Attackers Could Cripple Bitcoin by Targeting Five Hosting Providers, Cambridge Study Finds
Image: CoinDesk

Attackers Could Cripple Bitcoin by Targeting Five Hosting Providers, Cambridge Study Finds

14 March, 2026.Crypto.2 sources

Key Takeaways

  • Cambridge study spanning 11 years finds Bitcoin's physical infrastructure resilient.
  • Bitcoin could survive 72% of global submarine cables being cut.
  • A targeted attack on five hosting providers could cripple Bitcoin.

Threat Landscape Analysis

Particularly when coordinated by state actors seeking to disrupt the cryptocurrency through deliberate severing of critical cable routes.

Image from @coindesk
@coindesk@coindesk

The research distinguishes between random failures that Bitcoin can easily survive and coordinated attacks that pose credible risks.

The study maps these different threat scenarios, concluding that natural disasters pose minimal danger to Bitcoin's survival.

Coordinated state-level actions could potentially cripple the network by targeting specific infrastructure points.

Resilience Evolution

The study tracks Bitcoin's resilience evolution over time, revealing a non-linear trajectory rather than steady improvement.

Bitcoin demonstrated highest resilience during 2014-2017 when the network maintained strong geographic diversity.

Image from CoinDesk
CoinDeskCoinDesk

The critical failure threshold reached 0.90-0.92 during this early period of optimal distribution.

Resilience sharply declined between 2018-2021 as rapid network expansion led to geographic concentration.

The network hit its lowest point of 0.72 in 2021 during peak mining concentration in East Asia.

The 2021 China mining ban forced redistribution of mining operations, partially restoring resilience to 0.88 in 2022.

The network has since settled at 0.78 in 2025, indicating persistent vulnerabilities despite improvements.

TOR Paradox

By 2025, 64% of Bitcoin nodes utilize TOR, making their physical locations unobservable.

This inability to observe node locations was assumed to potentially hide fragility, but researchers discovered the opposite.

TOR relay infrastructure is heavily concentrated in Germany, France, and the Netherlands.

These countries have extensive submarine cable and land border connectivity.

This concentration actually creates a compound problem for attackers, as these countries are among the most difficult to disconnect.

The study consistently showed TOR adding between 0.02 and 0.10 to the critical failure threshold.

This demonstrates adaptive self-organization that has inadvertently strengthened the network's physical resilience.

Geopolitical Context

The study gains particular urgency given current geopolitical tensions in the Middle East.

The Strait of Hormuz is effectively closed and a regional war is disrupting infrastructure across the region.

Image from CoinDesk
CoinDeskCoinDesk

This real-world context transforms theoretical concerns about submarine cable damage into immediate practical considerations.

The research suggests Bitcoin would likely remain unaffected by general infrastructure disruptions.

Unless attackers deliberately target specific cables and hosting providers that matter most to the network.

The timing coincides with growing concerns about digital sovereignty and vulnerability of critical digital infrastructure.

State-sponsored attacks on digital infrastructure are becoming a major concern for policymakers and investors.

Activity vs Value

The XRP Ledger exemplifies this trend with daily payments surging to 2.7 million.

Image from @coindesk
@coindesk@coindesk

AMM pools exploded to 27,000, even as XRP's price remains 26% below its late-2025 high.

Much of this growth is driven by Ripple's RLUSD stablecoin and tokenized assets.

These use XRP briefly as a bridge currency, boosting transactions without creating lasting demand.

Despite XRP's $84 billion market value, its DeFi footprint and DEX volumes remain relatively small.

The ledger's $461 million in tokenized real-world assets suggest potential for longer-term tokenization growth.

This highlights how network utility and token economics can develop along different trajectories.

Resilience Assessment

The Cambridge study provides both reassurance and warning about Bitcoin's resilience capabilities.

The network demonstrates remarkable adaptability through mechanisms like TOR adoption.

Geographic redistribution following regulatory actions shows the network's flexibility.

However, it remains vulnerable to coordinated state-level attacks targeting specific infrastructure.

Bitcoin's security isn't monolithic - it excels at surviving random failures and natural disasters.

The network faces significant challenges with sophisticated, targeted attacks by determined adversaries.

This nuanced understanding is crucial for exchanges, miners, and investors.

They must assess both the network's impressive resilience and its real vulnerabilities in an unstable digital landscape.

More on Crypto