All Entries

On December 24, 2021, PlanB rewrote the test for his stock-to-flow model. The original formulas and dates behind the power law, stock-to-flow and the rainbow chart, measured against the price.

With Bitcoin below $34,000, PlanB posts monthly floors for the rest of 2021, from above $47K in August to above $135K in December, on a chart titled "Bitcoin S2F Model - Worst Case Scenario 2021."

Five days before the November close, PlanB expects the $98K figure to miss, calls it the "floor model," and says the stock-to-flow model is unaffected and still on track toward $100K.

PlanB declares his floor model failed, recalls saying that Bitcoin under $100K in December 2021 would mean stock-to-flow was "dead," and withdraws that test.

Replying to himself 18 seconds later, PlanB sets a new test: whether Bitcoin, then at $51K, stays within the model's one-standard-deviation band, roughly $50K to $200K, for two and a half years.

PlanB answers critics: the stock-to-flow model has stayed within its one-standard-deviation band for three years, and the price sits at the band's low end, as in March 2019.

Two days after Bitcoin fell below $20,000, PlanB plots his original 2019 stock-to-flow model beside a new fit and writes that the model "certainly had a good run" from March 2019 to March 2022.

On August 15, 1971, Nixon suspended the dollar's gold convertibility "temporarily" and told Americans their dollar would be worth as much tomorrow as today. Convertibility never came back.

From September 14 to 17, 2007, depositors queued outside Northern Rock. The Governor of the Bank of England called it rational; the Chancellor stopped it only by guaranteeing every deposit.

On August 20, 2008 Satoshi emailed Adam Back a link to a draft titled "Electronic Cash Without a Trusted Third Party." Its title and abstract survive in two emails. The PDF does not.

Ten days after the October 2008 version resurfaced, James Evans asks the cryptography list for the earlier draft Satoshi sent Wei Dai, "Electronic Cash Without a Trusted Third Party." No one replied.

Gwern lists where he looked for the draft Satoshi linked in August 2008: the file host, the Internet Archive, Google, BitcoinTalk, SVN. Dai, Back and Maxwell had no copy; Finney never replied.

Julian Assange thanks the US government and Senators McCain and Lieberman for the banking blockade against WikiLeaks from 2010, which he says led it into Bitcoin with a return above 50,000%.

By 2008 Microsoft's free compiler wanted a Passport sign-in. Satoshi used the 1998 Visual C++ 6.0 and free MinGW, signed up for services under his pseudonym, and designed a system without accounts.

Satoshi's code had a COIN and a CENT and nothing smaller with a name. Bitcoin's smallest unit, the satoshi, was named by users on BitcoinTalk two months after his last post.

ribuck asks how bitcoins should be subdivided and floats names: a hundredth of a bitcoin could be a Satoshi, a thousandth of that a Molyneau, and a thousandth of that an Austrian.

A remailer gave up a name to a warrant, Napster's index fell to an injunction, e-gold pleaded guilty and the Liberty Dollar was raided. In November 2008 Satoshi named the pattern.

Rich Burroughs forwards a signed Usenet report: on August 22, 1996, a Helsinki court ordered Johan Helsingius to reveal the address the police wanted within 30 days or face fines and jail.

Jim Byrd forwards Johan Helsingius's press release closing anon.penet.fi, a remailer with over half a million users, because Finnish law on the privacy of Internet messages was still unclear.

Until December 30, 1996, U.S. rules listed encryption software with weapons. Zimmermann was investigated, Karn sued over a floppy disk, Bernstein won in court, and Back put RSA on a T-shirt.

On March 11, 2013, one large block split Bitcoin: v0.8 nodes accepted it, older nodes rejected it. Developers chose the shorter chain every version accepted, and two pools downgraded to rejoin it.

Gavin Andresen's post-mortem of the March 2013 fork: a block that 0.8 nodes accepted and some pre-0.8 nodes rejected, the Berkeley DB lock limit behind it, and the fixes that followed.

Nearly eight years after the 2010 pizza trade, Hanyecz buys two pizzas over the Lightning Network, with the delivery driver handing them over only when he shows part of the payment preimage.

Asked how to stop a present event being passed off as a past one, Assange answers that you need a trusted time-notary who publishes hashes somewhere hard to undo, such as a newspaper.

In 2008 Satoshi wrote that only coin creators would eventually need to run nodes. Mining did leave ordinary computers; nodes did not. Who runs the nodes at 25,489 reachable addresses, and why, unpaid.

On October 3, 2026, 12,524 of the 25,501 Bitcoin addresses a crawler could reach were Tor onions. What the count measures, how it grew from Satoshi's 2009 Tor proxy support, and why nodes hide IPs.

Nicholas Bohm asks the bitcoin-list whether it is the right place to report a couple of problems he has had running Bitcoin, with about 70kb of attachments.

