Proof of Work vs Proof of Stake: How Blockchains Agree

Every public blockchain has the same hard problem to solve: thousands of strangers around the world, some of them dishonest, need to agree on a single version of the ledger without anyone in charge. The method they use to agree is called a consensus mechanism, and the 2 big ones are proof of work and proof of stake.

The choice matters more than it sounds. It decides how much electricity a network uses, who gets to participate, how expensive it is to attack, and who earns the rewards. It’s also the reason Bitcoin and Ethereum, the 2 largest blockchains, now work in fundamentally different ways.

This guide compares the 2 approaches on security, energy and decentralization, in plain English.

Why blockchains need consensus at all

A blockchain is a shared ledger copied across many computers. When someone sends a transaction, it’s broadcast to the network, and the network has to decide which transactions go into the next block and in what order.

Without a rule for that, 2 problems appear:

• Double spending. Someone could try to send the same coins to 2 different people at once.
• Spam and fake identities. If every computer got 1 vote, an attacker could just spin up a million fake computers and outvote everyone.

Consensus mechanisms solve both by tying the right to add blocks to something scarce and costly. In proof of work, that scarce thing is computing power and electricity. In proof of stake, it’s money locked up as collateral.

How proof of work works

In proof of work, computers called miners compete to add the next block.

1. Miners collect pending transactions into a candidate block.
2. They repeatedly run the block’s header through a hash function (Bitcoin uses SHA-256), changing a small number each time, until the result falls below a target value set by the network.
3. Finding a valid result takes enormous trial and error, but checking it is instant.
4. The first miner to find one broadcasts the block. Other nodes verify it and add it to their copy.
5. The winning miner receives newly created coins plus transaction fees.

Bitcoin automatically adjusts the difficulty every 2,016 blocks so that, on average, a new block is found about every 10 minutes no matter how much mining power joins or leaves.

If 2 miners find blocks at almost the same time, the network temporarily splits. Nodes follow the chain with the most accumulated work, and the shorter branch is abandoned. That’s why many services wait for several confirmations before treating a Bitcoin payment as final.

How proof of stake works

In proof of stake, computers called validators lock up the network’s cryptocurrency as a security deposit, called a stake. Ethereum is the best-known example.

On Ethereum, according to ethereum.org:

• Running your own validator requires depositing 32 ETH and running 3 pieces of software.
• Time is divided into 12-second slots, with 32 slots making an epoch.
• In each slot, 1 validator is randomly chosen to propose a block, and others are assigned to vote on (attest to) it.
• When checkpoints get votes representing at least 2/3 of all staked ETH, earlier blocks become finalized, and can’t be reversed without destroying a large share of staked ETH.
• Validators earn rewards for honest work. Validators who break the rules, such as proposing 2 conflicting blocks, are slashed: part of their stake is destroyed and they’re forced out.

People who don’t have 32 ETH can join staking pools or use exchanges that stake on their behalf.

Key takeaway: Proof of work makes attacks expensive by forcing attackers to spend real-world resources. Proof of stake makes attacks expensive by putting the attacker’s own money on the line inside the system.

Side-by-side comparison

Security: which is safer?

Both designs can be secure on a large network. They resist attacks differently.

51% attacks

The classic threat is a 51% attack: if one party controls most of the network’s mining power (proof of work) or staked funds (proof of stake), they can censor transactions or try to rewrite recent history, for example to double-spend.

• On a proof of work chain, an attacker needs to buy or rent more mining hardware and electricity than the rest of the network combined. On Bitcoin that’s extremely expensive. On smaller proof of work coins it can be affordable, and several small networks have been attacked this way.
• On Ethereum’s proof of stake, ethereum.org says a 51% attack requires controlling 51% of staked ETH, and reverting a finalized block would require the attacker to accept losing at least 1/3 of all staked ETH. Because the attacker’s stake gets slashed, a failed or detected attack destroys their own capital.

