A 51% attack — also known as a majority attack — occurs when a single entity, organization, or coordinated group of actors gains control of more than 50% of a blockchain network’s total mining hash rate (in Proof-of-Work systems) or staking power (in Proof-of-Stake systems). This majority control allows the attacker to manipulate the consensus mechanism, granting them the ability to double-spend coins, reverse confirmed transactions, prevent new transactions from gaining confirmations, and exclude other miners or validators from producing blocks.

The fundamental security assumption of blockchain technology is that no single participant controls a majority of the network’s computational or economic power. When this assumption is violated, the attacker can construct a private chain faster than the honest network, eventually releasing it to overwrite the public chain’s transaction history. This undermines the trustless, immutable nature of blockchain — the very properties that give cryptocurrencies their value and utility.

It is critical to understand that a 51% attack does not grant the attacker the ability to create coins out of thin air, steal coins from specific wallets without their private keys, or alter the fundamental protocol rules of the blockchain. The attack is limited to manipulating transaction ordering and confirmation — but this alone is devastating, as it enables double-spending (spending the same coins twice) and can destroy market confidence in the affected cryptocurrency.

The cost and feasibility of a 51% attack vary enormously between blockchains. Attacking Bitcoin would require controlling more hash power than all other miners combined — a feat estimated to cost billions of dollars in hardware and electricity. However, smaller Proof-of-Work chains with low hash rates have been successfully attacked multiple times, with attackers renting hash power from services like NiceHash to temporarily achieve majority control.

Origin & History

2008: Satoshi Nakamoto described the theoretical possibility of a majority attack in the original Bitcoin whitepaper, mathematically demonstrating that the probability of an attacker catching up to the honest chain decreases exponentially with each subsequent block. Nakamoto’s analysis assumed that rational economic actors would find it more profitable to mine honestly than to attack.

2009–2013: In Bitcoin’s early years, the 51% attack remained purely theoretical. However, concerns grew as mining pools like GHash.IO, Deepbit, and BTC Guild each approached or briefly exceeded 50% of Bitcoin’s hash rate, sparking intense community debate about mining centralization.

2013 (November): Researchers Ittay Eyal and Emin Gün Sirer of Cornell University posted a landmark paper, “Majority is not Enough: Bitcoin Mining is Vulnerable” (arXiv, November 1, 2013; presented at Financial Cryptography 2014). The paper introduced the concept of “selfish mining,” demonstrating that the Bitcoin mining protocol is not incentive-compatible. Under current Bitcoin protocol assumptions, selfish mining can be profitable for a pool of any size; even under idealized assumptions, a pool controlling just 33% of hash rate can earn disproportionate rewards. The paper proposed a protocol modification that would raise the protection threshold to 25% (1/4) of total resources — lower than the previously assumed 50% bound, but substantially better than the status quo.

2014: The mining pool GHash.IO briefly exceeded 51% of Bitcoin’s total hash rate in June 2014. Although no attack was executed, the event caused widespread alarm in the Bitcoin community. GHash.IO voluntarily agreed to limit its hash rate to 39.99%, and the incident accelerated development of decentralized mining pool protocols like P2Pool.

2018: Bitcoin Gold (BTG) and several other smaller Proof-of-Work blockchains suffered confirmed 51% attacks. The Bitcoin Gold attack in May 2018 resulted in approximately $18 million in double-spent funds stolen from exchanges, leading to BTG’s delisting from Bittrex. Verge (XVG) was also attacked in April 2018 through a combination of hash rate control and a difficulty retargeting exploit.

2019: Ethereum Classic (ETC) suffered its first confirmed 51% attack in January 2019, with attackers reorganizing over 100 blocks and double-spending an estimated $1.1 million.

2020: Ethereum Classic suffered three separate 51% attacks within a single month (August 2020), with reorganizations of 3,693 blocks, 4,000+ blocks, and 7,000+ blocks respectively. The attacks were facilitated by ETC’s low hash rate (which had dropped dramatically after many miners migrated to Ethereum) and the availability of rentable hash power through services like NiceHash. Bitcoin SV also suffered multiple 51% attacks in 2021. The ETC community subsequently implemented the MESS (Modified Exponential Subjective Scoring) protocol upgrade to make large reorganizations more costly.

2021–2023: The shift toward Proof-of-Stake consensus mechanisms, exemplified by Ethereum’s Merge in September 2022, was partly motivated by the desire to make 51% attacks economically impractical. In PoS, an attacker would need to acquire and stake 51% of all staked tokens — and would face having their stake slashed (destroyed) if caught attempting to produce conflicting blocks.

