<p>I really don't think you can ever prevent a "51% attack" without compromising some anonymity or decentralization.</p>

<p>Imagine you walk into a room, you don't know anybody (anonymity) and you don't trust anybody (decentralization). In this case, you can only trust the majority. If the majority is lying ("51% attack") then you are going to be fooled.</p>

<p>You can "solve" this by creating some kind of trust chain (e.g. I trust "guy A" who trust "guy B" who trust "guy C" .. so I trust guy C. However in this case, I must know guy A and guy A must know guy B .. etc and it wouldn't be as anonymous as bitcoin.</p>

<p>Or you could "solve" it by creating some kind of authority, who we all trust, but in this case it wouldn't be as decentralized as bitcoin.</p>

CC BY-SA 3.0
2014-05-22T20:54:30.303Z
@Lohoris, Do you think that's a better model?
Pacerier
CC BY-SA 3.0
2014-05-23T07:53:18.690Z
@Pacerier I think it's different and well-thought enough to be worth considering.
o0'.
CC BY-SA 3.0
2013-03-28T09:37:09.067Z
FYI, the trust approach is the one used by Ripple.
o0'.
CC BY-SA 3.0
2013-03-27T23:18:27.270Z
2013-03-27T23:18:27.270Z
Nicolai
<p>A brute force hack would not work. Image a computer capable of expelling the lowest amount of energy conceivable to record a change in a bit from 1-0 or 0-1. Now take this computer and make it on the scale of our sun. Also imagine we can cool this computer to near zero kelvin with no other energy input. All input energy goes into changing bits and that's it. </p>

<p>Now take all the power our sun will make in its lifetime, and power the computer with it. It will take longer than imaginable to even just simple count to 2^256 let alone try to brute force attack a sha-256 algorithm. So brute force will never work.</p>

<h2>--</h2>

<p>You must gain more computing power than 50% of the network. This means on average you will create more block solvers than the &lt;50%. </p>

<p>But wait again you need to account for the blockchain to date, so once you get this computer power you must now create a new fake blockchain which will take time; (Currently it take 8 hours to download the full chain, imagine how long it would take to compute it!) your new blockchain must be made (this is the whole point of the attack change the blockchain so you have more btc). </p>

<p>So assuming you have time to create this new blockchain, no everyone must accept it. It is in the bitcoin protocol to accept the longest blockchain to date, because it has the most transactions the most knowledge of the entire system. </p>

<p>So you create this blockchain and send it to everyone, they all then proceed to take their 8 hours to get the new blockchain, but wait.... why is there a new blockchain everyone would say!?</p>

<p>It would be obvious someone has made a new one because you are downloading it as if this is the first time on the network. And the real smart people who write bitcoin protocol would be very privy to this, and at the least have 8 hours to react. It would be to obvious.</p>

<h2>--</h2>

<p>The only real way I think to hurt bitcoin is to buy up all the coins, or release a whole bunch of coins into circulation greatly affecting prices. </p>

<p>But this would even be sorted out by the bitcoin design.</p>

<p>The price drops, people stop mining because it become less profitable. Cause the miners stop difficulty goes down, more people mine because it is profitable because the difficulty is so easy they can make enough btc to cover their costs, bitcoin is up and running again.</p>

CC BY-SA 3.0
2013-03-25T22:41:49.387Z
Could a motivated party just cause chaos by introducing a forged blockchain on mass from 51% of servers thereby just making a severe mess by sort of colliding the two blockchains, ie creating double spend opportunities that would be a mess to sort out?
yadayada
CC BY-SA 3.0
2013-03-26T11:21:02.747Z
Well a node will, by protocol, only accept the longest valid blockchain. If someone you are connected to still will give you that blockchain, the others should fall leaving the one we have all been working on since 2009. It is very hard to forge a blockchain that is not thrown away instantly because it is not valid i.e. has the proper hashes, which takes years to get right...

