View source for Proof of stake

{{Short description|System that regulates the formation of blocks on a blockchain}}
{{Pp-extended|small=yes}}
{{confused|Proof of space}}
{{Unbalanced|date=December 2021}}

'''Proof-of-stake''' ('''PoS''') protocols are a class of [[Consensus (computer science)|consensus mechanisms]] for [[blockchain]]s that work by selecting validators in proportion to their quantity of holdings in the associated cryptocurrency. This is done to avoid the computational cost of [[proof of work|proof-of-work]] (POW) schemes. The first functioning use of PoS for cryptocurrency was [[Peercoin]] in 2012, although its scheme, on the surface, still resembled a POW.<ref name="ZhaoYangLuo2021">{{cite conference| last1 = Zhao | first1 = Wenbing | last2 = Yang | first2 = Shunkun | last3 = Luo | first3 = Xiong | last4 = Zhou | first4 = Jiong | title = On PeerCoin Proof of Stake for Blockchain Consensus | date = 26 March 2021 | publisher = ACM | doi = 10.1145/3460537.3460547 | book-title = ICBCT'21: The 3rd International Conference on Blockchain Technology | pages=129–134 | url = }}</ref>

== Description ==

For a blockchain transaction to be recognized, it must be appended to the blockchain. In the proof of stake blockchain, the appending entities are named ''minters'' or {{vanchor|Validator|text='''validators'''}} (in the [[proof of work]] blockchains this task is carried out by the [[Bitcoin mining|miners]]);{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28714}} in most protocols, the validators receive a reward for doing so.<ref name="Saleh">{{Cite journal| doi = 10.1093/rfs/hhaa075| issn = 0893-9454| volume = 34| issue = 3| pages = 1156–1190| last = Saleh| first = Fahad| title = Blockchain without Waste: Proof-of-Stake| journal = [[The Review of Financial Studies]]| date = 2021-03-01}}</ref> For the blockchain to remain secure, it must have a mechanism to prevent a malicious user or group from taking over a majority of validation. PoS accomplishes this by requiring that validators have some quantity of blockchain tokens, requiring potential attackers to acquire a large fraction of the tokens on the blockchain to mount an attack.<ref name="Ledger">{{Cite journal| doi = 10.5195/ledger.2019.140| doi-access = free| issn = 2379-5980| volume = 4| last1 = Tasca| first1 = Paolo| last2 = Tessone| first2 = Claudio J.| title = A Taxonomy of Blockchain Technologies: Principles of Identification and Classification| journal = [[Ledger (journal)|Ledger]]| date = 2019-02-15| url = http://www.ledgerjournal.org/ojs/ledger/article/view/140| arxiv = 1708.04872| access-date = 2021-04-26| archive-date = 2022-04-22| archive-url = https://web.archive.org/web/20220422192010/https://www.ledgerjournal.org/ojs/ledger/article/view/140| url-status = live}}</ref>

Proof of work (PoW), another commonly used consensus mechanism, uses a validation of computational prowess to verify transactions, requiring a potential attacker to acquire a large fraction of the computational power of the validator network.<ref name="Ledger" /> This incentivizes consuming huge quantities of energy. PoS is more energy-efficient.<ref name="Physics">{{Cite journal| doi = 10.1088/1742-6596/1584/1/012023| issn = 1742-6596| volume = 1584| pages = 012023| last1 = Zhang| first1 = Rong| last2 = Chan| first2 = Wai Kin (Victor)| title = Evaluation of Energy Consumption in Block-Chains with Proof of Work and Proof of Stake| journal = [[Journal of Physics: Conference Series]]| date = 2020 | issue = 1| bibcode = 2020JPhCS1584a2023Z|doi-access=free}}</ref>

Early PoS implementations were plagued by a number of new attacks that exploited the unique vulnerabilities of the PoS protocols. Eventually two dominant designs emerged: so called ''[[#BFT-based PoS|Byzantine fault tolerance-based]]'' and ''[[#Chain-based PoS|chain-based]]'' approaches.{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28715}}  Bashir identifies three more [[#Variants|types of PoS]]:{{sfn|Bashir|2022|p=334}}
* committee-based PoS (a.k.a. [[#Nominated PoS (NPoS)|nominated PoS]], NPoS);
* [[#Delegated proof of stake (DPoS)|delegated proof of stake]] (DPoS);
* [[#Liquid proof of stake (LPoS)|liquid proof of stake]] (LPoS).

