Union Pacific’s latest quarterly filing reveals a quiet anomaly: fuel cost recovery charges are generating profits, not just covering costs. During the Iran war-driven oil spike, the railroad’s fuel surcharge revenue exceeded actual fuel expenses by a margin that analysts are calling “unprecedented.” The company posted a 22% jump in operating income, while the surcharge line item alone contributed 40% of that growth.
This is not a story about oil prices. It is a story about mechanism design—and the failure of oversight.
Code is law, but audit is mercy. In traditional finance, the code is not Solidity; it is the pricing formula buried in tariff filings. When that formula lacks transparency, it becomes a hidden profit engine. The same dynamic plagues decentralized finance, where protocol fees are often marketed as “cost recovery” but evolve into extraction tools.
Context: The Surcharge as a Cost Recovery Tool
Fuel surcharges are standard in transportation. The logic is simple: when diesel prices rise, carriers add a surcharge to maintain margins. In theory, the surcharge is cost-neutral—it offsets the increased fuel expense. In practice, the formula is often opaque. Union Pacific uses a base fuel price index and a multiplier that adjusts weekly. The exact coefficients are proprietary.
During the Iran war, WTI crude surged from $75 to $105 per barrel. Union Pacific’s surcharge revenue rose by 35%, while its fuel costs rose by only 28%. The gap—7 percentage points—translated into $400 million in extra profit. This is not a rounding error. It is a structural flaw in the pricing mechanism.
Composability is leverage until it is liability. Here, the composability is between the surcharge formula and the broader market. The surcharge is supposed to be a pass-through, but it became a leverage point for profit extraction. In DeFi, similar composability risks appear when a protocol’s fee mechanism interacts with a volatile oracle price. If the fee is not capped, it can amplify user costs.
Core: Code-Level Analysis of the Surcharge Mechanism
Let me walk through the mechanics as I would audit a smart contract. The surcharge function takes three inputs: base fuel price (B), current fuel price (C), and a multiplier (M). The output is surcharge amount S = (C - B) * M.
In a properly designed system, M should be calibrated to the carrier’s fuel consumption per unit of freight. But the contract—here, the tariff filing—does not publicly disclose M. Moreover, the base price B is updated infrequently, while C updates daily. During a rapid price spike, the gap (C - B) widens, and M remains fixed. This creates a “windfall” effect: the surcharge overcompensates because the formula does not account for operational efficiencies or hedging gains.
Union Pacific also hedges fuel costs. When oil prices rise, the company’s hedges generate profits, which are not subtracted from the surcharge calculation. This is a classic double-counting bug. In smart contract terms, it is like a fee that is calculated on gross value without deducting any protocol-level hedging reserves.
Logic dictates value, perception dictates volume. The market’s perception is that Union Pacific is a beneficiary of high oil prices. But the underlying logic is that the surcharge mechanism is broken. The same logic applies to L2 sequencers that charge a “data availability fee” but later profit from MEV extraction. The fee is not truly cost-based; it is a revenue center.
During my audit of the 2x Funding contracts in 2017, I found a similar integer overflow in the leverage calculation. The formula looked correct, but under extreme volatility, the overflow caused the system to pay out more than it collected. Union Pacific’s surcharge is a different kind of overflow—one of economic logic, not arithmetic. But the result is the same: users pay more than the system’s actual cost.
Contrarian: The Blind Spot of “Cost Recovery”
Most analysts focus on the macro impact: oil prices drive inflation, and railroads are a pass-through. The contrarian view is that the surcharge mechanism itself is a hidden amplifier of inflation. It is not just passing through costs; it is adding a profit margin on top of a volatile input. This is a blind spot that regulators have missed for decades.
In 2006, the Surface Transportation Board (STB) issued a policy statement saying surcharges must be “reasonably related” to fuel costs. But enforcement is weak. The STB relies on complaints from shippers, who are often small and lack the resources to audit the formula. This is a governance failure—similar to how DeFi protocols rely on token holders to challenge fee changes, but governance participation is low.
Blind faith is the only true vulnerability. Shippers trust that the surcharge is fair. They do not verify. In DeFi, users trust that the fee switch is off. They do not verify. Both trust assumptions are fragile.
Infinite yield curves break under finite scrutiny. The surcharge’s “yield” (excess profit) is infinite until regulators step in. When they do, the curve breaks. Union Pacific’s stock dropped 5% on the day the STB announced a new investigation into surcharge practices. The market finally priced in the regulatory risk. But the damage to shippers—and to the broader economy—had already been done.
Takeaway: The Vulnerability Forecast
Fuel surcharges are not going away. But the lesson for both traditional finance and crypto is the same: any cost recovery mechanism that is not auditable will eventually become a profit extraction tool. Regulators will catch up, and the result will be forced transparency.
For DeFi, the warning is clear. Design your fee mechanisms with a verifiable cost basis. Use on-chain data to prove that the fee equals the actual cost. If you don’t, you are building a Union Pacific surcharge in smart contract form—and the audit will come.
The contract executes, the architect pays. Union Pacific’s architects are the tariff writers. Their payout will come in the form of regulatory fines. For DeFi architects, the payout is reputation damage and user exodus. Code is law, but audit is mercy. Build with auditability from day one. Otherwise, the market will audit you, and it will not be merciful.