Other trade-offs

• Maturity. Proof of work has protected Bitcoin since 2009. Ethereum itself notes that proof of stake is younger and less battle-tested, and more complex to implement.
• Recovery. In proof of stake, the community can coordinate to recover an honest chain and penalize attackers’ stakes. In proof of work, an attacker keeps their hardware and can try again.
• Complexity. More moving parts in proof of stake (validators, attestations, slashing, finality rules) means more places for bugs.

Energy use: the biggest difference

This is where the gap is widest.

Proof of work deliberately burns energy; the cost is the security. Estimates of Bitcoin’s electricity use vary widely, but the US Energy Information Administration’s preliminary 2024 analysis estimated that cryptocurrency mining used somewhere between about 0.6% and 2.3% of all US electricity in 2023. The EIA stressed that the range is uncertain because mining operations are hard to track and can move quickly to cheaper power.

Proof of stake doesn’t need that energy race. When Ethereum switched from proof of work to proof of stake in the Merge on September 15, 2022, ethereum.org reports its energy consumption dropped by about 99.95%.

Supporters of proof of work counter that mining can use stranded or surplus energy and that energy use is the honest price of security. Critics point to local grid strain and emissions. Data center energy debates go well beyond crypto; see our look at AI, data centers and green tech and why electricity bills are rising.

Decentralization: who really controls the network?

Both systems promise that no single party is in charge. Both have centralization pressures.

Ethereum argues proof of stake reduces centralization because it doesn’t reward huge industrial operations. Critics respond that a few large staking providers and exchanges control a big share of staked ETH, which recreates concentration in a different form. Neither system is perfectly decentralized; it’s worth checking how a specific network’s power is actually distributed.

Other consensus methods you might hear about

Proof of work and proof of stake are the 2 dominant designs, but you’ll see variations:

• Delegated proof of stake: token holders vote for a small set of block producers.
• Proof of authority: a known set of approved validators, common in private or permissioned blockchains.
• Byzantine fault tolerant (BFT) protocols: voting-based methods that finalize blocks quickly, often used in business blockchains and combined with proof of stake in public ones.

For definitions of terms like node, validator and finality, see our glossary.

Which one should you care about?

If you’re a business leader, investor or student, here’s how to think about it:

1. Evaluating a crypto project? Ask which consensus method it uses, how many independent miners or validators it has, and how concentrated they are. A small chain with a few validators is much easier to attack or control.
2. Concerned about sustainability? Proof of stake networks have a dramatically smaller energy footprint than proof of work networks.
3. Thinking about staking? Understand lock-up periods, slashing risks and the risks of handing your coins to a third-party staking service. Our guide to hot vs cold wallets covers safe key storage. This is general information, not investment advice.
4. Building on a blockchain? Proof of stake chains usually offer faster finality and lower fees, while Bitcoin’s proof of work offers the longest record of resisting attacks.

Conclusion

Proof of work and proof of stake solve the same problem in opposite ways. Proof of work asks participants to spend real-world energy, which has kept Bitcoin secure since 2009 at a large environmental cost. Proof of stake asks participants to risk their own coins, which cut Ethereum’s energy use by about 99.95% but adds complexity and new concentration risks. Neither is universally better; the right question is which trade-offs a given network makes and whether its power is genuinely spread out.

Sources

• Ethereum.org: Proof of stake — 32 ETH validators, slots and epochs, finality, slashing and attack costs
• Ethereum.org: The Merge — September 15, 2022 switch and roughly 99.95% energy reduction
• Bitcoin.org developer guide: Block chain — how proof of work, targets and the 2,016-block difficulty adjustment work
• US EIA: Tracking electricity consumption from US cryptocurrency mining operations — preliminary estimate of 0.6% to 2.3% of US electricity
• NIST IR 8202: Blockchain Technology Overview — consensus models including proof of work, proof of stake and proof of authority