Skip to content
Finance Lessons

Ethereum

Proof-of-Stake and Staking

How Ethereum secures itself without mining: validators stake ETH, are chosen to propose and attest blocks in proportion to their stake, earn rewards, and get slashed for cheating. The Merge, 32 ETH, finality, and staking options explained.

9 min Updated Jun 3, 2026

Bitcoin keeps itself honest by burning electricity: miners run warehouses full of chips, racing to win the right to add the next block, and the sheer cost of that race is what makes cheating pointless. Ethereum used to do the same. Then, in 2022, it pulled off one of the boldest engine swaps in crypto history — it stopped burning electricity to stay honest, and started burning something else: capital at risk. Instead of “prove you spent power,” Ethereum now says “prove you have money on the line, and watch what happens if you cheat.”

This lesson is about that swap — how proof-of-stake works, who validators are, why 32 ETH keeps coming up, what it means for a block to be final, and how ordinary people actually put their ETH to work securing the chain.

From Proof-of-Work to Proof-of-Stake

Before you read — take a guess

Guess before reading: in proof-of-stake, what replaces the electricity that proof-of-work miners burn?

Both systems answer the same hard question: how does a leaderless network, with no boss and no trusted referee, agree on who gets to add the next block? They just answer it differently.

Proof-of-work — Bitcoin’s method, and Ethereum’s old one — makes participants compete with raw computing power. Miners run specialized chips that guess trillions of numbers per second, racing to solve a meaningless puzzle. The first to solve it wins the right to add the next block and collect the reward. The “proof” is the mountain of electricity you provably spent; faking it would cost as much as doing it honestly, so honesty is the cheap option.

Proof-of-stake flips the cost from energy spent to money at risk. Instead of burning power to earn the right to add a block, you lock up your own ETH as a bond (a security deposit). The protocol then picks participants — called validators — to do the work of building and checking blocks, and it picks them weighted by stake: the more ETH you’ve put on the line, the more often you’re chosen. Behave honestly and you earn rewards. Try to cheat in a way the protocol can prove, and it slashes you — destroys a chunk of your deposit and kicks you out. We’ll define slashing properly below; for now, hold the contrast.

Here’s the cleanest analogy. Proof-of-work is an arms race of power plants: the way you “prove” you deserve to add a block is by visibly torching resources, and security comes from the fact that attacking would cost a fortune in electricity. Proof-of-stake is a bonded contractor: before you’re allowed to touch the work, you post a security deposit, and if you do shoddy or fraudulent work, the deposit is forfeit. Same goal — make cheating more expensive than honesty — but one burns coal and the other puts your own savings on the chopping block.

The switch happened at a moment called The Merge (September 2022): Ethereum’s existing chain merged with a new proof-of-stake engine and abandoned mining overnight. The headline number: it cut Ethereum’s energy use by roughly 99.9% — from the consumption of a small country to that of a modest office building. Same ledger, same coins, same balances; an entirely new way of agreeing on them.

Fill in the blanks contrasting the two consensus mechanisms.

Pick the right option for each blank, then check.

In , miners burn electricity racing to add a block. In , validators lock up as a deposit and are chosen weighted by how much they've staked. Ethereum made the switch at an event called in 2022, cutting its energy use by about .

Validators and the 32-ETH Stake

Before you read — take a guess

Guess: how does the protocol decide how often a given validator gets chosen to do work?

A validator is the proof-of-stake equivalent of a miner: a participant the network trusts to help build and verify blocks. But where becoming a miner means buying hardware, becoming a validator means putting up money. To run one, you stake exactly 32 ETH. That deposit is your skin in the game — it’s locked into the protocol, it’s what you earn rewards on, and it’s what gets cut if you cheat.

Why a fixed 32 ETH per validator instead of “stake whatever you’ve got”? It keeps every validator the same size, which makes the math of selecting and rewarding them clean. If you control more ETH than that, you don’t make one giant validator — you run more validators, each with its own 32-ETH deposit. So more total stake controlled means more validators, which means more chances to be chosen to do work. Stake is influence, and it’s strictly proportional.

Play with the wheel below to feel it. Each colored slice is a validator, sized by its stake. Press Select a proposer several times in a row and watch which validators come up — over many presses, the share of times each one is picked tracks its share of the total stake (the biggest slice wins most often, the smallest rarely). Then press Slash a cheater: the chosen validator’s stake is cut, its slice shrinks, and everyone else’s chance rises — because chances are always relative to the total still on the line.

Stake decides who proposes the next block608 ETH
V1V2V3
ValidatorStakeChance
V1320 ETH52.6%
V2160 ETH26.3%
V396 ETH15.8%
V432 ETH5.3%
Chosen proposer: —

Each slice is a validator, sized by staked ETH. Selecting a proposer happens in proportion to stake — bigger slice, more turns. Slashing a cheater destroys part of its stake, shrinking its slice and lifting everyone else's odds. That's skin in the game replacing proof-of-work's electricity bill.

Validator A controls 96 ETH of stake; validator B controls 32 ETH. Over the long run, roughly how often is A chosen to propose compared with B?

