Who pays for the on-chain OTS transactions?

Wouldn't this introduce an attack vector for someone wanting to financially harm Stacker News?