== Attacks ==
The additional vulnerabilities of PoS schemes are directly related to their advantage: a relatively low amount of calculations required when constructing a blockchain.{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28716}}

=== Long-range attacks ===
The low amount of computing power involved allows a class of attacks that replace a non-negligible portion of the main blockchain with a hijacked version. These attacks are called in literature by different names, ''Long-Range'', ''Alternative History'', ''Alternate History'', ''History Revision'', and  are unfeasible in the PoW schemes due to the sheer volume of calculations required.{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28713}} The early stages of a blockchain are much more malleable for rewriting, as they likely have much smaller group of stakeholders involved, simplifying the collusion. If the per-block and per-transaction rewards are offered, the malicious group can, for example, redo the entire history and collect these rewards.{{sfn|Xiao|Zhang|Lou|Hou|2020|p=22}}

The classic "Short-Range" attack ([[bribery attack]]) that rewrites just a small tail portion of the chain is also possible.{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28713}}

=== Nothing at stake ===
Since validators do not need to spend a considerable amount of computing power (and thus money) on the process, they are prone to the ''Nothing-at-Stake'' attack: the participation in a successful validation increases the validator's earnings, so there is a built-in incentive for the validators to accept all chain forks submitted to them, thus increasing the chances of earning the validation fee. The PoS schemes enable low-cost creation of blockchain alternatives starting at any point in history (''costless simulation''), submitting these forks to eager validators endangers the stability of the system.{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28716}} If this situation persists, it can allow [[double-spending]], where a digital token can be spent more than once.{{sfn|Xiao|Zhang|Lou|Hou|2020|p=22}} This can be mitigated through penalizing validators who validate conflicting chains{{sfn|Xiao|Zhang|Lou|Hou|2020|p=22}} ("[[Finality (blockchain)|economic finality]]"{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28723}}) or by structuring the rewards so that there is no economic incentive to create conflicts.<ref name="Saleh" /> [[Byzantine Fault Tolerance]] based PoS are generally considered robust against this threat ([[#BFT-based PoS|see below]]).{{sfn|Deirmentzoglou|Papakyriakopoulos|Patsakis|2019|p=28717}}

=== Bribery attack ===
Bribery attack, where the attackers financially induce some validators to approve their fork of blockchain, is enhanced in PoS, as rewriting a large portion of history might enable the collusion of once-rich stakeholders that no longer hold significant amounts at stake to claim a necessary majority at some point back in time, and grow the alternative blockchain from there, an operation made possible by the low computing cost of adding blocks in the PoS scheme.{{sfn|Xiao|Zhang|Lou|Hou|2020|p=22}}

== Variants ==

=== Chain-based PoS ===
This is essentially a modification of the PoW scheme, where the competition is based not on applying brute force to solving the identical puzzle in the smallest amount of time, but instead on varying the difficulty of the puzzle depending on the stake of the participant; the puzzle is solved if on a tick of the clock (|| is concatenation):
: <math>Hash(ProposedNewBlock || ClockTime) < target * StakeValue </math>  
The smaller amount of calculations required for solving the puzzle for high-value stakeholders helps to avoid excessive hardware.{{sfn|Bashir|2022|p=335}}

