Real-World Examples of 51% Attacks: How Blockchains Got Hacked

Imagine buying a coffee with digital cash, handing over the coins, and then-poof-they reappear in your wallet. The shop owner loses their money, and you keep both the coffee and the crypto. This isn't a glitch in the Matrix; it’s called double spending, and it’s the primary weapon used in a 51% attack.

For years, we were told that blockchain was unhackable because it was decentralized. Satoshi Nakamoto assumed in the original Bitcoin whitepaper that no single entity could ever afford to control more than half of the network's computing power. But as the crypto world exploded into thousands of different coins, that assumption cracked. Today, 51% attacks are not just theoretical nightmares discussed by academics; they are documented, recurring events that have cost millions of dollars and shaken trust in specific networks.

What Actually Happens During a 51% Attack?

To understand these real-world examples, you first need to know how the attack works. In Proof-of-Work (PoW) blockchains like Bitcoin or Ethereum Classic, miners compete to solve complex math puzzles to add new blocks to the chain. Whoever solves it fastest gets to record the next set of transactions.

If one group controls more than 50% of the total mining power (hash rate), they can outpace everyone else. Here is the play-by-play:

1. The Secret Chain: The attacker starts mining blocks privately, hiding them from the public network.
2. The Double Spend: They send cryptocurrency to an exchange or merchant using the public network. Once confirmed, they sell those coins for real money or goods.
3. The Reveal: Because they have majority power, their private chain grows faster than the public one. They release this longer chain to the network.
4. The Rewind: The network accepts the longest chain as truth. The public transactions containing their payment disappear, effectively erasing history. The attacker keeps the cash/goods and gets their crypto back.

This mechanic turns the blockchain’s core feature-immutability-into a liability if the economic incentives aren’t aligned correctly.

Ethereum Classic: The Repeat Offender

When people talk about 51% attacks, Ethereum Classic (ETC) is the most frequently targeted blockchain in history. It serves as the cautionary tale for the entire industry. ETC is a fork of Ethereum, created after the DAO hack, but it retained the older Proof-of-Work consensus mechanism with significantly less mining security than its parent chain.

In early 2019, ETC suffered a massive attack where attackers rewound the blockchain by 96 blocks. They stole approximately $11 million worth of ETC. What made this incident famous wasn't just the theft, but the response. Coinbase is one of the largest cryptocurrency exchanges globally. Their monitoring systems detected the unusual transaction patterns in real-time. Coinbase immediately froze all trading of ETC to prevent further losses. This highlighted a critical reality: even if the blockchain itself is compromised, centralized exchanges act as a necessary firewall for users.

But the attacks didn't stop there. In August 2020, ETC was hit again. In fact, it faced three separate 51% attacks within a single month. The frequency was so alarming that major exchanges considered delisting the coin entirely. The Cloud Security Alliance published a report titled "Rent to Pwn the Blockchain," noting that these were not hypothetical threats but "here and now" realities. The repeated targeting of ETC proved that once a network is known to be vulnerable, it becomes a magnet for opportunistic hackers looking for easy profits.

Bitcoin Gold: The Cost of Low Hash Rate

Bitcoin Gold (BTG) is a Bitcoin fork launched in 2017 aimed at decentralizing mining. Its goal was noble: to make mining accessible to everyday GPUs rather than specialized ASIC machines. However, this design choice left it dangerously exposed. Because BTG shared a similar algorithm with Bitcoin but had a tiny fraction of the hash rate, it became an easy target for miners who already owned powerful hardware.

Attackers didn't need to buy new equipment. They simply redirected existing mining power from other networks to overwhelm Bitcoin Gold. The MIT Digital Currency Initiative cited Bitcoin Gold as a textbook example of how smaller cryptocurrencies are vulnerable. Miners from larger coins can temporarily switch their hash power to a smaller coin, controlling 51% of its network almost instantly. This phenomenon, known as hashrate migration, demonstrated that network security isn't just about the technology-it's about the economic commitment of the miners protecting it.

The Economics of an Attack: Why Not Bitcoin?

You might wonder, "If Ethereum Classic and Bitcoin Gold fell, why hasn't Bitcoin been attacked?" The answer lies in sheer scale and cost. A 51% attack is an arms race against electricity bills.

According to analysis from blockchain security expert Karsten Nohl in mid-2025, attacking Bitcoin would require renting computational capacity worth several million dollars per hour. As of 2025, Bitcoin’s hash rate operates in the hundreds of exahashes per second (EH/s). To gain majority control, an attacker would need to command roughly 204 EH/s. This requires billions of dollars in hardware investment and astronomical energy consumption. For Bitcoin, the cost of the attack far exceeds any potential profit from double-spending, making it economically irrational.

However, the same analysis revealed a stark contrast for Litecoin is a peer-to-peer cryptocurrency that was designed to be a lighter version of Bitcoin. Despite having a market capitalization of billions, Litecoin could theoretically be attacked for only a few thousand dollars by amassing enough rented hash power. This exposes a dangerous gap: market capitalization does not equal network security. A coin can be expensive to buy but cheap to hack if its underlying hash rate is low.

Beyond Theft: Market Manipulation and DoS

We often focus on double-spending, but 51% attacks offer other malicious capabilities. Attackers can use their majority power to launch Denial of Service (DoS) attacks. By refusing to include legitimate transactions in their mined blocks, they can freeze the entire network, preventing anyone from sending or receiving funds. This creates chaos and panic among users.

Furthermore, attackers can engage in sophisticated market manipulation. A strategy observed in 2025 involved short-selling. An attacker establishes a short position on a cryptocurrency (betting the price will drop). Then, they launch a 51% attack, not necessarily to steal coins, but to damage the network's reputation. The announcement of a successful attack causes fear, uncertainty, and doubt (FUD), crashing the price. The attacker then covers their short position at a profit. This means the attack itself is the product, sold to manipulate market sentiment.

How Exchanges and Networks Defend Themselves

Since the blockchain protocol itself can be rewritten by a majority miner, defense comes from outside the code. Centralized exchanges like Coinbase and Binance have become the first line of defense. They monitor for blockchain reorganizations. If they see a chain being reversed, they pause withdrawals and deposits instantly.

Some exchanges now require more confirmations for deposits from vulnerable altcoins. While this slows down user experience, it adds a safety buffer. Additionally, the community plays a role. For large networks like Bitcoin, the effort required to gather such massive mining power would be highly visible. Mining pools are monitored, and unusual hash rate movements trigger alerts. This collective vigilance acts as a deterrent, though smaller networks with less active communities remain largely unprotected.

Lessons for Investors and Developers

The real-world examples of 51% attacks teach us that decentralization is not binary; it’s a spectrum. Just because a project calls itself a "blockchain" doesn't mean it's secure. When evaluating a Proof-of-Work cryptocurrency, look beyond the price chart. Check the hash rate. Is it distributed among many miners, or concentrated in a few pools? Is the cost to attack higher than the value locked in the network?

For developers, the lesson is clear: relying solely on PoW without sufficient economic backing is risky. Many newer chains have moved to Proof-of-Stake (PoS) specifically to eliminate the risk of 51% attacks based on computational power, shifting the security model to economic stake instead. Understanding these mechanics helps separate robust infrastructure from fragile experiments.