Proof-of-Work

A proof-of-work is a consensus mechanism used in blockchains where miners compete to solve difficult cryptographic puzzles to propose the next block. The first miner to solve the puzzle broadcasts the solution (the “proof of work”) to the network; if valid, other nodes accept the block. Miners are rewarded with newly minted cryptocurrency and transaction fees.

The puzzle

In proof-of-work, miners compete to find a nonce (a random number) such that the hash of the block (which includes the nonce) meets a certain condition. The condition is set by the network’s difficulty: the hash must be smaller than a target value.

Because hash functions are unpredictable, there is no way to find a valid nonce other than trial-and-error. A miner must try billions of nonces until finding one that works.

Formally: given a block of transactions, a miner must find a nonce $n$ such that $H(B | n) < T$, where $H$ is a hash function, $B$ is the block data, $|$ is concatenation, and $T$ is the difficulty target.

Security through work

The security of proof-of-work comes from the cost of attacking the network. If an attacker wants to rewrite history by mining an alternative chain faster than the honest network, they must do more computational work than all honest miners combined.

On Bitcoin, this means controlling more than 50% of the total hash rate — the aggregate computational power of all miners. As of 2025, Bitcoin’s hash rate is enormous, making a 51% attack prohibitively expensive.

This is elegant: security derives from real-world scarcity (electricity and hardware), not from trust in entities or clever cryptography.

Mining incentives

Miners are incentivised by:

1. Block reward. The first miner to find a valid nonce receives newly minted Bitcoin. On Bitcoin, the reward started at 50 BTC per block and halves every four years; currently it is about 6.25 BTC.
2. Transaction fees. Users include a small fee with their transactions. Miners collect fees from all transactions in a block.

As block rewards decrease (due to halving), transaction fees become increasingly important for miner incentives.

Decentralisation and mining pools

Initially, miners used CPUs (their computers). As mining became profitable, GPU mining became dominant. Eventually, specialised ASIC miners (application-specific integrated circuits) were developed.

ASICs are thousands of times more efficient at solving the puzzle than GPUs, but they cost hundreds of thousands of dollars. This creates a barrier to entry; only well-capitalized entities can mine competitively.

Mining pools allow smaller miners to combine their hash power and share rewards. Instead of waiting years to find a block individually, they contribute to a pool, which distributes rewards proportionally.

Energy consumption

Proof-of-work requires substantial energy. Bitcoin’s global network consumes ~10 gigawatts of power continuously (comparable to some small countries).

Environmentalists argue this is wasteful; proponents counter that:

1. This energy expenditure buys genuine security — an attacker must spend billions on electricity to mount an attack.
2. Mining often uses stranded or renewable energy (e.g., hydroelectric dams in regions with no transmission infrastructure).
3. The environmental cost should be weighed against the benefit: a global settlement network not controlled by any government.

Alternatives and criticisms

Proof-of-stake uses far less energy — Ethereum reduced energy consumption by ~99.95% after switching from proof-of-work to proof-of-stake.

However, proof-of-stake has different security assumptions: instead of economic security through energy cost, it relies on slashing (penalising misbehaving validators). Some argue this is weaker than proof-of-work’s physical security.

See also