In Simple Terms

Democracy analogy: Imagine a democracy where votes decide which transactions are valid. A 51% attack is like one person controlling more than half of all the votes — they can decide which transactions go through, block others, and even rewrite recent election results. The rest of the voters are powerless because the attacker always has the majority.

Accountant analogy: Think of a group of accountants who collectively verify a company’s financial records. If one accountant secretly controls more than half of the team, they can approve fraudulent transactions, reject legitimate ones, and rewrite recent entries in the ledger — all while the minority of honest accountants are outvoted.

Race analogy: Picture a race where the referee also controls more than half the runners. The referee can decide who wins, disqualify honest runners, and even rerun parts of the race with different outcomes. The blockchain equivalent is an attacker who controls the majority of mining power and can rewrite the chain’s recent history.

Tug-of-war analogy: It is like a game of tug-of-war where one side secretly has twice as many players. They will always win, pulling the rope (the blockchain) in whatever direction they choose. The honest side cannot compete because they are permanently outnumbered.

Important: A 51% attack does not mean the attacker can steal coins from your wallet, change the rules of the blockchain, or create new coins. They can only manipulate transaction ordering, double-spend their own coins, and censor other users’ transactions. Coins held in wallets with secure private keys remain safe — the risk is primarily to exchanges, merchants, and anyone accepting unconfirmed or recently confirmed transactions from the attacker.

Key Technical Features

Hash Rate Dominance (Proof-of-Work) The attacker must control more than 50% of the network’s total hash rate — the combined computational power used to mine new blocks. Hash rate is typically measured in hashes per second (H/s). Bitcoin’s network has exceeded 700 EH/s (exahashes per second) as of late 2024, and the figure continues to grow. The attacker can acquire hash rate by deploying proprietary mining hardware (ASICs), renting hash power from services like NiceHash, or coordinating with existing mining pools. The cost of a 51% attack is directly proportional to the network’s total hash rate and the current price of electricity.

Double-Spend Mechanism The core exploit of a 51% attack is the ability to spend the same coins twice. The attacker sends coins to a victim (e.g., an exchange), waits for confirmations, receives goods or withdraws funds, then releases a secretly mined longer chain that replaces the original transaction with one that sends the coins back to the attacker. The replaced chain becomes an orphan, and the victim’s received transaction is erased from the canonical ledger. Exchanges are the primary targets because they credit deposits after a set number of confirmations and allow immediate withdrawal.

How a 51% Attack Works

1. The attacker accumulates more than 50% of the network’s mining hash rate (through dedicated hardware, rental, or pool coordination).
2. The attacker begins secretly mining blocks on a private fork of the blockchain, without broadcasting them to the network.
3. On the public chain, the attacker sends a large amount of cryptocurrency to an exchange and waits for the deposit to be credited (e.g., after 6 confirmations).
4. The attacker converts the deposited cryptocurrency to a different asset or withdraws it to an external wallet.
5. Because the attacker has majority hash power, their private chain grows faster than the public chain.
6. The attacker broadcasts the private chain to the network; because it is longer, all honest nodes adopt it as the canonical chain (longest-chain rule).
7. The original deposit transaction is replaced by a transaction sending the coins back to the attacker’s own wallet — the exchange loses the funds.

Stake-Based Attacks (Proof-of-Stake) In PoS systems, the equivalent attack requires controlling 51% of all staked tokens rather than hash power. The economic cost is typically much higher because acquiring 51% of staked tokens drives up the price dramatically and the attacker’s stake is at risk of slashing. Modern PoS protocols like Ethereum’s Casper FFG include slashing conditions that destroy the attacker’s stake if they produce conflicting blocks. Some PoS designs implement “social slashing” or community-driven recovery mechanisms as a last resort.

