Mining

Mining is the process of validating blockchain transactions and adding them to the ledger, usually by solving computational problems defined by the network. Miners compete to produce the next accepted block and may receive a reward for successful validation. The security model depends on the network’s rules and the integrity of the participants.

Expanded Definition

Mining is the process by which a blockchain network validates pending transactions, groups them into blocks, and appends those blocks to the ledger according to a consensus mechanism. In proof-of-work systems, miners compete by expending computation to satisfy the network’s difficulty target, while other designs use different validation rules and participation models. The term is often used loosely, but in practice it refers to the network’s block production function, not to every form of transaction processing or node operation.

Definitions vary across vendors and protocols because some networks retain classic proof-of-work mining while others use staking, delegated validation, or committee-based finality. For that reason, practitioners should distinguish mining as a consensus-specific activity from broader ledger maintenance. Authoritative security guidance such as the NIST Cybersecurity Framework 2.0 is useful for framing integrity, resilience, and recovery expectations around the supporting infrastructure, even when it does not define mining itself.

In NHI and IAM discussions, mining sometimes enters the conversation indirectly when blockchain systems are used for identity attestations, key management, or audit trails. The most common misapplication is treating any distributed validation process as mining, which occurs when teams ignore the protocol-specific consensus rules that determine who can write the next block.

Examples and Use Cases

Implementing mining rigorously often introduces significant energy, latency, and operational overhead, requiring organisations to weigh ledger integrity and censorship resistance against infrastructure cost and environmental impact.

• A public proof-of-work network uses miners to validate transactions and produce the next block under a difficulty-adjusted consensus rule.
• A blockchain-based audit system records administrative events, but only the underlying consensus participants perform mining or equivalent block production.
• An enterprise pilot evaluates whether mined blocks can support tamper-evident records for NHI lifecycle events, while still relying on conventional controls for secret storage and access governance, as described in the Ultimate Guide to NHIs.
• A compliance team compares blockchain validation models with NIST Cybersecurity Framework 2.0 categories to understand how consensus infrastructure supports integrity monitoring.
• A protocol transition replaces proof-of-work mining with another consensus mechanism, changing who validates blocks and how rewards or finality are achieved.

In operational terms, mining is only meaningful when the network explicitly defines a competitive block-production process. For teams assessing NHI-adjacent blockchain systems, the key question is whether the ledger’s trust model depends on computational competition, validator selection, or some hybrid design.

Why It Matters in NHI Security

Mining matters to NHI security because blockchain systems are sometimes proposed as identity registries, key provenance stores, or immutable audit layers for service accounts and automation. If the consensus mechanism is misunderstood, practitioners may assume stronger assurance than the system actually provides. That can lead to misplaced trust in ledger entries, weak recovery planning, or overreliance on block immutability when the real risk sits in off-chain secrets, wallet controls, or validator governance.

NHIMG research shows that 80% of identity breaches involved compromised non-human identities such as service accounts and API keys, and 97% of NHIs carry excessive privileges. That context matters because blockchain tooling does not eliminate NHI exposure; it only changes where trust and failure concentrate. The Ultimate Guide to NHIs is a useful reference for understanding how lifecycle controls, rotation, and visibility still govern the identities that interact with blockchain infrastructure.

Mining becomes operationally unavoidable after a ledger dispute, a chain reorganization, or an incident where a supposedly tamper-evident record is challenged and the organisation must explain who could write blocks, under what rules, and with what assurance.

Related resources from NHI Mgmt Group

• When does AI-driven role mining become a risk instead of a benefit?
• How can security teams tell if role mining is actually improving governance?
• How should security teams use role mining without over-trusting the results?
• Why does role mining matter when organisations already have RBAC?