51% is like saying survival of the fittest, the creator of the idea never said it and didn't mean that exactly. I think you are taking 51% to much to heart, it does not apply to block-chain issuance.
KDecker
CC BY-SA 3.0
2013-03-25T16:18:10.507Z
2013-03-25T16:18:10.507Z
KDecker
<p>How might Bitcoin be made impervious from attack by large monied interests that could atttack with a brute force majority hashrate hack?  </p>

CC BY-SA 3.0
2013-03-28T00:15:33.280Z
@Lohoris this question may be slightly different because it asks if there is any theoretical way to make such a P2P system impervious, not only to block rewrites but forward control in general. The prior question was phrased to focus on rewrites.
Shelby Moore III
<development><attack><weaknesses><majority-attack>
Developments to prevent 51% hack
yadayada
# Developments to prevent 51% hack

(Asked by: username_0 on 2013-03-25)

How might Bitcoin be made impervious from attack by large monied interests that could atttack with a brute force majority hashrate hack?

**Tags:** development, attack, weaknesses, majority-attack

> **Comments:**
> **username_1**: @Lohoris this question may be slightly different because it asks if there is any theoretical way to make such a P2P system impervious, not only to block rewrites but forward control in general. The prior question was phrased to focus on rewrites.  

---

## 2 answers

### Answer by username_2 on 2013-03-27. Score: 0

I really don't think you can ever prevent a "51% attack" without compromising some anonymity or decentralization.

Imagine you walk into a room, you don't know anybody (anonymity) and you don't trust anybody (decentralization). In this case, you can only trust the majority. If the majority is lying ("51% attack") then you are going to be fooled.

You can "solve" this by creating some kind of trust chain (e.g. I trust "guy A" who trust "guy B" who trust "guy C" .. so I trust guy C. However in this case, I must know guy A and guy A must know guy B .. etc and it wouldn't be as anonymous as bitcoin.

Or you could "solve" it by creating some kind of authority, who we all trust, but in this case it wouldn't be as decentralized as bitcoin.

> **Comments:**
> **username_4**: FYI, the trust approach is the one used by Ripple.  
> **username_3**: @Lohoris, Do you think that's a better model?  
> **username_4**: @username_3 I think it's different and well-thought enough to be worth considering.  

---

### Answer by username_5 on 2013-03-25. Score: 0

A brute force hack would not work. Image a computer capable of expelling the lowest amount of energy conceivable to record a change in a bit from 1-0 or 0-1. Now take this computer and make it on the scale of our sun. Also imagine we can cool this computer to near zero kelvin with no other energy input. All input energy goes into changing bits and that's it.

Now take all the power our sun will make in its lifetime, and power the computer with it. It will take longer than imaginable to even just simple count to 2^256 let alone try to brute force attack a sha-256 algorithm. So brute force will never work.

## --

You must gain more computing power than 50% of the network. This means on average you will create more block solvers than the <50%.

But wait again you need to account for the blockchain to date, so once you get this computer power you must now create a new fake blockchain which will take time; (Currently it take 8 hours to download the full chain, imagine how long it would take to compute it!) your new blockchain must be made (this is the whole point of the attack change the blockchain so you have more btc).

So assuming you have time to create this new blockchain, no everyone must accept it. It is in the bitcoin protocol to accept the longest blockchain to date, because it has the most transactions the most knowledge of the entire system.

So you create this blockchain and send it to everyone, they all then proceed to take their 8 hours to get the new blockchain, but wait.... why is there a new blockchain everyone would say!?

It would be obvious someone has made a new one because you are downloading it as if this is the first time on the network. And the real smart people who write bitcoin protocol would be very privy to this, and at the least have 8 hours to react. It would be to obvious.

## --

The only real way I think to hurt bitcoin is to buy up all the coins, or release a whole bunch of coins into circulation greatly affecting prices.

But this would even be sorted out by the bitcoin design.

The price drops, people stop mining because it become less profitable. Cause the miners stop difficulty goes down, more people mine because it is profitable because the difficulty is so easy they can make enough btc to cover their costs, bitcoin is up and running again.

> **Comments:**
> **username_0**: Could a motivated party just cause chaos by introducing a forged blockchain on mass from 51% of servers thereby just making a severe mess by sort of colliding the two blockchains, ie creating double spend opportunities that would be a mess to sort out?  
> **username_5**: Well a node will, by protocol, only accept the longest valid blockchain. If someone you are connected to still will give you that blockchain, the others should fall leaving the one we have all been working on since 2009. It is very hard to forge a blockchain that is not thrown away instantly because it is not valid i.e. has the proper hashes, which takes years to get right...  51% is like saying survival of the fittest, the creator of the idea never said it and didn't mean that exactly. I think you are taking 51% to much to heart, it does not apply to block-chain issuance.  

---

