In such blockchains, fees also play a critical role in supporting their long-term security. They make it costly for information to be stored on the blockchain, thereby disincentivizing spam and DDoS attacks that have historically plagued zero-/low-fee networks, like Nano , EOS and XRP . Most crucially, fees promote a competitive environment among miners which in turn makes it prohibitively expensive for single parties to successfully attack a network. Thus far, proof of work in high-fee environments is the only battle-tested mechanism known to the industry to be resilient against attacks.
In its post, FTX claimed that “the ‘work’ required to add [a] transaction to the blockchain uses a large amount of computing time and energy.” This is erroneous. Contrary to this common characterization of PoW, there is no “energy payload” required to make a transaction. You are not using joules to push transactions through the pipes. Making, registering and validating a transaction costs very little, computationally.
The thing which is expensive (financially, and, in the case of PoW, in terms of energy, too) is winning the eligibility rights to include a block, obtainable by brute-forcing for a valid nonce. And it’s expensive because the reward for creating a block is significant — around $290,000 at the time of this writing. Logically, miners will pay up to $99 to win a bounty worth $100. But this bounty exists due to the issuance of new coins as fees are de minimis (in Bitcoin at least). The bounty is also available whether a block contains 4,000 transactions or none.
The per-transaction energy cost figure that FTX and the affiliated Solana make frequent reference to is not a useful analysis. Bitcoin could produce far more blockspace, thus driving fees to zero (as BSV did indeed do , for instance), without expending a joule more energy. Bitcoin could also process zero transactions per block, and miners would expend virtually the same amount of energy. There simply isn’t a linear correlation between transactions and energy expenditure, and there is barely any causal linkage between the two.
Why Limit Block Space?
As to why fees exist in the first place, they are the consequence of crowded block space. Congestion exists in a blockchain context because the basic security model of blockchains requires that end users can independently audit and verify the transactional history from the very first block should they choose to, and there’s a limit to the quantity of data that can be audited per unit time.
A blockchain is a replicated ledger. The orthodox security model requires that users be able to actually run a current version of that ledger, and recreate and validate all historical transactions, thereby ensuring that the rules are being followed. Bitcoin’s design philosophy aims to permit anyone with at least a weak internet connection and consumer-grade hardware to perform a full audit of the transaction log.
Ethereum takes a more liberal approach, adding computational complexity and some scalability at the cost of more challenging and expensive verification. But still, running an Ethereum node should be doable on high-end consumer hardware if users discard some historical information after validating it, a technique called “pruning.” It is not out of the reach of a somewhat technical individual with a modest budget.
The design philosophy of both Bitcoin and Ethereum (at least in its current form — founder Vitalik Buterin has more ambitious plans which deviate from this idea) stresses the importance of an individual being able to run a current copy of the ledger. Therefore, the growth of the ledger must itself be constrained to keep the cost of node operation within reasonable bounds. The major constraints are disk i/o, bandwidth and storage capacity.
It’s not enough to store the blockchain — you have to stay up to date with its latest entries, which means downloading a lot of data and performing new computation by verifying data as it arrives. Here is where we arrive at the key constraints: There’s only so much computation modern hardware can perform per unit time – only so many signatures that can be verified and state changes verified. Of course, node software can (and has been) optimized, to eke more computation (and hence transactional validation) out of the same number of bit flips. Storage and bandwidth are generally becoming cheaper with time, too. But these still represent genuine constraints grounded in the laws of physics. A computer can only do so much.
So, we arrive at the status quo. Bitcoin’s protocol makes available a theoretical maximum of 4 MB of new block space every 10 minutes — in practice, this hovers around 1.2 MB at the current weekly average. Ethereum post-EIP-1559 creates roughly 6 MB every ten minutes. If demand exceeds supply, a queue emerges, and the highest bidders get priority access to block space. Hence, fees.
As demonstrated, fees are not a “PoW thing” or an “energy thing.” They are a “security model” thing. If you want to keep the decentralization high, you want to keep the cost of node operation low , and thus you want to limit the quantity of data a validator must process per unit time . If you do all of these things, and your blockchain is popular, fees will organically emerge, as they did in Bitcoin and Ethereum.
Now, if you take a much looser view of security, and you are content to have a small number of very performant nodes doing all of the validation, then you can create more block space, and drive fees effectively to zero.
This is not a new idea; it’s the foundation of the “big block” movement in Bitcoin, which embroiled the protocol in a civil war for the better part of a decade . That movement gave birth to the perfect counterexample to the claims of FTX: BSV.
The designers of BSV created virtually-unlimited quantities of blockspace, content as they were to have a small number of industrial nodes perform validation. Fees are effectively zero in BSV. But this is a PoW network, and its miners absolutely consume energy. Conversely, at some point next year, Ethereum will move to a proof-of-stake model, at which point it will stop consuming meaningful amounts of energy. But I expect Ethereum will still having meaningful fees at the base layer — and these fees will be considered desirable in many respects, since they support the deflationary mechanism introduced with EIP-1559.
The reason that Solana, for instance, has low fees, is simply because the designers of that network were happy to adopt a different security model from Bitcoin or Ethereum. In Solana, there is virtually no difference between running a node for the purposes of verifying the integrity of the chain and running a node for mining blocks. As such, running a Solana node requires extremely specialized hardware and an experienced devops team.
