<p>GHOST is outdated, the more relevant protocol based on recent research by Aviv Zohar et al is called "SPECTRE" - <a href="https://medium.com/@avivzohar/the-spectre-protocol-7dbbebb707b5" rel="nofollow noreferrer">https://medium.com/@avivzohar/the-spectre-protocol-7dbbebb707b5</a>, <a href="https://eprint.iacr.org/2016/1159.pdf" rel="nofollow noreferrer">https://eprint.iacr.org/2016/1159.pdf</a>.</p>

<p>It has many advantages over the traditional longest-chain rule of Bitcoin, but:</p>

<ol>
<li><p>It requires a hard fork, something which has never been done intentionally in Bitcoin.</p></li>
<li><p>It is a huge departure from Bitcoin's protocol, and as such it will require extensive research and testing before it is even considered for inclusion in Bitcoin.</p></li>
</ol>

<p>There are alts under development that are trying to implement SPECTRE, if it works well for them it can be a first step towards consideration in Bitcoin. You don't risk untested ideas on a $100B production system.</p>

CC BY-SA 3.0
2017-11-14T02:31:23.587Z
Thank you! This 2 points are so called "bitcoin conservative" right?
Anderson
CC BY-SA 3.0
2017-11-14T02:31:43.310Z
What alts are trying to implement SPECTRE?
Anderson
CC BY-SA 3.0
2017-11-14T02:58:52.257Z
@Meni, are there any trade-offs?
rny
CC BY-SA 3.0
2017-11-14T10:00:31.260Z
@AndersonC: You could say that, they are both related to the rigor required to make changes in Bitcoin. I'm not sure about the specific alts, but I'm sure we'll all know when they're ready.
Meni Rosenfeld
CC BY-SA 3.0
2017-11-14T10:02:58.040Z
@renlord - SPECTRE is more computationally intensive than longest chain. Furthermore, the main advantage of SPECTRE is that it allows shorter time between blocks without losing hashpower, but this has other tradeoffs, notably more resource requirements from SPV clients. Other than that, AFAIR SPECTRE is strictly superior, though I may be missing something.
Meni Rosenfeld
CC BY-SA 3.0
2018-01-31T18:23:39.190Z
FYI PHANTOM is the latest reincarnation of GHOST/SPECTRE.

https://www.youtube.com/watch?v=57DCYtk0lWI
ripper234
CC BY-SA 4.0
2018-05-15T16:17:21.063Z
BIP 50 was a hard fork.
MCCCS
CC BY-SA 4.0
2018-05-15T17:02:11.803Z
@MCCCS: That was an emergency patch rather than a planned protocol upgrade, I don't think it counts. Anyway, I'll try to work on the phrasing.
Meni Rosenfeld
CC BY-SA 4.0
2017-11-13T22:48:37.890Z
2018-05-15T17:03:28.313Z
2018-05-15T17:03:28.313Z
Meni Rosenfeld
<p>One thing to note also is that even ethereum is not using GHOST and I dont see any coin using some sort of ghost or phantom protocol at this point, so yeah its hard to expect bitcoin will jump to it before it is tested elsewhere. </p>

<p><a href="https://ethereum.stackexchange.com/questions/38121/why-did-ethereum-abandon-the-ghost-protocol">https://ethereum.stackexchange.com/questions/38121/why-did-ethereum-abandon-the-ghost-protocol</a></p>

CC BY-SA 4.0
2019-02-11T22:48:08.353Z
2019-02-11T22:48:08.353Z
Blissful
<p>We are using a modified version of <a href="https://medium.com/@niallmoore22/the-road-to-spectre-is-paved-with-ghost-ly-intentions-5a6d2e88d41e" rel="nofollow noreferrer">Ghost at Hycon</a>. The original plan was to move forward with Spectre, but as yet there are some unsolved issues, particularly around selfish mining and efficient resolution of superposition states at the tips of the DAG. Ghost is useful when the block time is shorter and orphan events are more common. In the case of bitcoin, these days orphan events are rare, so unless it was decided to reduce the block time it is unnecessary.</p>

CC BY-SA 4.0
2019-02-12T02:36:48.947Z
ghost also massively amplifies selfish mining... my understanding is that this is why ethereum dropped it.  Impressive that there are other altcoins more recklessly yolo than ethereum...
G. Maxwell
CC BY-SA 4.0
2019-02-13T08:21:10.843Z
Our implementation includes the difficulty from uncle blocks as part of our [dynamic difficulty adjustment](https://github.com/Team-Hycon/research/blob/master/A%20Stochastic%20Model%20for%20Proof%20of%20Work%20Block%20Production/stochastic_model.pdf), negating selfish mining strategies as laid out [here](https://bitslog.wordpress.com/2016/04/28/uncle-mining-an-ethereum-consensus-protocol-flaw/). To quote the article "(a difficulty algorithm) based on the chain weight (weight/time), then mining uncles would not increase the rate of the best chain, and uncle mining would be prevented."
Niall Moore
CC BY-SA 4.0
2019-02-11T23:45:56.310Z
2019-02-11T23:45:56.310Z
Niall Moore
<p>GHOST can provide higher transaction throughput by minimized block interval, but community people seldom mention it. What's wrong with GHOST?</p>

