Skip to main content

How Cardano works

Blocks, ledger, tokens, programs and upgrades, explained step by step.

Stake pools produce the blocks, a UTXO ledger records who owns what, tokens and smart contracts run on that ledger, and the whole system upgrades through hard forks that the community decides on.

Basics

What is a blockchain?

A blockchain is a ledger that many computers keep in sync without a central operator. Transactions are collected into blocks, each block references the one before it, and every participant can check the whole history for themselves. Changing an old block would break every reference after it, which is what makes the record tamper-evident.

What differs between blockchains is how they decide who writes the next block, how they represent ownership, and how they change their own rules. The rest of this page walks through Cardano's answers to those three questions, and then through the things you can do on top: tokens, programs and running the network yourself.

New to the idea? Start with what Cardano is

Consensus

How does Cardano reach agreement?

Cardano uses Ouroboros, a proof-of-stake protocol. Instead of competing with computing power, participants are chosen to produce blocks in proportion to the ada delegated to them.

dots-with-line

Slots and epochs

Time is divided into slots of one second and epochs of 432,000 slots, five days. For every slot, each stake pool runs a private lottery whose odds match its share of the delegated stake, and any pool that wins becomes a slot leader. On average only one slot in twenty has a leader at all, so a new block appears roughly every 20 seconds and most slots pass without a block. Now and then two pools qualify for the same slot, and only one of their blocks stays in the chain.

chains

Blocks

The slot leader bundles pending transactions into a block of up to about 88 KB under current parameters, signs it and sends it to its peers, who verify every transaction before passing it on. Every block built on top makes a rollback less likely, which is why wallets and exchanges treat a transaction as settled after a handful of blocks. The protocol itself only rules out a rollback once a block is deep enough in the chain, a window of about 36 hours on mainnet set by its security parameters.

proof-of-stake

Why it is secure

Ouroboros was published and peer-reviewed before it was deployed, and its guarantees hold as long as honest participants control the majority of the stake. There is no slashing: a pool that misbehaves earns no rewards, but delegated ada is never at risk.


Ledger

How does Cardano keep track of who owns what?

Cardano uses the extended UTXO model, eUTXO for short. Instead of accounts with running balances, the ledger holds unspent transaction outputs: individual notes of value, each locked to an address. A transaction consumes whole notes as inputs and creates new notes as outputs, and the total in has to equal the total out plus the fee, with any remainder coming back to you as change. The spendable balance your wallet shows is simply the sum of the notes it can unlock. Staking rewards are the one exception: they accumulate in a separate reward account, and withdrawing them into a note is itself a transaction.

Two consequences matter for users. First, everything a transaction will do is fixed when it is built, so your wallet can tell you the exact outcome and fee before you sign. Second, a note can only be spent once, so if two transactions try to spend the same note, only one of them can succeed. The other is rejected as a whole, even if it passed every check when it was built, and nothing is half-applied. Applications design around this by splitting value across many notes or by batching, which is why some Cardano apps process orders in rounds rather than one by one.

The extended part is what makes programs possible: an output can carry data and be locked by a script instead of a key, and the script decides whether a transaction may spend it.

The eUTXO model explained

Transactions

What does a transaction cost, and how long does it take?

A fee is a formula, not an auction: a fixed part plus a per-byte part, both set by protocol parameters. On mainnet, as of 2026, that is 155,381 lovelace plus 44 lovelace per byte, so a typical transfer of a few hundred bytes costs around 0.17 ada. Like every protocol parameter, these values can change through governance. Fees do not rise when the network is busy, transactions simply wait a little longer.

Every output also has to hold a minimum amount of ada, so that the ledger does not fill up with dust. The minimum depends on the size of the output: roughly one ada for a plain ada-only output, more when it carries tokens or data. That ada is not a fee: it stays in the output and comes back when the output is spent. Registering a stake key takes a refundable deposit, currently 2 ada, for the same reason.

A block is produced roughly every 20 seconds, so a transaction usually appears on the chain within a minute. Wallets and exchanges then wait for more blocks on top before treating it as settled, typically a few minutes for everyday use and longer for large transfers.

Fee structure in the docs

Tokens

How are tokens created?

Tokens on Cardano are native: the ledger tracks them directly, much as it tracks ada, so no smart contract is needed to create, send or hold them. A token is defined by a minting policy, a small script or key that says who may create or destroy it. Once minted, tokens travel inside ordinary transaction outputs, alongside ada, and a single transaction can carry many different assets. Ada keeps its special roles: only ada pays fees and deposits, only ada is paid out as staking rewards, and every output that carries tokens has to hold some ada as well.

