Bitcoin Stack Exchange is a question and answer site for Bitcoin users, developers, and enthusiasts. It only takes a minute to sign up.
Sign up to join this community
How much hashpower is needed to double-spend coins?
Some worry only about one entity getting over 50% of the hashpower, while others are complaining (at the time of writing) about an entity having more than 33%. What is the importance of 50%? Can a double-spend be done with less?
No, 50% is not a minimum to double-spend. From the Bitcoin-Wiki
Brute force attack
This attack has a chance to work even if the merchant waits for some confirmations, but requires relatively high hashrate.
The attacker submits to the merchant/network a transaction which pays the merchant, while privately mining a blockchain fork in which a double-spending transaction is included instead. After waiting for n confirmations, the merchant sends the product. If the attacker happened to find more than n blocks at this point, he releases his fork and regains his coins; otherwise, he can try to continue extending his fork with the hope of being able to catch up with the network. If he never manages to do this, the attack fails and the payment to the merchant will go through.
The probability of success is a function of the attacker's hashrate (as a proportion of the total network hashrate) and the number of confirmations the merchant waits for. For example, if the attacker controls 10% of the network hashrate but the merchant waits for 6 confirmations, the success probability is on the order of 0.1%
When you have more than 50% of the hashrate, the succeed chance is 100%:
>50% attack
If the attacker controls more than half of the network hashrate, the previous attack has a probability of 100% to succeed. Since the attacker can generate blocks faster than the rest of the network, he can simply persevere with his private fork until it becomes longer than the branch built by the honest network, from whatever disadvantage.
No amount of confirmations can prevent this attack; however, waiting for confirmations does increase the aggregate resource cost of performing the attack, which could make it unprofitable or delay it long enough for the circumstances to change or slower-acting synchronization methods to kick in.
The 33% I believe came from reports last year about a 'selfish mining' strategy which claimed originally that 33% of the hashrate can be used to manipulate nodes to secure the remainder necessary for the full 50%,
The high-level overview of the attack is this: rather than acting as a normal miner and publishing blocks to the network immediately upon finding them, the attacker selectively publishes blocks, sometimes sacrificing his own revenue but also often publishing many blocks all at once and thus forcing the rest of the network to discard blocks and lose revenue. This does reduce the attacker’s revenue in the short term, but it reduces everyone else’s revenue even more, so neutral nodes now have the incentive to join the attacker’s coalition to increase their own revenue. Eventually, the attacker’s coalition would expand to above 50% in size, potentially giving the attacker a high degree of control over the network.
From bitcoin magazine
Personally I think greed and profit motive would prevent anyone risking this strategy, over simply mining honestly.
Also I really dont think double spending ought be a concern. Its not affecting the supply rate / total quantity of coins and, if someone attempted to do a double spend, they would be delivering into the hands of the victim of their crime, irrefutable evidence of themselves as the perpetrator (the signed double spending transaction). If merchants simply refrain from selling hugely valuable items to anonymous persons/parties (common sense) there likely will never be a case of fraud using this method.
