An Empirical Analysis of Bitcoin Pool Hopping Behavior
An Empirical Analysis of Bitcoin Pool Hopping Behavior
An Empirical Analysis of Bitcoin Pool Hopping Behavior
net/publication/350020789
CITATIONS READS
21 1,176
4 authors, including:
Nicolas Heulot
IRT System X
12 PUBLICATIONS 347 CITATIONS
SEE PROFILE
All content following this page was uploaded by Natkamon Tovanich on 12 March 2021.
(d) BTCC Pool (2016-02-18) (e) AntPool (2016-04-23) (f) BTC.com (2018-04-06)
11 txs 1 txs
₿735 ... ₿1,099 ... 25 txs
16 txs 4 txs ₿139 ...
36 txs 1 txs 2 txs
₿745 ₿1,099
7 txs 4 txs ₿456 ₿851 ₿278
15 txs 6 txs 1 txs
₿872 ₿7 ₿1,100 26 txs 962 txs
1 txs 43 txs 1 txs ...
65 txs 94 txs ₿1,329 ₿285 ₿121
1 txs 1 txs
₿1,000 ₿96 ₿1,0881 txs ₿1,100 96 txs
40 txs 1 txs
80 txs 92 txs ₿873 ₿478 ₿10
₿1,008 ₿1,008 ₿165 ₿1,100 ₿9 967 txs
1 txs 5 txs 1 txs ₿214
₿8 ₿12
Fig. 2. Representative examples of reward payout flow patterns from the mining pools in our study. The flows were extracted using our algorithm and are
represented as node-link diagrams. Here, we sampled the payout flow in the month where the mining pool had the highest market share. Each node represents
a transaction type with branches of similar patterns grouped together. The color of the node indicates the transaction type. The total value of transactions in
each node is encoded by circle size in proportion to the txpayout value. The number of transactions and their combined value are the top and the right labels
for each node respectively. We omitted labels for combined values below 1 BTC.
time difference between txpayout and tx is more than one multiple miners at each step, e. g. AntPool (e), BTC.com (f),
day and (2) when the tx.value is < 0.001 BTC—as most BTCC Pool, and Poolin; and (2) the indirect payout to miners
mining pools have a minimum payout value [8], [10]. on an txinter , e. g. F2Pool (c). We also noticed that F2Pool
(c) and BTC.com (f) usually send half of their payout back to
Identifying individual miners. For each edge list obtained
their addresses as a reserve to pay miners in the next payout.
from Algorithm 1, we constructed a payout flow graph using
the NetworkX library [20]. Representative payout flow patterns D. Miners’ migration between mining pools
that we obtained from the algorithm are shown in Fig. 2. Next, To analyze miner migration between pools, we compared
we extracted the txminer and derived the list of miners the list of miners who received rewards from each mining pool
from each payout flow graph. in a set time interval and calculated the intersection of miners
between pools. We set the time interval to months to be able
Definition 3. Miner transaction txminer is a transaction
to analyze detailed patterns for the entire mining pool history.
in the payout flow graph that does not have any output in
the payout flow graph |txminer .out| = 0. We tagged all input Definition 4. Let t be a time interval where t ∈ T = {t0 , ..., t−
t
edge(s) of txminer as owner edges. The list of miners who 1, t, t + 1, ..., tn }. The set of miners in the mining pool Mpool
received the reward from txpayout is defined as Mtxpayout . is the summation of the miner list Mtxpayout for all payout
transactions of a mining pool pool at time t.
