What's the formula giving the % of succesfully maliciously messing the blockchain?

6

1

With the recent (early 2014) GHash.io concerns about that particular mining pool getting too big, many people have talk about what a powerful miner could do if it wanted to "harm" bitcoin or double-spend, etc.

At one point someone pointed on that if you have 40% of the mining power, you have a 50% chance of reverting 6 blocks.

I'd have expected it to be (0.4 exp 7) (6 blocks + the next one) or something like that and not 50%.

What is the formula to use to compute the "harm" that a malicious miner could do and how many blocks he could revert?

EDIT

Here's a page containing the formula:

https://people.xiph.org/~greg/attack_success.html

Don't put too many blocks otherwise the code will have a numeric overflow.

But normally it's using the formula in the bitcoin paper and that page has been written by the person who came up with the concept of deterministic wallets (if I'm not mistaken). So I tend to think he knows what he's talking about.

bitcoinNeverSleeps

Posted 2014-01-13T02:42:51.887

Reputation: 99

Whoever said 50% chance at 40% hash power is wrong, each block makes it exponentially harder. The chance to mine 6 blocks consecutively with 40% is - .4^6, or ~0.004% chance.John T 2014-01-13T07:22:21.663

@jtorba: Your math doesn't make sense. By that logic, a 51% miner has a .51^6 = 0.0176 chance.Greg Hewgill 2014-01-13T07:46:59.643

@GregHewgill: I think technically it's "50% + 1 miner", not "51%" : ) But, yup, that's basically my question: I had the same intuition as jtorba and people told me it was all wrong: I'd like to understand how it works.bitcoinNeverSleeps 2014-01-13T12:20:54.730

Answers

2

The formula is directly from the original paper by Satoshi Nakamoto. Check pages 6-8. The paper has C code to easily compute the values, and that page you linked to is just that C code converted to javascript.

Buge

Posted 2014-01-13T02:42:51.887

Reputation: 361