May asks why random number generators draw dozens of Cypherpunks posts while Hal Finney's work on a fully encrypted remailer has drawn none: anonymous remailing is where cypherpunks need to be.

Answering May, Finney tells how PGP led him to Chaum's papers, which held the technologies to make Vinge's True Names work, and calls remailers the ground floor of making Big Brother obsolete.

Don Henson reports over 350 RSA/Perl munitions T-shirts shipped by July 27, 1995: under ITAR, wearing one where a non-U.S./Canadian citizen can see it counts as exporting cryptography.

Henson tells the Cypherpunks list over 500 munitions T-shirts have shipped, 25% of U.S. profits go to Phil Zimmermann's legal defense fund, and buyers arrested for wearing one get a refund.

Replying to Hal's 2009 tweet, Fran Finney writes that he posted it 17 days after his ALS diagnosis, and that a half marathon on September 6, 2009, was his last real run.

Seventeen days after his ALS diagnosis, Hal Finney tweets that he has just got back from an 11-mile run and treasures each one now.

Back lists the shrinking versions of his RSA-in-Perl program, smallest first, back to the five-line original of March 9, 1995, which Hal Finney explained on the Cypherpunks list soon after.

Back's page for his RSA program in Perl, small enough for an e-mail signature, which a U.S. Commerce Department statement ruled must not be exported, and which went onto T-shirts and tattoos.

Doligez on breaking Hal Finney's 1995 SSL challenge: second to find the key, about two hours after David Byers and Eric Young working with Adam Back; the second challenge fell in under 32 hours.

Two months after his ALS diagnosis, Finney writes that over 90% of ALS patients choose to die rather than go on a ventilator, and that when the time comes he hopes to choose life.

Satoshi sized the 21 million cap so amounts would land between 0.01 and 1000. The cent ran through his code, his fees and more than two years of his writing. The yen does not appear even once.

Four exchanges opened between October 2009 and July 2010, none of them Satoshi's: NewLibertyStandard, Malmi's bitcoinexchange.com, Bitcoin Market and Mt. Gox. Satoshi advised from the sidelines.

On August 20, 2008 Satoshi called his C++ code nearly finished. Which precursors were in front of him by then? The earliest record for Hashcash, b-money, MicroMint, Bit Gold, DigiCash and RPOW.

In August 2010 a forum user asked whether Satoshi could withstand torture for Bitcoin's alert key. What the key could do, whose hands its copies reached, and how it left the network by 2018.

A tongue-in-cheek notice signed "Mr. Crypto": mail sent to hughes@soda.berkeley.edu with a Request-Remailing-To header is stripped of its headers and resent, though rumor says he saves everything.

Eric Hughes posts the Perl script for a hopping remailer he wrote that morning, tests it with three hops, and names the next project: encrypting each message so the route stays hidden.

Timothy May forwards the White House announcement of the Clipper chip and its key-escrow system: "it's not a spoof...I can't check the White House's signature!"

Eric Hughes answers the Clipper chip announcement the same evening in four lines: he will say much more in the coming weeks, but for now only one thing. "No compromises."

Timothy May reads the Clipper Chip as the "cc" chip: an automatic carbon copy for Big Brother. He bets the "Wiretap Chip" will be used for more than voice.

John Gilmore announces that Sandy Sandfort will moderate the Cypherpunks list for a one-month test, with unedited and flames lists for those who want everything.

Timothy May explains why he left the Cypherpunks list when moderation began: John Gilmore may run his machine as he wishes, but no host owns the group, and censorship makes the list worse.

Adam Back welcomes Sten Drescher's plan for a network of majordomos to carry a new Cypherpunks list and suggests mail exploders behind a central majordomo as a simpler design.

John Gilmore says he will no longer host the Cypherpunks list: unless the community builds a new home by February 20, the list will cease to exist.

Lance Cottrell, author of Mixmaster, opens cypherpunks@cyberpass.net and says he favors a multi-node list, where no one site can censor it and losing any one node is not catastrophic.

Adam Back proposes one main majordomo feeding many mail exploders, an architecture he credits John Gilmore with suggesting as the simpler alternative.

Jim Choate reports the first link between cypherpunks@ssz.com and cypherpunks@algebra.com and hopes a three-way link will be ready for prime time.

Jim Choate rejects a central majordomo: he envisions a fishnet of remailers where each node links to two others. "There should be no 'one main' anything on this project."

Finney's RPOW FAQ: how RPOW differs from hashcash and ecash, why the central server is a crucial element rather than a bottleneck, and why the IBM 4758 was the only possible platform.

Finney's rpow.net home page: RPOW lets hashcash tokens be reused in sequence, runs on an IBM 4758 whose attestation lets anyone verify the code, and could serve as a form of Nick Szabo's bit gold.

