probability as the current subjective threat estimate $r_n$, we obtain the recurrence:

$$r_0 = \pi, \qquad r_{n+1} = \pi + (1 - \pi) r_n$$

The meaning of this recurrence: the $(n+1)$-th order threat = base threat + (probability the other party is not a base threat but attacks due to $n$-th order fear).

Solution:

$$r_n = 1 - (1 - \pi)^{n+1}$$

Limit:

$$\lim_{n \to \infty} r_n = 1 \qquad (\text{provided } \pi > 0)$$

As long as the base threat probability is nonzero, the higher-order belief recurrence causes subjective threat perception to converge exponentially to 1.

Robustness note on the linear approximation:

The above recurrence assumes a linear reaction function. If the reaction function is nonlinear (e.g., a threshold effect where civilizations take no action when threat perception falls below some threshold $r^\text{*}$),

the chain of suspicion may not monotonically converge to 1 but instead have a stable intermediate fixed point $r^\text{*} < 1$. In such cases, the strong Dark Forest conclusion weakens to a “partial vigilance state.” However, by A1 (extinction loss $M$ is extremely large),

a rational civilization’s action threshold $r^\text{*}$ is pushed very low, and the linear approximation remains reasonable across most parameter ranges.

Proposition 3: After Exposure, Preemptive Strike Becomes the Rational Strategy Across a Broad Parameter Range

Once both parties have located each other, the game enters the post-exposure phase. Civilization $c_i$ faces two choices:

Expected utility of first strike (Attack):

$$U_i(A) = -(1 - q_i) M - K_i$$

where $q_i$ is the probability of a successful strike. If the strike succeeds, survival; if it fails, extinction by retaliation.

Expected utility of restraint (Wait):

$$U_i(W) = -r_n M$$

where $r_n$ is the $n$-th order subjective threat probability (the probability the other party eventually attacks).

A first strike is preferable to waiting if and only if:

$$U_i(A) > U_i(W) \quad \Longleftrightarrow \quad r_n > 1 - q_i + \frac{K_i}{M}$$

Since $M$ is extremely large, $K_i / M \approx 0$. The condition simplifies to $r_n > 1 - q_i$.

By Proposition 2, $r_n$ increases monotonically with higher-order reasoning and approaches 1. Therefore, as long as the probability of a successful first strike $q_i$ is not extremely close to 0, the inequality is satisfied after finitely many levels of reasoning.

This is the post-exposure logic of the Dark Forest: not because the other party is certainly an enemy, but because under the conditions of unverifiable intentions and infinite extinction cost, “possibly an enemy” is sufficient to drive rational preemption.

Proposition 4: Before Exposure, Hiding Dominates Revealing

Let the detection probability when civilization $c_i$ chooses to reveal be $\lambda_R$, and when it chooses to hide be $\lambda_H$, with $\lambda_R > \lambda_H$. Let the post-detection extinction risk be $r^\text{*}$ (determined by Proposition 3)

and the background extinction risk when undetected be $\bar{r}$, where $r^\text{*} > \bar{r}$. Let $B_i$ be the cooperation benefits of public exposure and $C_i$ the operational cost of hiding.

$$U_i(\text{reveal}) = -[\lambda_R r^\text{*} + (1 - \lambda_R) \bar{r}] M + B_i$$

$$U_i(\text{hide}) = -[\lambda_H r^\text{*} + (1 - \lambda_H) \bar{r}] M - C_i$$

The difference:

$$U_i(\text{reveal}) - U_i(\text{hide}) = (B_i + C_i) - (\lambda_R - \lambda_H)(r^\text{*} - \bar{r}) M$$

Therefore, as long as:

$$(\lambda_R - \lambda_H)(r^\text{*} - \bar{r}) M > B_i + C_i$$

we have $U_i(\text{hide}) > U_i(\text{reveal})$.

Since $M$ is extremely large, this inequality holds under the vast majority of parameter conditions. Even if public broadcasting only slightly increases the probability of detection, the amplification effect of extinction cost is sufficient to make broadcasting a negative-expected-value action.

6. Main Theorem

Definition (Dark Forest State): A system is in the Dark Forest state if for every civilization $c_i \in \mathcal{U}$, both of the following hold simultaneously:

1. Actively revealing one’s own location decreases its expected survival rate
2. Once mutually located with another civilization, restraint is not a risk-dominant strategy

Theorem (Sufficient Conditions for the Dark Forest): In a civilization system satisfying A1, A2, and B1–B5, if the base threat probability $\pi > 0$, then there exists a risk-dominant sequential equilibrium:

1. Pre-exposure: Civilizations prefer hiding to active broadcasting (Proposition 4).
2. Post-exposure: Civilizations prefer preemptive strike to restraint, holding across a broad parameter range (Proposition 3).
3. System level: The multi-civilization environment exhibits widespread silence and low visibility. Moreover, the more conspicuous a civilization, the more likely it is to be detected and eliminated; the surviving sample is negatively selected by the “silence strategy.”