Some txminer transactions may be connected to the pool
wallet to keep the represented value as profits for the pool or The miner’s migration flow is modelled as a diagram in
as deposits for the next payout, as illustrated in Fig. 2 (c) and Fig. 3. For each time interval t, the list of miners that migrate
t
(f). We detected txminer input edges that have the same from/to a mining pool pool, Mpool , is divided into 7 miner
owner addresses as the mining pool and assigned them as groups as follows:
txpayout to extract further reward payout flows. • New (Dropout) miners are miners that enter (exit) the min-
Payout flow patterns: We visualized payout flow patterns ing activity at time t, annotated as Mnew|pool (Mdrop|pool ).
t
for all mining pools in our study and show representative • Same before (Same after) miners are in Mpool but are
t−1 t+1
flows patterns in Fig. 2. Early mining pools, operated from also in Mpool (Mpool ).
t
2011 until mid-2015, distributed the reward directly after every • Hopping in (Hopping out) miners are in Mpool but move
t−1 t+1
block it mined. We found two payout patterns in this period: from (to) other pools Mothers|pool (Mothers|pool ).
(1) the long chain of payout flows distributing the reward to a t
• Cross-pooling miners are in Mpool but also receive a
single miner at each step, e. g., DeepBit (a), BTC Guild, and t
reward from other pools at the same t (Mothers|pool ).
GHash.IO; and (2) the direct payout to miners after receiving We estimated the quantity of miners’ migration as the
the mining reward, e. g. SlushPool (b) and Eligius. percentage of the total value for each miner group. We report
After mid-2015, most mining pools tended to collect the the percentage of value rather than the number of addresses
mining rewards in their wallet and to distribute the reward because it gives more weight to miners that have a high
to miners regularly (i. e. daily). We also observed two payout contribution to the pool and therefore the measure is more
patterns (1) the chain of payout flow distributing the reward to robust regarding small or occasional miners.
includes input transactions from outside the flow. The algorithm
will make a false classification when a miner simply forwards
the reward using a transaction without further inputs. In this
New Dropout case, the algorithm will calculate that the transaction purity is
Same before Same after 1, assign it as txinter , and follow all outputs from txinter .out.
To detect migration patterns, we also assume that miner
addresses are reused. We are aware, however, that miners can
Hopping in Hopping out
always generate new addresses. As a result, our percentage of
new and dropout miners is an upper bound. In our data, each
Cross pooling
miner address received a reward from a pool on average 18.1
[15.4, 21.4] times. We summarize the miners’ migration flows
into net gain or loss metrics to reduce the impact of miners
who change their addresses within the same month.
Although the basic address clustering method [21] is an
effective method to group the addresses that are likely to belong
to the same entity [22], we found that it led to false-positive
clusters. For example, the method may group different miners
Fig. 3. The miners’ migration flow model of pool at time interval t. t − 1
(t + 1) is the time interval before (resp. after) t. Mnew (Mdrop ) is the list in the same cluster because they used the same exchanges or
of miners not in any pool at t − 1 (resp. is not found in any mining pool at mixing services. We expect that miners would participate in
t + 1). The union of the list of miners from other pools is Mothers . 1–2 pools at a time. We report the average number of mining
pools that miners participated as the average weighted by their
total reward. During the first halving (second halving) period,
Definition 5. The percentage of the total value of miners (X)
t we found that miners receive the reward from 3.92 [3.12,
is the total value of Mpool associated with Mx , where x is a
4.74] (3.06 [2.47, 3.68]) different pools per month compared
set of miners from miner groups. We defined this measure as:
to 1.46 [1.39, 1.56] (1.30 [1.24, 1.37]) pools per address.
The percentage of cross-pooling per month using address
P
m∈M t ∩Mx m.value
t
X(Mpool , Mx ) = P pool (2) clustering is on the average of 25.9% [24.2%, 27.6%] (31.6%
m∈Mpoolt m.value
[29.7%, 33.7%]) higher than using solely miner addresses, with
For example, the percentage of hopping in (hopping pairwise comparison for the same pool and month. Therefore,
out) miners is annotated as X(Mpool t t−1
, Mothers|pool ) (resp. we decided to use miner addresses to avoid adding errors from
X(M t
,M t+1
)). the address clustering to the results.