Szabo lays out bit gold: unforgeably costly bits made from proof of work, securely timestamped, chained so each piece sets the next challenge, and owned by position in a distributed title registry.

The first comment under "Bit gold" had nothing to do with bit gold: a tax blogger said she had cited one of Szabo's papers. Szabo thanked her and pointed to his article on value measurement and taxes.

Szabo on why Bitcoin took so long: the "why" was the biggest stumbling block, bit gold dated to 1998 on the same private list as b-money, and Nakamoto fixed a security shortcoming in his design.

May dates his thinking on crypto and the state to late 1987, when public-key crypto, anonymous digital cash and information markets struck him as the end of governments as we know them.

May recalls how Jude Milhon's quip at the earliest meetings, "You guys are just a bunch of cypherpunks," became the group's name, and why the link to cyberpunk fiction felt natural.

May explains the list's slogan "Cypherpunks write code" as a clarifying statement rather than an imperative, and estimates how few members actually wrote code.

May notes that he devised the "Big Brother Inside" slogan against the Clipper chip himself, at a Clipper meeting.

May tells newcomers that the list has no debate about the Clipper chip because it was thoroughly trashed within hours and days of its April 16, 1993 announcement.

May's outline of the group's start: talks with Eric Hughes, a first meeting in the week PGP 2.0 came out, the afternoon "Crypto Game," and John Gilmore's offer of a list site and office space.

May recalls three days of talk with Eric Hughes in May 1992 about how slowly academic cryptography became working code, and the aim to get actual running code for digital cash and mixes.

May explains the group's attachment to PGP: its first meeting in September 1992 fell within days of PGP 2.0's release, and PGP was a practical tool hobbyists could actually use.

May notes that PGP 2.0 arrived the same week as the Cypherpunks' first meeting in Oakland in September 1992, and just six months before the Clipper announcement.

Asked to change Bitcoin's rules, Dai explains that he did not create Bitcoin, that Satoshi reinvented the idea without reading his article, and that he has started mining with a Radeon 5870.

Dai judges that Bitcoin failed on monetary policy and adds that it may partly be his fault: when Satoshi asked for comments on his draft paper, he never got back to him.

Asked by author Dominic Frisby, Dai says he never coded b-money: the design was incomplete, he had grown disillusioned with cryptoanarchy, and he did not foresee such a system drawing wide use.

Asked in April 2013 how a decentralized currency came to have a chief scientist, Gavin Andresen answers with the Bitcoin Faucet, his code, and Satoshi swapping his own email address for Andresen's.

Adam Back introduces himself on BitcoinTalk as the inventor of hashcash, the mining function, says he believes he got b-money added to Satoshi's paper in 2008, and that he owns not a single bitcoin.

Paul Ferguson reviews Levy's "Crypto Rebels" in Wired's May/June 1993 issue, bought off a newsstand; the cover shows May, Hughes, and Gilmore in white plastic masks behind a flag.

Szabo corrects a slip in his call for help: it should have read "no more wasteful than gold mining," since bit gold rests on an unforgeable, timestamped auditing log anyone can check.

Asked whether bit gold pools could hide fakes as mortgages did, Szabo answers that bit gold minimizes trust through strong security, and its public title registry means supply cannot be hidden.

Asked why bit gold needs puzzles at all, Szabo suggests the issuing algorithm could be run by many parties in parallel by Byzantine agreement, and weighs its pull toward inflation.

As lachesis on BitcoinTalk in 2010, Eric Swanson built the mining calculator Satoshi thanked him for, found an RPC bug Satoshi fixed in rev 110, and read block 74638's strange value as INT64_MAX.

Mike Duvos asks whether anyone has obtained DigiCash's software: it is for sale on Chaum's web page but apparently only for electronic money. "A classic chicken and egg situation. :)"

How a 1992 Oakland meeting became the Cypherpunks mailing list: the name, the remailers, the Clipper fight, the 1997 split, and the Hashcash and b-money posts the Bitcoin whitepaper later cited.

Timothy May posts the Crypto Anarchist Manifesto to the Cypherpunks list: written in 1988 and read at the group's September 1992 founding meeting, it predicts anonymous markets beyond state control.

Eric Hughes posts A Cypherpunk's Manifesto, dated March 9, 1993, to the list: privacy is the power to selectively reveal oneself, and "Cypherpunks write code."

Neil McAllister's InfoWorld roundup gave Bitcoin four paragraphs on May 24, 2010, naming Satoshi and the word "cryptocurrency." Downloads rose for three days, then fell back.

Gavin Andresen's tweet on the evening of his Bitcoin talk at CIA headquarters, seven weeks after Satoshi's last known email to him.

Craig Wright's May 2, 2016 blog post, published the day he publicly claimed to be Satoshi, walking through an OpenSSL verification of a signature he presented as proof.