=== Nominated PoS (NPoS) ===
Also known as "committee-based", this scheme involves an election of a committee of validators using a [[verifiable random function]] with probabilities of being elected higher with higher stake. Validators then randomly take turns producing blocks. NPoS is utilized by [[Ouroboros (protocol)|Ouroboros Praos]] and [[Polkadot (cryptocurrency)|BABE]].{{sfn|Bashir|2022|pp=335-336}}

=== BFT-based PoS ===
{{main|Byzantine fault tolerance}}
The outline of the BFT PoS "epoch" (adding a block to the chain) is as follows:{{sfn|Bashir|2022|p=336}}
# A "proposer" with a "proposed block" is randomly selected by adding it to the temporary pool used to select just one consensual block;
# The other participants, validators, obtain the pool, validate, and vote for one;
# The BFT consensus is used to finalize the most-voted block.
The scheme works as long as no more than a third of validators are dishonest. BFT schemes are used in Tendermint and Casper FFG.{{sfn|Bashir|2022|p=336}}

=== Delegated proof of stake (DPoS) ===
Proof of stake delegated systems use a two-stage process: first,{{sfn|Bashir|2022|p=337}}
the stakeholders elect a validation committee,{{sfn|Xiao|Zhang|Lou|Hou|2020|p=21}} a.k.a. ''witnesses'', by voting proportionally to their stakes, then the witnesses take turns in a round-robin fashion to propose new blocks that are then voted upon by the witnesses, usually in the BFT-like fashion. Since there are fewer validators in the DPoS than in many other PoS schemes, the consensus can be established faster. The scheme is used in many chains, including EOS, Lisk, Tron.{{sfn|Bashir|2022|p=337}}

=== Liquid proof of stake (LPoS) ===
In the liquid PoS anyone with a stake can declare themselves a validator, but for the small holders it makes sense to delegate their voting rights instead to larger players in exchange for some benefits (like periodic payouts). A market is established where the validators compete on the fees, reputation, and other factors. Token holders are free to switch their support to another validator at any time. LPoS is used in [[Tezos]].{{sfn|Bashir|2022|p=337-338}}

=== 'Stake' definition ===
The exact definition of "stake" varies from implementation to implementation. For instance, some cryptocurrencies use the concept of "coin age", the product of the number of tokens with the amount of time that a single user has held them, rather than merely the number of tokens, to define a validator's stake.<ref name="Ledger" />{{sfn|Bashir|2022|p=335}}

== Implementations ==

The first functioning implementation of a proof-of-stake cryptocurrency was [[Peercoin]], introduced in 2012.<ref name="Saleh" /> Other cryptocurrencies, such as Blackcoin, [[Nxt]], [[Cardano (cryptocurrency platform)|Cardano]], and [[Algorand]] followed.<ref name="Saleh" /> However, {{As of|2017|lc=on}}, PoS cryptocurrencies were still not as widely used as proof-of-work cryptocurrencies.<ref name="LNCS-Securing">{{Cite conference| publisher = Springer International Publishing| doi = 10.1007/978-3-319-67816-0_17| isbn = 978-3-319-67816-0| pages = 297–315| editor1-first = Joaquin | editor1-last = Garcia-Alfaro| editor2-first = Guillermo |editor2-last=Navarro-Arribas |editor3-first=Hannes |editor3-last=Hartenstein |editor4-first=Jordi |editor4-last=Herrera-Joancomartí| last1 = Li| first1 = Wenting| last2 = Andreina| first2 = Sébastien| last3 = Bohli| first3 = Jens-Matthias| last4 = Karame| first4 = Ghassan| title = Securing Proof-of-Stake Blockchain Protocols| book-title = Data Privacy Management, Cryptocurrencies and Blockchain Technology| location = Cham| series = [[Lecture Notes in Computer Science]]| date = 2017}}</ref><ref>{{Cite magazine |first=Samantha |last=Hissong |date=July 9, 2021 |title=The Crypto World Is Getting Greener. Is It Too Little Too Late? |magazine=[[Rolling Stone]] |url=https://www.rollingstone.com/culture/culture-features/nfts-crypto-environmental-global-warming-proof-of-stake-blockchain-1194402/ |access-date=July 22, 2021 |archive-date=January 28, 2022 |archive-url=https://web.archive.org/web/20220128083715/https://www.rollingstone.com/culture/culture-features/nfts-crypto-environmental-global-warming-proof-of-stake-blockchain-1194402/ |url-status=live }}</ref><ref>{{cite journal |last1=Nguyen |first1=Cong T. |last2=Hoang |first2=Dinh Thai |last3=Nguyen |first3=Diep N. |last4=Niyato |first4=Dusit |last5=Nguyen |first5=Huynh Tuong |last6=Dutkiewicz |first6=Eryk |title=Proof-of-Stake Consensus Mechanisms for Future Blockchain Networks: Fundamentals, Applications and Opportunities |journal=IEEE Access |date=2019 |volume=7 |pages=85727–85745 |doi=10.1109/ACCESS.2019.2925010 |doi-access=free|bibcode=2019IEEEA...785727N |hdl=10220/49702 |hdl-access=free }}</ref>

