<oembed><type>rich</type><version>1.0</version><author_name>npub1ac86vemj7ce5z8jyxt39rna3tvwql6xd30ha3vxcd6esysp23d9qrlswfj</author_name><author_url>https://nostr.ae/npub1ac86vemj7ce5z8jyxt39rna3tvwql6xd30ha3vxcd6esysp23d9qrlswfj</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2014-10-25&#xA;📝 Original message:Some thoughts about Alex&#39;s analysis:&#xA;&#xA;- bitcoin price may increase (though doubling immediately might be&#xA;unlikely) after the halving (because the new coins are in short&#xA;supply). Apparently there is some evidence of a feedback loop between&#xA;number of freshly mined coins sold to cover electrical costs ongoing&#xA;(which depends on halving also), in that there are claims that the btc&#xA;price experiences some downwards pressure when margins are slim as&#xA;miners sell almost all of them when the electrical cost takes most of&#xA;the profit, and otherwise tend more to hold coins longer term.&#xA;&#xA;- that people who cant make money mining with 1/2 reward will resort&#xA;to attacking the network rather than living with it for 2weeks until&#xA;difficulty adjustment).  actually it will be longer than two weeks if&#xA;its going to result in a difficulty fall.&#xA;&#xA;- that the miners wont act in their own meta-interest to aim for the&#xA;plausible new hashrate supported by the lower reward.  mining&#xA;equipment investment horizon being 3-6mo+ so it can easily make&#xA;economic sense to subsidise it for a bit to smooth the transition.&#xA;&#xA;- fees might go up to unjam the network also, so the people&#xA;benefitting from the transactions utility also help cover the&#xA;transition costs.  or maybe someone makes an assurance contract to pay&#xA;the short fall and phase it out over a few months to smooth the shift.&#xA;&#xA;- there is a wide range of electrical efficiency, and some are much&#xA;worse than others so there maybe a convenient equilibrium where there&#xA;are enough left who can still profit.&#xA;&#xA;- alternatively you might say why not 1/100th reward reduction per 2&#xA;week period rather than 1/2 every 4 years, a difficulty retarget could&#xA;be a convenient point to do that.&#xA;&#xA;Adam&#xA;&#xA;On 25 October 2014 11:06, Alex Mizrahi &lt;alex.mizrahi at gmail.com&gt; wrote:&#xA;&gt; # Death by halving&#xA;&gt;&#xA;&gt; ## Summary&#xA;&gt;&#xA;&gt; If miner&#39;s income margin are less than 50% (which is a healthy situation&#xA;&gt; when mining hardware is readily available), we might experience catastrophic&#xA;&gt; loss of hashpower (and, more importantly, catastrophic loss of security)&#xA;&gt; after reward halving.&#xA;&gt;&#xA;&gt; ## A simple model&#xA;&gt;&#xA;&gt; Let&#39;s define miner&#39;s income margin as `MIM = (R-C_e)/R`, where R is the&#xA;&gt; total revenue miner receives over a period of time, and C_e is the cost of&#xA;&gt; electricity spent on mining over the same period of time. (Note that for the&#xA;&gt; sake of simplicity we do not take into account equipment costs, amortization&#xA;&gt; and other costs mining might incur.)&#xA;&gt;&#xA;&gt; Also we will assume that transaction fees collected by miner are negligible&#xA;&gt; as compared to the subsidy.&#xA;&gt;&#xA;&gt; Theorem 1. If for a certain miner MIM is less than 0.5 before subsidy&#xA;&gt; halving and bitcoin and electricity prices stay the same, then mining is no&#xA;&gt; longer profitable after the halving.&#xA;&gt;&#xA;&gt; Indeed, suppose the revenue after the halving is R&#39; = R/2.&#xA;&gt;    MIM = (R-C_e)/R &lt; 0.5&#xA;&gt;    R/2 &lt; C_e.&#xA;&gt;&#xA;&gt;    R&#39; = R/2 &lt; C_e.