Craig Wright's May 3, 2016 blog post, the day after his public claim to be Satoshi, promising a series of posts and a transfer of bitcoin from an early block as proof.

The apology Craig Wright posted on May 5, 2016 in place of his site, three days after claiming to be Satoshi and before any promised proof appeared.

Gavin Andresen's blog post of May 2, 2016, stating that he believed Craig Wright was Satoshi after a private signing session in London, with the note he added in February 2023.

Eric Hughes, a mathematician, co-founded the Cypherpunks in 1992, ran their mailing list, built early anonymous remailers, and wrote A Cypherpunk's Manifesto on March 9, 1993.

Cryptographer who invented blind signatures at CRYPTO '82 and founded DigiCash in 1990 to build eCash, an anonymous digital currency two decades before Bitcoin. DigiCash went bankrupt in 1998.

Nayib Bukele rose to El Salvador's presidency, made Bitcoin legal tender in 2021, and repealed its mandatory-acceptance clause in 2025 under IMF pressure while reported holdings kept growing.

Ross Ulbricht built Silk Road as Bitcoin's first major black-market use case, was sentenced to two life terms plus 40 years in 2015, and was pardoned by Donald Trump in January 2025.

Timothy May, an Intel physicist who retired at 35, wrote The Crypto Anarchist Manifesto in 1988, co-founded the Cypherpunks in 1992, and stayed a skeptic of crypto hype until his death in 2018.

Matt Corallo joined Bitcoin Core in 2011, co-founded Blockstream in 2014, authored BIP 152's Compact Block Relay, built the FIBRE relay network, then moved on to Chaincode Labs and Spiral.

Gerald Cotten ran online Ponzi schemes as a teenager, founded QuadrigaCX in 2013, and defrauded its customers for years before dying in India in 2018 with the only copies of its keys.

James Howells mined thousands of Bitcoin as a hobby in 2009, lost the hard drive holding the keys in 2013, and spent twelve years and two failed court cases trying to get it back.

Stefan Thomas made an early viral Bitcoin explainer video and an early JS toolkit, became Ripple's CTO, and co-created Interledger — all while locked out of 7,002 BTC since around 2011.

In 2010, Marek Palatinus proposed Bitcoin's first mining pool. He went on to co-design the Stratum protocol, co-found Trezor, and co-author BIP-39, the seed-phrase standard nearly every wallet uses.

Mark Karpelès acquired Mt. Gox in 2011 and ran it through the 2014 collapse. In 2019 he was acquitted of embezzlement but convicted of falsifying records, and given a suspended sentence.

Sam Bankman-Fried founded Alameda Research (2017) and FTX (2019), was convicted on all 7 counts against him in 2023, and sentenced to 25 years and $11 billion in forfeiture in 2024.

American Bitcoin infrastructure engineer. Built Statoshi node telemetry (2014), was SWATted at his home in 2017, joined Casa (2018), and wrote "Who Controls Bitcoin Core?" (2018).

Satoshi and Malmi spent 2009 to 2010 correcting the bitcoin.org FAQ word by word, and readers still wrote to Satoshi when something went wrong. None of that wording survives on bitcoin.org today.

The bitcoin.org FAQ: Bitcoin's peer-to-peer design, coin generation, why mining margins shrink as value rises, and wallet and transaction basics. Drafted by Malmi, maintained by both him and Satoshi.

Hal Finney's full BitcoinTalk post recounting his early involvement with Bitcoin, his correspondence with Satoshi, and his ALS diagnosis.

Ray Dillinger on his November 2008 review of Bitcoin's block chain code with Hal Finney, why its lack of any Trusted role convinced him Satoshi wasn't scamming, and the ICO scams that followed.

Ray Dillinger's full 2018 interview for the Bitcoin whitepaper's 10th anniversary: his 2008 code review, the floating-point discovery, and his views on deflation and mining centralization.

Proof of work vs proof of stake, scored axis by axis with dated numbers: market cap, track record, energy, attack cost, decentralization, speed and new-chain adoption, with DPoS and PoA beside them.

On January 29, 2021, Musk changed his Twitter bio to #bitcoin and Bitcoin jumped within hours. A peer-reviewed study of 47 Musk crypto events found Bitcoin alone showed no significant average effect.

CoinMarketCap recorded Ethereum's market cap at roughly 85% of Bitcoin's on June 12, 2017 — the closest 'the flippening' ever came to happening, before both fell back.

Strategy's co-founder settled SEC fraud charges in 2000. Two decades later he built the largest corporate Bitcoin position on debt and public markets — the trust the asset was built not to need.

Michael Saylor, then MicroStrategy's CEO, predicts on X that Bitcoin will suffer the same fate as online gambling — seven years before his company's first Bitcoin purchase.

