1.23 Proof of Work

Proof of Work requires participants to perform computational work that is difficult to produce but easy for others to verify. In Bitcoin, this work helps determine which block history the network follows and makes attacks increasingly expensive as additional work accumulates.

Learning objectives

• Hash puzzles
• Difficulty adjustment
• Accumulated work
• 51% attacks
• Energy economics

Why this matters

"51% attack" is a phrase often used loosely to imply an attacker could do almost anything. This lesson defines precisely what such an attacker could and could not actually do, which is a much narrower and more useful claim.

Core teaching

Bitcoin's mining difficulty adjusts roughly every two weeks (every 2,016 blocks) so that blocks continue being found at approximately ten-minute intervals on average, regardless of how much total mining power joins or leaves the network. If total network hash power suddenly doubled, blocks would initially be found roughly twice as fast, and the next scheduled adjustment would raise the difficulty target to bring the pace back toward ten minutes.

A party controlling a majority of current hash power (a "51% attack") could potentially reorganise very recent blocks and double-spend their own recent transactions. Critically, they could not use that power to create new coins out of thin air, spend someone else's coins without that person's private key, or arbitrarily rewrite Bitcoin's entire history back to the genesis block — the cryptographic signature requirements and accumulated proof-of-work on old blocks still apply regardless of present-day hash power.

Worked example

Bitcoin's difficulty adjusts roughly every two weeks (every 2,016 blocks) so that blocks continue to be found approximately every ten minutes on average, regardless of how much total mining power joins or leaves the network. If total network hash power doubled overnight, blocks would initially be found roughly twice as fast, and the next difficulty adjustment would raise the target difficulty to bring block times back toward ten minutes.

A 51% attack scenario means a party controlling a majority of current hash power could potentially reorganise recent blocks and double-spend their own recent transactions, but critically, they cannot use that power to create coins out of thin air, spend someone else's coins without their private key, or arbitrarily rewrite the entire historical ledger from the genesis block — the cryptographic and rule-based constraints still apply.

Deeper analysis

Proof-of-work turns block production into a resource-intensive competition. Miners repeatedly vary a value in the block header until the resulting hash satisfies the network’s target. Finding a valid result is probabilistic and can require enormous numbers of attempts, while verifying a result is comparatively cheap. This asymmetry is central to the security model: anyone can check the proof without reproducing the entire search.

The difficulty target controls the expected amount of work required. More hash power increases a miner’s probability of finding blocks but does not give deterministic control over each block. If an attacker wants to rewrite recent history, the attacker must perform enough competing work to overcome the chain being extended by honest miners. The security argument therefore depends on assumptions about available hash power, incentives and the willingness of nodes to enforce the rules.

Common misconceptions

• Proof of work is not about solving a useful scientific puzzle.
• A majority-hash-power attack is costly but not mathematically impossible.
• Security depends on both technical rules and economic conditions.

Application lab

Find the approximate current Bitcoin network hash rate from a reputable source. Without needing to calculate an exact cost, describe qualitatively what categories of expense (hardware, electricity, facilities) someone would need to control a majority of that hash power, and why that acts as an economic deterrent.

Practical exercise

Write two sentences distinguishing what a 51% attacker actually could do (reorganise very recent blocks, double-spend their own recent transactions) from what popular commentary sometimes implies they could do (steal anyone's coins, print unlimited BTC).

Knowledge check

Question: What could a party controlling 51% of Bitcoin's current mining power actually do, and what could they not do?

Model answer: They could potentially reorganise very recent blocks and double-spend their own recent transactions. They could not create new coins arbitrarily, spend someone else's coins without their private key, or rewrite the network's entire deep history back to the genesis block.

Case study prompt

Find the approximate current Bitcoin network hash rate from a reputable source. Without calculating an exact cost, describe qualitatively what categories of expense (hardware, electricity, facilities) someone would need to control a majority of it, and why that acts as a practical deterrent.

Key takeaways

• Difficulty adjustment keeps block production near ten minutes regardless of total hash power
• A 51% attacker can reorganise recent blocks and double-spend their own transactions
• A 51% attacker cannot create coins, steal others' coins, or rewrite deep history
• Precise claims about attacker capability are more useful than vague "51% attack" fears

Further exploration

Lesson 1.24 draws together everything from this module into one question: why, taken as a whole system, is Bitcoin genuinely difficult to manipulate?