This paper presents a simple estimation of the fair economic cost of proof-of-work in Bitcoin mining and assesses whether current expenditure levels are justified. It argues that, while large, the observed costs are of an appropriate order of magnitude for securing an anonymous, decentralized payment system operating among mutually untrustful parties.