Proof of Work Explained

Proof of work is a consensus mechanism in which computers called miners compete to solve a computational puzzle, and the winner earns the right to add the next block of transactions to the blockchain. Solving the puzzle requires enormous numbers of guesses and real energy, but anyone can verify the answer instantly, which makes the ledger costly to attack and cheap to check.

It is the system that has secured Bitcoin since 2009. Understanding it explains why mining exists, why Bitcoin uses so much electricity, and why some networks have moved to alternatives such as proof of stake.

The Problem Proof of Work Solves

A decentralized ledger has no central bank or company to decide which transactions are valid. Thousands of independent computers must agree on a single history, even though some participants may be dishonest. If Litecoin is new to you, start with what Litecoin (LTC) is and how it works.

The hardest part is preventing double spending: spending the same coin twice by broadcasting conflicting transactions. Proof of work solves this by making block creation costly. The valid chain is the one with the most accumulated work, so an attacker would have to outpace the rest of the network's combined computing power to rewrite it. Our Ethereum Classic (ETC) price scenarios for 2026–2027 apply the same catalyst-and-risk approach to a related project. If you want to go further, read Consensus Mechanisms Explained.

The idea predates Bitcoin. Adam Back's Hashcash, proposed in 1997, used a similar puzzle to make sending spam emails costly. Satoshi Nakamoto adapted the concept in the Bitcoin whitepaper.

How Mining Works Step by Step

1. 1Collect transactions. A miner gathers pending transactions from the mempool and assembles a candidate block.
2. 2Build the block header. The header includes a reference to the previous block, a summary of the transactions, a timestamp and a field called the nonce.
3. 3Hash repeatedly. The miner runs the header through a hash function (SHA-256 twice, in Bitcoin's case), changing the nonce and other fields with each attempt.
4. 4Check the target. If the resulting hash is below the network's difficulty target, the puzzle is solved. Otherwise, try again.
5. 5Broadcast the block. The winning miner shares the block. Other nodes verify it in a fraction of a second.
6. 6Collect the reward. The miner receives the block subsidy (newly issued coins) plus transaction fees.

Because hash outputs are unpredictable, the only way to find a valid one is brute-force guessing. Our guide to Bitcoin mining covers the hardware and economics.

Difficulty Adjustment

If more miners join, blocks would be found faster; if miners leave, slower. To keep a steady pace, proof-of-work networks adjust difficulty automatically.

Bitcoin recalculates difficulty every 2,016 blocks, roughly every two weeks, aiming for an average of one block every 10 minutes. Other networks adjust more often. This feedback loop means the network keeps working even if a large share of miners suddenly switches off. See also: What Is Cryptocurrency? A Clear Beginner's Guide.

Security: The 51% Attack

The security of proof of work rests on the cost of acquiring majority hash power. An attacker with more than half of it could:

• Reorder or exclude recent transactions.
• Double-spend their own coins by replacing a confirmed transaction.

They could not steal coins from other people's addresses or create coins beyond the protocol rules, because every node still checks signatures and rules.

On Bitcoin, the cost of such an attack is enormous. Smaller proof-of-work chains are a different story: Ethereum Classic, for example, suffered several 51% attacks in 2019 and 2020. Our explainer on what a 51% attack is goes deeper.

Proof of Work vs Proof of Stake

Ethereum moved from proof of work to proof of stake in September 2022. For a full comparison, see PoW vs PoS. Our article Monero vs Bitcoin expands on this point.

Mining Algorithms Differ

Not all proof-of-work coins use the same puzzle:

• SHA-256 — Bitcoin and Bitcoin Cash. Dominated by specialized machines called ASICs.
• Scrypt — Litecoin and Dogecoin, which can be merge-mined together.
• RandomX — Monero, designed to favor ordinary CPUs and resist ASICs.
• Etchash — Ethereum Classic.

The choice of algorithm affects who can mine profitably and how concentrated mining becomes. See also: What Is the Mempool?

Criticisms and Risks

• Energy consumption. Bitcoin mining uses a large amount of electricity. Supporters argue it increasingly uses stranded or surplus energy; critics argue it is wasteful regardless.
• Mining pool concentration. Most individual miners join pools to smooth out rewards. A few large pools can control a big share of hash power, although individual miners can switch pools.
• Hardware centralization. ASIC manufacturing is concentrated among a small number of companies.
• Security budget over time. As Bitcoin's block subsidy halves roughly every four years, fees will need to make up a larger share of miner revenue.
• Small-chain vulnerability. Coins with little hash power can be attacked using rented capacity.

Bottom line

Proof of work secures a blockchain by making block production expensive and verification cheap. It has an unmatched track record on Bitcoin, but it consumes significant energy and its security depends heavily on network size. When you evaluate a proof-of-work coin, ask how much hash power protects it, how concentrated mining is and how the network will pay for security in the long run.