Advantages & Disadvantages

Advantages (of understanding 51% attacks)	Disadvantages (consequences of 51% attacks)
Security Awareness: Understanding 51% attacks helps blockchain designers and users assess the true security of different networks	Double Spending: The attacker can spend the same coins twice, directly stealing from exchanges, merchants, and other counterparties
Risk Assessment: Investors can evaluate a cryptocurrency’s vulnerability to attack by examining its hash rate, mining distribution, and consensus mechanism	Transaction Censorship: The attacker can selectively exclude transactions from blocks, effectively censoring specific users or addresses
Protocol Improvement: Historical 51% attacks have driven innovation in consensus mechanisms, including the shift toward PoS, hybrid consensus, and finality gadgets	Confirmation Reversal: Recently confirmed transactions can be reversed, destroying the reliability of the blockchain as an immutable ledger
Exchange Security: Knowledge of 51% attacks informs exchange policies on confirmation requirements, listing decisions, and withdrawal delays	Market Collapse: A successful attack typically causes the affected cryptocurrency’s price to crash, destroying value for all holders
Mining Decentralization: The threat of 51% attacks incentivizes mining decentralization, as concentrated hash power is recognized as a systemic risk	Network Trust Erosion: Even a single successful attack can permanently damage confidence in a blockchain’s security, leading to delisting from exchanges and user exodus
Economic Modeling: The game-theoretic analysis of 51% attacks has advanced understanding of incentive design in decentralized systems	Cascading Failures: Attacks on one blockchain can trigger loss of confidence across the broader crypto market, affecting unrelated projects

Risk Management

Hash Rate Monitoring Continuously monitor the distribution of hash power across mining pools using tools like MiningPoolStats and blockchain.com/pools. Set alerts for any single pool or entity approaching 40% of total hash rate. Track hash rate rental availability on NiceHash and similar platforms relative to the network’s total hash rate — if rentable hash power exceeds 50% of a network, that network is acutely vulnerable.

Confirmation Policies Exchanges should set confirmation requirements proportional to the blockchain’s security level (e.g., 6 for Bitcoin, 40+ for Ethereum Classic following its attacks, 100+ for highly vulnerable chains). Dynamically adjust confirmation requirements based on real-time hash rate distribution and recent attack history. Implement deposit-amount-based tiered confirmation thresholds: small deposits require fewer confirmations, large deposits require significantly more.

Network Selection and Diversification Avoid holding significant value on low-hash-rate PoW chains where the cost of a 51% attack is low. Prefer blockchains with diverse, decentralized mining or staking distributions. Assess attack cost using resources like Crypto51, which estimates the hourly cost of attacking various PoW blockchains.

Protocol-Level Defenses Support and adopt consensus mechanisms with built-in finality (e.g., Ethereum’s Casper FFG, Tendermint BFT) that make transaction reversal impossible after finalization. Encourage implementation of checkpointing systems that periodically anchor chain state to a more secure blockchain. Consider penalty-based mechanisms (slashing in PoS) that make attacks economically self-destructive.

Cultural Relevance

The 51% attack occupies a central place in cryptocurrency culture as the canonical example of how a blockchain can be compromised. It is often the first security concept that new crypto participants learn, and it serves as a constant reminder that decentralization is not just a philosophical preference but a practical security requirement.

In crypto communities, accusations of potential 51% attack vulnerability are frequently used as ammunition in blockchain rivalry debates. Bitcoin maximalists cite Bitcoin’s enormous hash rate as proof of its superior security, while critics of smaller PoW chains use their low hash rates to argue they are “insecure” or “attackable.” The phrase “NiceHash-able” has become slang for a blockchain whose hash rate can be overwhelmed by hash power rented from NiceHash.

The 2018–2020 era of repeated attacks on Ethereum Classic, Bitcoin Gold, and Verge fundamentally changed the industry’s attitude toward small PoW chains. Several major exchanges delisted attacked coins or imposed extreme confirmation requirements (100+ confirmations), effectively penalizing the affected communities. This period accelerated the broader industry shift toward Proof-of-Stake and hybrid consensus mechanisms.

The meme “not your hash rate, not your security” is a play on the famous “not your keys, not your coins” mantra — which Andreas Antonopoulos has credited as one of the phrases he helped popularize — emphasizing that a blockchain’s security is only as strong as the decentralization of its consensus mechanism. The concept has also entered mainstream media coverage of cryptocurrency, with outlets like the New York Times and Wall Street Journal using 51% attacks as examples when explaining blockchain vulnerabilities to general audiences.

Real-World Examples

Bitcoin Gold (BTG) Double-Spend Attack — May 2018 Scenario: An unknown attacker targeted Bitcoin Gold, a smaller Bitcoin fork that used the Equihash-BTG mining algorithm with a relatively low total hash rate. Implementation: The attacker rented sufficient hash power to control over 51% of BTG’s network, secretly mined a private chain, deposited BTG to multiple exchanges, converted the deposited funds to other assets, and then released the longer private chain to reverse the deposit transactions. Outcome: Approximately $18 million worth of BTG was double-spent across several exchanges. The attack led to BTG being delisted from Bittrex and caused the coin’s price to drop significantly. The incident demonstrated that small PoW chains with commodity mining algorithms are particularly vulnerable because hash power can be rented rather than purchased.

