Bitcoin miner concentration just exposed a gap in Bitcoin’s “six confirmations” rule
The Bitcoin community skilled a uncommon two-block reorg on Mar. 23, at block top 941,880. Foundry mined six consecutive blocks, AntPool and ViaBTC briefly prolonged a competing department.
The chain resolved the fork as designed, following the trail with probably the most hash fee. Bitcoin carried out precisely as designed and validated its assumptions.
The heuristic no one labeled
The six-confirmation rule is without doubt one of the items of obtained knowledge which have traveled so removed from their origins that most individuals who repeat it might probably’t reconstruct why six is the quantity.
The reply traces again to Satoshi Nakamoto’s 2008 whitepaper, which modeled finality as a catch-up chance. As sufficient blocks pile up on prime of a transaction, the computational price of rewriting historical past turns into prohibitive for an attacker with restricted hashpower.
Six blocks grew to become the group shorthand for “protected sufficient,” despite the fact that the whitepaper handled it as a calculation that assumes the attacker controls about 10% of the community’s hashpower.
That assumption has been quietly doing a lot of labor for sixteen years.
Jameson Lopp made the implication express in an analysis of affirmation danger. The consolation degree baked into six confirmations is a operate of who else is on the community and the way a lot of it they run.
Under the Nakamoto catch-up mannequin, six confirmations towards an attacker holding 10% of hashpower yields a reversal danger of roughly 0.02%. Against 20%, that determine climbs to about 1.43%. Against 30%, it reaches roughly 13.2%.
At the 32.2% share Foundry held in current pool-share snapshots, the identical mannequin places six-confirmation reversal danger close to 18.9%.
Mining swimming pools aren’t coordinated attackers by default, which is why they do not match in these mannequin outputs. Foundry USA describes itself as an institutional-grade pool constructed for miners that coordinates many unbiased operators.
Miners can and do switch pools, making an overt assault can be economically self-destructive for any rational pool operator. Concentration in block manufacturing adjustments the chance mannequin folks use to determine when a fee feels last, no matter how dispersed the underlying machines are.
A 2022 latency security analysis famous that with a 10% adversary and a 10-second propagation delay, six confirmations nonetheless produce a safety-violation chance between 0.11% and 0.35%.
Six was by no means a exhausting ceiling, even below circumstances much more favorable than these of as we speak.
Three circumstances directly
The context surrounding the reorg carries the load.
Bitcoin’s community is at present operating three circumstances concurrently that put the six-confirmation heuristic below strain, which it has not often confronted in follow.
In the previous three days, Foundry has held roughly 31% of the worldwide hashrate, whereas AntPool sits at about 18.4%, and ViaBTC at 10.5%, according to Hashrate Index data. Those three swimming pools mixed account for roughly 60% of block manufacturing.
That diploma of concentration in coordinator energy is elevated by any affordable measure during the last a number of years.
At the identical time, mining economics have deteriorated sharply. Difficulty dropped 7.76% on Mar. 21 in one among 2026’s largest negative adjustments. Hashprice averaged $32.31 per petahash per day in February, down practically 18% month over month, briefly touching a file low of $27.89.
Transaction charges contributed just 0.57% of complete block rewards in the final 24 hours of accessible information.
When margins compress and price income dries up, smaller and mid-sized miners face a rising incentive to pool into whichever coordinator provides the very best variance discount. This often means the already-large swimming pools get bigger.
The January winter storm supplied a counterpoint price noting. Foundry’s hashrate reportedly dropped by round 60%, or practically 200 exahashes per second, throughout that interval, demonstrating that pool shares can redistribute rapidly when exterior circumstances change.
Amid this backdrop, the six-confirmation rule lacks an computerized adjustment mechanism when pool shares transfer.
| Condition | Latest studying | Why it issues for the 6-confirmation rule |
|---|---|---|
| Pool concentration | Foundry ~31%; AntPool ~18.4%; ViaBTC ~10.5% | A bigger share of block manufacturing is concentrated in a few coordinators, making fixed-confirmation assumptions much less snug for large-value settlement. |
| Top-three concentration | ~60% of block manufacturing mixed | Finality relies upon not just on block depend, however on how distributed hashpower is throughout competing swimming pools. |
| Difficulty adjustment | -7.76% on Mar. 21 | A big unfavorable adjustment indicators stress in mining circumstances and weaker economics throughout the community. |
| February hashprice | $32.31 per PH/day | Lower miner income will increase the motivation for smaller miners to hunt stability in bigger swimming pools. |
| Intramonth hashprice low | $27.89 | The deeper margins compress, the extra pooling for variance discount turns into enticing. |
| Fee contribution to rewards | 0.57% in the final 24 hours | Weak price help leaves miners extra depending on shrinking block-subsidy economics. |
| Counterpoint: redistribution danger | Foundry reportedly fell ~60% in the course of the January winter storm | Concentration is elevated, however not mounted; exterior shocks can nonetheless reshuffle pool shares rapidly. |
In follow, the trade’s largest venues have deserted the six-confirmation commonplace in a quiet operational judgment made years in the past.
Coinbase requires two confirmations for BTC deposits to be marked as pending, whereas Kraken and Gemini every require three.
None of these thresholds is unsuitable for his or her use instances: for atypical retail deposits, two or three confirmations signify a completely defensible danger tolerance.
The gap between these real-world numbers and the people commonplace of six illustrates that “six confirmations” was all the time extra a cultural artifact than a common coverage.
Lopp’s framework argues that this gap ought to develop extra deliberate. Required confirmations ought to scale with transaction worth and the economics of the attacker.
A $500 retail deposit and a $50 million OTC settlement don’t share the identical danger profile, and the sincere model of finality steerage would explicitly state so.
The quantity that stayed the identical
There are totally different outcomes in the present hashrate concentration situation, which raised an alarm for customers.
Positively, hashrate redistributes throughout a broader pool of coordinators as mining margins finally get well and new entrants compete for share.
The January storm already demonstrated that Foundry’s dominance can erode rapidly below the appropriate circumstances. If concentration eases and the hash worth recovers, six confirmations stay a affordable default for giant BTC settlements.
On the flip aspect, Foundry might stay above 30%, and the top-three concentration stays sticky. No malicious occasion is required for the norm to degrade, as exchanges, OTC desks, and retailers dealing with high-value transfers can quietly increase inner thresholds or formalize dynamic tiers tied to observable pool-share information.
Under the Nakamoto mannequin, six confirmations towards a absolutely coordinated 32.2% attacker leaves roughly 18.9% catch-up danger, a determine genuinely troublesome to reconcile with language like “successfully irreversible” for transfers in the tens of hundreds of thousands of {dollars}.
The scenario requires solely that the pool concentration stay the place it’s, whereas the gap between the people commonplace and the precise danger widens sufficient that somebody with cash on the road stops ignoring it.
Bitcoin’s settlement assurances had been all the time “six blocks, below a sure distribution of hashpower and a sure tolerance for danger.”
The two-block reorg produced a uncommon second when the gap between Bitcoin’s finality folklore and its underlying math grew to become exhausting to disregard.
Considering this second, the six-confirmation rule’s days as a common, unqualified commonplace are operating out.
The put up Bitcoin miner concentration just exposed a gap in Bitcoin’s “six confirmations” rule appeared first on CryptoSlate.
