[kybernetikos]

There's a common misconception that once you have >51% you can do anything. This isn't true. There's plenty of mischief you might get away with (censoring, double spending), but you can't transfer other peoples money without their private key, and you can't change the rules of the protocol. You can probably tank the value of the currency by doing large enough double spends and causing problems, but in PoS importantly you're hurting yourself more than anyone else, while in PoW, you still have a bunch of useful hardware left over after the attack, and with hash power marketplaces you can attack a PoW chain while having more or less no investment in the chain itself.

[everfree]

You can't double-spend across epoch boundaries (~6 minutes) without getting slashed and losing all your stake.

Censoring is more plausible, though of course it still hurts you, as you described.

[polygamous_bat]

I keep hearing "you can't do X without getting slashed". What happens if there is a network partition that lasts for longer than 6 minutes? Which two of the diverging blockchains get to slash the other one and take all their stake?

[everfree]

> What happens if there is a network partition that lasts for longer than 6 minutes?

With less than 2/3 of the total stake active on a single partition, that partition stops finalizing transactions, meaning that the chain explicitly stops guaranteeing that it's canonical.

Notably, slashing cannot result from a partition, only from malicious validator behavior.

> Which two of the diverging blockchains get to slash the other one and take all their stake?

For a partition, which is not a slashable offense, there is no slashing. The minority partition stakers suffer inactivity leak on the majority chain, meaning that they very slowly (at first) start losing their stake until the majority partition has 2/3 stake again. It's not a big penalty like slashing, unless the chain remains in a degenerate state for many hours or days.

On the other hand, a slashing rules offender (attacker) gets slashed on all chain forks. The conflicting signed block from one gets included on all others for a bounty. This means that every staker must vote for only one fork at a time, which means the network can eventually determine which fork is canonical because it was voted for the most.

[hartator]

> double spending

Is not just double sending in one epoch, but unlimited spending of one coin.