In September 2022, [[Ethereum]], the second-largest cryptocurrency, switched from PoW to a PoS consensus mechanism,<ref>{{cite web | url=https://ethereum.org/en/upgrades/merge | title=The Merge | website=Ethereum | access-date=2022-09-15 | archive-date=2022-09-14 | archive-url=https://web.archive.org/web/20220914212421/https://ethereum.org/en/upgrades/merge/ | url-status=live }}</ref> after several proposals<ref name="NewScientist">{{Cite news| last = Sparkes| first = Matthew| title = NFT developers say cryptocurrencies must tackle their carbon emissions| work = [[New Scientist]]| access-date = 2021-04-07| date = 2021-03-30| url = https://www.newscientist.com/article/2272687-nft-developers-say-cryptocurrencies-must-tackle-their-carbon-emissions/| doi = 10.1016/S0262-4079(21)00548-0| archive-date = 2022-07-14| archive-url = https://web.archive.org/web/20220714141838/https://www.newscientist.com/article/2272687-nft-developers-say-cryptocurrencies-must-tackle-their-carbon-emissions/| url-status = live}}</ref><ref name=Lau20210527/> and some delays.<ref name=Lau20210527>{{cite web |first=Yvonne |last=Lau |url=https://fortune.com/2021/05/27/ethereum-founder-vitalik-buterin-proof-of-stake-environment-carbon/ |title=Ethereum founder Vitalik Buterin says long-awaited shift to 'proof-of-stake' could solve environmental woes |work=[[Fortune.com|Fortune]] |date=2021-05-27 |access-date=2021-05-29 |archive-date=2022-06-04 |archive-url=https://web.archive.org/web/20220604083030/https://fortune.com/2021/05/27/ethereum-founder-vitalik-buterin-proof-of-stake-environment-carbon/ |url-status=live }}</ref><ref>{{cite web |last1=Wickens |first1=Katie |title='The Merge' to end cryptocurrency mining on gaming GPUs won't come until 2022 |url=https://www.pcgamer.com/the-merge-to-end-cryptocurrency-mining-on-gaming-gpus-wont-come-until-2022/ |website=PC Gamer |access-date=13 December 2021 |language=en |date=25 October 2021 |archive-date=4 July 2022 |archive-url=https://web.archive.org/web/20220704041444/https://www.pcgamer.com/the-merge-to-end-cryptocurrency-mining-on-gaming-gpus-wont-come-until-2022/ |url-status=live }}</ref>

== Concerns ==

=== Security ===
Critics have argued that the proof of stake model is less secure compared to the proof of work model.<ref>{{Cite news|url=https://www.bloomberg.com/news/articles/2021-11-17/crypto-s-power-consumption-sparks-an-energy-efficient-alternative|access-date=2022-01-22|newspaper=Bloomberg|title=Crypto's Energy Guzzling Sparks an Alternative That Merely Sips|date=17 November 2021|archive-date=2022-01-29|archive-url=https://web.archive.org/web/20220129043239/https://www.bloomberg.com/news/articles/2021-11-17/crypto-s-power-consumption-sparks-an-energy-efficient-alternative|url-status=live}}</ref>

