In 2140 why wouldn't the next miner fee payment be more valuable than a reorg of the last block?.. The miner (likely a pool) would need to reverse one of their own transactions (where they purchased something in the real world?). One transaction worth more than the current miner reward is right now : ‎6.272 BTC $188,025 this is going up exponentially. Seems to me like any attack would be risky as hell.. I don't get the issue?.
This can manifest much sooner than 2140, probably in about three halvings from now. All we need is for the value of the highest fees in the last block, plus the highest fees in the mempool to exceed the block subsidy. At that point, you get more sats from reorging the last block than you do from simply advancing the chain. At this point, the game theory starts unravelling.
This is a "gradually then suddenly" thing. Depending on market conditions, there will be small instances at first. Before long it becomes problematic. Then, users will be forced to increase their fees to incentivize their transactions to reliably mine into competing forks. Unfortunately, this further increases the incentive to reorg, as miners get even more sats by successfully reorging each successive block.
In case it helps clear up understanding, the price of BTC is immaterial here. The point is, the miner gets more sats by reorging than from orderly chain advancement (because they capture larger fees that outweigh the decreasing block subsidy).
reply
All we need is for the value of the highest fees in the last block, plus the highest fees in the mempool to exceed the block subsidy. At that point, you get more sats from reorging the last block than you do from simply advancing the chain.
It's not that simple.
If you are reorging the chain AND rest/most/significant_part of the network mines on-top of the last block; then your threshold for profitability of such action is significantly increased.
Effectively it means that you need to mine >1 successive blocks if you want to do the reorg. That changes the profitability equation a lot because of geometric scaling of hitting successive-blocks mined.
reply
Still don't see it. Suppose there's a block X at height N and a rogue miner desides to aim at replacing X rather than building on top of it. He successfully mines a block Y also at height N. However, he must keep the fees of Y lower than the fees of X, otherwise miners would build on top of X instead and he gets nothing. So rogue miners would gradually lower the fees of the block at height N until someone builds a block at height N+1. That doesn't sound like Bitcoin is dying or anything like that. Also users can cut the crap by using locktime to aim for a particular block height.
reply
Unless I misunderstand locktime, I don't see how either of these points is going to deter greedy mining. There is no need to reorg to have less fees, as plenty of new transactions are always percolating in. Likewise, locktime doesn't materially affect miners - the coinbase transaction will still sum to the same value and the winner will eventually get the sats.
reply
Locktime: you can set the locktime on your transaction so that it can only be included starting from the block N + 1 where N is the current block height. This way your transaction can't be included in a block with the current block height.
Reorgs: now I don't get you at all. I conjecture there might be confusion of reorg as in 51% attack scenario with greedy miner reorg (no 51% power). In the latter case the miner gets the coinbase reward anyway, so why does the coinbase size even matter?
reply