Imagine a future where crypto is deemed a (truly) useful technology.
For all its quirks, one of crypto's most useful pinnacles is censorship resistance. I present to you one of the most important things that demonstrates Kaspa's (kaspa:native) usefulness, inspired by
@hashdag's thoughts on this topic; the idea of real-time decentralization, so that anyone, even those who don't know crypto, can understand.
Take at face value that censorship resistance is a core tenet, and that for some use cases the ledger must be public. For these use cases (many, to be written about another time, but think tokenization of anything on-chain) you might eliminate 1/ proof of stake, 2/ slow chains, and 3/ privacy coins. Why?
1/ PoS: while it absolutely has its advantages, in this (trustless) case select-then-work (PoS) loses on a property that work-then-select (PoW) has for free.
Think of it like voting. In PoS the voters are known before they vote, so anyone who wants to pressure them has time to do it. In PoW you only learn who won after the work is already done, so there is nobody to pressure in advance. Producing a block and earning the right to publish it are one act. And at 864,000 blocks a day, you only need 1/864,000 of the hashrate to find one daily, so leaving a pool is feasible and hashrate can truly spread out across individuals and geography, making it even harder to censor.
@michaelsuttonil laid the work-then-select idea out in more detail in a post I consider to be almost famous:
nitter.net/michaelsuttonil/status…
2/ Slow chains: fast block rates make your transaction safe in ~6 seconds even against a 40% attacker, before DAGKnight, which removes the latency parameter the demo assumes. Bitcoin: ~10 hours. Litecoin: ~2 hours.
3/ Privacy coins: the ledger has to be public enough that you can check your transaction was ordered fairly, and that apps can verify state they weren't party to. Without that, atomic composability across them breaks. This rules out shielding the sequence of transactions.
This is
@hashdag's real-time decentralization, made clickable. If Bitcoin guarantees censorship resistance over an hour, Kaspa guarantees it in seconds.
kaspaexplained.com/why-kaspa…
The case for the uniqueness of fast pow
tl;dr
Finality has two moving parts: (i) fast inclusion (= high bps, how quickly a tx gets into a block), and (ii) fast confirmations (= how quickly that tx becomes irreversible). Any system with rapid block production can achieve the first. The second is where the tension shows: in pos, fast confirmations press directly against decentralization. In fast pow, the two properties are decoupled.
prologue
A few weeks ago I came across Solana’s founder claiming: “Solana is the fastest monetary system in the world”. Since Kaspa already runs at a faster block rate, I was curious to check Solana’s finality times. That curiosity quickly pointed me to a deeper issue: not raw speed, but how speed interacts with decentralization.
——————
The tension is structural. In pos, finality means accumulating staked votes, and the more decentralized the stake distribution, the more time is required to reach finality. Here I’m not talking about hardware requirements or validator specs. The axis I’m discussing is centralization around the security mechanism itself: stake in pos vs. hardware in pow. To be secure, a block must be confirmed by a supermajority--typically >66.7% of the total economic stake. In a truly decentralized network, where n stakers with uniform share grows without bound, the time to coordinate this supermajority becomes a real bottleneck.
Pow works differently. It samples the hardware space without requiring the protocol to explicitly collect evidence from a majority of miners. Each block is itself a statistical proof that the finder out-competed the full network’s hash power. This process--and its timing--remains independent of how many individual miners participate.
Ethereum’s researchers understood this when moving to pos. Unlike Solana, which tolerates concentration to reach ~13-second finality, Ethereum’s designers could not accept that trade-off. Their solution was to introduce rotating committees. A rotating committee is a smaller subset of validators, randomly chosen from the full set, that votes on behalf of everyone else.
But this comes with a different security model, known in the literature as exposure to a BFT adaptive attacker. The committee is selected first and then votes. That “select-then-work” sequence is theoretically exposed to adaptive attackers, since members are known in advance. Pow, by contrast, is “work-then-select”: the winner is only revealed after the work is done. Think of it this way: in pos, you know who the referees are before the game starts, which gives an attacker time to pressure them. In pow, you only learn who won after the work is already done, which removes that attack surface. So n confirmations provide consistent confidence regardless of miner granularity, and the system stays secure even under adaptive targeting.
Beyond attack subtleties, the real issue is economic weight. When I send a billion-dollar transfer in a pos system, the question I care about is simple: how much stake is actually securing it? A committee vote provides strong statistical evidence, but only a true supermajority puts the full economic stake of the network behind my confirmation. In other words, a sampled committee may convince me that things are probably safe, but only the weight of the entire stake provides an overwhelming guarantee. And this is exactly where pow shines: each confirmation is not just a probability estimate, but a direct proof of work done against the full hash power of the network, no matter how many miners there are.
closing remark
I don’t claim to know every engineering detail of Ethereum or Solana. But I’m convinced the core principle holds.
I’ll state it simply: fast pow uniquely enables fast finality without forcing a compromise on decentralization.