CC BY-SA 3.0
2017-11-13T16:53:25.430Z
Side note if the bitcoin community wouldn't even allow for 8MB blocks or segwit2x I doubt they would even think about GHOST.
Marc Alexander
<block-interval>
Why not implement GHOST in bitcoin?
Anderson
# Why not implement GHOST in bitcoin?

(Asked by: username_0 on 2017-11-13)

GHOST can provide higher transaction throughput by minimized block interval, but community people seldom mention it. What's wrong with GHOST?

**Tags:** block-interval

> **Comments:**
> **username_1**: Side note if the bitcoin community wouldn't even allow for 8MB blocks or segwit2x I doubt they would even think about GHOST.  

---

## 3 answers

### Answer by username_2 on 2017-11-13. Score: 7

GHOST is outdated, the more relevant protocol based on recent research by Aviv Zohar et al is called "SPECTRE" - <https://medium.com/@avivzohar/the-spectre-protocol-7dbbebb707b5>, <https://eprint.iacr.org/2016/1159.pdf>.

It has many advantages over the traditional longest-chain rule of Bitcoin, but:

1. It requires a hard fork, something which has never been done intentionally in Bitcoin.
2. It is a huge departure from Bitcoin's protocol, and as such it will require extensive research and testing before it is even considered for inclusion in Bitcoin.

There are alts under development that are trying to implement SPECTRE, if it works well for them it can be a first step towards consideration in Bitcoin. You don't risk untested ideas on a $100B production system.

> **Comments:**
> **username_0**: Thank you! This 2 points are so called "bitcoin conservative" right?  
> **username_0**: What alts are trying to implement SPECTRE?  
> **username_3**: @username_2, are there any trade-offs?  
> **username_2**: @AndersonC: You could say that, they are both related to the rigor required to make changes in Bitcoin. I'm not sure about the specific alts, but I'm sure we'll all know when they're ready.  
> **username_2**: @renlord - SPECTRE is more computationally intensive than longest chain. Furthermore, the main advantage of SPECTRE is that it allows shorter time between blocks without losing hashpower, but this has other tradeoffs, notably more resource requirements from SPV clients. Other than that, AFAIR SPECTRE is strictly superior, though I may be missing something.  
> **username_4**: FYI PHANTOM is the latest reincarnation of GHOST/SPECTRE.  https://www.youtube.com/watch?v=57DCYtk0lWI  
> **username_5**: BIP 50 was a hard fork.  
> **username_2**: @username_5: That was an emergency patch rather than a planned protocol upgrade, I don't think it counts. Anyway, I'll try to work on the phrasing.  

---

### Answer by username_6 on 2019-02-11. Score: 0

One thing to note also is that even ethereum is not using GHOST and I dont see any coin using some sort of ghost or phantom protocol at this point, so yeah its hard to expect bitcoin will jump to it before it is tested elsewhere.

<https://ethereum.stackexchange.com/questions/38121/why-did-ethereum-abandon-the-ghost-protocol>


---

### Answer by username_7 on 2019-02-11. Score: -2

We are using a modified version of [Ghost at Hycon](https://medium.com/@niallmoore22/the-road-to-spectre-is-paved-with-ghost-ly-intentions-5a6d2e88d41e). The original plan was to move forward with Spectre, but as yet there are some unsolved issues, particularly around selfish mining and efficient resolution of superposition states at the tips of the DAG. Ghost is useful when the block time is shorter and orphan events are more common. In the case of bitcoin, these days orphan events are rare, so unless it was decided to reduce the block time it is unnecessary.

> **Comments:**
> **username_8**: ghost also massively amplifies selfish mining... my understanding is that this is why ethereum dropped it.  Impressive that there are other altcoins more recklessly yolo than ethereum...  
> **username_7**: Our implementation includes the difficulty from uncle blocks as part of our [dynamic difficulty adjustment](https://github.com/Team-Hycon/research/blob/master/A%20Stochastic%20Model%20for%20Proof%20of%20Work%20Block%20Production/stochastic_model.pdf), negating selfish mining strategies as laid out [here](https://bitslog.wordpress.com/2016/04/28/uncle-mining-an-ethereum-consensus-protocol-flaw/). To quote the article "(a difficulty algorithm) based on the chain weight (weight/time), then mining uncles would not increase the rate of the best chain, and uncle mining would be prevented."  

---