&#xA;&gt;&#xA;&gt; If revenue after halving R&#39; doesn&#39;t cover electricity cost, a rational miner&#xA;&gt; should stop mining, as it&#39;s cheaper to acquire bitcoins from the market.&#xA;&gt;&#xA;&gt; ~~~&#xA;&gt;&#xA;&gt; Under these assumptions, if the majority of miners have MIM less than 0.5,&#xA;&gt; Bitcoin is going to experience a significant loss of hashing power.&#xA;&gt; But are these assumptions reasonable? We need a study a more complex model&#xA;&gt; which takes into account changes in bitcoin price and difficulty changes&#xA;&gt; over time.&#xA;&gt; But, first, let&#39;s analyze significance of &#39;loss of hashpower&#39;.&#xA;&gt;&#xA;&gt; ## Catastrophic loss of hashpower&#xA;&gt;&#xA;&gt; Bitcoin security model relies on assumption that a malicious actor cannot&#xA;&gt; acquire more than 50% of network&#39;s current hashpower.&#xA;&gt; E.g. there is a table in Rosenfeld&#39;s _Analysis of Hashrate-Based Double&#xA;&gt; Spending_ paper which shows that as long as the malicious actor controls&#xA;&gt; only a small fraction of total hashpower, attacks have well-define costs.&#xA;&gt; But if the attacker-controlled hashrate is higher than 50%, attacks become&#xA;&gt; virtually costless, as the attacker receives double-spending revenue on top&#xA;&gt; of his mining revenue, and his risk is close to zero.&#xA;&gt;&#xA;&gt; Note that the simple model described in the aforementioned paper doesn&#39;t&#xA;&gt; take into account attack&#39;s effect on the bitcoin price and the price of the&#xA;&gt; Bitcoin mining equipment. I hope that one day we&#39;ll see more elaborate&#xA;&gt; attack models, but in the meantime, we&#39;ll have to resort to hand-waving.&#xA;&gt;&#xA;&gt; Consider a situation where almost all available hashpower is available for a&#xA;&gt; lease to the highest bidder on the open market. In this case someone who&#xA;&gt; owns sufficient capital could easily pull off an attack.&#xA;&gt;&#xA;&gt; But why is hashpower not available on the market? Quite likely equipment&#xA;&gt; owners are aware of the fact that such an attack would make Bitcoin useless,&#xA;&gt; and thus worthless, which would also make their equipment worthless. Thus&#xA;&gt; they prefer to do mining for a known mining pools with good track record.&#xA;&gt; (Although hashpower marketplaces exist: https://nicehash.com/ they aren&#39;t&#xA;&gt; particularly popular.)&#xA;&gt;&#xA;&gt; Now let&#39;s consider a situation where mining bitcoins is no longer profitable&#xA;&gt; and the majority of hashpower became dormant, i.e. miners turned off their&#xA;&gt; equipment or went to mine something else. In this case equipment is already&#xA;&gt; nearly worthless, so people might as well lease it to the highest bidder,&#xA;&gt; thus enabling aforementioned attacks.&#xA;&gt;&#xA;&gt; Alternatively, the attacker might buy obsolete mining equipment from people&#xA;&gt; who are no longer interested in mining.&#xA;&gt;&#xA;&gt; ## Taking into account the Bitcoin price&#xA;&gt;&#xA;&gt; This is largely trivial, and thus is left as an exercise for the reader.&#xA;&gt; Let&#39;s just note that the Bitcoin subsidy halving is an event which is known&#xA;&gt; to market participants in advance, and thus it shouldn&#39;t result in&#xA;&gt; significant changes of the Bitcoin price,&#xA;&gt;&#xA;&gt; ## Changes in difficulty&#xA;&gt;&#xA;&gt; Different mining devices have different efficiency. After the reward halving&#xA;&gt; mining on some of these devices becomes unprofitable, thus they will drop&#xA;&gt; out, which will result in a drop of mining difficulty.&#xA;&gt;&#xA;&gt; We can greatly simplify calculations if we sum costs and rewards across all&#xA;&gt; miners, thus calculating average MIM before the halving: `MIM = 1 - C_e/R`.