51% attacks have been performed on some smaller PoW chains, specifically Ethereum Classic. It's not that hard. https://www.crypto51.app/