Why is it important that miners mine at the end of the longest branch?

2

In this paper, the authors present a simplified description of mining strategies. The strategy which they call "honest strategy" is to always mine a block at the end of the currently longest branch. They claim that, if a miner has a very large computing power (above ~45% of the total power in the network), he might gain a higher profit by deviating from this strategy and using a "dishonest strategy" - mining at a shorter branch - hoping that at some point his branch will become longest and be accepted by the community.

They claim that this "dishonest strategy" is problematic, but I do not understand why; what can happen to the bitcoin network if some miner will use this "dishonest strategy"? As far as I understand, he will not be able to create a "double spending", since such a double spending can be easily detected by any other node reading his branch. So what else can happen?

Erel Segal-Halevi

Posted 2017-03-24T10:35:53.417

Reputation: 179

Answers

0

Lets imagine that a fork is created during the propagation of a block in a certain height h. Two valid blocks are created and spread along the Bitcoin network. The majority of the miners start mining on block hA, while the miner m you mentioned (or actually a mining pool since a single user with such mining power is quite unlikely to exist) starts mining on the top of block hB.

The odds of mining a block on the top of hb before the rest of the network mines on the top of hA are lower that the other way around, but since the mining power m and the rest of the network are not that far from each other, it can happen (actually, it will happen, sooner or later).

Moreover, the hashing power of the network is split, and a huge part of it is wasted (either m's or the rest of the network), so the elapsed time between blocks will grow, until a recalculation of the difficulty is performed (some point between 1-2015, since it is recalculated each 2016 blocks).

Other papers has talked about similar things in the past (selfish mining techniques) concluding that with even less mining power similar attacks can be achieved.

By using selfish mining techniques a malicious pool can benefit from mining in a "secret branch" and reveal blocks just when they are ahead of the public branch by 2+ blocks, earning all the mining reward and making other miners waste their time, or when a block is propagated by other sources, trying to get their block picked up by a majority instead of the other.

sr-gi

Posted 2017-03-24T10:35:53.417

Reputation: 2 382

"By mining on the top of a block in where no one else is doing so you ensure that if you find the correct nonce, the revenue is all yours." What do you mean by this? Both the difficulty and the block reward are the same for mining on top of hA or hB, and either way you'd get the full reward. How does mining on top of hB make the reward "all yours"? – Jestin – 2017-03-24T13:56:12.163

There are selfish mining techniques (like the ones explained in the paper I'd cited) in which when you find a block you don't propagate it, but continue mining at the top of it. You will only propagate the block if you branch is ahead the "main one" (the one in which others are mining) by two blocks, or if you see that someone else has found a block and you are at the same height. Under normal conditions, it will be indeed the same mining under hA or hB, from what I know. – sr-gi – 2017-03-24T14:03:49.190

You may want to edit the answer to make the more clear. As it's written, it looks like you are implying that by mining a block in public, you will have to share the block reward if you find a nonce. This could be misleading to newcomers. – Jestin – 2017-03-24T14:09:34.403

Sure, no problem. – sr-gi – 2017-03-24T14:16:57.877

I read the paper that you cited: http://fc14.ifca.ai/papers/fc14_submission_82.pdf It is very beautiful and explains the risk very clearly. The risk is that a minority of the miners will create a pool that will gain more than its proportional share of computing power. This will induce other selfish miners to join the pool, until it becomes a majority. At that point, Bitcoin will not be anarchic anymore - it will become centralized and governed by the selfish pool manager.

– Erel Segal-Halevi – 2017-03-27T07:06:39.493

Asked: 2017-03-24T10:35:53.417

Viewed: 59 times

Active: 2018-05-04T17:14:15.063