Proof sketch (backward induction):

• Endgame stage: Once mutually located, by Propositions 2 and 3, preemptive strike dominates waiting when $r_n > 1 - q_i$. Since $r_n \to 1$, this condition is met after finitely many levels of reasoning.
• Preceding stage: Anticipating the post-exposure danger, by Proposition 4, hiding dominates revealing.
• Evolutionary level: In a multi-civilization environment, civilizations adopting the silence strategy have systematically higher survival probabilities than those adopting the exposure strategy, so long-run evolution selects for silence. $\square$

Caveat on “unique equilibrium”: This theorem asserts that the Dark Forest is a risk-dominant equilibrium under the given conditions, but does not rule out the theoretical possibility of cooperative equilibria under certain extreme parameter combinations. Specifically, if $q_i$ is very small (strikes almost never succeed) or $B_i$ is very large (cooperation benefits are overwhelmingly high), a first strike may not satisfy the risk-dominance condition. However, under the premise that $M$ is extremely large, the parameter space for such exceptions is very narrow.

7. Connections to Classical Theory

7.1 Isomorphism with the Hobbesian State of Nature

The Dark Forest Theory is structurally isomorphic to the “state of nature” described by Hobbes in Leviathan:

The key difference lies in the exit mechanism: Hobbes argued that rational individuals could escape the state of nature by entering a social contract, delegating authority to a sovereign to maintain order. In the Dark Forest, B1 (no supra-sovereign institution), B2 (unverifiable intentions), and B3 (light-speed lag making interaction frequency extremely low) jointly block the path to establishing a social contract. Hobbes’s “state of nature” has an exit; the Dark Forest (under the given conditions) does not.

7.2 Relation to the Fermi Paradox

The Fermi Paradox asks: if many civilizations exist in the universe, why have we observed no evidence of any?

The Dark Forest Theory offers one possible answer: civilizations exist, but silence is the equilibrium strategy. The absence of observable signals is not evidence that civilizations do not exist, but may instead indicate that civilizations are rationally hiding.

However, it should be noted that this is only one of many candidate explanations for the Fermi Paradox. Other explanations (the Great Filter hypothesis, the Zoo hypothesis, extremely short civilizational lifespans, etc.) can equally account for observational silence without relying on the strong assumptions of the Dark Forest. From the single fact that “we have detected no signals,” it is impossible to determine which explanation is closer to reality.

8. Theoretical Limitations and Critiques

The above derivation is logically self-consistent within its assumption framework. However, each structural condition (B1–B5) can be challenged, and relaxing any one may fundamentally alter the equilibrium structure.

8.1 Fragility of the Unverifiable Intentions Assumption (Relaxing B2)

B2 assumes communication is completely untrustworthy. But game theory offers multiple mechanisms for breaking the cheap talk impasse:

Costly signaling: Conveying intention information by incurring an unforgeable cost (cf. Spence’s education signaling model). A civilization could send credible signals through irreversible self-disarmament, resource gifts, or technology disclosure. The key requirement: the cost of faking such signals must be high enough that hostile parties are unwilling to pay it. Whether this is feasible at cosmic scales remains an open question.

Repeated games and reputation: If interactions between civilizations are repeated, the Folk Theorem shows that cooperation can be sustained as an equilibrium among participants with sufficiently high discount factor $\delta$. The Dark Forest indirectly suppresses $\delta$ through B3 (light-speed lag), but if two civilizations are close enough ($\tau_{ij}$ is sufficiently small), repeated-game cooperation remains theoretically viable.

Third-party arbitration and institutions: Trustless mechanisms such as blockchain or adjudication systems maintained by super-civilizations could partially substitute for credible commitments. B1 rules out this possibility, but B1 is itself an empirical assumption, not a logical necessity.

8.2 Questionability of the Technological Explosion Assumption (Relaxing B4)

B4 assumes high uncertainty in technological capability growth ($\sigma^2 > 0$). If $\sigma^2$ is constrained to be sufficiently small (i.e., technological development is smooth and predictable), then $\gamma \to 0$, the base threat probability $\pi \to p$, and the amplification effect of the chain of suspicion weakens.

