The Bitcoin community skilled a uncommon two-block reorganization on March 23, at a block peak of 941,880. Foundry mined six consecutive blocks, AntPool and ViaBTC briefly expanded a competing department.
The chain resolved the fork as designed, following the trail with the best hash charge. Bitcoin labored precisely as designed and validated its assumptions.
The heuristic that nobody labeled
The affirmation rule of six is one of many items of acquired knowledge that has traveled so removed from its origins that most individuals who repeat it can not reconstruct why six is the quantity.
The reply goes again to Satoshi Nakamoto’s 2008 whitepaper, which modeled finality as a chance of catching up. As sufficient blocks accumulate on prime of a transaction, the computational value of rewriting historical past turns into prohibitive for an attacker with restricted hash energy.
Six blocks turned neighborhood shorthand for “safe sufficient,” despite the fact that the whitepaper handled it as a calculation that assumes the attacker controls about 10% of the community’s hashing energy.
That assumption has been quietly working for sixteen years.
Jameson Lopp made the implication specific in a affirmation danger evaluation. The consolation stage included in six commits is a operate of who else is on the community and the way a lot you run.
In keeping with the Nakamoto restoration mannequin, six confirmations towards an attacker holding 10% of the hashing energy ends in a rollback danger of roughly 0.02%. In comparison with 20%, that determine rises to round 1.43%. In comparison with 30%, it reaches roughly 13.2%.
With the 32.2% stake Foundry had in current pool snapshots, the identical mannequin places the rollback danger of six commits at round 18.9%.
Mining swimming pools are usually not coordinated attackers by default, so they don’t match the outcomes of those fashions. Foundry USA describes itself as an institutional-level group created for miners that coordinates many unbiased operators.
Miners can and do change swimming pools, conducting an open assault could be economically self-destructive for any rational pool operator. The focus on block manufacturing modifications the danger mannequin that folks use to resolve when a cost is taken into account last, no matter how dispersed the underlying machines are.
A 2022 latency safety evaluation famous that with 10% adversary and a 10-second propagation delay, six confirmations nonetheless produce a safety breach chance between 0.11% and 0.35%.
Six was by no means a hardtop, not even in far more favorable circumstances than right this moment.
Three circumstances without delay
The context surrounding the reorganization issues.
The Bitcoin community presently runs three circumstances concurrently that put strain on the six-confirmation heuristic, one thing it has not often confronted in follow.
Over the previous three days, Foundry has held roughly 31% of the worldwide hashrate, whereas AntPool sits at round 18.4% and ViaBTC at 10.5%, in line with Hashrate Index knowledge. These three teams mixed account for roughly 60% of block manufacturing.
That diploma of focus on the ability of coordinators has elevated by any affordable measure lately.
On the identical time, the mining economic system has deteriorated markedly. Problem fell 7.76% on March 21 in one of many largest detrimental changes of 2026. Hashprice averaged $32.31 per petahash per day in February, down practically 18% month over month, briefly touching an all-time low of $27.89.
Transaction charges contributed solely 0.57% of the whole block rewards within the final 24 hours of obtainable knowledge.
When margins compress and price income dries up, smaller and mid-sized miners face an growing incentive to band along with the coordinator that provides the very best variance discount. This normally implies that teams which might be already massive change into bigger.
January’s winter storm supplied a noteworthy counterpoint. Foundry’s hashrate reportedly fell by round 60%, or practically 200 exahashes per second, throughout that interval, demonstrating that pool shares may be shortly redistributed when exterior circumstances change.
On this context, the six affirmation rule lacks an computerized adjustment mechanism when the group’s shares transfer.
In follow, the business’s largest venues have deserted the six-confirmation commonplace in a quiet operational trial years in the past.
Coinbase requires two confirmations to $BTC Deposits might be marked as pending, whereas Kraken and Gemini require three every.
Neither of these thresholds are improper on your use circumstances: for odd retail deposits, two or three confirmations characterize a totally defensible danger tolerance.
The hole between these real-world figures and the favored commonplace of six illustrates that the “six confirmations” had been at all times extra of a cultural artifact than common coverage.
Lopp’s framework argues that this hole ought to change into extra deliberate. The required confirmations ought to scale with the worth of the transaction and the economics of the attacker.
A $500 retail deposit and a $50 million OTC deal don’t share the identical danger profile, and the trustworthy model of the ultimate steering would state this explicitly.
The quantity that remained the identical.
There are completely different ends in the present hashrate focus state of affairs, which generated alarm amongst customers.
Positively, the hashrate is redistributed amongst a broader group of coordinators as mining margins finally get better and new entrants compete for a share.
The January storm already demonstrated that Foundry’s dominance can erode shortly beneath the best circumstances. If focus decreases and the hash value recovers, six confirmations are nonetheless an affordable default for big corporations. $BTC settlements.
Then again, Foundry might stay above 30% and the focus of the highest three stays agency. No malicious occasion is required for the usual to be downgraded, as exchanges, OTC desks, and merchants dealing with high-value transfers can silently increase inside thresholds or formalize dynamic tiers tied to observable share knowledge.
In keeping with Nakamoto’s mannequin, six confirmations towards a 32.2% absolutely coordinated attacker leaves about an 18.9% danger of catching up, a determine actually tough to reconcile with language like “successfully irreversible” for transfers of tens of thousands and thousands of {dollars}.
The state of affairs solely requires that fund focus stay the place it’s, whereas the hole between the favored commonplace and precise danger widens sufficient for somebody with cash at stake to cease ignoring it.
Bitcoin’s settlement ensures had been at all times “six blocks, beneath a sure distribution of hash energy and a sure danger tolerance.”
The reorganization of two blocks produced a uncommon second when the hole between Bitcoin’s finality folklore and its underlying arithmetic turned tough to disregard.
Contemplating this second, the times of the rule of six confirmations as a common and unconditional commonplace are working out.
