Blockchain Immutability and History

One of the most powerful properties of Bitcoin is immutability. Immutability means that once a transaction is confirmed and written into the blockchain, it cannot be altered, deleted, or reversed by anyone—not even by a government, a court, or Satoshi Nakamoto.

But how is this achieved? There is no central physical vault, no lock, and no encryption key keeping the past safe. Instead, Bitcoin's immutability is thermodynamic, determined by the depth of a block and the mathematical decay of attack probabilities.

---

🏔️ Cumulative Difficulty: The Weight of History

Every 10 minutes, a new block is mined. Each new block acts as a cement layer poured on top of the older blocks.

If an attacker wants to alter a transaction in Block 800,000, they cannot just change that block's data. They must re-solve the Proof of Work puzzle for Block 800,000, and then re-solve the puzzles for Block 800,001, Block 800,002, and all subsequent blocks up to the present.

          Block Height                 Security Level
      ┌───────────────────┐
      │   Block 800,005   │  ◄─── Active Tip (1 Confirmation - Light Security)
      ├───────────────────┤
      │   Block 800,004   │  ◄─── 2 Confirmations
      ├───────────────────┤
      │   Block 800,003   │  ◄─── 3 Confirmations
      ├───────────────────┤
      │   Block 800,002   │  ◄─── 4 Confirmations
      ├───────────────────┤
      │   Block 800,001   │  ◄─── 5 Confirmations
      ├───────────────────┤
      │   Block 800,000   │  ◄─── 6 Confirmations (Buried - Mathematically Locked)
      └───────────────────┘

The deeper a block is buried under new blocks, the more cumulative thermodynamic work protects it. To rewrite history, the attacker must expend more electrical energy than the rest of the entire global mining network combined has spent since that block was mined.

---

📉 The Math of Block Depth: Section 11 of the Whitepaper

In Section 11 of the Bitcoin Whitepaper, Satoshi Nakamoto analyzed the mathematical probability of a double-spend attack succeeding based on Block Depth ($z$) and the attacker's share of network hashrate ($q$).

Satoshi modeled the attack as a Poisson Random Walk: * Let $p$ be the probability that an honest miner finds the next block ($p = 1 - q$). * Let $q$ be the probability that the attacker finds the next block. * Let $P(z)$ be the probability that the attacker can ever catch up from $z$ blocks behind.

If the attacker has less than 50% of the network power ($q < 0.5$), the probability of them catching up drops exponentially as the block depth ($z$) increases:

$$P(z) = \left( \frac{q}{p} \right)^z$$

Let's look at the actual probabilities when an attacker controls a substantial 10% of global hashrate ($q = 0.1$, $p = 0.9$):

• At 1 Confirmation ($z = 1$): $$P(1) = \left( \frac{0.1}{0.9} \right)^1 \approx 0.111 \quad (11.1\%)$$
• At 3 Confirmations ($z = 3$): $$P(3) = \left( \frac{0.1}{0.9} \right)^3 \approx 0.00137 \quad (0.137\%)$$
• At 6 Confirmations ($z = 6$): $$P(6) = \left( \frac{0.1}{0.9} \right)^6 \approx 0.0000014 \quad (0.00014\%)$$

As you can see, by the time a block is 6 confirmations deep, the probability of an attacker with 10% of global power successfully reversing it is virtually zero (less than 1 in 700,000).

If the attacker has 30% of the network hashrate ($q = 0.3$), the probability of catching up at $z=6$ is still only 1.3%, and drops to 0.0002% at $z=24$ confirmations (approx. 4 hours).

---

🏆 The 6-Confirmation Rule: Why It Matters

Because of this exponential decay curve, the industry adopted 6 confirmations (approximately 1 hour of waiting time) as the golden standard for absolute payment finality:

• 0 Confirmations: The transaction is sitting in the mempool. It has high utility for cheap items (like a cup of coffee) but can theoretically be double-spent.
• 1 Confirmation: The transaction is written into the latest block. It is secure against casual users but vulnerable to temporary fork reorganizations.
• 6 Confirmations: The transaction is buried deep. It is secured by a thermodynamic shield so strong that reversing it would cost millions of dollars in wasted electricity, making it economically and physically impossible to alter.