Why Bitcoin deliberately attaches real-world cost to block production. The explanation separates consensus rules from estimates about machines, energy, and mining economics.

Key takeaways
  • Proof of work is expensive to produce and cheap to verify.
  • Nodes enforce validity while work orders valid history.
  • Network security does not automatically secure wallets or exchanges.
01

A costly signal

Proof of work requires repeated hashing but carries no shortcut that guarantees success. A valid result demonstrates that computation was expended, allowing independent nodes to compare competing histories using an objective accumulated-work rule.

02

Security through incentives

An attacker attempting to rewrite settled history must catch up with honest mining while forgoing or risking legitimate rewards. The exact security budget changes with miner revenue, hardware and energy economics.

Name the layer and the actor. Wallets create transactions, nodes check rules, miners propose blocks, and Lightning peers manage channels.
03

What proof of work cannot do

It does not decide whether a transaction or block follows consensus rules; nodes do. It also cannot make fraud outside the protocol—such as a stolen exchange password—valid or safe.

04

The puzzle, precisely

A block header is hashed with SHA-256 twice. The result is a 256-bit number, and the block is valid only if that number is below a target set by the current difficulty. Because a hash is unpredictable, the only strategy is to try candidates — changing the nonce, the timestamp within limits, or the coinbase data — until one succeeds.

Checking a candidate takes microseconds; finding one takes the whole network about ten minutes. That asymmetry is the point: producing a block is hard, verifying one is trivial, so anyone can confirm that work was done without redoing it.

05

Difficulty, targets and the two-week clock

Every 2,016 blocks each node compares the time those blocks took with the intended 20,160 minutes and scales the target so the next 2,016 land closer to ten-minute intervals, within a factor of four per adjustment. Difficulty is simply the ratio of the easiest possible target to the current one.

When hashrate grows, blocks arrive early and difficulty rises; when miners leave, blocks slow until the next adjustment lowers it. The mechanism needs no coordinator and no clock beyond the block timestamps themselves, and the network dashboard on this site shows where the current period stands.

06

Proof of work compared with the alternatives

Proof of stake, used by Ethereum since 2022, replaces external cost with internal cost: validators lock coins and lose them for misbehaviour. It uses far less energy and settles faster, but it ties block production to existing holdings, requires the chain to define and punish misbehaviour, and makes 'who owns the coins' the security question.

Proof of work ties production to a resource anyone can buy anywhere, and makes rewriting history cost real electricity that cannot be recovered. Reasonable people weigh these differently; Bitcoin's choice is deliberate, and its developers have declined to change it.

Check the mining claim against the rule

Separate facts fixed by block height and subsidy from estimates of hashrate, energy use, cost, and profitability. Record the assumptions behind every calculated figure.

Q&A

Common questions

Why does Bitcoin use proof of work?

It lets anyone produce blocks without permission while making history expensive to rewrite: reordering past transactions means redoing the work for every later block faster than the whole network. It also ties new coin issuance to real cost rather than to an issuer's decision.

What is the difficulty adjustment?

Every 2,016 blocks — about two weeks — nodes recalculate the target so that blocks keep arriving around every ten minutes on average. If more computing power joined, difficulty rises; if it left, difficulty falls. The rule is in the consensus code and needs no coordinator.

Is proof of work wasteful?

It consumes real electricity; how that is judged depends on what the security is worth and on the energy mix used. The Cambridge index publishes the estimated consumption and its assumptions, which is the right starting point for the debate.

Sources

Sources and further reading

Primary documents this guide draws on. Links open the original publisher.

  1. Bitcoin: A Peer-to-Peer Electronic Cash System Satoshi Nakamoto, 2008
  2. Hashcash Bitcoin Wiki
  3. Proof of work Bitcoin Wiki
  4. Difficulty Bitcoin Wiki