Share this article

Bitcoin Cash Miners Undo Attacker's Transactions With '51% Attack'

Two mining pools recently carried out a 51 percent attack on the bitcoin cash blockchain.

Updated Sep 13, 2021, 9:14 a.m. Published May 24, 2019, 9:17 p.m.
salon2

Two mining pools recently carried out what is known as a 51 percent attack on the blockchain in an apparent effort to reverse another miner's transactions.

The move is tied to the bitcoin cash network hard fork that occurred on May 15. The two mining pools -- BTC.com and BTC.top -- carried out the move in order to stop the unknown miner from taking coins that they weren't supposed to have access to in the wake of the code change. That day, an attacker took advantage of a bug unrelated to the upgrade (and subsequently patched) that caused the network to split and for miners to mine empty blocks for a brief time.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

In the context of cryptocurrencies like bitcoin cash, a 51 percent attack involves an entity or group controlling a majority of the hash rate which thereby allows them to execute several things they aren't normally allowed to do, such as attempting to rewrite the network's transaction history.

It's long been a controversial topic and other cryptocurrencies have suffered similar attacks due to a decline in their hash rates.

At one point BTC.top did alone control more than 50% of the power. But BTC.com and BTC.top they were able to join together to reverse the blocks of transactions. According to stats site Coin.Dance, the two mining pools currently have combined 44% of bitcoin cash hashing power.

The interesting part of this particular attack on bitcoin cash, though, is that it was arguably executed in an attempt to do something ostensibly good for the community, not to reward the attackers or to take the funds for themselves.

But not everyone in the bitcoin cash community agrees. As one bitcoin cash developer, going by the moniker Kiarahpromises, put it in an article from May 17:

"To coordinate a reorg to revert unknown's transactions. This is a 51% attack. The absolutely worst attack possible. It's there in the whitepaper. What about (miner and developer) decentralized and uncensorable cash? Only when convenient?"

Anatomy of an attack

The inner details of the mining pools' attack (as well as the attack that prompted the attack) are complicated.

"Since the original split in 2017, there has been a significant number of coins accidentally sent to 'anyone can spend' addresses (due to [transaction] compatibility of sigs, but no #SegWit on #BCH), or possibly they've been replayed from #Bitcoin onto the #BCH network," bitcoin podcast host Guy Swann said, explaining the situation on Twitter.

But once one code change was removed during bitcoin cash's May 15 hard fork, these coins were suddenly spendable "basically handing the coins to miners," he added.

The unknown miner attacker decided to try to take the coins. That's when BTC.top and BTC.com swooped in to reverse those transactions.

"When the unknown miner tried to take the coins themselves, [BTC.top and BTC.com] saw & immediately decided to re-organize and remove these [transactions], in favor of their own [transactions], spending the same P2SH coins, [and] many others," Swann went on.

But some bitcoin cash users argue this was the right thing to do.

"This is a very unfortunate situation, but it is also what proof of work actually is. The miners in this case did choose to drop prohashes block and from what I heard, it is because they deemed a transaction within it to have been invalid," responded active bitcoin cash supporter Jonathan Silverblood.

Still, others think that this is a bad sign for bitcoin cash, arguing that the event demonstrates that the cryptocurrency is too centralized.

Yet the thread of a 51 percent attack is a concern shared across proof-of-work crypto networks (and as mentioned above, some blockchains have been left exposed due to falling hash rates). For example, half of bitcoin's current hashing power is divided among just three mining pools according to stats website Blockchain.

Mining software image via Shutterstock

This article has been updated for clarity.

Lebih untuk Anda

Protocol Research: GoPlus Security

GP Basic Image

Yang perlu diketahui:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Solana’s Drift Launches v3, With 10x Faster Trades

Drift (b52_Tresa/Pixabay)

With v3, the team says that about 85% of market orders will fill in under half a second, and liquidity will deepen enough to bring slippage on larger trades down to around 0.02%.

What to know:

  • Drift, one of the largest perpetuals trading platforms on Solana, has launched Drift v3, a major upgrade meant to make on-chain trading feel as fast and smooth as using a centralized exchange.
  • The new version will deliver 10-times faster trade execution thanks to a rebuilt backend, marking the largest performance jump the project has made so far.