Is that not the budget an attacker needs, rather than the cost? Since if an attacker is viewing this as a repeated game rather than a one-off , he will not mind losing out 500 Eth by fooling a validator.
But yeah, similar to Bitcoin where an attacker needs a budget of 6 blocks to subvert consensus.