November 6, 2015 By Larry Loeb 2 min read

Bitcoin and other cryptocurrencies have been a hot topic ever since the seminal white paper “Bitcoin: A Peer-to-Peer Electronic Cash System” was written by someone (or a group of someones) using the pseudonym Satoshi Nakamoto.

Cryptocurrency is built on methods for blockchains used on a peer-to-peer network of independent nodes. Nakamoto (or whoever) figured out that to decentralize a currency, one had to overcome the double spending case where a coin is used twice. This was accomplished by time stamping all digitally signed transaction records and taking their hash in a specific way.

The Basic Method of Blockchains

The method seems complex on first viewing, but it’s actually recursive and simple. As Nakamoto put it, “The network time stamps transactions by hashing them into an ongoing chain of hash-based proof of work, forming a record that cannot be changed without redoing the proof of work. The longest chain not only serves as proof of the sequence of events witnessed, but proof that it came from the largest pool of CPU power. As long as a majority of CPU power is controlled by nodes that are not cooperating to attack the network, they’ll generate the longest chain and outpace attackers.”

Proof of Work

OK, what exactly is this proof of work? First introduced in Adam Beck’s Hashcash system in 2002, proof of work is the idea tjat each node in the network has to show it has done some computational work on each block it creates before that block can be added to the chain. The specific method of this involves scanning for a value that, when hashed with a hash generator like SHA-256, will begin with a number of zero bits.

The average work required for the number of zero bits is exponential and can be verified by executing only a single hash. This means that as blocks are added to the chain, the work to change a past block would include redoing the computational work in all the blocks that follow it.

A node shows that it worked to create a block by creating a hash of its block header. This hash does not exceed a certain value.

How Do We Establish if a Node Is Honest?

Honest nodes don’t have to do the computational work needed to change the blocks in a blockchain. That means that they will be able to create longer blockchains than dishonest ones in the same length of time. As the blockchain gets longer, the probability of a slower attacker catching up to it grows exponentially.

New blocks will only be added to the blockchain if their hash is at least as challenging as a difficulty value expected by the network’s consensus protocol. The difficulty is established by checking the difference in the time stamps (and hence how long it took to generate the last blocks in the chain) every 2,016 blocks.

The amount of computational power needed to create multiple hashes on blocks both identifies good players and bad ones in a blockchain net. Good ones get their chains longer, faster — and all of this work helps blockchains secure themselves from malicious actors.

More from Banking & Finance

Black Friday chaos: The return of Gozi malware

4 min read - On November 29th, 2024, Black Friday, shoppers flooded online stores to grab the best deals of the year. But while consumers were busy filling their carts, cyber criminals were also seizing the opportunity to exploit the shopping frenzy. Our system detected a significant surge in Gozi malware activity, targeting financial institutions across North America. The Black Friday connection Black Friday creates an ideal environment for cyber criminals to thrive. The combination of skyrocketing transaction volumes, a surge in online activity…

What’s up India? PixPirate is back and spreading via WhatsApp

8 min read - This blog post is the continuation of a previous blog regarding PixPirate malware. If you haven’t read the initial post, please take a couple of minutes to get caught up before diving into this content. PixPirate malware consists of two components: a downloader application and a droppee application, and both are custom-made and operated by the same fraudster group. Although the traditional role of a downloader is to install the droppee on the victim device, with PixPirate, the downloader also…

Exploring DORA: How to manage ICT incidents and minimize cyber threat risks

3 min read - As cybersecurity breaches continue to rise globally, institutions handling sensitive information are particularly vulnerable. In 2024, the average cost of a data breach in the financial sector reached $6.08 million, making it the second hardest hit after healthcare, according to IBM's 2024 Cost of a Data Breach report. This underscores the need for robust IT security regulations in critical sectors.More than just a defensive measure, compliance with security regulations helps organizations reduce risk, strengthen operational resilience and enhance customer trust.…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today