Definition
A 51% attack (also called a majority attack) occurs when a single entity or coordinated group of miners/validators gains control of more than 50% of a proof-of-work blockchain’s total hash rate (or a comparable majority of PoS stake), enabling them to manipulate the blockchain’s consensus mechanism. With majority control, an attacker can double-spend coins (spend the same funds twice), reverse recent transactions, prevent new transactions from being confirmed, and selectively censor blocks – effectively taking temporary control of the network’s history and present. While major networks like Bitcoin and Ethereum are economically impractical to attack, smaller PoW chains (Ethereum Classic, Bitcoin Gold, Vertcoin) have suffered real 51% attacks causing millions in losses.
Read Also: Spot Trading
Origin & History
| Date | Event |
| 2008 | Satoshi Nakamoto addresses majority attack risk in Bitcoin white paper |
| 2014 | GHash.io mining pool reaches 51% of Bitcoin hash rate briefly; community responds by redistributing |
| 2018 | Bitcoin Gold (BTG) suffers 51% attack; $18 M double-spent |
| 2019 | Ethereum Classic (ETC) hit by a 51% attack (three further attacks followed in 2020); ~$1.1M double-spent |
| 2020 | Vertcoin, Feathercoin, and other small PoW chains repeatedly attacked |
| 2020 | Ethereum Classic suffers again; OKEx and Bitfinex lose ~$7.3M in double-spends (Coinbase was not targeted) |
| 2021 | Bitcoin SV (BSV) hit by 51% attack; 100+ blocks reorganised |
| 2022 | Ethereum transitions to PoS (Merge); 51% attack cost rises to $20 B+ |
“An attacker that controls more than half the network’s CPU power… can spend a coin then take it back.”
How It Works
| Attack Cost (2024 Estimate) | Network | Hash Rate Requirement |
| ~$1 M/hour | Ethereum Classic (ETC) | 51% of ETC network |
| ~$5 M/hour | Bitcoin Cash (BCH) | 51% of BCH network |
| ~$700 M/hour | Bitcoin (BTC) | 51% of BTC network – near-impossible |
| Near-infinite | Ethereum (PoS) | Control 1/3+ of ETH stake + social fork risk |
In Simple Terms
- Majority = control– In a PoW blockchain, the longest chain wins. Controlling 51%+ of mining power means you can build the longest chain and overwrite recent history.
- Double spend– Attacker pays exchange for BTC, withdraws goods, then rewinds the blockchain to before the payment – keeping both the goods and the BTC.
- Censorship– With majority hash rate, an attacker can refuse to include any specific transaction, effectively blacklisting addresses.
- Cannot create coins from nothing– Even a 51% attacker cannot generate coins beyond the protocol’s rules or steal from unrelated wallets; they can only rearrange recent transactions.
- Economic deterrence– On large networks, the cost of renting or owning majority hash rate far exceeds potential double-spend profits, making attacks economically irrational.
Real-World Examples
| Scenario | Implementation | Outcome |
| GHash.io (2014) | Mining pool hits 51% of Bitcoin hash | Community pools redistributed; no attack executed |
| Bitcoin Gold (2018) | Attacker rents hash power; reorganises chain | $18 M double-spend against exchanges |
| Ethereum Classic x3 (2019–2020) | ETC’s low hash rate exploited repeatedly | ~$1.1M (2019) + ~$7.3M (2020) double-spent; exchanges raise ETC confirmations |
| Bitcoin SV (2021) | 100+ block reorganisation | Massive chain disruption; exchange deposits reversed |
| Nicehash rental attacks | Attacker rents hash power from NiceHash marketplace | Small PoW coins repeatedly targeted |
How Networks Defend Against 51% Attacks
| Defense | Mechanism | Example |
| High hash rate | Makes attack expensive | Bitcoin ($700M+/hr) |
| Proof of Stake | Attack requires owning large stake; slashable | Ethereum post-Merge |
| Delay confirmations | Exchanges wait 6–100+ blocks for high-value TX | Kraken waits 1,500 ETC blocks |
| Checkpointing | Centralised or PoS checkpoints prevent deep reorgs | ETC MESS algorithm |
| Merged mining | Piggybacks on larger chain’s security | Namecoin on Bitcoin |
Disadvantages & Risks
| Risk | Detail |
| Exchange losses | Primary target is exchange deposits during confirmation window |
| Chain credibility damage | Repeated attacks destroy user confidence |
| Network halt | Attacker can prevent any new transactions from confirming |
| Mining pool concentration | Even without attack intent, large pools approach dangerous thresholds |
Risk Management Tips:
- Exchanges should require 100+ confirmations for small PoW chains
- Investors should evaluate network hash rate and hash rate distribution before holding small PoW coins
- Prefer large PoW or PoS networks with proven economic security
FAQ
Can Bitcoin be 51% attacked?
Theoretically yes; practically near-impossible. The cost exceeds $700 million per hour and would require owning/renting more mining power than all of Bitcoin’s network – hardware that doesn’t currently exist.
Does 51% control let an attacker steal from any wallet?
No. The attacker can only reorganise recent transaction history. They cannot forge signatures to steal from wallets they don’t control.
Is Ethereum immune to 51% attacks after the Merge?
Post-Merge, a 51% stake attack requires owning $20 B+ in ETH (slashable), and a successful attack would likely destroy the value of that stake – extreme economic deterrence.
What is a Goldfinger attack?
A theoretical variant where an attacker’s goal is to destroy the network’s value (e.g., short-selling the asset) rather than profit from double-spends – economically viable against small chains.
How many confirmations should I wait on a small PoW chain?
Security researchers recommend at least 1,500+ confirmations for chains like ETC that have been attacked. Check exchange policies for each chain.
Sources
- Satoshi Nakamoto, “Bitcoin: A Peer-to-Peer Electronic Cash System” (2008)
- Crypto51.app – real-time 51% attack cost estimates
- Coinbase engineering blog – “Ethereum Classic 51% attack” (2020)
- Messari research on PoW network security