From an empirical standpoint: while human history has seen periods of accelerated technological development, there has never been an instantaneous jump spanning orders of magnitude. Technological development may face physical upper bounds (thermodynamic limits, speed-of-light constraints, computational complexity lower bounds), making infinite explosion physically impossible. On the other hand, this possibility cannot be ruled out either, since we have only one civilization as a sample.

8.3 Strike Costs and Exposure Risk (Relaxing B5)

The model assumes first strikes have a positive net-benefit interval (B5). But at cosmic scales:

• Interstellar strikes require enormous energy investments; $K_i$ may not be negligible relative to $M$.
• The act of striking may itself expose the attacker’s location to third-party civilizations $c_k$ (e.g., through observable energy-release signatures), increasing the attacker’s risk. This means $U_i(A)$ should include an additional penalty term for “exposure to third parties.”
• If defensive technology significantly dominates offensive technology ($q_i \to 0$), first strikes almost never succeed, and the attack option no longer has positive expected payoff.

8.4 Absolutization of the Survival Axiom (Relaxing A1)

A1 sets survival as the lexicographically highest priority. But civilizations may have more complex value systems:

• They may be willing to accept some survival risk in pursuit of other goals (knowledge, aesthetics, moral principles).
• The “better to kill by mistake” logic driven by extreme risk aversion may itself be considered an unacceptable moral cost.
• If the utility function is not lexicographic but instead admits a finite rate of substitution among objectives, then the extinction loss $M$ is no longer “infinite,” and the model’s extreme conclusions soften significantly.

8.5 Complexity of Multi-Civilization Extensions

The two-player analysis cannot be directly extended to $n$-player games. In a multi-civilization environment:

• Coalition formation may alter the equilibrium structure. If multiple civilizations can form defensive alliances, a single civilization’s first strike faces coalition retaliation, reducing the expected payoff of an attack.
• Signal externalities: Even if one civilization is destroyed, the observable signals produced by the attack (energy release, matter ejection) may be detected by third parties, exposing the attacker’s existence and location. This makes the net benefit of the attack strategy lower in multi-civilization environments than the two-player model predicts.
• These effects make the optimality of “destroy upon discovery” no longer certain in multi-civilization environments, but the conclusion that “hiding is preferable” may actually be strengthened (since exposure entails facing more potential adversaries).

8.6 Linearity Assumption in the Chain of Suspicion Recurrence

The recurrence $r_{n+1} = \pi + (1-\pi) r_n$ in Proposition 2 assumes a linear reaction function. This is a simplification for tractability, but if civilizations' decision-making exhibits threshold effects (no action is taken when threat perception falls below a threshold $r^\text{*}$), the fixed-point equation becomes:

$$r = \pi + (1-\pi) f(r)$$

where $f(r)$ is a nonlinear reaction function with $f(r) = 0$ when $r < r^\text{*}$. In this case, the system may have a stable intermediate fixed point, and the chain of suspicion does not converge to 1. Under such conditions, the Dark Forest conclusion must be weakened to a “local vigilance state.”

However, since A1 sets the extinction loss to an extremely large value, the action threshold $r^\text{*}$ for rational civilizations is pushed very low, and the threshold effect does not alter the qualitative conclusion across most parameter ranges.

9. Conclusion

Translating the Dark Forest Theory of Three-Body Problem into rigorous game-theoretic form yields a clearer — and more circumscribed — conclusion:

The two axioms “survival priority” and “finite resources” alone are insufficient to derive the Dark Forest. What truly drives the system toward silence and preemption is the combination of unverifiable intentions (B2), light-speed communication lag (B3), uncertainty in technological capability growth (B4), and the possibility of positive first-mover payoffs (B5), all within an anarchic structure (B1). Finite resources (A2) functions more as an amplifier: it raises $\gamma$, making the Dark Forest easier to emerge, but even without extreme scarcity, the mechanisms above can still operate as long as the base threat probability $\pi > 0$.

The Dark Forest is a highly stable risk-dominant equilibrium under specific conditions, but it is not the universe’s only possible fate. It provides sufficient conditions, not inevitability. Relaxing any one of B1–B5 may open a path toward cooperative equilibrium.

Thus, the Dark Forest Theory is less a moral judgment that “all civilizations in the universe are evil” than a cooler structural proposition:

In a universe where extinction cost overrides all else, intentions cannot be credibly verified, and communication delay renders repeated games ineffective, silence is more stable than goodwill.

Note: The formalization in this article is a theoretical reconstruction of the novel’s text, not Liu Cixin’s own formulation. Cosmic sociology as a discipline does not actually exist; its “axioms” can be neither verified nor falsified.