Even with 51% of mining power, an attacker is severely limited by Bitcoin's consensus rules, which are enforced by
every full node, not just miners:
What a 51% attacker CAN do:
- β Double-spend their own coins (send, receive goods, then reverse the transaction)
- β Prevent specific transactions from confirming (censorship)
- β Orphan other miners' blocks (waste their work)
What a 51% attacker CANNOT do:
- β Steal Bitcoin from someone else's address (requires private keys)
- β Create Bitcoin out of thin air (violates 21M supply cap)
- β Change the block reward (violates halving schedule)
- β Spend coins without valid signatures (violates cryptographic rules)
- β Invalidate properly signed transactions (all nodes would reject their blocks)
Why? Because every full node independently validates every block according to Bitcoin's consensus rules.
If a miner creates a block that breaks the rules (invalid signatures, wrong supply, etc.), every node will reject itβ
even if it's on the longest chain!
Key takeaway: Miners propose blocks, but full nodes enforce the rules. This separation of powers is crucial to Bitcoin's security.