TL;DR: Bitcoin mining pool competition has become increasingly concentrated since 2015, and newly awarded bitcoin is sent to different destinations, according to Chainalysis. The findings matter because concentration, routing, and control points can change how practitioners think about market resilience, custody, and abuse pathways.
At a glance
What this is: Chainalysis says bitcoin mining pool competition has become more concentrated since 2015, and the destinations for newly awarded bitcoin are part of that market-power story.
Why it matters: For identity and security practitioners, concentration in financial infrastructure matters because it changes where control, custody, and abuse pressure can accumulate, even when the topic is not a classic IAM or NHI issue.
Context
Mining pools are collective operators that aggregate hash power and distribute newly minted bitcoin to participating miners. When a small number of pools shape issuance and routing, the issue is no longer just market structure but operational concentration at a control point in the crypto ecosystem.
For identity and security practitioners, this is a governance problem as much as a market one. Concentrated destinations can create chokepoints for custody, monitoring, and abuse detection, and they are a reminder that financial infrastructure risk often emerges where control and transaction flow are tightly coupled.
Key questions
Q: What breaks when mining pool concentration becomes too high?
A: When a small number of mining pools control a growing share of issuance and routing, the ecosystem becomes more exposed to operational disruption, policy shifts, and dependency risk. The blockchain may still function, but resilience weakens because fewer actors can affect the movement of newly minted bitcoin and the conditions around its distribution.
Q: Why does mining pool concentration matter for ecosystem resilience?
A: Concentration matters because resilience is not only about protocol consensus. It also depends on whether control, routing, and custody are spread across enough independent actors that a failure at one point does not distort the wider market. Concentrated issuance pathways narrow those buffers and raise the impact of disruption.
Q: What are the signs that mining flow is becoming over-concentrated?
A: The clearest signs are a rising share of newly awarded bitcoin moving through a small set of pools and a shrinking diversity of destination paths. When control points consolidate, dependence increases even if overall transaction volume still looks healthy. That is the signal to reassess operational and third-party risk assumptions.
Q: How should teams account for concentration risk in crypto governance?
A: Teams should treat mining-pool concentration as a governance input, not just a market observation. That means incorporating it into resilience reporting, custody oversight, and dependency reviews, especially where a few actors influence a large share of new issuance. Controls should assume control points can narrow over time.
Technical breakdown
Why mining pool concentration matters for flow control
Mining pools sit between individual miners and the blockchain reward stream. They decide how newly awarded bitcoin is distributed, which makes them an infrastructure layer with practical influence over transaction routing and settlement behaviour. As mining competition concentrates, the system becomes less distributed at the operational level even if the blockchain itself remains decentralised. That difference matters because resilience depends not only on protocol design, but also on who can shape real-world flow through large shared service points.
Practical implication: Model mining pools as concentration-sensitive infrastructure and review whether your risk assumptions rely on distribution that no longer exists.
How market power creates operational control points
Market power in mining is not just about who earns block rewards. It is about who can attract miners, retain hashrate, and become a preferred destination for newly issued bitcoin. That creates a practical control point in the lifecycle of freshly minted assets, where routing, liquidity, and custody decisions can become centralised. For security teams, the important question is not whether blockchain consensus still works, but whether surrounding service relationships are creating hidden single points of influence.
Practical implication: Map where ownership, routing, and custody converge so concentration risk is visible before it turns into dependency risk.
Why this is a governance issue, not only a market one
Concentration affects oversight because the more activity is routed through fewer entities, the more the system depends on their operational integrity, transparency, and response behaviour. That does not automatically imply compromise or abuse, but it does mean that failures or manipulation would have broader consequences. In governance terms, the risk is a narrow set of actors shaping flows that many participants assume are broadly distributed. This is a structural control issue, not just a pricing issue.
Practical implication: Treat concentration metrics as governance inputs for resilience, oversight, and third-party risk decisions.
NHI Mgmt Group analysis
Mining pool concentration creates a hidden control layer above the blockchain: the protocol may remain decentralised, but the economic plumbing around block rewards can still become operationally centralised. That distinction matters because concentration shifts where pressure, dependency, and failure can accumulate. Practitioners should therefore assess distribution of control, not just distribution of ledger ownership.
Flow concentration is a resilience signal, not merely a market statistic: when newly awarded bitcoin is routed through fewer destinations, the ecosystem becomes more exposed to operational disruption and ecosystem-wide dependency risk. The point is not that concentration is inherently malicious, but that it narrows the set of actors whose failures would matter. Practitioners should use concentration as a trigger for third-party and custody risk review.
