28

As we know one of the important mechanisms of Bitcoin is proof-of-work.

How does the concept of proof-of-stake work? How does it differ from proof-of-work?

1
  • Proof of stake isn't currently used for bitcoin. I believe StrongCoin (derivative of bitcoin) is using some form of it.
    – lurf jurv
    Apr 3, 2013 at 21:33

1 Answer 1

21

Proof of stake is a proposed alternative to proof of work designed to increase network security. It's not currently implemented in the main chain (and would likely require a hard fork to implement), but alt currency PPCoin features a hybrid proof-of-stake/proof-of-work system of sorts.

With proof of work, the likelihood of mining a block is dependent on the work done by the miner, e.g. the number of hashes checked for validity by a CPU, GPU, FPGA, or ASIC. As such, over time, the blocks are split across miners proportionally to their relative hashrates. With proof of stake, blocks are split relative to current wealth, so someone possessing 1% of the bitcoins currently in existence could "mine" 1% of the proof of stake blocks.

This proposed system has a few (theoretical) benefits relative to proof of work:

Reduced long-term transaction fees

When transaction fees form the majority of block rewards, with the current proof of work system, miners would be forced to require a "minimum" transaction fee if they wish to remain profitable, as they must utilize physical and costly resources (hardware, electricity, internet, etcetera) in order to mine blocks. Proof of stake has no such limitation, as solving blocks would require no physical resources whatsoever (apart from a computer running the Bitcoin software, which is essentially negligible).

Decreased likelihood of a 51% attack

In the current proof of work system, an attacker need merely obtain over half the current network hashing capacity for a short amount of time to perform a so-called "51% attack". With proof of stake, an attacker would need to obtain over half of the bitcoins in existence, a far more expensive and difficult feat. Moreover, performing a 51% attack and likely devaluing Bitcoin significantly wouldn't be all that appealing if you are so heavily vested into it.

However, this is debatable. If a single entity could obtain, even temporarily, loans or other borrowed capital comprising over half the network, they could perform a 51% attack with very little input resources, and might well have good incentive to do so. Just as centralized or leasable hashpower dramatically increases the risk of a 51% attack on a proof of work system, centralized or borrowable wealth dramatically increases the risk of a 51% attack on a proof of stake system.

Proof of stake was first formally proposed by forum user QuantumMechanic here. Two at least somewhat complete implementation specifications have been released, one by Meni Rosenfeld and one by Cunicula; both are explained in detail on the proof of stake wiki page. Both are hybrid proof-of-stake/proof-of-work implementations, meaning that 51% of the total wealth and 51% of the network hashpower would be required to create and maintain a fork. You can find the (unofficial) forum discussion thread here.

4
  • 1
    "they could perform a 51% attack with very little input resources, and might well have good incentive to do so" nope. If such an attack is performed, that currency would suffer a tremendous drop in value, hence if you hold 51% of it, you definitely do not want it to lose value. It makes sense only if your goal is not to steal but to destroy, or maybe if you have incredibly hight debts you wouldn't be able to repay.
    – o0'.
    Apr 4, 2013 at 11:18
  • 2
    @Lohoris Exactly, which is why an excess of borrowable funds could pose such a threat. I thought I made that clear in the following sentence, but perhaps I need to clarify - advice?
    – BinaryMage
    Apr 4, 2013 at 15:13
  • 1
    Is there a "rate of return" for holding coins with PoS? Jun 28, 2013 at 14:07
  • The environmental impact is missing, I think it is worth to be mentioned in your answer. Proof of stake avoids having thousands of high end CPUs computing unnecessary hashes and wasting electricity. May 11, 2019 at 16:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.