Proof of work:
the guessing game that secures Bitcoin.

The problem proof of work solves

Bitcoin's ledger has no central authority updating it. Thousands of computers maintain it together. Which creates a specific problem: if two computers try to add conflicting entries at the same time, which one wins?

More importantly: how do you prevent someone from going back and rewriting history in the ledger? Just editing an old transaction to say they still have Bitcoin they already spent?

Proof of work is the answer to both.

The guessing game

Bitcoin groups transactions together into blocks. Batches of roughly 1,500 to 3,000 transactions, depending on their size verify×DON'T TRUST, VERIFYClaim: Blocks typically contain 1,500-3,000 transactions.Verify at: mempool.space recent blocks ↗Varies with transaction size and weight. Block weight limit is 4 million weight units.. Before a block can be added to the ledger, a computer on the network has to solve a puzzle.

The puzzle is a guessing game. The Bitcoin software asks computers to find a specific number, one that, when combined with the transactions in the block and run through a mathematical function, produces an output that meets certain criteria.

There's no way to calculate that number directly. You can't work backwards from the answer. The only way to find it is to guess. Over and over and over, as fast as your hardware allows.

The first computer to find the right number gets to add the block to the ledger and receives newly issued Bitcoin as a reward. This is what Bitcoin mining is. Not digging. Guessing.

Why it takes work

Finding the right number is deliberately difficult. The Bitcoin protocol adjusts the difficulty every 2,016 blocks (approximately two weeks) to ensure that, regardless of how much total computing power is on the network, a new block is found approximately every 10 minutes verify×DON'T TRUST, VERIFYClaim: Bitcoin retargets difficulty every 2,016 blocks to maintain 10-minute average block time.Verify at: Bitcoin developer reference: block chain ↗ · mempool.space difficulty chart ↗2,016 blocks is approximately two weeks at 10-minute target. Retarget algorithm is part of the consensus rules..

More miners means harder puzzle. Fewer miners means easier puzzle. The difficulty floats to maintain the ten-minute target.

The work is what makes the ledger secure. Every block that gets added contains a fingerprint (a hash) of the block before it. Change anything in an old block and its fingerprint changes. Which breaks the fingerprint of the next block. Which breaks the next one after that.

To rewrite history, you'd have to redo the proof of work for every block from the one you changed all the way to the current block, faster than the rest of the network is adding new blocks.

With thousands of computers all working on the legitimate chain, the attack chain would fall further and further behind. The amount of computing power required to pull this off exceeds what any actor on earth currently controls. See Why Bitcoin Can't Be Shut Down for the full scale argument.

The longest chain is truth

Bitcoin's rule for resolving disagreements is simple: the longest valid chain wins.

If two different miners find valid blocks at the same time, the network temporarily has two competing versions of the ledger. Within minutes, one chain will grow longer than the other as new blocks are added. All nodes switch to the longer chain. The shorter one is abandoned.

The honest chain, the one with the most legitimate miners working on it, always grows the fastest. This is what allows thousands of independent computers that don't trust each other to reach agreement on a single shared ledger.

Think of it like this: ten people rolling dice will hit snake eyes more often than one person over the same period. Any individual might get lucky once. But the majority always wins over time. The longest chain is where the majority is working. The longest chain is truth.

The energy question

Proof of work uses real energy. This is intentional. The energy expenditure is what makes the security real. You cannot fake the work without actually doing it.

Bitcoin's energy usage is frequently criticized as wasteful. Two honest observations.

First, the energy used to secure a global, permissionless monetary network that settles billions of dollars in transactions without any central authority might be a reasonable trade-off. Every existing monetary system, from gold mining to banking data centers to the physical security around cash and gold vaults, uses enormous energy too. The comparison should be against the alternative, not against nothing verify×DON'T TRUST, VERIFYClaim: Bitcoin energy usage is measurable and comparable to other monetary infrastructure.Verify at: Cambridge CBECI energy estimates ↗CBECI publishes annualized TWh estimates. Compare to gold mining and banking infrastructure independently..

Second, the mix of energy sources matters. Bitcoin mining is increasingly powered by energy that would otherwise be wasted. Stranded natural gas, curtailed renewable energy, excess hydro verify×DON'T TRUST, VERIFYClaim: Bitcoin mining uses a significant share of sustainable or otherwise-wasted energy.Verify at: Bitcoin Mining Council quarterly reports ↗ · Cambridge CBECI ↗BMC is an industry association, so treat its figures as one input. Cambridge estimates cover the energy mix more conservatively..

See Bitcoin and Energy for the full debate, with both sides argued in detail.

See the glossary for plain-English definitions of every term used here.

The last Bitcoin will be mined around the year 2140 verify×DON'T TRUST, VERIFYClaim: The final Bitcoin will be mined around the year 2140.Verify at: bitcoinblockhalf.com halving schedule ↗The block reward halves every 210,000 blocks. Summing the geometric series converges near block 6,930,000, roughly year 2140.. After that, miners are paid only through transaction fees.

The concern: will transaction fees alone be enough to incentivize miners to secure the network?

