Mining and Network Security

Proof of Work vs Proof of Stake: A Neutral Comparison

A balanced comparison of proof of work and proof of stake consensus designs, covering security assumptions, energy use, decentralization and the trade-offs in each.

On this page
  1. The problem both designs solve
  2. Proof of work in brief
  3. Proof of stake in brief
  4. Comparing the two
  5. Other designs
  6. Why the choice matters for markets
  7. A fair summary

The problem both designs solve

A blockchain with no central operator needs a way for strangers to agree on one history of transactions, and to make it costly to cheat. The rules used for this are called consensus mechanisms. The two best-known families are proof of work and proof of stake. They answer the same question, which is who gets to add the next block and what stops them from lying, in different ways.

Proof of work in brief

In proof of work, participants called miners spend electricity and use specialised hardware to search for a valid hash. The winner proposes the next block and receives a reward. Security comes from the cost of work: to rewrite history, an attacker needs to redo the work faster than everyone else combined. Bitcoin is the main example, and the process is walked through in the article on Bitcoin mining.

Proof of stake in brief

In proof of stake, participants called validators lock up coins as a deposit, or stake. The protocol selects validators to propose and vote on blocks, with selection weighted in some manner by stake. Honest behaviour earns rewards. Provably dishonest behaviour, such as signing two conflicting blocks, can lead to part of the stake being destroyed, a penalty called slashing. Security therefore comes from the value at risk. Ethereum moved from proof of work to proof of stake in September 2022, in an event known as the Merge. The economics of the reward side are covered in the staking article.

Comparing the two

Security assumptions

Both aim to make attacks expensive, but the cost is of a different kind.

  • In proof of work, the cost of attack is largely the cost of acquiring and running enough hardware and electricity. Those resources are external to the network, so an attacker who fails can sell the hardware, though not recover the energy spent. The cost of such an attempt is examined in the majority attack article.
  • In proof of stake, the cost is in coins. An attacker needs to acquire a large share of the staked coins, and a detected attack can lead to slashing and likely a fall in the value of the coins held. Supporters see this as aligning the attacker’s interests with the network. Critics note that the attacker’s coin purchases could also be financed, and that the value the attacker risks depends on the price.

Proof of stake designs also have to deal with questions that proof of work handles more naturally, such as how a node that has been offline for a long time knows which history is the real one. Practical designs address this with checkpoints and rules about the weakly subjective period, which some critics see as adding trust assumptions, and some supporters see as a minor practical matter.

Energy use

Proof of work consumes electricity in proportion to the competition among miners, which is the subject of ongoing debate. Proof of stake validators need ordinary servers, so energy use is a small fraction. After the Merge, Ethereum’s energy use was widely reported as falling by a very large margin, commonly estimated at more than 99 percent, though exact figures vary by method. Defenders of proof of work argue that the energy expenditure is the source of its security and that it can use otherwise stranded power; critics argue the same security could be obtained at far lower cost.

Decentralization

Both can concentrate. Proof of work tends toward large mining operations and mining pools because of economies of scale in hardware and cheap power. Proof of stake can concentrate through large stakers, exchanges and pooled staking services, since those with more coins earn more rewards. Which tendency is worse is disputed, and measurement is imperfect in both cases.

Barriers to entry

Mining needs hardware and access to cheap electricity. Staking needs coins, and in some networks a minimum deposit, which can be a high bar for small holders, though pooled and delegated staking exist. Each has a different kind of entry cost.

Fairness of rewards

In proof of work, a newcomer must buy equipment and compete with existing operators. In proof of stake, rewards often scale with the stake already held, so people with more capital earn more in absolute terms. Whether that is a feature or a flaw depends on the viewpoint.

Maturity and track record

Proof of work in Bitcoin has run since 2009 and has resisted attacks on the main chain, though smaller proof of work chains have been attacked. Proof of stake is newer at large scale, and its long-term behaviour under stress is less tested. Neither record guarantees the future.

Other designs

These two do not cover everything. There are hybrids, delegated schemes, and designs built on other resources such as storage or reputation. Each makes its own trade-offs, and discussions of consensus mechanisms often leave them out for simplicity.

Why the choice matters for markets

Consensus design shapes issuance, who earns rewards, and how supply behaves, all of which feed into tokenomics basics. Proof of work coins pay miners, who have ongoing costs. Proof of stake coins pay stakers, who may be tempted to hold or sell. The effect on prices is indirect and hard to isolate. Narratives about “green” or “secure” designs have been part of market debate, but a design choice does not predict price.

A fair summary

Proof of work ties security to physical resources, at the cost of heavy energy use. Proof of stake ties security to capital inside the system, at the cost of newer assumptions and different centralization risks. Informed people disagree about which trade-off is better, and the answer may depend on what a network is trying to do.

Cryptocurrency prices are volatile and people can lose all they invest. This article is educational and is not financial, tax or legal advice.

The complete guide to mining and network security

How Bitcoin Mining Works From Hashing to Block Rewards
Read the guide

Keep exploring

Guides from other topics

All topics →