Pool Hopping

Pool hopping is a strategy in which a miner directs hashrate at a pool only during the periods when each submitted share is worth the most, then withdraws the moment expected value drops. It is not a hardware exploit but an economic one: the hopper profits at the direct expense of the pool's loyal miners by timing entry and exit around the pool's reward-accounting scheme. Understanding it is worth the detour even today, because pool hopping is the reason modern payout schemes look the way they do.

Why proportional pools were vulnerable

The attack targets the old proportional reward scheme, in which each found block's reward is split among miners according to their fraction of the shares submitted during that round — the stretch of time since the previous block. The flaw is baked into the arithmetic: early in a round, few shares exist, so each new share represents a large fraction of whatever reward eventually materializes. As a round drags on and shares pile up, each additional share's expected slice shrinks. A share submitted ten minutes into a round is mathematically worth more than an identical share submitted three hours in — even though both represent the same work and the same contribution to finding the block. A hopper exploits this by mining aggressively during young, share-poor rounds and leaving for another pool (or a fixed-payout scheme) once the round grows long. Classic analysis of pooled-mining reward systems showed a disciplined hopper could capture on the order of 28% more than its fair contribution — every extra satoshi coming out of the pockets of the miners who stayed.

The defenses that became the standard

The industry's answer was not better policing but better mathematics — reward schemes with no timing structure to exploit. PPLNS (Pay Per Last N Shares) prices each block's reward over a long trailing window of shares rather than a single round, so a share's value no longer depends on when in a round it lands; a hopper who leaves early simply forfeits the tail of payouts its shares would have earned. PPS and FPPS go further, paying a fixed expected value per share regardless of when blocks are found — the pool absorbs all variance, and timing becomes irrelevant by construction. This is why essentially no significant Bitcoin pool still runs a pure proportional model: the scheme was not unfashionable, it was broken.

What the episode still teaches

The term occasionally resurfaces in modern contexts with a different, benign meaning — profit-switching between pools or coins based on posted rates, which exploits no one because contemporary payout schemes are timing-neutral. The distinction is worth keeping: classic pool hopping extracted value from other miners inside a flawed scheme; profit-switching just shops between fairly priced offers. One was fixed by better math, the other is simply a market working.

Pool hopping is a clean case study in mechanism design under adversarial conditions — the same discipline that governs Bitcoin itself. Any payout formula that makes identical work worth different amounts at different times will be arbitraged, automatically and without mercy, and no appeal to fairness will stop it; only incentive-compatible accounting does. For today's miner the practical residue is knowing how to read a pool's scheme: understand your pool fee, understand whether you or the pool carries the luck (see pool luck), and understand that a PPLNS pool rewards loyalty while an FPPS pool sells you insurance. When choosing a mining pool, the payout scheme is not fine print — it is the contract, and pool hopping is the historical proof that the contract's math gets audited by adversaries whether or not it was designed for that.