The honest answer: this is genuinely uncertain over a 100+ year horizon. Bitcoin developers and researchers debate this actively.

What is known today: transaction fee revenue has increased significantly as Bitcoin usage grows. The long horizon gives significant runway for the fee market to develop. This is a legitimate long-term consideration, not an imminent threat.

The energy-cost critique and the honest counterargument

Among credentialed academic critics of Bitcoin, post-Keynesian economist Steve Keen has argued that the asset's energy economics are a structural problem that may eventually force its decline. His argument deserves rigorous treatment because it is the strongest energy-based critique from a credentialed source.

The argument

Keen's position, condensed:

• Bitcoin mining requires sustained energy expenditure to secure the network. Difficulty adjusts upward as more hashpower joins, so energy cost per unit of security keeps rising.
• Block rewards halve every four years. As reward shrinks, miners need higher Bitcoin prices or higher transaction fees to remain profitable. If neither materializes, marginal miners go offline.
• Climate concerns and AI's competing electricity demand create political pressure to ration energy. Keen argues that in a world forced to constrain energy use, governments may shut down Bitcoin mining as a politically expedient target.
• His conclusion: Bitcoin's energy economics are a long-term vulnerability that the market is not pricing correctly verify×DON'T TRUST, VERIFYClaim: Steve Keen has publicly argued Bitcoin's energy-cost structure is a long-term vulnerability that may force its decline.Verify at: Steve Keen's published commentary ↗ · Cambridge CBECI Bitcoin energy index ↗Keen's energy-cost critique is a recurring theme in his published commentary. Cambridge CBECI provides the underlying energy-consumption data..

The counterargument

Three structural responses to Keen's argument deserve equal weight:

• Difficulty adjusts in both directions. If mining becomes unprofitable, miners go offline, hashrate falls, and difficulty drops at the next adjustment. The network does not require a specific hashrate to function. It survives at lower security with fewer miners. The catastrophe scenario (no miners, network halts) requires the entire fee market to collapse to zero, which would only happen if no one is using Bitcoin at all verify×DON'T TRUST, VERIFYClaim: Bitcoin's difficulty adjustment lowers when hashrate decreases, allowing the network to continue operating at reduced security rather than halting.Verify at: Antonopoulos, Mastering Bitcoin: Mining and Consensus ↗Difficulty adjustment is a core protocol mechanism, documented in Mastering Bitcoin and the Bitcoin Core source..
• Miners self-select to the cheapest available energy. Stranded hydro, flared natural gas, curtailed renewables. These are energy sources that have negative or zero marginal cost because they cannot be transmitted to centers of demand. Bitcoin mining converts otherwise-wasted energy into security. The "Bitcoin competes with AI for grid electricity" framing assumes miners draw from the same grid as data centers, which the marginal economics push against verify×DON'T TRUST, VERIFYClaim: Bitcoin miners disproportionately use stranded, flared, or curtailed energy sources because their economics favor the cheapest available power.Verify at: Cambridge Bitcoin Mining Geographic Map ↗ · Bitcoin Mining Council quarterly reports ↗Cambridge's geographic data and BMC's industry self-reports both show concentration in low-cost-energy regions. The two sources triangulate..
• The fee market is designed to replace block rewards. The Bitcoin whitepaper anticipated that transaction fees would eventually become the dominant miner revenue source. The 100+ year transition window built into the halving schedule gives a long runway for fee revenue to scale with adoption. Whether it scales fast enough is genuinely uncertain, but the design is not silent on the question.

What honest disagreement looks like

Keen's argument is not refuted by any of the counterpoints above. They are responses, not proofs. The honest position: Bitcoin's long-run energy economics are a real open question. The thesis depends on continued adoption driving fee revenue, on miners continuing to access low-cost energy, and on political tolerance for the activity. Each of these can change.

A reasonable Bitcoin holder reads Keen's critique seriously, weighs the counterarguments, and treats the residual uncertainty as part of the position's risk profile. The site's framing throughout: uncertainty is the argument for diversification, not certainty of either Bitcoin's success or its failure.

Related

Sources

1. Satoshi Nakamoto, "Bitcoin: A Peer-to-Peer Electronic Cash System" (2008) · bitcoin.org/bitcoin.pdf. The proof-of-work mechanism described in sections 3 and 4.
2. Bitcoin developer reference · developer.bitcoin.org/reference/block_chain.html. Consensus rules, difficulty adjustment, and chain selection.
3. Cambridge Centre for Alternative Finance (CBECI) · ccaf.io/cbnsi/cbeci. Bitcoin energy consumption and mining hash rate estimates.
4. mempool.space · mempool.space/graphs/mining/hashrate-difficulty. Live network hash rate and difficulty.
5. Bitcoin Mining Council quarterly sustainability reports · bitcoinminingcouncil.com. Industry-sourced; cross-reference with CBECI.
6. Antonopoulos, A.M. Mastering Bitcoin: Programming the Open Blockchain (3rd ed., O'Reilly, 2023). Chapters on mining, consensus, and the longest-chain rule · github.com/bitcoinbook/bitcoinbook. Open-source under CC-BY-SA. The canonical technical reference.