pool others|pool
For each mining pool, we obtained the monthly percentage B. Miners addresses association with known entities
of miners’ migration for each miner group. To understand
Since there is no ground truth to evaluate the identity
the flow of miners in a mining pool, we summarized miners’
of individual miners, we indirectly validated whether our
migration flows into a net gain or loss metric for the pool from
approach can identify individual miners correctly. We posited
different flow types with (1) New and dropout flow: the percent
the assumption that miners should receive a mining reward
difference between new and dropout miners; (2) Hopping in
(input address) from the mining pool and keep it in their wallet
and out flow: the percent difference between hopping in and
(miner address) before spending it (output address) on services
hopping out miners; and (3) Cross-pooling: the percentage of
(e. g. exchange, mixer, or marketplace). We used a known entity
cross-pooling miners.
dataset from WalletExplorer.com with entity type classification
Additionally, we calculated the percentage of cross miners’
from Zola et al. [23]. We report the percentage of addresses
rewards from the pool as the total reward that cross miners
and Bitcoin values for each entity type in Table II. We studied
received from the pool divided by the total reward that cross
the payout flows that spent between 2013-01-01 and 2016-12-
miners received from all mining pools. A higher percentage
32 because the website stopped updating more known entities
implies that miners dedicated more computational resources to
from 2016 [24]. In summary, we found:
this particular pool. It also indicates the attractiveness of the
pool compared to other pools at the same time interval. 1) Miners detected from our algorithm mostly cannot be
associated with any known address (“unknown” type in
IV. D ISCUSSION ON THE P OOL H OPPING D ETECTION Table II) (84.8%) as well as input and output address
In this section, we discuss the validity and quality of our (96.1% and 91.5% resp.). However, when we measured
approach and compare it to related work. All confidence the total value for each entity type, we found that
intervals are 95% bootstrap CIs. 84.8% of miner rewards are from unknown addresses,
compared to 44.0% for input and 68.6% for output
A. Assumptions and limitations of the approach addresses. Therefore, we show that our algorithm can
Our approach rests on the assumption that individual miners detect individual miners because they are largely not
who receive a reward share will spend it in a transaction that associated with any known Bitcoin entities.
TABLE II A. Pools’ competition, fees and pool hopping
T HE PERCENTAGE OF ADDRESSES AND TOTAL B ITCOIN VALUES
ASSOCIATED WITH KNOWN ENTITIES FROM 2013-01-01 TO 2016-12-31 In the competition to attract miners, payout schemes and pool
fees are major pool characteristics that directly impact miners’
Addresses Total Value
Type
Input Miner Output Input Miner Output
income. We illustrate that fee and payout schemes exhibit the
Unknown 96.1 84.8 91.5 44.0 84.8 68.6 usual economic evolution observed in the competition context in
Mining pool 1.38 0.555 7.43e-2 45.9 6.02 0.371 Fig. 4 (a). Our previous work [26] showed that the Proportional
Exchange 1.42 8.36 4.80 0.35 6.52 18.0
Wallet 0.428 4.38 2.67 7.62 2.48 12.6 payout scheme was used at the beginning of Bitcoin. Over time,
Marketplace 0.665 1.19 0.567 2.14 0.162 0.398 mining pools switched progressively to PPS and PPLNS payout
Gambling 3.46e-2 0.609 0.347 1.86e-4 3.25e-2 5.07e-2
Mixer 1.15e-3 5.51e-2 3.69e-2 1.16e-5 6.57e-3 3.57e-2 schemes. As PPS and PPLNS are more robust to pool hopping
Lending 5.03e-3 4.54e-2 2.86e-2 3.68e-5 1.50e-3 1.51e-3 than the proportional reward [27], these payout schemes are
more attractive for pool managers. Our empirical result is in
line with prior work as Proportional payout scheme disappeared
2) Miners tend to receive a reward from known mining pool in 2013. After that, PPS and PPLNS became the dominant
addresses (45.9% of the total value) followed by unknown payout schemes among the large pools.
addresses (44%). This result aligns with our assumption A second explanation for the growing use of PPS and PPLNS
that miners should receive the money from txinter of relies on their different but complementary risk/return ratios.