An NFT is simply a token minted with a quantity of one under a policy that will never mint that asset again. What the token stands for, an image or a name for example, is usually described by metadata, and standards such as CIP-25 and CIP-68 define how wallets and marketplaces read it.

Native tokens in the docs

Smart contracts

How do smart contracts run?

A smart contract on Cardano is a validator: a script that checks a transaction and answers one question, valid or not. Most often it guards outputs and decides whether a transaction may spend them, but scripts also govern minting and burning tokens, withdrawing rewards, certificates and, since the Chang upgrade, governance votes and proposals. The transaction itself is built by the user's wallet or the app, including every input, output and piece of data the script needs. The script cannot call other services or change its mind later, which keeps outcomes predictable.

Scripts are written in languages such as Aiken and Plinth and compiled to Plutus Core, the language the node executes. Their execution is paid for with a separate budget of memory and steps that is priced in advance, so the cost is known before submission, exactly like the base fee. The app or wallet normally evaluates a script before asking for a signature, so failures on chain are rare. If a script still fails there, a small collateral covers the network's work, which is why wallets that connect to DApps set aside some ada for that purpose.

Smart contracts explained

Network

Who runs the network?

Anyone can run a Cardano node. Stake pools are nodes that produce blocks, operated by individuals, companies and communities. Delegating ada to a pool increases its chance of being chosen and earns you a share of its rewards, without moving your ada anywhere. Rewards are paid every epoch from newly released reserve ada and from transaction fees.

The protocol rewards pools most when they stay below a saturation point, which discourages any single pool from growing too large, and pool operators pledge some of their own ada as a commitment. Close to three thousand pools are registered, and roughly a thousand produce blocks in a given epoch.

New nodes catch up with the chain either by replaying its full history or by starting from a signed snapshot produced by Mithril, a network of signers backed by the same stake distribution. If you would rather help produce blocks than delegate, you can run a stake pool yourself.

Delegate your ada

Upgrades

How does Cardano change?

Cardano upgrades through hard forks, but without the chain splits the term usually implies. The hard fork combinator lets a single node understand every era of the protocol, so the switch from one set of rules to the next happens at an epoch boundary that everyone knows in advance. Each era added something: staking, native tokens, smart contracts, cheaper scripts, and on-chain governance.

Since 2025 a hard fork is itself a governance action: it is proposed on chain and enacted only after the constitutional committee, delegated representatives and stake pool operators have each approved it. Protocol parameters such as fees and block size change through the same on-chain process, though which of the three bodies has to vote depends on the type of action. See how governance works.

Every upgrade so far

Terminology

What do these words mean?

The words this page uses, each linked to its glossary entry.

  • UTXO: an unspent output, one note of value.
  • eUTXO: the extended model with data and scripts on outputs.
  • Epoch: five days, 432,000 slots.
  • Slot: one second, the unit of time.
  • Slot leader: a pool that qualifies to produce the block for a slot.
  • Stake pool: a block-producing node with delegated stake.
  • Native token: an asset the ledger tracks directly, alongside ada.
  • Plutus Core: the on-chain script language.
  • Collateral: ada set aside in case a script fails on chain.
  • Hard fork combinator: the mechanism that lets one node run every era.
  • Mithril: signed snapshots for fast node bootstrap.
  • DRep: a delegated representative in governance.
Open the glossary

FAQ

Through Ouroboros, its proof-of-stake protocol. Blocks are produced by stake pools chosen in proportion to the ada delegated to them. Cardano has never used mining.

A block is produced roughly every 20 seconds, so a transaction normally appears on the chain within a minute. Services wait for several more blocks before treating it as settled, and the protocol itself only rules out a rollback after a much longer window.

No. Cardano has no slashing. Delegated ada stays in your wallet, and a badly run pool only costs you rewards.

Not in the auction sense. Fees are a fixed formula based on transaction size, and script execution has a separately priced budget, so the cost is known before you sign and does not rise with demand.

A slot is a one-second time unit. On average only one slot in twenty has a leader who produces a block, so blocks arrive about every 20 seconds.

Cardano's reference node and its ledger rules are written in Haskell, a functional language that lets the code stay close to the formal specifications the protocol is based on. Applications on Cardano can be written in many languages, and the on-chain scripts in Plutus or Aiken.

Ready to test yourself? Take the technical quiz.