What Is a 51% Attack on Bitcoin? Explained

A 51% attack occurs when a single entity or coordinated group controls more than half of a blockchain's total mining power, giving them the ability to rewrite recent transaction history and potentially double-spend coins. On Bitcoin specifically, the sheer scale of global hashrate makes acquiring that much power prohibitively expensive, which is why the attack, while theoretically possible, is not considered a realistic near-term threat.

Understanding what the attack can and can't do is more useful than treating it as a vague doomsday scenario, because its actual capabilities are narrower than many assume.

How the attack works

Bitcoin's security relies on miners competing to extend the blockchain with valid blocks, with the network treating the longest valid chain as the canonical one. If an attacker controls a majority of the network's hashrate, they can, in theory, secretly mine an alternative chain faster than the honest network extends the public one.

Once their private chain is longer, they broadcast it, and because nodes follow the longest valid chain rule, the network switches to the attacker's version, discarding the transactions that were in the blocks it replaces. If the attacker had spent coins on the original chain, for example depositing them at an exchange and withdrawing something in return, and those coins don't appear as spent on their new chain, they can effectively spend the same coins twice.

What a 51% attack can and cannot do

It's important to be precise about the scope. A majority hashrate attacker can:

• Reverse their own recent transactions to attempt double-spends
• Prevent specific transactions from confirming (a form of censorship)
• Prevent other miners' blocks from being included, monopolizing new block rewards temporarily

They cannot:

• Steal coins from wallets they don't control the private keys for
• Change the total supply or issuance schedule of Bitcoin
• Alter old, deeply buried transaction history beyond a shallow number of recent blocks
• Create coins out of thin air or forge signatures

This last point matters enormously. Even with 100% of hashrate, an attacker still cannot forge a valid signature for someone else's private key, the cryptography underlying ownership is entirely separate from the mining process that orders transactions.

Why it's economically impractical on Bitcoin

Bitcoin's global hashrate is distributed across specialized mining hardware representing billions of dollars of capital investment and enormous ongoing electricity consumption. Acquiring or renting enough hashing power to overtake the honest majority would require either building an equivalent amount of infrastructure covertly, an extraordinarily costly and visible undertaking, or somehow coercing existing large miners into cooperating.

Beyond the direct cost, there's a self-defeating element to the economics. A successful, publicized attack would likely crash market confidence in Bitcoin, destroying much of the value of any coins the attacker was hoping to double-spend, and devaluing the specialized mining hardware the attacker just spent a fortune acquiring. The attack is expensive to mount and self-sabotaging if it succeeds.

Attack feasibility comparison

Factor	Small altcoin	Bitcoin
Hashrate to acquire majority	Often rentable cheaply	Requires massive dedicated infrastructure
Historical incidents	Multiple documented cases	None successful to date
Cost to attempt	Low to moderate	Extremely high
Economic rationality	Sometimes profitable for attacker	Self-defeating at scale

Smaller proof-of-work blockchains with far lower total hashrate have suffered real 51% attacks, since renting sufficient hashpower from public marketplaces can be surprisingly affordable when the target network's total security budget is small. This is one reason hashrate and network size matter enormously when evaluating the security of any proof-of-work chain, not just Bitcoin.

The role of confirmations

This is also why exchanges and services wait for multiple confirmations before treating large transactions as final. Each additional block mined on top of a transaction makes reversing it exponentially more difficult, since an attacker would need to out-mine the entire honest network for that many blocks in a row, not just one. Our article on how Bitcoin transactions are verified explains the confirmation process in more detail.

Bottom line

A 51% attack is a real category of risk in proof-of-work systems, but on Bitcoin specifically, the cost of acquiring majority hashrate, combined with the self-defeating economics of a successful attack, makes it far more theoretical than practical. The attack's actual capabilities, temporary double-spends and censorship, are also more limited than popular imagination suggests, it cannot steal funds, forge signatures, or alter deep history. Smaller proof-of-work networks with thinner security budgets face this risk far more concretely, which is a useful lens for evaluating any blockchain's real-world security rather than assuming all proof-of-work chains are equally resistant.