According to this question's answers, the difficulty is entirely a result of previous info on a blockchain:

How is difficulty calculated?

So why can't someone simply fork an earlier state of Bitcoin's blockhain, back when the difficulty was far less, and simply pretend it always took a long time to solve an easy (by now) hash problem, ie simulate a bitcoin world where no ASIC were released etc.

According to that chain, the hash rate would be low and thus a perfectly valid chain could be made with fake transactions, mined in secret many years into the future.

If Bitcoin modes really simply consider the longest chain the valid one, wouldn't this totally bork the whole Bitcoin ecosystem? I hope that "longestt chain" actually means "most proof of work" rather than "most blocks"!

1 Answer 1


I hope that "longestt chain" actually means "most proof of work" rather than "most blocks"!

It is exactly that: the "longest chain" is the one with the most work, not the largest block height.

If it wasn't like that, then an attack like the one you described could work.

  • Can you link to an authoritative source? Jan 25, 2018 at 12:01
  • @GregoryMagarshak I believe this is the code you're looking for, notice that it uses 'nchainwork', rather than 'blockheight' to decide what the longest valid chain is.
    – chytrik
    Jan 25, 2018 at 21:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.