the mining pool. For unknown addresses, mining pools PPS pools pay miners in proportion to their contribution to the
may use external addresses that are undetected in the pool and thus provides risk-free, low income. All the risk is
known entity dataset to pay miners. supported by the pool, which needs then to create a reserve
3) Miners spent 68.6% of their total value using unknown of money to be able to pay the miners during ‘bad luck’
output addresses. We also detected that some miners spent periods. In comparison, PPLNS pools pay only those miners
their reward on exchanges (18% of the total value) and who contributed to the last N shares in a given time window.
wallet services (12.6%). This result provides evidence that Miners who contribute but leave the pool before a block has
regular miners convert mining rewards to fiat currencies been mined might not get any reward. Therefore, PPLNS lefts
or deposit them to their Bitcoin wallets. all the risk to the miners, and the expected reward variance
is higher compared to PPS [27]1 . These two payout schemes
Our approach differs from Xia et al.’s work [10] as we do can be viewed then as two different financial assets. For this
not filter out known entities after we extract the payout flow. We purpose, it is noticeable that the fees applied to these two
have three reasons for this choice: (1) Xia et al. focus on only financial assets follow the classical two-parameter financial
a 1-month time frame. The WalletExplorer dataset, however, asset pricing model [28]. In financial markets, risky assets
includes 30,167,518 labeled addresses. It is computationally must have a higher expected return to be attractive. In the case
expensive to linearly scan for addresses in every transaction; of Bitcoin mining, Fig. 4 (a) is consistent with this scheme
(2) WalletExplorer does not update new entity labels after as the more risky asset (PPLNS) is likely to have a lower fee
2016 [24]. Hence, it cannot be applied to recent reward payout (≈0%) compared to the risk-free one (PPS, ≈2-3%).
flows; and (3) Our measurements based on the percentage of Pool fees are used as a competitive advantage for mining
value are tolerant to possible misclassification of miners. pools. Within each payout scheme type, new pools tend to apply
a lower fee than the incumbents. For instance, DeepBit applied
a relatively high fee for PPS (10%) as the first dominant mining
V. E CONOMIC A NALYSIS OF P OOL H OPPING B EHAVIOR
pool between 2011–2012. In 2012, mining pools, such as BTC
Guild or OzCoin, applied lower PPS fees (5%) to attract new
We calculated miners’ migration statistics for 15 pools that miners (Fig. 4 (b)) and hopping-in miners (Fig. 4 (c)), probably
adopted three main payout schemes: Proportional, Pay-Per- from DeepBit which had more hopping-out miners in the same
Share (PPS), and Pay-Per-Last-N-Shares (PPLNS). We explain period. We see the same pattern in 2013 when F2Pool (4%,
miners’ behavior in the Bitcoin network based on rational named Discus Fish at the time) or 50BTC appeared (3%), then
behavior in economic theory and provide visual evidence in 2014 with AntPool (2.5%) or BTCC (2%), and in 2016
that some characteristics of mining pools (e. g. market shares, with BTC.com (1.5%). This competition led to a decrease in
payout schemes, pool fees) affect miners’ mobility. the average PPS fees implemented by pools which stabilized
Bitcoin mining has become an industry where miners gather around 2% from 2016. The same dynamics occurred for PPLNS
into pools to maximize their investment in mining devices [25].
1 Following Rosenfeld’s article [27], the expected rewards of PPS and PPLNS
Choosing a pool becomes a strategic economic decision for
are both equal to (1 − f )pB, where B is the block reward, f is pool fee, and
miners as a pool’s characteristics greatly affect a miner’s p is the probability of a share to be a valid one. However, as we showed in this
income. First, we focus on the competition between pools paper, the PPLNS fee is lower than the PPS fee. PPLNS tend then to generate,
based on payout schemes and transaction fees. Then, we in the long run, higher income than PPS. Moreover, PPLNS reward variance
pB 2
investigate market entry and the expected revenue of new can be approximated following [27] by N
, using previous notations and N
is the total number of share in a round, while each share sends to the pool in
miners. Finally, we analyze miners’ cross-pooling behavior the PPS scheme is rewarded by a fixed amount, leading to no or insignificant
that helps to diversify income and risks. reward variance.