Wrote BIP 1, the document that defined the Bitcoin Improvement Proposal process. Founded libbitcoin and Dark Wallet. In 2015 he left Bitcoin to fight ISIS in Syria, and was arrested but never charged.

The only record of Satoshi's gender is one field on a profile that has never been confirmed, yet Satoshi is still called 'he.' Every named candidate is a man, and it all traces to a male pen name.

Journalist who spent fifteen years investigating Satoshi Nakamoto's identity, publishing The Mysterious Mr. Nakamoto (2025). Also wrote one of Bitcoin's first mainstream features (Wired, 2011).

Word-count and interval statistics for all 164 of Satoshi's SVN commits (r15-r202), plus diff-size stats for 158: after his 75-day silence, Satoshi's messages got shorter, not longer.

Do Kwon co-founded Terraform Labs and built TerraUSD, an algorithmic stablecoin that collapsed in May 2022, destroying $40 billion. He pleaded guilty to fraud and was sentenced to 15 years in 2025.

TerraUSD held its peg with an algorithm, not a reserve. In May 2022 the mechanism reversed: Luna's supply exploded from 343 million to 6.53 trillion, and $40 billion vanished in six days.

Defines the Pay-to-Script-Hash (P2SH) standard transaction type, shifting responsibility for redemption conditions from sender to redeemer via a 20-byte script hash.

Defines the getblocktemplate JSON-RPC method for requesting a full block template from a Bitcoin node and submitting completed blocks back via submitblock.

Embeds the block height in each coinbase transaction's scriptSig and raises block version to 2, activated once 95% of the last 1,000 blocks signal support, enforcing coinbase uniqueness.

Defines a BIP32-based path (purpose'/coin_type'/account'/change/index) letting one seed manage multiple coins and accounts, plus the account-discovery algorithm for recovering wallets.

Defines OP_CHECKLOCKTIMEVERIFY, a soft-fork opcode that makes a transaction output unspendable until a specified block height or time, enabling escrow and time-locked contracts.

Restricts ECDSA signatures in Bitcoin scripts to strict DER encoding, removing OpenSSL's implicit role in consensus validity and reducing transaction malleability.

Repurposes the transaction sequence number as a consensus-enforced relative lock-time, letting an input stay unspendable for a set number of blocks or time after its output confirms.

Soft fork redefining lock-time eligibility to use the median of the past 11 blocks' timestamps instead of a single block's timestamp, removing miners' incentive to lie about block time.

Defines the original version-bits mechanism for signaling and activating soft forks in parallel via the block nVersion field, using median-time-past thresholds and a fixed timeout.

New SegWit v0 signature-hash algorithm: commits to the input's spent amount, fixes O(n^2) quadratic hashing, and changes OP_CODESEPARATOR/FindAndDelete handling.

Defines the feefilter P2P message, letting a node tell peers to stop announcing transactions below a given fee rate, cutting bandwidth spent on invs that would never be relayed further.

Defines Compact Block Relay — sendcmpct/cmpctblock/getblocktxn/blocktxn messages using SipHash-based short transaction IDs to cut P2P bandwidth for block propagation.

Defines the BIP32 derivation path (purpose 49') and address scheme for P2WPKH-nested-in-P2SH accounts, so BIP141 segregated witness wallets sharing a seed fail visibly instead of missing UTXOs.

Fixes ECDSA signature malleability with two consensus rules: LOW_S, requiring the lower-half S value, and NULLFAIL, requiring failing signatures be empty byte arrays.

Specifies a version-bits soft fork activation mechanism using block heights instead of timestamps, adding a flag that can guarantee lock-in before a timeout height.

Defines Bech32, a checksummed base32 format, and the segwit address encoding (bc1.../tb1...) built on it for native v0-16 witness outputs.

Defines PSBT, a binary key-value transaction format letting offline, hardware, and multi-party signers exchange unsigned and partially-signed transactions without direct UTXO access.

Proposes hashrate-escrow sidechains: six OP_RETURN messages (M1-M4) for sidechain proposal and withdrawal-bundle voting, plus M5/M6 deposit and withdrawal transactions governed by miner ACKs.

Defines the BIP 32 derivation path and extended-key version bytes (zpub/zprv) for HD wallets generating native SegWit P2WPKH addresses.

Defines the addrv2 P2P message and sendaddrv2 signaling, replacing addr to gossip longer node addresses — Tor v3, I2P, CJDNS, Yggdrasil — beyond the old 128-bit limit.

Defines the v2 P2P transport: unauthenticated opportunistic ChaCha20Poly1305 encryption over ElligatorSwift-encoded ECDH key exchange, producing a pseudorandom bytestream with v1 fallback.

Specifies tapscript — the taproot script-path validation rules: Schnorr signature checks via OP_CHECKSIG/OP_CHECKSIGADD, OP_SUCCESS upgrade opcodes, and a per-input sigops budget.

