Bitcoin Stack Exchange is a question and answer site for Bitcoin users, developers, and enthusiasts. It only takes a minute to sign up.
Sign up to join this community
If there is double spending occuring, I don't understand why the longest chain rule would decrease the likelihood for only one transaction to be confirmed.
Can someone explain step by step why this makes sense logically? I've scoured through youtube videos but they do not explain the logic behind this. The videos only describes using the longest chain rule.
I also have one additional question. Are all the miners also verifying that the block that is solved is correct once it's solved?
Suppose Alice has a bitcoin, an unspent transaction output (UTXO) worth 1.001 BTC.
Using a computer in Chicago, Alice creates a transaction that uses that UTXO to pay 1 BTC to Bob.
Using remote access to a computer in Tokyo, Alice creates a transaction that uses that same UTXO to pay 1 BTC to Carol.
Alice is a bad person and is trying to cheat either Bob or Carol.
A Miner in Chicago sees the Chicago transaction and mines a new block containing the transaction which pays Bob.
A Miner in Tokyo sees the Tokyo transaction and mines a new block containing the transaction which pays Carol.
People in Chicago see the Chicago block which pays Bob
People in Tokyo see the Tokyo block which pays Carol
People in Chicago see the Tokyo block and reject it as a double spend because the UTXO has already been used to pay Bob not Carol
People in Tokyo see the Chicago block and reject it as a double spend because the UTXO has already been used to pay Carol not Bob
Now half the world thinks Bob was paid and half the world thinks Carol was paid. Unless we have some way to put these blocks, and the transactions in them, into the same order everywhere in the world, the bitcoin network will fall into chaos.
We need some way to sort the Tokyo and Chicago blocks into an order which does not depend on how near you are to Tokyo or Chicago. This way everyone can agree whether Bob has the 1 BTC or Carol does. Then Alice does not get to use her money twice.
After creating a new block with a hash less than the target, miners don't need to verify or validate the blocks they produce because they already validated everything before starting to mine.
All nodes, whether wallets, miners or other types, validate as much data as they can as soon as they receive it. No node cares whether other nodes validate anything because no full-node trusts any other node.
Validation is different from confirmation. Confirmation is simply a count of how many blocks have been mined since the block containing a transaction. The block that contains the transaction is included in the count.
In one word: already-spent money should not magically come back to be spent yet again.
You may already know that Bitcoin's ledger, called a blockchain, is public, which keeps track of the transacting history of all bitcoins ever existed, up to where it was initially generated. (in other words, "mined", in a special type of transaction, aka "coinbase transaction") Obviously we (actually, everyone - again, the blockchain ledger is public) can verify whether a miner is following rules, like, the rule which disallows generating arbitrary amount of new bitcoins out of thin air. Or in other words, everyone can validate the content of the blockchain ledger, from the genesis block to the latest chain tip. It's clear that every coin has its own origin.
With the help of digital signature, we (same as above, everyone actually) can verify whether a transaction, which essentially transfers the ownership of coins (UTXOs), is valid.
In the blockchain ledger, it's easy to spot an invalid transaction which spends a nonexistent coin, no matter it's already spent or just never existed at all. Practically full node software generally maintains a database called "UTXO set" which essentially stores the ownership of every currently existing bitcoin. Determining whether an UTXO exists in the UTXO set is almost instant. (There once were software bugs like CVE-2018-17144 which erroneously allows spending an already-spent coin once again, however it had been quickly fixed as soon as it was discovered and reported to the developers.)
Yes, blockchain data is gigantic - however full node software actually does not need to deal with old blocks at all, because, you just need to take good care of the UTXO set (which is just the "current balances"), instead of the whole gigantic history. A brand new full node does still needs to download and verify all blocks, but this only needs to happen for one time, after which the UTXO set will be established and kept up-to-date.