Ethereum Classic (ETC) Attacks — 2019–2020 Scenario: Ethereum Classic suffered its first confirmed 51% attack in January 2019, followed by three more attacks within a single month in August 2020, with chain reorganizations of 3,693 blocks, 4,000+ blocks, and 7,000+ blocks respectively. Implementation: Attackers exploited ETC’s low hash rate — which dropped dramatically after many miners migrated to Ethereum — and rented additional hash power through NiceHash to overwhelm the network. Each attack involved secretly mining a longer chain and replacing thousands of blocks of transaction history. Outcome: The attacks resulted in millions of dollars in double-spent funds. Major exchanges including Coinbase halted ETC trading and dramatically increased confirmation requirements. The ETC community implemented the MESS (Modified Exponential Subjective Scoring) protocol upgrade to make large reorganizations more difficult, but the damage to the chain’s reputation was lasting.

GHash.IO Mining Pool — June 2014 Scenario: GHash.IO, one of the largest Bitcoin mining pools, briefly exceeded 51% of Bitcoin’s total hash rate in June 2014, creating a theoretical window for a majority attack on Bitcoin itself. Implementation: The pool’s hash rate grew organically as miners joined for its zero-fee structure and reliability. No attack was executed — but the community recognized the existential risk. Outcome: GHash.IO voluntarily committed to limiting its share to 39.99% of the network hash rate. The incident triggered widespread discussion about mining pool centralization and led to development of decentralized mining protocols. It remains the closest Bitcoin has ever come to a 51% attack scenario.

Verge (XVG) Time-Warp Attack — April 2018 Scenario: Verge, a privacy-focused cryptocurrency, was attacked using a combination of 51% hash rate control and exploitation of its multi-algorithm mining system’s difficulty adjustment mechanism. Implementation: The attacker exploited a bug in Verge’s difficulty retargeting algorithm to mine blocks at abnormally low difficulty using spoofed timestamps, causing difficulty to collapse. This effectively gave the attacker majority control without needing proportional hash power. Outcome: The attacker mined approximately 250,000 XVG (worth ~$1.75 million at the time) within hours. The attack highlighted that 51% attacks can be amplified by protocol-level vulnerabilities, making the effective attack threshold lower than the theoretical 51%.

Comparison Table

Feature	51% Attack (PoW)	51% Stake Attack (PoS)	Selfish Mining Attack	Long-Range Attack (PoS)
Required Control	>50% of hash rate	>50% of staked tokens	Any size; profitable at ~33% under current protocol	Historical private keys
Primary Target	Transaction history	Transaction history	Block rewards	Entire chain history
Attack Cost (Bitcoin)	Billions in hardware + electricity	N/A (Bitcoin is PoW)	Lower than 51%	N/A (Bitcoin is PoW)
Reversibility	Attacker can reverse recent blocks	Attacker can reverse recent blocks	Gains unfair block share	Can rewrite from genesis
Detection	Hash rate monitoring	Stake distribution monitoring	Statistical analysis of block timing	Checkpoint verification
Protocol Defenses	High hash rate, decentralized mining	Slashing, finality gadgets	Uncle block incentives, GHOST	Checkpointing, weak subjectivity
Historical Occurrences	Multiple (BTG, ETC, Verge, BSV, etc.)	None confirmed on major chains	Theoretical / limited	Theoretical

Related Terms

• Double Spending — The act of spending the same cryptocurrency twice, which is the primary exploit enabled by a 51% attack against exchanges and merchants.
• Hash Rate — The total computational power used to mine and process transactions on a Proof-of-Work blockchain, directly determining the cost and feasibility of a 51% attack.
• Proof of Work (PoW) — A consensus mechanism requiring miners to solve cryptographic puzzles, where security depends on no single entity controlling majority hash power.
• Proof of Stake (PoS) — An alternative consensus mechanism where validators stake cryptocurrency as collateral, making 51% attacks require economic majority rather than computational majority.
• Mining Pool — A group of miners who combine their hash power and share block rewards, which can create centralization risks if a single pool grows too large.
• Chain Reorganization — The process by which a blockchain replaces its current chain tip with a longer alternative chain, which is the mechanism through which a 51% attack rewrites transaction history.
• Selfish Mining — A mining strategy introduced by Eyal and Sirer (2013) where a miner withholds discovered blocks to gain competitive advantage; profitable under current Bitcoin protocol at any pool size, with disproportionate gains above ~33%.
• Finality — The property that confirmed transactions cannot be reversed, which modern PoS protocols achieve through finality gadgets specifically designed to prevent 51%-style attacks.
• NiceHash — A hash power marketplace that allows users to rent mining capacity, which has been used to facilitate 51% attacks on smaller PoW blockchains.
• Longest Chain Rule — The consensus rule in PoW blockchains that nodes always follow the chain with the most accumulated work, which is the mechanism exploited by 51% attackers to force the network to accept their private chain.
• Byzantine Fault Tolerance (BFT) — A property of distributed systems that can continue operating correctly even if some participants act maliciously, closely related to the theoretical framework underlying 51% attack analysis.
• Slashing — A penalty mechanism in PoS systems that destroys a validator’s staked collateral for malicious behavior, making 51% stake attacks economically self-destructive.