Specifies Bech32m, a checksum variant of Bech32 that fixes an insertion-error weakness, and mandates its use for native SegWit v1+ (Taproot) addresses while v0 keeps Bech32.

Defines PSBT Version 2, which lets inputs and outputs be added to a Partially Signed Bitcoin Transaction after creation, unlike the fixed transaction of PSBT v0 (BIP 174).

Defines the m/86'/0'/0' derivation path for HD wallets recovering single-key Taproot (P2TR) outputs, reusing the BIP 44/49/84 account structure.

Defines the general syntax, checksum, and key/script expression grammar for Output Script Descriptors, the language wallets use to describe and reproduce sets of output scripts.

Bundles four consensus soft-fork fixes: a timewarp-attack timestamp constraint, a transaction signature-operation limit, invalidating 64-byte transactions, and mandatory coinbase nLockTime.

Part 2 of 5. Thousands of computers end up agreeing on the exact same record by checking each other's work and chaining every page to the one before it.

Part 4 of 5. A sent payment sits in a waiting room each node keeps on its own before a miner seats it in a block — and even then, it only gets safer with time.

Part 3 of 5. New bitcoins exist because computers race to win a lottery-style puzzle, and the prize is the right to add the next page.

Part 1 of the beginner guide. A bitcoin is not a coin sitting in an account — it behaves more like a receipt, unlocked by a key only you hold.

Part 5 of the beginner guide. Two simple rules — everyone checks the rules, and the chain with the most work wins — are what keep a system with no boss honest.

Wei Dai called Bitcoin's fixed supply a failure in 2013. His own 1998 b-money design needed the same real-world value figure Satoshi said software has no way to know.

A curated way in: questions about Satoshi Nakamoto and Bitcoin history, each pointing to the page that answers it in full.

The only place Satoshi named a country for himself was one unverifiable profile. Language, timestamps, and the one actually Japanese candidate all read against that claim — and against each other.

Institutions built a $300B stake; governments turned seized coins into reserves. Two Nobel economists, asked years later, still weren't persuaded. What actually changed, checked against the record.

In a comment on his Unenumerated blog replying to a reader's criticism of bit gold's tranching design, Nick Szabo asks for help building a demo. No one responds publicly.

Satoshi's standalone bitcoin.org explanation of the Byzantine Generals problem, using a proof-of-work chain to make the generals agree on a plan.

James Donald tied the issue he pressed Satoshi on to the 1982 Byzantine Generals Problem. Satoshi said Bitcoin solved it in a network anyone could join, and explained it with a king's wi-fi password.

One 2013 sentence praised Bitcoin's engineering and predicted governments would keep the upper hand. Gates's criticism since — anonymity, speculation, energy — never touched the design.

Doubters called it unscalable in 2008. A famed hacker failed to break the code. A judge, a dictionary, and a Nobel nominator weighed in. What others said about Satoshi, read as one record.

Eight pages posted to a mailing list on October 31, 2008 — a report on a working system that had been 18 months in the making. It met silence first, then doubts about scale.

A source-level map of Bitcoin v0.1: the byte boundaries for transaction, block, and signature hashes, and the reuse of one serializer across network and disk paths.

Five AI models were asked the same question and independently picked the same coin. Fact-checking their reasons: structural claims held up, confident superlatives mostly did not.

Three years after Mt. Gox's collapse, Japan's amended Payment Services Act took effect on April 1, 2017, creating a national licensing regime for cryptoasset exchanges.

In September 2021, China's NDRC banned new bitcoin mining and its central bank outlawed all virtual-currency business, two years after seizing 194,775 BTC from the PlusToken Ponzi scheme.

El Salvador's Bitcoin Law took effect on September 7, 2021, requiring merchants nationwide to accept bitcoin and launching the government's Chivo wallet with a $30 sign-up incentive.

El Salvador's legislature voted 55-2 to end mandatory bitcoin acceptance under a $1.4B IMF deal that also capped public-sector bitcoin buying at zero — a line the government kept testing anyway.

On March 6, 2025, Executive Order 14233 turned a decade of forfeited Bitcoin, from Silk Road to the Bitfinex hack, into a U.S. Strategic Bitcoin Reserve; the Prince Group case followed in October.

Governments that banned Bitcoin hardest ended up holding the most of it. A survey of policy reversals across thirty jurisdictions, and the two governments that never reversed at all.

Two-time fintech founder (E-Loan, Prosper) who co-founded the company that built the XRP Ledger in 2012. In 2021 he called Bitcoin's proof-of-work a technology the industry should retire.

A Silicon Valley executive (Yahoo, AOL) who joined Ripple in 2015 and became CEO in 2016. Has called Bitcoin both China-controlled and, separately, a legitimate store of value.

