51% Attack

A 51% attack is majority control of proof-of-work block production that can enable recent reorganizations, double-spending, or transaction censorship.

A 51% attack is a proof-of-work consensus attack in which one actor or coordinated group controls enough effective hash power to outpace the honest network and dominate the chain selected by nodes. The name refers to majority control, but attack feasibility is not a perfectly fixed threshold: an attacker below 50% can sometimes cause disruption, while sustained majority hash power makes repeated reorganizations and censorship substantially more practical.

The attacker does not gain every power over the blockchain. Validating nodes still apply protocol rules, and private keys remain necessary to spend other users’ assets. The principal risk is control over the ordering and recent history of otherwise valid transactions.

Key Takeaways

  • The term applies most directly to proof-of-work networks and should not be transferred mechanically to proof-of-stake systems.
  • Majority hash power can help an attacker replace recent blocks, reverse the attacker’s own payment, delay selected transactions, or capture a disproportionate share of block rewards.
  • It does not reveal private keys or let the attacker create arbitrary valid signatures.
  • Nodes can reject blocks that violate supply, signature, or other consensus rules even if those blocks carry substantial proof of work.
  • Confirmation depth reduces reorganization risk but does not create an unconditional settlement guarantee.
  • Smaller or concentrated networks may be exposed when hash power is inexpensive to acquire or rent relative to the value that can be attacked.

What an Attacker May Be Able to Do

CapabilityWhy majority hash power helpsImportant limit
Reorganize recent blocksA privately mined branch can accumulate more proof of work than the public branchCost and difficulty rise as the targeted history becomes deeper
Double-spend the attacker’s fundsA payment on the displaced branch can be replaced by a conflicting transaction on the winning branchThe attacker needs valid authority over the spent funds
Censor selected transactionsDominant block production can omit targeted transactionsOther miners may include them when dominance ends
Delay confirmationsThe attacker can disrupt normal block ordering and inclusionIt cannot make an invalid transaction valid
Capture block rewardsDominant production can win more blocks while the attack persistsRewards may not offset energy, equipment, rental, detection, and price-impact costs

What a 51% Attack Does Not Normally Allow

  • spending assets controlled by someone else’s private key
  • forging another user’s digital signature
  • creating coins outside the consensus rules accepted by validating nodes
  • changing a transaction’s amount or destination without a valid replacement authorization
  • forcing full nodes to accept blocks that violate the rules they enforce
  • guaranteeing permanent censorship after the attacker loses control
  • eliminating exchange, market, legal, or operational responses

The distinction matters: proof of work helps nodes choose among valid competing histories. It does not replace transaction-signature and validation rules.

How a Double-Spend Reorganization Can Work

    flowchart TD
	    A["Attacker sends a valid payment to a merchant"] --> B["Merchant observes confirmations on the public chain"]
	    B --> C["Attacker privately mines a competing valid branch"]
	    C --> D["Competing branch excludes or replaces the attacker's payment"]
	    D --> E["Attacker publishes a branch with more accumulated work"]
	    E --> F["Nodes reorganize to the selected valid branch"]
	    F --> G["Merchant's confirmed payment is no longer in canonical history"]

This does not duplicate arbitrary third-party funds. It lets the attacker attempt to keep both the goods received from the merchant and the attacker’s own funds by replacing the history containing the original payment.

Worked Example: A Small Proof-of-Work Network

A merchant accepts a digital asset worth $20,000 after two block confirmations and releases an irreversible off-chain asset. The payment network has low total hash power, and comparable mining capacity can be rented temporarily.

While the merchant waits, the payer privately mines a competing branch containing a conflicting transaction that returns the payer’s funds to another address the payer controls. The attacker publishes that branch after it accumulates more proof of work than the branch the merchant observed. If validating nodes select the competing branch, the merchant’s payment disappears from canonical history even though it had appeared confirmed.

The merchant loses the off-chain asset and no longer has the expected on-chain payment. Waiting for more confirmations would require the attacker to replace more accumulated work and can reduce the probability of success, but it cannot guarantee finality under every concentration and cost scenario.