(a) Market share, payout scheme and pool fee (b) New and dropout flow (c) Hopping in and out flow
Proportional & Score (only SlushPool) Proportional & Score (only SlushPool) Proportional & Score (only SlushPool)
DeepBit ▲ DeepBit ▲ DeepBit ▲
2012 2013 2014 2015 2016 2017 2018 2019 2020 2012 2013 2014 2015 2016 2017 2018 2019 2020 2012 2013 2014 2015 2016 2017 2018 2019 2020
2012 2013 2014 2015 2016 2017 2018 2019 2020 2012 2013 2014 2015 2016 2017 2018 2019 2020 2012 2013 2014 2015 2016 2017 2018 2019 2020
2012 2013 2014 2015 2016 2017 2018 2019 2020 2012 2013 2014 2015 2016 2017 2018 2019 2020 2012 2013 2014 2015 2016 2017 2018 2019 2020
Market share (%) Pool fee (%) Difference (%) Miner gain vs. loss Difference (%) Miner hop in in vs. hop out
10 20 30 40 0 1 2 3 4 5 6 10 20 40 60 80 100 NEW > DROPOUT DROPOUT > IN 10 20 30 40 50 60 IN > OUT OUT > IN
Fig. 4. Mining pool characteristics and miners’ migration statistics over time. We divided into three main payout schemes: Proportional (and Score only for
Slush Pool), Pay-Per-Share (PPS), and Pay-Per-Last-N-Shares (PPLNS). Each row in a graph represents the mining pool and the shape encodes whether the
pool kept transaction fees for itself (squared ) or shared with its miners (triangle N). We separated the same mining pool in different rows and facets but
provided the shadow colors (blue in a, grey in b and c) to highlight the continuity of the pool with different payout schemes and transaction fee policies. (a)
Market shares and payout schemes. The market share of the mining pool is represented as the size of the circle for each month. Pool fees are encoded as the
color scale. (b) New and dropout flow. The size of the circle represents the absolute difference between new and dropout miners. The positive (or negative)
flow of new miners are encoded as green (or red) color. (c) Hopping in and out flow. The size of the circle represents the absolute difference between hopping
in and hopping out miners. The color indicates whether hopping in miners are more than hopping out miners (green) or vice versa (red). Three grey vertical
lines in each chart indicate halving days on 2012-11-28, 2016-07-09, and 2020-05-11.
pools. While BTC Guild has applied a 3% fee since 2011, Bitcoin experienced 8 local high valuation periods before
50BTC created in 2012 applied a lower fee (2.5%). This trend 2020: 06/2011 ($19), 04/2013 ($130), 12/2013–03/2014 ($800),
got stronger with GHash.io (0%) in 2013 or AntPool (0%) in 06/2014 ($600), 12/2015 ($420), 06/2016 ($630), 05–12/2017
2014. When these pools appeared with lower fees, new miners ($15,000) and 06–12/2019 ($10,500) [29]. These periods are
were attracted by those pools (Fig. 4 (b)) and hopped out from characterized by many new miners entering pools and even
older pools (Fig. 4 (c)). pool creations. Bitcoin mining became an economic investment
Summary: The market share of mining pools is a confounding as demonstrated in Prat and Walter [25] and acquisition of
factor with miner flows. Mining pools that gain market share mining hardware tends to increase when its expected return
tend to attract new and hopping-in miners. Miners drop out and rises. The corollary is that miners exit the market when Bitcoin
hop-out from pools that lose market share. This feedback loop value decreases. Fig. 4 (b) shows indeed large miner dropout
probably explains the domination of a few mining pools at a close to halving days, which correspond to periods of sharp
time. The main driver of pool-hoping we observe in this article decrease in mining revenue.
is the gap between pools fee for a given reward scheme. New
successful pools adopted lower fees to attract miners while the C. Bitcoin values, income optimization and cross-pooling
older ones declined or stopped operating if they did not follow Cross-pooling allows to diversify risks and optimize income.
this trend. After 2015, pool fees tended to converge for eachFig. 5 (c) provides interesting insights into cross-pooling prac-
reward scheme, and pool-hoping decreased. tice. Three periods of intense cross-pooling can be observed:
04/2013–11/2014, 06/2014–12/2014, and 11/2016–01/2017.
