Proof of work and proof of stake

The problem both solve is the same: if anyone can add a block, anyone can add a fraudulent one. The answer is to make adding a block cost something, so that attacking the network costs more than it earns.

Proof of work

Miners compete to find a number that, combined with the block, produces a hash below a target. There is no shortcut; it is guessing, billions of times a second. The first to find one publishes the block and collects the reward. The difficulty adjusts so that blocks keep arriving at a steady rate as more or less computing power joins.

To rewrite history you would have to redo that work faster than the whole network produces new blocks. The security is bought with electricity, from outside the system.

Strengths: simple, proven since 2009, and the cost is external and verifiable by anyone with an electricity meter.
Weaknesses: large energy consumption, industrial concentration around cheap power, and specialised hardware.

Proof of stake

Validators lock up the network's own token. The protocol selects one to propose each block, roughly in proportion to stake, and others attest that it is valid. A validator that signs something invalid loses part of its stake, which is called slashing.

To attack the network you would need to control a large share of the staked tokens, and using that control to cheat destroys the value of the very tokens you staked. The security is bought with capital, from inside the system.

Strengths: more than 99 percent less energy, no specialised hardware, faster finality.
Weaknesses: wealth compounds because stake earns stake, staking concentrates with a few large operators, and the security depends on the token having value.

How to think about the choice

It is not a settled technical question with a right answer. Proof of work has a longer record and an external, physical cost. Proof of stake is dramatically more efficient and has now secured a very large network for years without failure.

Bitcoin will not change, for reasons that are as much about the identity of the network as about engineering. Ethereum changed in 2022 and nothing broke. Both facts are worth holding at once.