The relevant governance question is who can influence issuance pathways, not only who validates blocks: mining pool power changes the practical geography of control in crypto markets. That creates a broader oversight issue for exchanges, custodians, and risk teams that rely on assumptions of distributed participation. Practitioners should re-evaluate whether their controls are designed for decentralised theory or concentrated operating reality.
Mining-pool market power is a form of ecosystem dependency debt: the more issuance and routing depend on a few pools, the more fragile the surrounding market becomes to disruption, policy shifts, or abuse. This is a useful term for practitioners because it frames concentration as accumulated operational exposure, not abstract economics. Practitioners should track dependency debt as part of resilience governance.
Identity security teams should still notice the control pattern here: whenever a small number of intermediaries shape access to high-value flows, the governance problem begins to resemble privileged access concentration. The domain is crypto market structure, but the lesson transfers to identity programmes: distributed trust assumptions fail when control points consolidate. Practitioners should challenge any model that assumes dispersion where concentration now exists.
What this signals
Mining-pool concentration is a dependency problem as much as a market problem: when issuance and routing narrow around a few actors, the ecosystem inherits fragility that pure protocol theory does not capture. Practitioners should read concentration data as a signal of where resilience may be leaking into third-party dependency.
Flow routing deserves the same scrutiny as asset custody: the destination of newly awarded bitcoin tells you where operational power is accumulating. For governance teams, the question is whether risk reporting still assumes a more distributed market than actually exists.
Crypto market structure can produce identity-like control points even without traditional IAM: the lesson for security leaders is to look for any small set of intermediaries that can shape high-value flows. That pattern should trigger dependency review, not just economics analysis.
For practitioners
- Track concentration as a resilience metric Measure how much newly awarded bitcoin is routed through the largest mining pools and watch for changes that indicate control is narrowing.
- Map custody and routing dependencies Document where mining rewards move after issuance so concentration in destination paths becomes visible in third-party and operational risk reviews.
- Review third-party exposure assumptions Test whether your market, custody, or counterparty assumptions still hold if a few pools become dominant routing points.
- Use concentration data in governance reporting Include mining pool concentration and destination diversity in recurring risk reporting so decision-makers can see when dependency is increasing.
Key takeaways
- Bitcoin mining pool concentration changes more than market share. It shifts where operational control, dependency, and resilience pressure accumulate across the crypto ecosystem.
- The key evidence is not only who mines blocks, but where newly awarded bitcoin is sent afterwards. Routing patterns reveal whether flow is spreading or narrowing around a few actors.
- Practitioners should treat concentration data as a governance signal and revisit custody, third-party, and resilience assumptions whenever control points become less distributed.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
MITRE ATT&CK addresses the attack and risk surface, while NIST CSF 2.0 and CIS Controls v8 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.RM-01 — Risk Management Strategy | Concentration in mining flows is a resilience and risk-governance issue. |
| Recommendation — Incorporate mining concentration into enterprise risk and resilience reporting. | ||
| CIS Controls v8 | CIS-15 — Service Provider Management | Mining pools are external service dependencies that affect control over asset flow. |
| Recommendation — Review third-party dependency exposure where concentrated service providers shape critical flows. | ||
| MITRE ATT&CK | TA0040 — Impact | Concentration increases ecosystem-wide impact if a dominant pool fails or is abused. |
| Recommendation — Map concentration-driven dependencies to likely impact points in your threat model. | ||
Key terms
- Mining Pool: A mining pool is a coordinated group of miners that combines hash power to increase the predictability of reward payouts. In governance terms, it becomes a shared control layer that can influence payout policies, destination wallets, and operational dependencies across participants.
- Block Reward Distribution: Block reward distribution is the process by which newly minted cryptocurrency is allocated after a block is successfully mined. It matters because the routing of those funds reveals where control, custody, and market influence are accumulating in the ecosystem.
- Concentration risk: The risk that too much operational dependence sits with one ICT provider or one tightly linked provider chain. For AI environments, concentration risk matters when the same model supplier, hosting layer, or API backbone underpins multiple business functions and becomes difficult to replace quickly.
- Custody Dependency: Custody dependency is the reliance on a limited set of entities to hold, move, or control valuable assets. It becomes a governance concern when operational concentration means that a disruption or policy change at one provider can affect many downstream participants.
Deepen your knowledge
NHI Mgmt Group covers identity security, NHI governance, and agentic AI through independent research, practitioner guides, and the NHI Foundation Level course. Explore nhimg.org for resources that connect identity governance to the broader security disciplines your programme depends on.
Published by the NHIMG editorial team on July 10, 2026.
Updated on October 11, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org