We can attest to this, as Coin Metrics runs one (alongside 100 other nodes spanning 25 distinct Layer 1 blockchains). It costs Coin Metrics dozens of thousands of dollars a month to run a SOL node. That is a magnitude higher than the couple of hundreds of dollars a month we spend running BTC nodes.
At current rates, Solana produces approximately 550-times more blockspace than Bitcoin per day. Solana validators, at current rates, must process around 100 GB per day of data, or 36 TB per year. Most of that data is removed, or pruned, which impacts the ability of third parties to check all transactions from genesis.
Bitcoin node operators, by contrast, ingest around 180 MB per day, or 65 GB per year. Solana validators must therefore manage two orders of magnitude more data than Bitcoin validators. Ethereum is a bit more complex and computationally intense than Bitcoin, but still far more limited than Solana in terms of the computational work validators must do to maintain the ledger.
Solana can offer users more abundant blockspace and therefore a cheaper all-in transactional experience, but this comes at a cost. The network has recently experienced outages , as its relatively few nodes were successfully targeted with DDoS attacks . Effectively, Solana obtained (a measure of) scalability, but at the cost of more centralization, and consequent fragility.
Ultimately, the Sybil-resistance mechanism used is largely irrelevant to the question of fees. A PoS network could be completely costless from an energy perspective and constrict block space, causing fees to emerge; a PoW network could increase blockspace and drive fees to zero.
Heavy Is The Head That Wears The Crown
While FTX’s analysis is off base on the question of fees and PoW, we can nevertheless sympathize with the desire of an exchange operator to align itself with proof-of-stake networks, and to minimize the importance of PoW networks.
After all, if you can influence the world toward an outcome in which PoS-based monetary goods are dominant, and you run a large custodial exchange which stands to accumulate lots of those PoS assets, your incentives are clear. Other things being equal, you probably prefer to have more rather than less influence over the world’s future monetary protocol.
In a PoS-dominant world, exchange operators, custodians and banks that accumulate the most coins are king. Users that deposit coins generally surrender their coin-based network voting rights to the exchanges themselves. There are already examples of exchanges being used to influence PoS networks, as occurred when Justin Sun colluded with Binance, Huobi and Poloniex to commandeer the Steem network . These exchanges voted with user funds in Sun’s favor, demonstrating an obvious principal-agent problem created by the custody of PoS assets.
In a PoW world, large intermediaries are much less empowered. The failure of SegWit2x , a movement supported by most of the large exchanges and custodians at the time, demonstrates this. Imagine a similar movement today, except taking place on one of the larger PoS networks. The largest exchange operators, custodying as they do a large plurality of all the outstanding coins, would simply shape the protocol to their liking with no resistance.
And in a world where operating an exchange is a decidedly hazardous profession, as demonstrated by the travails of BitMEX , Huobi and OKEx executives, the inclination is surely to offend the powers that be as little as possible.
So, it stands to reason that FTX leadership would align itself with “ecological” PoS, eliminating what has historically been the most strident objection to public blockchains from the policy crowd. Why rock a boat which is already swaying quite precariously?
But we would argue that even though the naive analysis suggests that exchanges should, as a group, support and foster the growth of PoS while marginalizing PoW, this is unwise in the long run. If these exchanges/brokerages/banks accumulate a large fraction of all the coins, they will amass enormous political power, especially if these blockchains become monetary assets of global consequence. At that point, accumulating voting power proportional to coins held becomes a poisoned chalice. The exchange becomes a gigantic honeypot for the state — a state which will not surrender its power of sanctions easily.
As we transition from a world where the U.S. projects power through correspondent banks and international systems like SWIFT, to a world of stablecoins, MetaMasks and Layer 2 protocols, the state will have to develop new ways to control financial flows. It would be convenient in the extreme if a small handful of exchanges accumulated a large portion of supply in PoS networks, and then submitted (as they ultimately must and will) to increasingly onerous regulation.
At this point, exchanges would simply become deputized — just as banks are today — into carrying out state policy, which could well extend to controlling public blockchains at the protocol layer. PoS networks explicitly grant control and discretion to the largest stakeholders, so at this point, the jig would be up. The state would be free to pursue its merry ambitions of deep financial deplatforming.
This isn’t just fantasy. Already, the U.S. financial policy establishment is demanding that stablecoins obtain federal bank charters, which would bring issuers directly under the aegis of the Federal Deposit Insurance Corporation (FDIC), the Office of the Comptroller of the Currency (OCC) and the Federal Reserve. The exchanges, currently loosely regulated in the U.S. under a patchwork of state-by-state regulations, will likewise be asked to submit to federal regulation.
So, the exchange CEOs that lionize purportedly ecological PoS and dismiss the merits of PoW should be careful what they wish for. It may seem appealing on a surface level to control consensus from the seat of a large custodial exchange, but it is a power that is best spurned in the first place.
Public blockchains exist to eliminate centralized points of control and to remove the political constraints that are inherent in traditional finance. The combination of PoS and large quantities of coins held in regulated exchanges or banks is one that is very conducive to the state reasserting control over these nominally-decentralized systems. Unless you are eager to be deputized into a hall monitor for the new financial system, it is best to repudiate the influence that helming a PoS network would grant you.
This is a guest post by Nic Carter and Lucas Nuzzi. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or Bitcoin Magazine.