Bitcoin Cash inherited Bitcoin's ledger and 21 million cap at the 2017 fork, then split twice more under implementation teams with no single founder to arbitrate.

No block-size limit, one company's reference client, and five 51%-attack reorgs in a single year — Bitcoin SV's design record, measured against the 'original protocol' it set out to restore.

A 45 billion cap, Ouroboros proof-of-stake, and governance split across three organizations — Cardano's own design documents, read against the numbers that marked its launch.

Dogecoin has no whitepaper, no company, and no cap on its supply — a decade-old test of whether Bitcoin's scarcity is what a market actually pays for.

No supply cap, a fee burn that can push issuance negative, and a 2022 switch from mining to staking — Ethereum's own design documents, read against Bitcoin's fixed 21 million.

Litecoin copied Bitcoin's code, swapped its proof-of-work and rescaled three figures by four, then its creator divested his entire holding, citing his own influence over the price.

Monero forked away from a currency whose founders had quietly mined 82 percent of its supply, then built a ledger that hides what Bitcoin's discloses and an emission with no final block.

A relay chain coordinating parachains, nominated proof-of-stake, and the 2025 vote that capped a supply that had never had a ceiling -- Polkadot's design, read against Bitcoin's fixed 21 million.

A consensus mechanism built on its own clock, an issuance rate that keeps shrinking without a cap, and a supply that started with a premine to the foundation and its investors.

A fiat-collateralized design that CENTRE's own whitepaper called a trade-off, a reserve that broke the dollar peg for two days in 2023, and a governing consortium later folded into one company.

Launched on Bitcoin's blockchain as Realcoin in 2014, USDT mints and freezes at one company's discretion, and its reserve reporting has stayed at quarterly attestations, not audits.

A hundred billion units generated in a single stroke in June 2012, a validator list two organizations curate, and a five-year SEC lawsuit over who was allowed to sell them.

Created Mt. Gox in 2010 and sold it in 2011, then co-created the XRP Ledger and Stellar. He says the whitepaper convinced him the double-spend problem was solvable at all.

The Google engineer who shipped Litecoin in 2011, called Bitcoin the soundest money in the space for a decade after, and sold or donated every coin he held in 2017.

Ethereum's first CEO, removed in 2014, who built Cardano on the opposite design choices. His verdict on Bitcoin moved from "worth a Turing prize" to "a religion, not an ecosystem".

Monero's long-time lead maintainer. He argues Bitcoin's transparency is what gives Monero its use case, and cites Bitcoin's 2010 and 2018 inflation bugs as proof a public supply is hard to audit.

Registered dogecoin.com as a joke about altcoin proliferation, left the community in 2015, called Bitcoin cult-like in 2018, and in 2021 rejected the whole industry in public.

Qualcomm engineer who wrote the Proof of History paper and founded Solana. Calls Bitcoin's proof-of-work a masterpiece and says the asset has no value beyond insurance.

Internet entrepreneur who founded Circle and launched USDC in 2018. Built the largest regulated dollar stablecoin while publicly arguing that Bitcoin's value is its non-sovereignty.

Twelve chains, compared by what each one's issuance rule decides about the price of a single unit, and what it leaves undecided.

AnonymousSpeech.com, the anonymous intermediary behind bitcoin.org: its pitch of protection under Japanese law, a mail relay on a Malaysian IP address, and an operator trail that ends in silence.

Bitcoin's first price was a production-cost estimate. Satoshi predicted in 2010 that market price would come to dictate production cost — not the reverse. The arc from 2009 to modern models.

Satoshi's ~1.1M BTC sit still while companies, ETFs, and nation-states build stacks of their own. A sourced map of who holds the 21 million — and why the biggest whales still have no names.

Elon Musk (born 1971): Tesla and SpaceX founder, PayPal co-founder. A 2017 blog post named him as Satoshi; he denied it within a week. His Bitcoin footprint is Tesla's 2021 purchase and Dogecoin.

The first person to answer the Bitcoin whitepaper, James Donald was also the only other person known to use a rare word of Satoshi's, making him Benjamin Wallace's top lead. The evidence, weighed.

A former SpaceX intern named him in a viral 2017 blog post, citing his command of both C++ and economics and an idiom he shares with Satoshi. The evidence for Elon Musk as Satoshi, weighed.

His legal name was, literally, Satoshi Nakamoto — and a 2014 Newsweek cover story named him. The evidence, weighed.

The only candidate who claimed the identity himself — declared in coordinated BBC and Economist interviews in May 2016, cryptographic proof in hand. The evidence, weighed.

He wrote E4M, then built a criminal empire. The case Evan Ratliff, author of The Mastermind, set out in 2019 for Paul Le Roux as Satoshi, weighed.