=== Centralization ===
Critics have argued that the proof of stake will likely lead cryptocurrency blockchains being more centralized in comparison to proof of work as the system favors users who have a large amount of cryptocurrency, which in turn could lead to users who have a large amount of cryptocurrency having major influence on the management and direction for a crypto blockchain.<ref>{{Cite web|last=Chandler|first=Simon|title=Proof of stake vs. proof of work: key differences between these methods of verifying cryptocurrency transactions|url=https://www.businessinsider.com/personal-finance/proof-of-stake-vs-proof-of-work|access-date=2022-01-22|website=Business Insider|language=en-US|archive-date=2022-07-14|archive-url=https://web.archive.org/web/20220714193422/https://www.businessinsider.com/personal-finance/proof-of-stake-vs-proof-of-work|url-status=live}}</ref><ref>{{Cite web|last=Lin|first=Connie|date=2022-01-21|title=How to clean up crypto mining—and what's at stake if we don't|url=https://www.fastcompany.com/90715099/bitcoin-crypto-mining-proof-of-work-explained|access-date=2022-01-22|website=Fast Company|language=en-US|archive-date=2022-01-26|archive-url=https://web.archive.org/web/20220126124413/https://www.fastcompany.com/90715099/bitcoin-crypto-mining-proof-of-work-explained|url-status=live}}</ref>

=== Legal status in US ===
US regulators have argued over the legal status of the proof-of-stake model, with the [[U.S. Securities and Exchange Commission|Securities and Exchange Commission]] claiming that staking rewards are the equivalent of interest, so coins such as ether and ada are financial [[Security (finance)|securities]].<ref>{{Cite news |last1=Michaels |first1=Dave |last2=Ostroff |first2=Caitlin |last3=Kowsmann |first3=Patricia |date=2023-06-05 |title=SEC Says Binance Misused Customer Funds, Ran Illegal Crypto Exchange in U.S. |language=en-US |work=Wall Street Journal |url=https://www.wsj.com/articles/sec-sues-crypto-exchange-binance-over-u-s-rule-violations-6918ed0f |access-date=2024-07-09 |issn=0099-9660}}</ref> However, in 2024, the SEC sidestepped the question by recognising [[Exchange-traded fund#Cryptocurrency ETFs|Ethereum market funds]] on condition that they did not stake their coins. The level of staking of ether at 27% of total supply was low compared with Cardano (66%) and Solana (63%). However, not staking their tokens meant that the funds were losing about 3% of potential returns a year.<ref>{{Cite web |title=Cryptofinance: into the ether |url=https://www.ft.com/content/2c447b68-1949-484b-bcb8-c2f004188522 |access-date=2024-07-09 |website=www.ft.com}}</ref><ref>{{Cite web |title=Ethereum ETFs: The SEC's Surprising Shift in Stance |url=https://ccdata.io/blogs/ethereum-etfs-the-secs-surprising-shift-in-stance |access-date=2024-07-09 |website=ccdata.io |language=en}}</ref> 