Economics of the Attack

Technical capability is only part of the analysis. An attacker may need to fund:

  • owned or rented mining equipment
  • electricity, hosting, and network access
  • foregone honest mining rewards
  • deposits or collateral on hash-rental markets
  • trading liquidity needed to monetize a double-spend
  • losses caused by detection and a falling asset price

Potential targets include exchanges, bridges, merchants, and custodians that release another asset after too few confirmations. The economically relevant exposure can exceed the value transferred on-chain if the victim delivers cash, securities, inventory, or another token that cannot be reversed.

Network and Settlement Risk Indicators

  1. Confirm that the network actually uses proof of work and identify its chain-selection rule.
  2. Measure effective hash-rate concentration across pools, operators, and equipment types.
  3. Compare attack capacity with hash power available for rent or diversion from compatible networks.
  4. Review whether mining is geographically, operationally, or administratively concentrated.
  5. Examine past reorganizations, stale-block behavior, outages, and emergency interventions.
  6. Understand exchange and merchant confirmation policies for transaction size and network conditions.
  7. Identify checkpoints, merged mining, finality overlays, or other defenses and their governance tradeoffs.
  8. Separate node validation, transaction confirmation, economic settlement, and off-chain release.

No single metric proves safety. A high reported hash rate can still be concentrated, while a broad set of named pools may depend on fewer underlying operators or infrastructure providers.

Proof of Stake Is Different

Proof-of-stake networks can face majority-control, censorship, reorganization, governance, or finality attacks, but hash power is not the controlling resource. Stake thresholds, slashing, validator rules, checkpoints, and social recovery differ by protocol. Calling every consensus attack a 51% attack can hide those distinctions.

Why It Matters to Investors and Businesses

A credible attack can lead exchanges to suspend deposits and withdrawals, increase confirmation requirements, or delist an asset. Market makers may widen spreads, merchants may stop accepting payment, and users may demand compensation for greater settlement uncertainty.

These responses can reduce liquidity and market confidence even when no individual wallet key is compromised. Network security, custody security, and asset-price risk are related but separate layers.

Common Mistakes

  • Treating exactly 51% as a universal on-off threshold.
  • Applying proof-of-work hash-power language directly to proof of stake.
  • Claiming majority miners can steal any wallet balance.
  • Assuming a valid signature makes a transaction permanently final.
  • Comparing networks only by nominal hash rate when algorithms and hardware differ.
  • Ignoring rented hash power, mining-pool coordination, and operator concentration.
  • Treating more confirmations as a guarantee rather than a risk-reduction measure.
  • Confusing a temporary chain reorganization with permission to violate consensus rules.
  • Blockchain: Ledger and consensus structure whose recent history may be reorganized.
  • Nonce: Block-header field miners vary as part of proof-of-work search.
  • Cryptocurrency: Digital asset whose settlement assurance depends partly on its network rules.
  • Cryptocurrency Exchange: Venue that may change deposit crediting or withdrawals during a network attack.
  • Cryptocurrency Transfer: Transaction whose confirmation and finality must be evaluated separately.

Primary Sources

FAQs

Does a 51% attack let an attacker steal every wallet's assets?

No. Majority hash power does not reveal other users’ private keys or create their signatures. The primary powers involve block production, transaction ordering, censorship, and replacement of recent valid history.

Are six confirmations always safe?

No fixed number guarantees safety across every network and transaction. Appropriate confirmation depth depends on hash power, concentration, attack cost, transaction value, and the recipient’s ability to reverse an off-chain delivery.

Can an attack happen with less than half of the hash power?

An actor below 50% can still cause disruption or occasionally overtake the honest chain, but its probability of replacing deeper history generally falls as honest confirmations accumulate. Sustained majority control makes outpacing the honest network much more reliable.

Educational Use

This article provides general financial and technical education, not individualized cybersecurity, custody, legal, trading, or investment advice.

Browse Investing