Last updated: October 2026
Proof of Work (PoW) is the consensus method Bitcoin has used since 2009: computers called miners race to find a number that makes a block’s hash fall below a target, and the winner adds the next block and collects new coins plus fees. Because finding that number takes enormous computing effort but checking it takes a fraction of a second, rewriting history would require out-spending the honest network. The cost is electricity and specialized hardware. This guide explains the mechanics, why Bitcoin keeps PoW, the energy debate, and how it compares with proof of stake.
Key takeaways
- PoW secures a blockchain by making block production expensive and verification cheap.
- Bitcoin adjusts mining difficulty every 2,016 blocks (about two weeks) to keep blocks near 10 minutes apart.
- The block subsidy has been 3.125 BTC since the April 2024 halving; the next cut is expected around 2028.
- Proof of stake replaces energy with locked capital; Ethereum switched in September 2022 and cut its energy use by more than 99.9%.
- Neither system is “better” in every respect — they trade off energy, hardware access, wealth concentration and attack recovery differently.
Where Proof of Work Came From
The idea predates Bitcoin. Computer scientists Cynthia Dwork and Moni Naor proposed computational puzzles to deter email spam in 1992, and cryptographer Adam Back released Hashcash in 1997, requiring a small amount of hashing before an email could be sent. Satoshi Nakamoto’s 2008 white paper repurposed Hashcash-style work to solve a different problem: how strangers who don’t trust each other agree on one transaction history without a central referee. Bitcoin’s first block was mined on January 3, 2009.
How Proof of Work Works
Every Bitcoin block header contains a reference to the previous block, a summary (Merkle root) of its transactions, a timestamp, the current difficulty target and a 32-bit field called the nonce. Mining works like this:
- Transactions are broadcast: wallets send transactions to nodes, which hold them in a waiting area called the mempool.
- Miners build a candidate block: they pick transactions, usually prioritizing those paying the highest fee per byte, and add a “coinbase” transaction paying themselves the reward.
- The puzzle: miners run the header through SHA-256 twice. The result must be a number below the target — in practice, one starting with a long run of zeros.
- Brute force: there is no shortcut. Miners change the nonce (and other fields when the nonce runs out) and hash again, trillions of times per second per machine.
- Solution found: the winner broadcasts the block. Any node can confirm it with a single hash — finding is hard, checking is trivial.
- Chain extended: nodes accept the block if every transaction is valid and build on it. If two blocks arrive at once, the chain that accumulates more total work wins.
Difficulty adjustment
Every 2,016 blocks, Bitcoin compares how long those blocks actually took with the two-week target and adjusts difficulty up or down (by at most a factor of four). When new machines join, blocks come faster and difficulty rises; when miners shut down, it falls. That self-correction is why Bitcoin’s schedule stayed on track even as network hashrate grew past 1 zettahash per second (a billion trillion hashes) — a level the network has hovered around through 2025–2026.
Hardware
Early miners used home CPUs, then graphics cards. Since 2013, Bitcoin mining has been dominated by ASICs — chips built to do nothing but SHA-256. Our ASIC mining explainer covers how they work and what they cost to run.
Why Bitcoin Uses Proof of Work
Security
To rewrite recent transactions, an attacker needs more hashing power than the rest of the network combined — a “51% attack.” On Bitcoin that would mean acquiring a huge share of all ASICs ever built plus the power to run them, and the attack would likely crash the value of the coins being stolen. Smaller PoW chains have been attacked this way: Ethereum Classic suffered several deep reorganizations in 2019 and 2020, and in 2025 a pool called Qubic briefly claimed a majority of Monero’s hashrate and reorganized blocks.
Permissionless entry
Anyone with hardware and electricity can mine without asking permission or owning existing coins. Mining has industrialized, but the rule is the same for everyone.
Objective history
A new node can download the chain and independently determine which history is valid simply by checking which one has the most accumulated work. It needs no trusted checkpoint or social information — a property PoW supporters consider fundamental.
Unforgeable cost
Creating new bitcoin requires real-world expense, which supporters compare with the cost of mining gold. It is one reason for the “digital gold” framing.
The Energy Debate
The criticism
Bitcoin mining uses roughly as much electricity as a mid-sized country. Critics argue that is wasteful, adds emissions where miners use fossil power, and produces electronic waste as ASICs become obsolete within a few years.
The counter-arguments
- Energy mix: a 2025 Cambridge Centre for Alternative Finance survey of miners estimated that just over half of their power came from sustainable sources, including nuclear. Estimates vary widely and depend on self-reporting.
- Stranded and flared energy: miners can sit next to hydro dams with excess output or oil fields that would otherwise flare gas.
- Grid flexibility: large miners in Texas and elsewhere switch off during demand spikes; in early 2026 a US winter storm saw significant hashrate curtailed.
- Purpose: supporters argue securing a global, censorship-resistant monetary network is a legitimate use of energy, just as banking and gold mining use energy.