== Energy consumption ==
In 2021, a study by the [[University of London]] found that in general the [[energy consumption]] of the proof-of-work based [[Bitcoin]] was about a thousand times higher than that of the highest consuming proof-of-stake system that was studied even under the most favorable conditions and that most proof of stake systems cause less energy consumption in most configurations.<ref>{{cite book |first1=Moritz |last1=Platt |first2=Johannes |last2=Sedlmeir |first3=Daniel |last3=Platt |first4=Jiahua |last4=Xu |first5=Paolo |last5=Tasca |first6=Nikhil |last6=Vadgama |first7=Juan Ignacio |last7=Ibañez |chapter=The Energy Footprint of Blockchain Consensus Mechanisms Beyond Proof-of-Work |date=2021 |title=2021 IEEE 21st International Conference on Software Quality, Reliability and Security Companion (QRS-C) |chapter-url=https://ieeexplore.ieee.org/document/9741872 |volume=2021 |pages=1135–1144 |doi=10.1109/QRS-C55045.2021.00168 |access-date=24 December 2023 |arxiv=2109.03667 |isbn=978-1-6654-7836-6 |archive-date=29 January 2024 |archive-url=https://web.archive.org/web/20240129093449/https://ieeexplore.ieee.org/document/9741872/ |url-status=live }}</ref>  

In January 2022, [[Erik Thedéen]], the vice-chair of the [[European Securities and Markets Authority]], called on the EU to ban the PoW model in favor of PoS because of the latter's lower energy consumption.<ref>{{Cite web|last=Bateman|first=Tom|date=2022-01-19|title=Ban proof of work crypto mining to save energy, EU regulator says|url=https://www.euronews.com/next/2022/01/19/eu-regulator-calls-for-a-ban-on-proof-of-work-bitcoin-mining-to-save-renewable-energy|access-date=2022-01-23|website=Euronews|language=en|archive-date=2022-04-19|archive-url=https://web.archive.org/web/20220419190031/https://www.euronews.com/next/2022/01/19/eu-regulator-calls-for-a-ban-on-proof-of-work-bitcoin-mining-to-save-renewable-energy|url-status=live}}</ref>

[[Ethereum]]'s switch to proof-of-stake was estimated to have cut its energy use by 99%.<ref name="EnergyRevamp">{{cite news |last1=Clark |first1=Aaron |title=Ethereum's Energy Revamp Is No Guarantee of Global Climate Gains |url=https://www.bloomberg.com/news/articles/2022-12-06/ethereum-cut-its-energy-use-99-but-climate-gains-may-be-curbed |access-date=1 January 2023 |work=Bloomberg.com |date=6 December 2022 |language=en |archive-date=7 December 2022 |archive-url=https://web.archive.org/web/20221207092458/https://www.bloomberg.com/news/articles/2022-12-06/ethereum-cut-its-energy-use-99-but-climate-gains-may-be-curbed |url-status=live }}</ref>

== References ==
{{reflist}}

== Sources ==
* {{cite journal | last1 = Deirmentzoglou | first1 = Evangelos | last2 = Papakyriakopoulos | first2 = Georgios | last3 = Patsakis | first3 = Constantinos | title = A Survey on Long-Range Attacks for Proof of Stake Protocols | journal = [[IEEE Access]] | date = 2019 | volume = 7 | pages = 28712–28725 | eissn = 2169-3536 | doi = 10.1109/ACCESS.2019.2901858 | pmid = | s2cid = 84185792 | doi-access = free | bibcode = 2019IEEEA...728712D }}
* {{Cite journal| doi = 10.1109/COMST.2020.2969706| issn = 1553-877X| volume = 22| issue = 2| pages = 1432–1465| last1 = Xiao| first1 = Y.| last2 = Zhang| first2 = N.| last3 = Lou| first3 = W.| last4 = Hou| first4 = Y. T.| title = A Survey of Distributed Consensus Protocols for Blockchain Networks| journal = [[IEEE Communications Surveys and Tutorials]]| date = 2020| arxiv = 1904.04098| s2cid = 102352657}}
* {{cite book | title = Blockchain Consensus | last1 = Bashir | first1 = Imran | chapter = Blockchain Age Protocols | date = 2022 | pages = 331–376 | publisher = Apress | doi = 10.1007/978-1-4842-8179-6_8 | isbn = 978-1-4842-8178-9 | url = }}

{{Cryptocurrencies|state=expanded}}

[[Category:Cryptography]]
[[Category:Cryptocurrencies]]