Proof of Work Explained Simply

Proof of work is the method by which everyone in Bitcoin agrees on one shared order of transactions, without a boss. Miners use computing power to roll the dice for the right to add the next block. Every block costs real electricity, which makes rewriting the past extremely expensive. That is exactly what protects you from someone spending the same bitcoin twice.

This article explains the principle behind Bitcoin. How miners operate and what they earn is covered in Bitcoin mining explained. Here the question is: why work at all?

The problem: who decides which payment came first?

Digital data can be copied at will. Money must not work that way. If you send 1 bitcoin to Anna, you must not be able to send the same bitcoin to Ben at the same time. This problem is called the double spend.

At your bank the solution is simple: the bank keeps the account, executes the first transfer and rejects the second. That works as long as you trust it.

Bitcoin has no bank. Thousands of nodes around the world each keep their own copy of the ledger. Messages take different amounts of time to cross the internet. A node in Zurich may see your payment to Anna first, a node in Tokyo the one to Ben. Each payment is valid on its own, just not both together. Someone has to say which one counts, and everyone has to stick to it.

A majority vote sounds obvious. But on the internet anyone can create as many identities as they like. Whoever starts a million fake nodes would have a million votes. Satoshi Nakamoto solved this in 2008 in the Bitcoin white paper: the vote is not one per head but one per unit of computing power. Computing power cannot be faked. You have to buy it and run it on electricity.

How rolling the dice with hashes works

The hash: a fingerprint for data

A hash function turns any data into a number of fixed length. Bitcoin uses SHA-256; the result has 256 bits and is usually written as a 64-character string of digits and letters. Three properties make it useful:

1. Same input, same hash. Anyone can recompute a hash in a fraction of a second.
2. Smallest change, completely different hash. Change a single character and the result looks freshly rolled.
3. No way back. You cannot work out the input from a hash. If you want a particular hash, all you can do is try.

The lottery

A miner packs new transactions into a block. Then they compute the hash of the block header. The block is only valid if this hash is smaller than a target. You can see this because a valid block hash starts with many zeros.

Almost always the hash is too large. Then the miner changes a number in the block header, the nonce, and computes again. And again. And again. On average the whole network needs around 640 sextillion attempts (as of November 2026) before one fits.

This is a lottery, not a puzzle. There is no clever way to compute the answer; every attempt has the same small chance. Whoever has twice the computing power draws twice as many tickets and wins twice as often on average. Nothing more.

The trick lies in the asymmetry: finding is enormously costly, checking is trivial. Every node, even a small computer at home, computes a single hash and sees at once whether the block is valid. The work is thereby proven without anyone having to take the miner's word for it.

You can see the newest blocks with their hashes here. Look at the zeros at the start:

Why it stays at 10 minutes

If more miners join, blocks would be found faster. That is why Bitcoin adjusts the target every 2’016 blocks, roughly every two weeks. How exactly is explained in The difficulty adjustment: the heart of Bitcoin. For proof of work only one thing matters: however much computing power is in the network, a block always costs the share of the total work that falls on 10 minutes.

Why the work protects history

Every block contains the hash of its predecessor. If someone changes an old transaction, the hash of that block changes. Then the next block no longer fits, nor the one after it. Whoever forges a block has to recompute every later block, with the full work for each one.

And that is not enough. While the forger computes, the honest miners keep building on the real chain. He has to not only catch up with them but overtake them.

What an attacker with more than 50 % can and cannot do

With more than half of the computing power, often called a 51 % attack, the attacker wins the race in the long run. He can then:

• reverse his own payments, that is, double spend,
• keep particular transactions out of his blocks.

He cannot:

• spend other people's bitcoin, because he lacks their private keys,
• create more new bitcoin than the rules allow,
• change the rules. Every node rejects invalid blocks, no matter how much work is in them.

So the 21 million limit holds even during such an attack. Why, is explained in Why there are only 21 million bitcoin. Smaller proof-of-work coins show that the danger is real: Bitcoin Gold and Ethereum Classic were attacked this way several times between 2018 and 2020. Their total computing power was small enough to rent. For Bitcoin there are nowhere near enough idle machines to rent.

There is also an economic argument. Whoever invests that much in machines earns the most by playing honestly. A successful attack would destroy trust, and with it the value of the very bitcoin in which he receives his reward.

The chain with the most work wins

Sometimes two miners find a block at almost the same time. Then for a short while there are two versions of the chain. Nodes keep building on the version they saw first. As soon as the next block is found on one side, that side is longer, and everyone switches to it. The other block is discarded and its transactions go back to the waiting area.

The rule is often called "the longest chain wins". Strictly speaking, what counts is not the number of blocks but the total work: the sum of the attempts contained in all blocks. A chain with many easy blocks does not beat one with fewer but harder blocks. So nobody can score with a home-made, artificially easy chain.

The nice part: a new node does not need to ask anyone which chain is the right one. It downloads every block since 2009, checks each one itself and follows the valid chain with the most work. No further trust is needed.

Proof of work and proof of stake compared

The best-known alternative is proof of stake. Ethereum switched to it in September 2022. Instead of computing power, participants lock up coins as a deposit. Whoever deposits more is chosen more often to propose the next block. Whoever cheats loses part of their deposit.

Both methods solve the same task. They have different strengths:

To be fair: proof of stake saves a lot of energy, and explicit finality is practical. The fundamental difference lies elsewhere. In proof of stake, those who already own coins decide. Security depends on how the coins are distributed, and the large holders collect the reward for depositing. In proof of work, anyone who wants a say has to keep bringing in something from outside: electricity and machines. Owning many bitcoin does not, by itself, give anyone a vote on the order of blocks.

For money that should never belong to anyone in particular, we think that is the more important point.

The electricity is the point, not a bug

Bitcoin is often accused of wasting electricity. From the point of view of proof of work, that is a misunderstanding. If a block were cheap to produce, a forgery would be cheap too. The cost of the work is exactly what an attacker would have to overcome.

The level of consumption does not follow the number of transactions but the reward. Miners invest in machines and electricity for as long as it pays given the reward of new bitcoin plus fees. If the value of the reward rises, the work rises, and with it the security. With every halving the new bitcoin per block fall, and over the decades fees have to carry a larger share.

How much electricity that actually is and where it comes from is worked out soberly in Bitcoin's energy use: facts instead of headlines.

What proof of work means for you as a bitcoin holder

You do not need to mine to benefit. Reversing a payment with a few confirmations costs more than almost any attack could bring in. And nobody gains power over the order of blocks just because they own a lot of bitcoin. The rules are still set not by the miners but by the nodes. With your own Bitcoin node you check every block yourself.