To address the problem mentioned above, Bitcoin just takes the simple and effective approach: choose the chain with the most accumulated proof-of-work (yes, actually it's not "the longest", that was a mistake even Satoshi Nakamoto himself had once made and then corrected) as the "correct" one.
If every honest node follows the protocol to always find and follow the chain with the most accumulated work in their own view, they will finally converge to work on one single commonly accepted chain, which is the "consensus" to make Bitcoin actually exist.
Just as the name suggests, mining a block has considerable costs in real world (which makes the miners think twice), which is also resistant to fakery. It's trivial to verify, as easy as calculate the hash (for only one time - while mining a new block requires billions of calculations) and count how many leading zeroes are there.
As a miner you have to invest considerable resource to mine a block. A miner is supposed to be "greedy" - make as much money with as little cost as possible. Then, as an individual miner what you faces is a prisoners' dilemma: although the transaction validation job is not hard, obviously not doing this at all takes even less effort, doesn't it? However, as a rational miner (who is also supposed to consist of just negligible part of bitcoin hashpower) you can almost certainly realize the fact that you cannot overwhelm the whole rest part of bitcoin hashpower (which is also not supposed to cooperate with you). If you as a negligible individual decide to skip the validation job (or even include invalid transactions on purpose), other miners who does this job will soon find invalidity in your block (if your block has any invalidity), then all your invested resources are now worth zero because other miners keep extending on valid blockchain, instead of your invalid one. After all, just as mentioned above, validating the blockchain ledger is not hard. Not only miners, but also users, can do this - just run a full node.
An honest miner extends only the valid most PoW chain in his view. In other words, he always make his best efforts to find such valid most PoW chain, all the time.
Due to the "memoryless" nature of mining, it costs nothing to "give up work on previous base" - there's actually no "previous work" to give up.
For him to win the reward of newly generated bitcoins (plus transaction fees collected within a block), he obviously does not need to verify the transactions which his new block will include over and over again. With the UTXO set he can instantly know whether a transaction is valid (rule-compliant) and then eligible for inclusion. In practice, full node software typically maintains a pool which contains such eligible (and valid of course) transactions, as known as "mempool".
Actually the mining "rigs" don't have to deal with the full block data at all - all the validation job is supposed to be done by the mining pool (which is also a full node of Bitcoin network - also, in principle technically anyone can run a pool, however in reality running a public pool is also related to engineering and economics) already. All the included transactions finally yields a Merkle root in the block header, then the block header (which contains the nonce field) is theoretically the only thing the mining rigs needs to deal with. (In practice the nonce of Bitcoin block header quickly runs out, therefore the coinbase transaction is also fed to the "rig" machine.) However, on the other hand, this is also the long blamed (re)centralizing problem of Bitcoin in reality - after all, just as mentioned above, the mining rigs themselves do not validate (the whole) block, and, a miner who does not rely on his own full node also (blindly) trusts the public mining pool operators. To address (or relieve, at least) this problem, new mining protocols which enable the miners (who in reality trust/rely on public pool operators) to also validate blocks like StratumV2 have been proposed.
Finally, we meet the real double-spending problem and the so-called 51% attack.
Since the dishonest chain is also compliant with rules, for any bystander who hasn't witnesses the whole genuine history (which is also not practical/possible due to reasons like network latency), it's hard/impossible to tell which chain should be the "correct" one.
However, with the most-accumulated-proof-of-work rule, at least the payee can choose to wait for more confirmations (how many later blocks has been appended to the block which includes the payment) to make his risks lower, as long as the supposed attacker does not control > 50% of all bitcoin hashpower. Just as the calculations in the Bitcoin whitepaper by Satoshi Nakamoto, the chance/probability for the double-spending attacker to succeed will drop dramatically as the confirmation number grows, as long as the attacker only controls < 50% of hashpower.
Technically, the payee obviously loses the payment he was originally supposed to gain - no new coins will be created out of thin air, of course.
However, there will be much more subtle implications once a double spending attack succeeds, which are hard to tell.
