What Is the Minimum Acceptable Hash Output Size for a Secure Modern Cryptocurrency?

Most modern, secure cryptocurrencies, including Bitcoin and Ethereum, use hash functions with an output size of at least 256 bits. While a 128-bit hash is technically possible, it is generally considered insufficient for long-term security due to the Birthday Paradox.

A 256-bit hash provides an effective security level of 128 bits against collision attacks, which is currently the industry standard.

How Does SHA-256’s Fixed Output Size Contribute to the Security of Cryptocurrency Transactions?
What Is the Minimum Recommended Output Size for a Secure Cryptographic Hash Function Today?
How Many Hexadecimal Characters Are Required to Represent a 256-Bit Hash?
What Is a Hash Collision and Why Is a 256-Bit Output Size Considered Resistant to It?
How Does a Change in One Bit of Input Affect the Hash Output?
How Does the Size of the Hash Output (E.g. SHA-256) Relate to the Nonce?
Why Is the 2^128 Security Level of SHA-256 Considered Adequate against Current Computing Power?
What Is the Effective Security Strength of SHA-256 against a Collision Attack?

Glossar