B. Bitcoin value and mining market entry These three periods exhibited an economic rationale where
Another evidence for the economic rationale of mining miners seem to diversify their risk between risk-free pools
activities comes from the incoming flow of miners during (PPS) and more risky ones (PPLNS).
bitcoin’s high valuation periods. Fig. 4 (b) provides infor- In particular, the first two periods corresponded to a similar
mation about the new miners joining Bitcoin mining pools. pattern, which is the rise of cross-pooling from PPS pools to-
a b c to extract payout flows with different payout patterns. We also
DeepBit
propose the miner’s migration flow to measure the mobility of
Eligius
BTC Guild
miners who enter, exit, hop, or cross between mining pools.
BitMinter Based on these algorithms and metrics, we provide an
OzCoin
SlushPool
analysis of miners’ migration among 15 mining pools across
EclipseMC Bitcoin’s history. The visualizations allow us to highlight
50BTC
regular patterns of miners’ entry, hopping, and cross-pooling
Polmine
F2Pool
behaviors. These regularities are consistent with classical
GHash.IO economic behaviors under competition. Our work provides new
AntPool
empirical evidence that miners and mining pools behave as
BTCC Pool
BTC.com
typical economic agents, seeking to maximize their profits. We
Poolin show in particular that pools’ competition is based especially
2012 2013 2014 2015 2016 2017 2018 2019 2020
on pool fee and payout schemes. The most popular current
Avg % miner reward from the pool % cross-pooling miners
payout schemes, namely Pay-per-Share (PPS) and Pay-per-Last-
20 40 60 80
0 20 40 60 80 100 N-Shares (PPLNS), can be seen as two different financial assets
from a miner’s viewpoint: a free-risk scheme (PPS) and a more
Fig. 5. Cross-pooling miners. Each row represents the percentage of cross- risky one (PPLNS). Consistent with the economic rationale,
pooling for each mining pool over time. The percentage of reward that cross-
pooling miners obtained from the pool is encoded as the color scale. Three the more risky one is associated with more expected returns
selected periods that we focused on are highlighted in the grey background. due to the lower pool fee associated with PPLNS. Moreover,
miners tend to perform cross-pooling with pools applying
different reward schemes seemingly for risk diversification and
ward PPLNS ones. The first period (04–11/2014) corresponded income optimization. This is especially the case during high
to the switch from PPS toward PPLNS scheme for BTC Guild. Bitcoin value periods where expected income from mining
BTC Guild applied PPS until February 2013, then proposed gets higher, in particular for the PPLNS payout scheme. These
PPS and PPLNS until March 2014, and after offered uniquely periods are then associated with important levels of new miner
PPLNS. Before that time, cross-pooling was very low. It seems entries and cross-pooling from PPS pools toward PPLNS
that the availability of PPLNS reward has attracted miners ones. Additionally, pool fees are major drivers of the pool’s
operating on pools using PPS (F2Pool or Eligius) or Score competition. We show that new pools tend to apply a lower
(SlushPool) as shown in Fig. 6 (a). fee with respect to incumbents. It leads to a decrease in the
The second period (06–12/2014) followed a similar pattern, average pool’s fee along time and is correlated with important
except for AntPool (a newly created pool). Before the creation pool hopping decisions toward new pools. Our result provides
of AntPool, cross-pooling was limited. Once AntPool launched an insight into the dynamics of mining pools, which is crucial
the PPLNS payout scheme (in addition to PPS), cross-pooling for improving regulations and policies in cryptocurrencies.
