I would only add "can continually maintain" hashpower. As soon as the (expensive) attack stops, normal transactions resume.