&#xA;&gt;&#xA;&gt; Let&#39;s consider an equilibrium break-even situation where unprofitable mining&#xA;&gt; devices were turned off, thus resulting in the change in electricity&#xA;&gt; expenditures: `C_e&#39; = r * C_e`. and average MIM after the halving `MIM&#39; =&#xA;&gt; 0`. In this case:&#xA;&gt;&#xA;&gt;     r * C_e = R/2&#xA;&gt;     C_e / R = 1/2r&#xA;&gt;     (1 - MIM) = 1/2r&#xA;&gt;     r = 1/(2*(1-MIM))&#xA;&gt;&#xA;&gt; Let&#39;s evaluate this formulate for different before-halving MIM:&#xA;&gt;&#xA;&gt; 1. If `MIM = 0.5`, then `r = 1/(2*0.5) = 1`, that is, all miners can remain&#xA;&gt; mining.&#xA;&gt; 2. If `MIM = 0.25`, then `r = 1/(2*0.75) = 0.66`, the least efficient miners&#xA;&gt; consuming 33% of total electricity costs will drop out.&#xA;&gt; 3. If `MIM = 0.1`, then `r = 1/(2*0.9) = 0.55`, total electricity costs drop&#xA;&gt; by 45%.&#xA;&gt;&#xA;&gt; We can note that for the before-halving MIM&gt;0, r is higher than 1/2, thus&#xA;&gt; less than half of total hashpower will drop out.&#xA;&gt;&#xA;&gt; The worst-case situation is when before-halving MIM is close to zero and&#xA;&gt; mining devices, as well as cost of electricity in different places, are&#xA;&gt; nearly identical, in that case approximately a half of all hashpower will&#xA;&gt; drop out.&#xA;&gt;&#xA;&gt; ## MIM estimation&#xA;&gt;&#xA;&gt; OK, what MIM do we expect in the long run? Is it going to be less than 50%&#xA;&gt; anyway?&#xA;&gt;&#xA;&gt; We can expect that people will keep buying mining devices as long as it is&#xA;&gt; profitable.&#xA;&gt;&#xA;&gt; Break-even condition: `R - C_e - P = 0`, where P is the price of a mining&#xA;&gt; device, R is the revenue it generates over its lifetime, and C_e is the&#xA;&gt; total cost of required electricity over its lifetime. In this case, `R = C_e&#xA;&gt; + P`, and thus:&#xA;&gt;&#xA;&gt;     MIM = 1 - C_e / (C_e + P)&#xA;&gt;&#xA;&gt; `f = C_e / P` is a ratio of the cost of electricity to the cost of hardware,&#xA;&gt; `C_e = f * P`, and thus&#xA;&gt;&#xA;&gt;     MIM = 1 - f * P / (f * P + P) = 1 - f / (f + 1) = 1 / (1 + f)&#xA;&gt;&#xA;&gt; MIM is less than 0.5 when f &gt; 1.&#xA;&gt;&#xA;&gt; Computing f is somewhat challenging even for a concrete device, as it&#39;s&#xA;&gt; useful lifetime is unknown.&#xA;&gt;&#xA;&gt; Let&#39;s do some guesstimation:&#xA;&gt;&#xA;&gt; Spondoolies Tech&#39;s SP35 Yukon unit consumes 3.5 KW and costs $4000. If it&#39;s&#xA;&gt; useful lifetime is more than 2 years and a cost of KWh is $0.1, the total&#xA;&gt; expenditures on electricity will be at least $6135, thus for this device we&#xA;&gt; have `f &gt; 6135/4000 &gt; 1.5`.&#xA;&gt;&#xA;&gt; If other devices which will be sold on the market will have similar specs,&#xA;&gt; we will have MIM lower than 0.5. (Well, no shit.)&#xA;&gt;&#xA;&gt; ## Conclusions&#xA;&gt;&#xA;&gt; Reward halving is a deficiency in Bitcoin&#39;s design, but there is some hope&#xA;&gt; it won&#39;t be critical: in the equilibrium break-even situation hashpower drop&#xA;&gt; is less than 50%.&#xA;&gt; Hashrate might drop by more than 50% immediately after the halving (and&#xA;&gt; before difficulty is updated), thus a combination of the halving and slow&#xA;&gt; difficulty update pose a real threat.&#xA;&gt;&#xA;&gt; ------------------------------------------------------------------------------&#xA;&gt;&#xA;&gt; _______________________________________________&#xA;&gt; Bitcoin-development mailing list&#xA;&gt; Bitcoin-development at lists.sourceforge.net&#xA;&gt; https://lists.sourceforge.net/lists/listinfo/bitcoin-development&#xA;&gt;</html></oembed>