Mechanically, a miner assembles a candidate block, then hashes its header over and over while changing a small throwaway value. Almost every attempt fails. When one finally produces a hash under the target, the miner broadcasts the block and everyone else verifies it in microseconds. The network adjusts the difficulty of the target on a schedule so that blocks keep arriving at roughly the intended pace regardless of how much <a href="/glossary/hash-rate/">hash rate</a> is competing.
Security comes from that accumulated effort. To rewrite a past block, an attacker would have to redo its work and every block after it, while out-running the honest network producing new ones. That is the scenario behind the <a href="/glossary/51-percent-attack/">51% attack</a>. On a large chain the cost is prohibitive. On a small chain with little hash power behind it, the cost can be modest enough that such attacks have actually happened, and that difference deserves stating plainly rather than glossing over.
The energy argument is real and both sides have a point. Critics note that the electricity is genuinely consumed, that the emissions depend entirely on the local grid mix, and that competing designs reach agreement without it. Defenders answer that the cost <em>is</em> the security: it anchors the ledger to something physical that cannot be faked or borrowed, and miners chase the cheapest power available, which is often stranded or curtailed generation nobody else wants. Neither framing is dishonest. The disagreement is about whether that security is worth its price, and thoughtful people land in different places.
The main alternative, <a href="/glossary/proof-of-stake/">proof of stake</a>, swaps hardware and electricity for capital placed at risk. That is a different set of trade-offs around cost, hardware requirements and who can participate, not a strict upgrade.
Mining vs Staking, Explained
Key takeaways
- The work is deliberately expensive to perform and trivially cheap to verify, and that gap is the entire design.
- Difficulty adjusts to hold block times steady, so extra hash power buys security rather than faster blocks.
- A chain's resistance to attack scales with what an attacker would have to spend, which is why small proof-of-work chains are far more exposed than large ones.
Proof of Work — frequently asked questions
Does proof of work waste electricity?
It depends what you count as waste. The computation itself has no use outside securing the ledger, which critics reasonably call wasteful. Supporters argue the expenditure is the product, since an attacker faces the same bill, and that miners tend to seek out power that would otherwise go unused. Both positions are internally consistent. What you conclude depends on how much you value the guarantee being bought.
Is proof of stake simply better than proof of work?
They solve the same problem with different collateral. Proof of work spends real resources outside the system; proof of stake risks coins inside it. Stake-based designs use far less energy but concentrate influence among large holders and are harder to reason about after a serious failure. Proof of work is simpler to analyse and hardware-intensive. Calling either strictly superior skips over the trade-offs that make the choice interesting.
New to crypto, or filling in the gaps? Work through the essentials in Learn, browse every term A–Z, or see live prices for the coins these concepts power.