You’re right in that the only reason to offline decode the lock is to either create a legitimate key (or DoS your opponent’s wallet by forcing them to re-key th

You’re right in that the only reason to offline decode the lock is to either create a legitimate key (or DoS your opponent’s wallet by forcing them to re-key the remaining N-1 locks.) It is left as an exercise to the imagination as to when it an attacker might find advantage in: t_steal_mailbox + t_decode_lock + t_keyed_front_door_entry being less than: t_pick_front_door as well as solving a similar inequality for the probability of being caught in both scenarios.