FAQ

Q: How much does it cost to perform a 51% attack on Bitcoin? Extremely expensive. Bitcoin’s hash rate has exceeded 700 EH/s in recent years. The cost of the necessary ASIC mining hardware alone would run into the tens of billions of dollars, plus ongoing electricity costs estimated at $15–20+ million per day at peak hash rate. This makes Bitcoin’s network practically immune to 51% attacks from any single actor, including nation-states, due to the sheer economic and logistical requirements.

Q: Which cryptocurrencies have actually been 51% attacked? Several cryptocurrencies have suffered confirmed 51% attacks, including Ethereum Classic (January 2019 and three times in August 2020), Bitcoin Gold (May 2018, ~$18M double-spent), Verge (April 2018), Bitcoin SV (multiple attacks in 2021), and Firo (formerly Zcoin). These were all Proof-of-Work chains with relatively low hash rates, making the cost of renting sufficient hash power economically viable for attackers.

Q: Can a 51% attacker steal my coins from my wallet? No. A 51% attack cannot access your private keys or transfer coins out of your wallet without your authorization. The attack only allows the attacker to double-spend their own coins, reverse their own recent transactions, and censor other users’ transactions. Your funds are safe as long as you control your private keys — the risk is primarily to exchanges and merchants who accept the attacker’s payments.

Q: Does Proof-of-Stake eliminate the risk of 51% attacks? Proof-of-Stake significantly changes the economics and mechanics of 51% attacks but does not entirely eliminate them. In PoS, an attacker would need to acquire and stake 51% of all staked tokens, which is typically far more expensive than renting hash power. Additionally, PoS protocols include slashing mechanisms that destroy the attacker’s stake if caught. However, theoretical attacks like long-range attacks and stake grinding remain areas of active research.

Q: What happens to a cryptocurrency’s price after a 51% attack? Prices typically crash significantly. After Ethereum Classic’s 2020 attacks, ETC lost approximately 30% of its value. Bitcoin Gold dropped sharply in the months following its 2018 attack. The price impact extends beyond the immediate loss from double-spending — it reflects the market’s loss of confidence in the blockchain’s fundamental security, which can trigger exchange delistings, reduced developer activity, and user migration to alternative chains.

Q: How can I check if a blockchain is vulnerable to a 51% attack? Resources like Crypto51.app estimate the hourly cost of attacking various PoW blockchains by comparing their hash rate against hash power available for rent on NiceHash. As a rule of thumb, if the cost of renting 51% of a network’s hash rate for one hour is less than the potential profit from a double-spend attack, that blockchain is at significant risk.

Q: What is the difference between a 51% attack and selfish mining? Selfish mining is a strategy where a miner with a significant share of hash power withholds newly found blocks to gain a competitive advantage over honest miners, earning a disproportionate share of block rewards. As Eyal and Sirer demonstrated in 2013, this strategy can be profitable under current Bitcoin protocol for a pool of any size. A 51% attack is a more aggressive action where the majority miner actively rewrites the blockchain to reverse transactions and double-spend coins. The two strategies can be combined — selfish mining to accumulate advantage, and majority control to execute a double-spend.

Sources:

• Satoshi Nakamoto, “Bitcoin: A Peer-to-Peer Electronic Cash System”
• Ittay Eyal & Emin Gün Sirer, “Majority is not Enough: Bitcoin Mining is Vulnerable” (arXiv, Nov. 2013; Financial Cryptography 2014)
• Coinbase, “Ethereum Classic (ETC) is currently being 51% attacked” (Jan. 2019)
• Bitcoin Gold 51% Attack Response
• Bitcoin Gold Wikipedia
• Crypto51: Cost of 51% Attack
• Ethereum PoS Security Model
• MiningPoolStats