Open main menu

Wikipedia β

Proof-of-stake (PoS) is a type of algorithm by which a cryptocurrency blockchain network aims to achieve distributed consensus. In PoS-based cryptocurrencies the creator of the next block is chosen via various combinations of random selection and wealth or age (i.e. the stake). In contrast, the algorithm of proof-of-work (PoW) based cryptocurrencies (such as bitcoin) uses computationally intensive puzzles in order to validate transactions and create new blocks (i.e. mining).


Block selection variantsEdit

Proof-of-stake must have a way of defining the next valid block in any blockchain. Selection by account balance would result in (undesirable) centralization, as the single richest member would have a permanent advantage. Instead, several different methods of selection have been devised.

Randomized block selectionEdit

Nxt and BlackCoin use randomization to predict the following generator, by using a formula that looks for the lowest hash value in combination with the size of the stake.[1][2][3] Since the stakes are public, each node can predict - with reasonable accuracy - which account will next win the right to forge a block.

Coin age-based selectionEdit

Peercoin's proof-of-stake system combines randomization with the concept of "coin age", a number derived from the product of the number of coins times the number of days the coins have been held.

Coins that have been unspent for at least 30 days begin competing for the next block. Older and larger sets of coins have a greater probability of signing the next block. However, once a stake of coins has been used to sign a block, they must start over with zero "coin age" and thus wait at least 30 more days before signing another block. Also, the probability of finding the next block reaches a maximum after 90 days in order to prevent very old or very large collections of stakes from dominating the blockchain.[4][5][6]

This process secures the network and gradually produces new coins over time without consuming significant computational power.[7] Peercoin's developer claims that this makes a malicious attack on the network more difficult due to the lack of a need for centralized mining pools - and the fact that purchasing more than half of the coins is likely more costly than acquiring 51% of proof-of-work hashing power .[8]


Another form of staking is running a masternode[9]. The term masternode applies to any cryptocurrency which allows the decentralized use of servers, that can generate an income to the owner. The main disadvantage of a masternode is the often relatively high entry point as opposed to staking alone. In order to secure the network, those willing to run a masternode are required to purchase a certain number of coins as collateral for whatever the market price is at the time.[10]

Some coins, such as Dash, have a set cost for a masternode, while other currencies such as Divi offer a multi-tiered masternode system, with different levels of increasing awards[11].


Proof of Stake currencies can be more energy efficient than Proof of Work, which mainly relies on energy use.[12] According to one bitcoin mining-farm operator, energy consumption totaled 240 kWh per bitcoin in 2014 (equivalent to combusting 16 US gal or 61 L of gasoline, in terms of carbon production).[13]

The incentives of the block-generator are also different. Under Proof-of-Work, the generator may potentially own none of the currency they are mining. The incentive of the miner is only to maximize their own profits. It is unclear whether this disparity lowers or raises security risks.[14] In Proof-of-Stake, those "guarding" the coins are always those who own the coins (although several cryptocurrencies do allow or enforce lending the staking power to other nodes).


Some authors[15][16] argue that proof-of-stake is not an ideal option for a distributed consensus protocol. One problem is usually called the "nothing at stake" problem, where (in the case of a consensus failure) block-generators have nothing to lose by voting for multiple blockchain-histories, which prevents the consensus from ever resolving. Because there is little cost in working on several chains (unlike in proof-of-work systems), anyone can abuse this problem to attempt to double-spend (in case of blockchain reorganization) "for free".[17]

Many have attempted to solve these problems:

  • Ethereum's suggested Slasher protocol allows users to "punish" the cheater, who forges on the top of more than one blockchain branch.[18] This proposal assumes you must double-sign to create a fork and that you can be punished if you create a fork while not having stake. However Slasher was never adopted; Ethereum developers concluded proof-of-stake is "non-trivial".[19] Instead Ethereum designed a proof-of-work algorithm named Ethash.[20] It is planned to be replaced by a different PoS protocol called "Casper".[21]
  • Peercoin, in its early stages, used centrally broadcast checkpoints (signed under the developer's private key). No blockchain reorganization was allowed deeper than the last known checkpoints. Checkpoints are now opt-in as of v0.6 and are not enforced now that the network has reached a suitable level of distribution.[citation needed]
  • Nxt's protocol only allows reorganization of only the last 720 blocks.[22] However, this only rescales the problem: a client may follow a fork of 721 blocks, regardless of whether it is the tallest blockchain, preventing consensus.
  • Hybrid "Proof of burn" and proof of stake. Proof of burn blocks act as checkpoints, have higher rewards, contain no transactions, are more secure, and anchor both to each other and to the PoS chain, but are more expensive.
  • Decred's hybrid proof-of-work and proof-of-stake. Proof-of-stake as an extension dependent on the Proof-of-work timestamping, based on the "Proof of Activity" proposal,[23] which aims to solve the nothing-at-stake problem by having proof-of-work miners mining blocks and proof-of-stake acting as a second authentication mechanism.