Proposing and Attesting

Before you read — take a guess

Guess: in each short time slot, what do most validators do — and what does just one of them do?

Proof-of-stake runs on a steady heartbeat. Time is sliced into slots of about 12 seconds each, and 32 slots make one epoch (roughly 6.4 minutes). Don’t over-memorize the numbers — just hold the rhythm: a slot is “one block’s turn,” and an epoch is the bigger bookkeeping cycle the protocol uses to tally votes and finalize history.

In each slot, two jobs happen:

  • Propose. Exactly one validator is chosen (weighted by stake, as you just saw) to propose the slot’s block — to gather pending transactions, assemble them into a block, and broadcast it to the network.
  • Attest. A committee of other validators is assigned to attest to that block — to check it and cast a vote that it’s valid and belongs on the chain. Attestations are the raw material of consensus: the chain everyone keeps building on is the one with the most honest votes behind it.

Do your job honestly and on time — propose a good block, or attest correctly — and you earn rewards. The work is light and continuous, not a winner-take-all race; almost everyone who behaves gets paid a little, all the time.

The analogy that sticks: think of a meeting. Each slot, one person is picked to draft the minutes (the proposer), and everyone else reads them and signs off that they’re accurate (the attesters). No single scribe can sneak a lie into the record, because the whole room has to vote it true — and the room is enormous and chosen unpredictably.

Match each proof-of-stake term to what it does.

Pick a term, then click its definition.

Rewards, Penalties, and Slashing

Before you read — take a guess

Guess: which misbehavior triggers slashing — the big penalty — rather than just a small one?

Proof-of-stake shapes behavior with a carrot and two very different sticks.

The carrot — rewards. Propose valid blocks, attest correctly, and stay online, and you earn a steady stream of ETH on top of your stake. It’s a salary for showing up and doing honest work, paid out continuously rather than as a jackpot.

The small stick — inactivity penalties. If your validator goes offline — server crash, internet outage — you stop earning and you bleed a little stake for each duty you miss. These penalties are gentle and symmetric to the rewards: roughly, you lose about what you’d have earned by being online. Annoying, recoverable, no catastrophe. The message is “please stay online,” not “you’re a criminal.”

The big stick — slashing. Slashing is the nuclear penalty, and it’s reserved for provable attacks on consensus. The classic example is equivocation (also called double-signing): signing two conflicting messages for the same slot — for instance, proposing two different blocks at once, or attesting to two contradictory versions of history. Because a signature is cryptographic proof of who did it, the network can catch the offender red-handed with no judgment call required. The punishment is brutal by design: a large chunk of the stake is destroyed and the validator is forcibly ejected. Worse, if many validators get slashed around the same time (a sign of a coordinated attack), the penalty scales up — the more it looks like an attack, the more it costs each attacker.

This is the whole security model in one sentence: attacking the chain means burning your own money. Under proof-of-work, an attacker rents hashpower and walks away with the hardware. Under proof-of-stake, the only way to attack is from inside, with staked ETH that the protocol can see and destroy — so a serious attack forces you to set fire to millions of dollars of your own capital, with nothing to show for it. Honesty isn’t enforced by morality; it’s enforced by arithmetic.

Why does slashing make attacking Ethereum economically irrational rather than just illegal?

In principle a huge actor could try, but the economics are punishing. First, the cost: acquiring a third — let alone a majority — of all staked ETH means buying an astronomical amount of ETH, and the buying itself would send the price soaring, making each additional coin costlier. Second, slashing: a 51%-style attack requires provable misbehavior (like equivocating to finalize a dishonest chain), which the protocol detects and punishes by destroying the attacker’s own stake — so success means torching the very billions you spent to get there. Third, the social layer: if an attacker ever did force through a fraudulent, finalized chain, the community can coordinate to reject it and restart from an honest point, slashing the attacker out of existence in the process. The attacker ends up with destroyed capital and a chain nobody runs. Proof-of-stake doesn’t make 51% impossible — it makes it the single most expensive way to lose money ever devised.

Finality

Before you read — take a guess

Guess: how does proof-of-stake make a block 'final' in a way proof-of-work doesn't?

Finality is the question of how sure you can be that a block is permanent. Proof-of-work only ever gives you probabilistic finality: a block is never strictly final, it just gets exponentially harder to reverse as more blocks pile on top. That’s why Bitcoin users “wait for confirmations” — the deeper a transaction is buried, the safer it is, but you’re always playing the odds.

Proof-of-stake adds something stronger: economic finality. Validators don’t just build on blocks — they vote on them with their stake, and those votes get locked in at epoch boundaries. Once two-thirds of all staked ETH has attested to a span of history across two consecutive epochs, that history becomes finalized. From that point, reversing it isn’t merely improbable — it’s only possible if attackers are willing to get at least one-third of all staked ETH slashed. Reversing finalized history would, by construction, require so much provable equivocation that the protocol destroys a third of the entire stake in the process. So finality isn’t “very unlikely to be undone”; it’s “undoing it has a fixed, astronomical price tag attached, payable by the attacker.”

