Quick Answer
A 51% attack occurs when a single entity controls more than half of the computing power of a blockchain network. With this control, the attacker can manipulate transactions — but cannot steal funds from wallets or create crypto out of thin air.
What is a 51% attack?
A 51% attack (also called a majority attack) occurs when a person or organisation manages to accumulate more than 51% of the computing power of a blockchain network based on Proof of Work. With this majority control, the attacker can influence transaction validation and the ordering of blocks in the chain.
The number 51 is not arbitrary — it is the minimum threshold required to gain majority control over the network’s consensus. With 50% or less, you cannot dominate the network. With 51% or more, you can.
Simple analogy: Think of a blockchain as a continuous vote. Each miner votes on which transactions are valid. If someone controls more than half the votes, they can impose their own rules — just like a parliamentary majority can pass any law.
What an attacker with 51% can and cannot do
There is a lot of confusion about what a 51% attack actually involves. Here is the clear distinction:
❌ What they CAN do
Double spending — spend the same coins twice
Reorganise recent blocks (chain reorganisation)
Block or delay other users’ transactions
Mine empty blocks and stall the network
✓ What they CANNOT do
Steal crypto from wallets they do not control
Create coins out of nothing (beyond protocol limits)
Change the fundamental rules of the protocol
Access the private keys of other users
The greatest danger — double spending: The classic scenario: the attacker sends 1 BTC to an exchange, receives fiat money, then rewrites the blockchain to reverse that transaction and keep both the BTC and the fiat. Small networks with low hashrate are the most vulnerable.
How a 51% attack works — step by step
Step 1 — Accumulating computing power
The attacker accumulates sufficient hashrate — either by purchasing mining equipment or by renting it (attack-as-a-service). The required threshold is >50% of the network’s total hashrate.
Step 2 — Secret parallel mining
The attacker mines an alternative (private) version of the blockchain without publishing it. In parallel, they initiate a transaction on the public chain — for example, depositing BTC on an exchange and receiving fiat money.
Step 3 — Publishing the alternative chain
Once the fiat has been withdrawn, the attacker publishes their alternative (longer) chain. The network automatically accepts the longest valid chain — so the original transaction is “erased” from history, and the attacker keeps both the BTC and the fiat.
Why it works
Proof of Work protocols follow the “longest chain wins” rule. With >51% of the hashrate, the attacker can produce blocks faster than the rest of the network and impose their own chain as the official version.
51% attacks in crypto history
51% attacks are not merely theoretical — they have occurred in practice, particularly on smaller networks:
Ethereum Classic (ETC) — 2020
The ETC network suffered three 51% attacks within just a few weeks. Attackers managed to double-spend millions of dollars. The incident highlighted the vulnerability of small networks with low hashrate.
Bitcoin Gold (BTG) — 2018 and 2020
The network was attacked multiple times. In 2020, attackers successfully double-spent over 70,000 BTG (approximately $1.9 million USD at the time).
Bitcoin (BTC) — resistant
A 51% attack on Bitcoin is practically impossible from an economic standpoint. Controlling 51% of Bitcoin’s hashrate would require investments in the order of tens of billions of dollars in mining equipment and electricity — and would destroy the very value the attacker is trying to exploit.
Can a 51% attack happen on Ethereum?
This is one of the most searched questions related to the 51% attack. The answer depends on the network’s consensus mechanism.
Before “The Merge” (PoW): Ethereum used Proof of Work — so it was theoretically vulnerable to a classic 51% attack based on hashrate control.
After “The Merge” (PoS): Ethereum switched to Proof of Stake. On PoS, power no longer comes from computing power but from the amount of staked ETH. An equivalent attack would require controlling >51% of all ETH staked in the network.
⛏️ Ethereum on PoW (before the Merge)
Theoretically vulnerable. Required 51% of Ethereum’s global hashrate — extremely costly, but conceptually possible.
🔒 Ethereum on PoS (after the Merge)
Requires 51% of all staked ETH — tens of billions of dollars. Additionally, the protocol penalises attackers through slashing (confiscation of the stake).
Conclusion: Ethereum post-Merge is practically immune to classic 51% attacks. Even if someone were to accumulate enough ETH to launch an attack, the protocol’s slashing mechanism would automatically confiscate their stake — turning the attack into a guaranteed massive financial loss.
How networks protect themselves against 51% attacks
⛏️
High hashrate
The more total computing power a network has, the more costly and difficult it becomes for an attacker to accumulate 51%. Bitcoin is practically immune for this reason.
🔗
More confirmations
Exchanges and platforms require more block confirmations before considering a transaction final. The more confirmations required, the harder it is to reorganise the chain.
🔄
Networks based on Proof of Stake are not vulnerable to classic 51% attacks — the consensus mechanism is fundamentally different, and slashing penalises attackers.
📊
Active monitoring
Smaller networks can actively monitor hashrate distribution and take preventive action if a miner accumulates too much computing power.
Frequently asked questions about the 51% attack
What does a 51% attack mean?
A 51% attack means that one entity controls more than half of the computing power of a blockchain network. With this majority power, they can manipulate transaction validation and carry out double spending — spending the same coins twice.
Can a 51% attack happen on Bitcoin?
Theoretically yes, practically impossible. Controlling 51% of Bitcoin’s hashrate would require investments in the order of tens of billions of dollars in equipment and energy. An attack would immediately destroy confidence in Bitcoin and the value of the currency — making it economically irrational.
Can an attacker drain my wallet in a 51% attack?
No. A 51% attack does not grant access to private keys and does not allow the theft of funds from other users’ wallets. The attacker can manipulate their own transactions, but cannot access funds held by others. This is the most common misconception about the 51% attack.
What is double spending?
Double spending means spending the same coins twice. The attacker sends crypto to a destination (e.g. an exchange), receives the equivalent value, then rewrites the blockchain to reverse the first transaction and keep the coins as well. The blockchain was invented precisely to prevent double spending without a central authority.
Are my funds at risk if a network suffers a 51% attack?
The main danger is double spending — which primarily affects exchanges and merchants. As a holder, if you are not making active transactions at the time of the attack, the funds in your wallet are safe.
Why are smaller networks more vulnerable to a 51% attack?
The less total hashrate a network has, the lower the cost of accumulating 51%. On some small networks, a 51% attack can be carried out for just a few thousand dollars per hour by renting computing power from specialised services. Large networks like Bitcoin or Ethereum post-Merge are practically immune.
51% attack
majority attack
double spending
blockchain
proof of work
crypto security
majority attack
double spending
blockchain
proof of work
crypto security