I'm wondering how each payout method (PPS, DGM, PPLNS, Proportional, etc) influences the cost of executing a block withholding attack.

Does it matter how the payout method places variance between pool and miners? With DGM this is a setting that can be adjusted by the pool operator. With other payout methods it is inherent to the system.

Does a block finder's bonus influence the cost of an attack? By that I mean part of the block income being reserved for the miner who created it, before the rest is distributed according to the pool's chosen payout method.

Are other factors important?

Which systems would be expensive to attack, and which would be cheapest?

  • Do you mean "block SOLUTION withholding attack"?
    – ThePiachu
    Commented Oct 3, 2012 at 10:05
  • Yes, that's what I mean. Since every bit in a block is part of what makes it valid I don't see a big difference between a block and its solution.
    – Dr.Haribo
    Commented Oct 3, 2012 at 18:10
  • @Dr.Haribo As you asked here - bitcoin.stackexchange.com/q/4943/323 - there is a difference between withholding a block and withholding a block solution. Generally the latter is relevant to miners in a pool, whereas the former - to the whole network.
    – ThePiachu
    Commented Oct 3, 2012 at 18:23
  • @ThePiachu - good point, I'm talking about the scenario when mining in a pool.
    – Dr.Haribo
    Commented Oct 3, 2012 at 18:27
  • @StephenGornick, P2Pool and Eligius are also vulnerable.
    – Dr.Haribo
    Commented Oct 3, 2012 at 18:28

1 Answer 1


Generally, the higher the variance for the miners of a reward method, the higher the cost of sabotage attacks (and I think also the potential profit of lie-in-wait).

In PPS there is no variance; and the cost for sabotage is negligible, it is merely the reward of 1 share.

In a typical method with no risk absorption and moderate variance, withholding a block means you lose your portion of its reward, which is h/H, your portion of the pool hashrate.

If you take an extremely high-variance reward method such as "pay per last 10 shares", withholding blocks means losing 10% of the reward, since if you submit a block then by definition you have a share in the last 10 shares, no matter your hashrate.

And of course, when solo mining, block withholding means losing all of your mining reward.

A block finder bonus is added multiplicatively to the other costs. For example in PPL10S with 20% finder bonus, when withholding you lose both the 20% bonus and 10% of the distributed 80%, for a total cost of 28%. However, finder bonus is a poor way to combat block withholding because it creates a lot of variance.

  • I think that specifically the distribution of risk between miner and operator doesn't play a big role, but I'll need to think about this. Commented Oct 3, 2012 at 20:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.