Statistical simulations have shown that simultaneous forging on several chains is possible, even profitable. But Proof of Stake advocates believe most described attack scenarios are impossible or so unpredictable that they are only theoretical.[24][25]

See alsoEdit


  1. ^ "Nxt Whitepaper (Blocks)". nxtwiki. Retrieved 2 January 2015. 
  2. ^ mthcl (pseudonymous). "The math of Nxt forging" (PDF). pdf on Retrieved 22 December 2014. 
  3. ^ Vasin, Pavel. "BlackCoin's Proof-of-Stake Protocol v2" (PDF). 
  4. ^ King, Sunny. "PPCoin: Peer-to-Peer Crypto-Currency with Proof-of-Stake" (PDF). Retrieved 2014-11-17. 
  5. ^ Buterin, Vitalik. "What Proof of Stake Is And Why It Matters". Bitcoin Magazine. Retrieved 2013-11-20. 
  6. ^ Bradbury, Danny. "Third largest cryptocurrency peercoin moves into spotlight with Vault of Satoshi deal". CoinDesk. Retrieved 2013-11-20. 
  7. ^ Thompson, Jeffrey (15 December 2013). "The Rise of Bitcoins, Altcoins—Future of Digital Currency". The Epoch Times. Retrieved 29 December 2013. 
  8. ^ Whelan, Karl (2013-11-20). "So What's So Special About Bitcoin?". Forbes. 
  9. ^ "What is a masternode?". Invest it in. 2017-09-22. Retrieved 2017-12-19. 
  10. ^ "What Is A Masternode And How Is It Useful For Cryptocoin Investors". CoinSutra - Bitcoin Community. 2018-01-04. Retrieved 2018-01-08. 
  11. ^ "What Are Masternodes? An Introduction and Guide". CoinCentral. 2017-12-19. Retrieved 2018-01-09. 
  12. ^ "Nxt Network Energy and Cost Efficiency Analysis" (PDF). Retrieved 21 December 2014. 
  13. ^ "Carbon Footprint of Bitcoin". Retrieved 2 January 2015. 
  14. ^ "Proof of Work, Proof of Stake and the Consensus Debate". Retrieved 3 January 2015. 
  15. ^ Andrew Poelstra. "Distributed Consensus from Proof of Stake is Impossible" (PDF). 
  16. ^ Vitalik Buterin. "On Stake". 
  17. ^ "Hard Problems of Cryptocurrencies". 
  18. ^ Buterin, Vitalik. "Slasher: A Punitive Proof-of-Stake Algorithm". 
  19. ^ Buterin, Vitalik. "Slasher Ghost, and Other Developments in Proof of Stake". Retrieved 23 January 2016. one thing has become clear: proof of stake is non-trivial 
  20. ^ Wood, Gavin. "Ethereum: A Secure Decentralised Generalised Transaction Ledger" (PDF). Retrieved 23 January 2016. Ethash is the planned PoW algorithm for Ethereum 1.0 
  21. ^ Prisco, Giulio (Nov 29, 2017). "The Ethereum Killer Is Ethereum 2.0: Vitalik Buterin's Roadmap". Bitcoin Magazine. Retrieved Jan 19, 2018. 
  22. ^ "Nxt Whitepaper: History Attack". Nxtwiki. Retrieved 2 January 2015. 
  23. ^ Bentov I., Gabizon A., Mizrahi A. 2015. Cryptocurrencies without Proof of Work. arXiv Cryptography and Security.
  24. ^ Chepurnoy, Alexander. "PoS forging algorithms: multi-strategy forging and related security issues" (PDF). Retrieved 30 December 2014. 
  25. ^ Chepurnoy, Alexander. "PoS forging algorithms: formal approach and multibranch forging". Retrieved 22 December 2014.