In short: proof-of-work says “the longer you wait, the safer you are.” Proof-of-stake says “after finality, undoing this costs an attacker a third of all staked ETH — so treat it as done.”

Sort each statement: does it describe Proof-of-Work or Proof-of-Stake?

Place each item in the right group.

  • Gives only probabilistic finality — wait for more confirmations
  • Miners with faster hardware win the right to add blocks
  • Validators are chosen to propose in proportion to their stake
  • Security comes from ETH posted as a deposit that can be slashed
  • Adds economic finality once two-thirds of stake attests across two epochs
  • Security comes from burning electricity to solve a puzzle

How People Actually Stake

Before you read — take a guess

Guess: what's the main appeal of pooled or 'liquid' staking versus running your own validator?

Not everyone has 32 ETH and a server in the closet, so a few paths emerged — each trading control for convenience.

  • Solo staking. You stake your own 32 ETH and run your own validator node — the purest, most decentralized option, with no middleman and the full reward. The cost: you need the 32 ETH, the technical chops, and a machine that stays online, or you eat inactivity penalties.
  • Staking-as-a-service. You still put up your own 32 ETH, but you pay a provider to run the node hardware for you. Less hassle than solo, but you’re trusting the operator to behave and stay online.
  • Pooled / liquid staking. You deposit any amount of ETH into a shared pool that runs many validators on everyone’s behalf, and in return you receive a liquid staking token — a tradable claim representing your staked ETH plus its accruing rewards. You stay liquid (you can sell or use that token in other apps while your ETH keeps earning) without ever locking up a full 32 ETH yourself.

The trade-offs sharpen as you move down the list. Anything but solo staking means trusting a third party with your validating, and pooled staking adds a centralization worry: if one liquid-staking provider attracts a huge share of all stake, it concentrates influence over consensus in one operator — the opposite of the decentralization the whole system is built on. And the liquid-staking token carries its own risk: it’s only as good as the operator behind it and the market’s faith in its peg, so it can trade below the value of the ETH it represents if confidence wobbles. Convenience is real, but it’s never free.

A friend wants to stake but only owns 4 ETH and doesn't want to run a node. Which option fits, and what's the catch?

The Big Picture

Proof-of-stake in one frame: replace hashpower with capital at risk, pick validators by stake to propose and attest, pay them for honesty, slash them for cheating, and let stake-weighted votes finalize history. Chunk it:

Big picture

Proof-of-stake

  • Proof-of-stake
    • Stake instead of hashpower
      • Lock up ETH as a bond instead of burning electricity
      • The Merge (2022) cut energy use by about 99.9%
      • Cheating means burning your own capital
    • Validators & selection
      • 32 ETH per validator — your skin in the game
      • Chosen weighted by stake — more stake, more turns
      • More ETH controlled = more validators
    • Propose & attest
      • One proposer per ~12-second slot drafts the block
      • A committee attests (votes) that it is valid
      • 32 slots make one epoch (~6.4 minutes)
    • Rewards & slashing
      • Rewards for honest, online participation
      • Small inactivity penalties for being offline
      • Slashing — big stake cut + ejection — for provable attacks
    • Finality
      • Proof-of-work: probabilistic — wait for confirmations
      • Proof-of-stake: economic finality across two epochs
      • Reversing it would burn at least a third of all stake
How Ethereum secures itself with staked ETH instead of mining.

A mixed recap pulling from every section:

Question 1 of 60 correct

What did Ethereum's switch to proof-of-stake at The Merge primarily change about how the network stays secure?

Check your answer to continue.

Key Takeaways

Success:

What to remember

  • Proof-of-stake replaces burned electricity with capital at risk. Validators lock up ETH as a bond instead of racing with hashpower; The Merge (2022) made the swap and cut Ethereum’s energy use by about 99.9%.
  • A validator stakes exactly 32 ETH — its skin in the game. The protocol picks validators to work weighted by stake, so more ETH controlled means more validators and more turns.
  • Each ~12-second slot, one validator proposes a block and a committee attests (votes) that it’s valid; 32 slots make an epoch (~6.4 min). Honest, online participation earns steady rewards.
  • Two sticks: small inactivity penalties for being offline, and slashing — a large stake cut plus ejection — for provable attacks like double-signing. Attacking means burning your own money.
  • Finality: proof-of-work is probabilistic (wait for confirmations); proof-of-stake adds economic finality — once two-thirds of stake attests across two epochs, reversing it would destroy at least a third of all staked ETH.
  • Ways to stake trade control for convenience: solo (32 ETH + a node), staking-as-a-service (your 32 ETH, rented hardware), and pooled/liquid staking (any amount, a liquid token) — the last two add trust and centralization risk.

You now know how Ethereum agrees on its ledger without burning a power plant’s worth of electricity. But proof-of-stake secures one chain at ~12 seconds a block — and that chain can only do so much work at once. Next we tackle how Ethereum scales beyond the base layer with Layer-2 rollups.

Mark lesson as complete