rose considerably. Fig. 6 (b) shows that cross-pooling occurred The data obtained from our approach provides rich and
between the main PPS (Eligius and F2Pool) and PPLNS pools detailed information on miners’ migration among pools. The
(AntPool, BTC Guild and GHash.IO). data is publicly available at [11]. For future research, we are
The last period of intense cross-pooling (11/2016–01/2017) planning to develop a quantitative model to explain miners’
followed the same rationale but the timing was different. In decisions and dynamics of mining pool competitions. In
this period, neither the creation nor the switch toward a PPLNS particular, the econometric analysis might be useful to check
pool led to cross-pooling. However, the apparition of a large if the trends highlighted in this empirical work still hold when
PPS pool (BTCC Pool) generated a lot of cross-pooling with controlling for confounding variables. On the other hand, we
an already existing PPLNS pool (AntPool). Fig. 6 (c) shows are developing a visual analytics system to explore and monitor
that a large flow of cross-pooling existed between AntPool and Bitcoin’s mining activities in multiple coordinated views. The
BTCC Pool, and also other PPS pools (BTC.com or F2Pool). tool will allow mining pool managers, individual miners, and
In all the cases reviewed above, we demonstrated that cross- Bitcoin data analysts to analyze the miner’s migration flow
pooling is used to diversify miners’ risk and leads them to in granular details, and to relate the information to pool
combine mining in risk-free pools (PPS) and more risky ones characteristics and other relevant Bitcoin indicators.
(PPLNS). In this respect, individual miners seem to act as a
portfolio manager who optimizes their income concerning the
ACKNOWLEDGMENT
risk associated with each type of asset.
We thank Antoine Durand, Lorenzo Candeago, Suprawee
VI. C ONCLUSION AND F UTURE W ORK Mekrungruangkul, Lucas Khornelord, Kahlifa Toumi, and
We contribute a new approach to extract reward payout Kalpana Singh for their valuable feedback. We also express
flows of mining pools and to detect individual miners from our gratitude toward Malte Möser who maintains BlockSci
the payout flow. We provide rationale and evidence that our and Aleš Janda (WalletExplorer), Marc Jourdan, and Francesco
approach based on the general payout flow model can be used Zola for providing the known entity dataset.
(a) March 2013 - November 2013 (b) June 2014 - December 2014 (c) November 2016 - February 2017
BTC Guild F2Pool AntPool
50BTC GHash.IO F2Pool
GHash.IO BTC Guild BTCC Pool
SlushPool AntPool SlushPool
Eligius Eligius BTC.com
BitMinter SlushPool BitMinter
EclipseMC BTCC Pool Eligius
OzCoin Polmine 0k 20k 40k
AntPool
F2Pool
BTCC Pool
SlushPool
BTC.com
BitMinter
Eligius
F2Pool BitMinter Total Reward
DeepBit EclipseMC
Miner type
Polmine OzCoin same cross Cross pool
Eligius
GHash.IO
SlushPool
BitMinter
EclipseMC
OzCoin
F2Pool
DeepBit
Polmine
% Cross pooling
Total Reward 0k 100k 200k
F2Pool
BTC Guild
Eligius
50BTC
GHash.IO
AntPool
SlushPool
BTCC Pool
Polmine
BitMinter
EclipseMC
OzCoin
Total Reward 0 10 20 30
Cross pool
Cross pool
Fig. 6. Cross-pooling among mining pools during three periods: (a) March–November 2013, (b) June–December 2014, and (c) November 2016–February 2017.
The stacked bar chart shows the total reward distributed from each mining pool during the period as a proxy for the pool size. Mining pools are sorted from
the highest to the lowest value. Each bar is separated by the total amount of non-cross-pooling miners (in blue) and cross-pooling miners (in orange). The
heatmap shows the percentage of the total cross-pooling miners from mining pools on the y-axis to other pools on the x-axis.