Proof of Work vs. Proof of Stake
This is the comparison most people are really after. In proof of stake, validators lock up the network’s own coins as collateral instead of burning electricity; misbehaviour is punished by “slashing” part of that stake. Our proof of stake guide covers it in depth, and the side-by-side below summarizes the trade-offs.
For a proof-of-work smart contract coin, our guide on buying ETC without mixing it up with ETH walks through exchanges and wallets.
Not every Ethereum-based chain made the switch, and Ethereum Classic, the original chain that stayed on proof of work, is still secured by GPU and ASIC miners today.
| Proof of Work | Proof of Stake | |
|---|---|---|
| What secures the chain | Electricity and hardware spent on hashing | Coins locked as collateral |
| Energy use | Very high, by design | Low — comparable to running servers |
| Who can produce blocks | Anyone with ASICs and cheap power | Anyone with enough tokens (directly or via delegation) |
| Cost of attack | Acquire majority hashrate and keep paying for power | Acquire a large share of staked tokens, which can then be slashed |
| Recovery after attack | Hard; attacker keeps hardware | Community can slash or socially fork out the attacker’s stake |
| Finality | Probabilistic — more confirmations, more certainty | Often explicit finality after a set number of slots or epochs |
| Who earns rewards | Miners only | Validators and delegators/stakers |
| Centralization pressure | Cheap electricity, ASIC supply chain, large pools | Large holders, exchanges and liquid-staking providers |
| Examples | Bitcoin, Litecoin, Dogecoin, Bitcoin Cash, Monero | Ethereum, Solana, Cardano, Avalanche |
Is proof of stake better than proof of work?
It depends on what you value. PoS is clearly better on energy efficiency and lets ordinary holders earn rewards. PoW is simpler, has the longest track record, and ties security to an external resource rather than to who already owns the coin — which critics of PoS say lets the rich get richer. PoS also relies on extra assumptions (for example, new nodes trusting a recent checkpoint). Ethereum’s 2022 Merge showed PoS can secure a very large network; Bitcoin’s 17-year record shows PoW can too. For a deeper, query-by-query breakdown, read our dedicated proof of stake vs proof of work comparison.
Understanding the difference in one example
Suppose someone wants to reverse a payment. On a PoW chain they would need to rent or buy more hashing power than everyone else and re-mine blocks faster than the honest chain, paying for electricity the whole time. On a PoS chain they would need to control a large share of staked coins — and if caught signing conflicting blocks, the protocol can destroy that stake. One attack costs ongoing energy; the other risks the attacker’s capital.
The Halving and Mining Economics
Every 210,000 blocks — roughly four years — Bitcoin’s block subsidy halves. The April 2024 halving cut it from 6.25 to 3.125 BTC, and the next is expected around 2028, when it falls to 1.5625 BTC. Over time, transaction fees must make up a larger share of miner income for security to stay strong — one of the long-running open questions about PoW. Our Bitcoin halving guide covers the market effects.
Mining Pools
A single modern ASIC might wait years to find a block on its own. Pools combine members’ hashrate and pay out in proportion to the work each contributes, smoothing income. Large pools include Foundry USA, AntPool, ViaBTC and F2Pool. Pool concentration is a common criticism of PoW: although individual miners can switch pools at any time, a few operators coordinate a large share of block templates. Our mining pools guide compares payout schemes. For more Bitcoin fundamentals, browse the Bitcoin guides hub.
Bitcoin is not the only proof-of-work chain worth studying; our DigiByte (DGB) explainer shows how one network splits mining across five algorithms to spread out hash power.
FAQ
Why doesn’t Bitcoin switch to proof of stake?
Changing consensus would require broad agreement among users, node operators and miners, and there is no significant support for it. Many Bitcoin users see PoW’s external energy cost as the source of its neutrality and security, and miners have billions invested in hardware. Unlike Ethereum, Bitcoin never planned a transition, so a switch is very unlikely.
Is proof of work wasteful?
It uses a lot of energy by design; whether that is waste depends on how you value what it secures. Critics point to emissions and electronic waste. Supporters note growing use of stranded and renewable power and argue that operating a neutral, global money network justifies the cost. Reasonable people disagree, and the answer varies by local energy mix.
Which cryptocurrencies use proof of work?
Bitcoin (SHA-256) is the largest. Others include Litecoin and Dogecoin (Scrypt, often merge-mined together), Bitcoin Cash (SHA-256), Monero (RandomX, designed for ordinary CPUs), Ethereum Classic, Kaspa and Zcash. Ethereum used PoW until the Merge on September 15, 2022, when it switched to proof of stake.
Can I mine Bitcoin at home?
You can, but profit is unlikely unless you have very cheap electricity and current-generation ASICs. Machines are loud, hot and power-hungry, and difficulty rises as more hashrate joins. Most home miners join a pool and treat mining as a hobby or heat source rather than a reliable income.
Crypto is volatile and risky; this is education, not financial advice. Do your own research.