The whitepaper's title names a payment system; section 6's gold is an analogy for issuance. Bitcoin is scarce like gold and spends like cash, and its scarcity later earned it the name digital gold.

Weighing the 'Blockstream controls Bitcoin' charge against the documentary record: where it comes from, and how each link in the chain holds up.

Wei Dai announces b-money on the Cypherpunks list as a brief addendum to PipeNet 1.1, pointing readers to his eskimo.com page — the proposal later cited as reference [1] in the Bitcoin whitepaper.

When correspondents wished Satoshi merry Christmas, predicted $10M per coin, or hoped he was well, his replies went straight to the technical point and ignored the rest. Five patterns, examined.

Bitcoin's 2015–2017 block-size war by phase, faction and turning point: Bitcoin XT, the BIP148 UASF, the New York Agreement, Bitcoin Cash and the cancellation of SegWit2x.

Hayek's 1976 case for competing currencies, the Extropians' imaginary 'Hayeks' currency of 1995, and Bitcoin, money no state issues: one line of thought, linked by ideas rather than proven influence.

Canadian exchange QuadrigaCX collapsed after CEO Gerald Cotten died in India (Dec 2018). C$250M owed to ~115,000 customers became inaccessible. The OSC later ruled it was a long-running fraud.

Stefan Thomas was paid 7,002 BTC in 2011 for a Bitcoin explainer video, stored the keys on a 10-attempt IronKey, and lost the password. By the 2021 NYT report, he had 2 of 10 attempts left.

James Howells says he bagged the wrong hard drive in a 2013 clear-out, and it went to a Newport, Wales landfill with his early bitcoin keys. In January 2025 the High Court threw out his £495M claim.

Iconic Bitcoin losses by how they happened: a forgotten password (Thomas), physical disposal (Howells), collapsed custodians (QuadrigaCX, Mt. Gox, FTX), all made final by Bitcoin's irreversibility.

119,756 BTC stolen from Bitfinex (Aug 2016). DOJ arrested Lichtenstein and Morgan in Feb 2022 and recovered ~94,000 BTC — the largest US financial seizure at the time.

Attorney James A. Murphy filed a 2025 FOIA suit seeking DHS files on Agent Rana Saoud's 2019 claim that an agent went to interview a man he believed was Satoshi and found three more people involved.

Finding Satoshi (Tooley / Miele, April 2026) names Hal Finney and Len Sassaman as Bitcoin co-creators: Finney coded, Sassaman wrote the paper. Lopp and Back dispute it.

An anonymous plaintiff sues 39,069 dormant Bitcoin addresses holding ~3.8M BTC under New York's lost-property statute (March 2026). Galaxy Digital ties 21,923 of them to the Patoshi pattern.

Satoshi's difficulty retarget has an off-by-one: it measures 2,015 blocks instead of 2,016. A hashrate majority can exploit it via timestamp manipulation. The Great Consensus Cleanup proposes a fix.

Bitcoin's 'digital gold' status rests on two layers of decentralization — system and people/organization — and six structural features no later cryptocurrency combines to the same degree.

Every subsystem compared: Satoshi's v0.1 (January 2009) side by side with modern Bitcoin Core v27+, in split diagrams and tables by area.

How the Bitcoin ecosystem layers above and around the base chain: Lightning payment channels, federated sidechains, L1 envelope extensions, and mining pool architectures.

Bitcoin's threat model mapped end-to-end: what the protocol trusts, what it defends against, how each attack is countered, and where open risks remain.

How Bitcoin Core persists blocks, maintains the UTXO set, indexes chain state, manages the mempool, prunes historical data, and bootstraps via assumeUTXO.

How Bitcoin Core manages keys, constructs transactions, selects coins, estimates fees, and exposes functionality through RPC, REST, and ZMQ interfaces.

How Bitcoin uses elliptic-curve keys, digital signatures, hash functions, and deterministic derivation to secure ownership without trusted third parties.

How Bitcoin's 21 million cap emerges from a geometric halving series, how block rewards transition from subsidy to fees, and how the incentive model sustains honest mining.

How Bitcoin nodes find each other, exchange transactions and blocks, and resist network-level attacks across the P2P gossip layer.

How Bitcoin blocks are structured, how Merkle trees commit transactions to block headers, and how the most-work chain selection rule resolves forks.

How Bitcoin nodes agree on a single chain: SHA-256d proof of work, the difficulty adjustment algorithm, block validation rules, fork resolution, and probabilistic finality.

Deep-dive into Bitcoin's transaction layer: UTXO lifecycle, transaction structure, Script evaluation, ECDSA and Schnorr signatures, SegWit, and Taproot.

High-level system overview of Bitcoin's architecture, layer model, and data flow. Entry point to a 12-page design-document series covering every major subsystem.

Bitcoin chose a hard 21M cap; b-money (1998) proposed elastic supply; fiat runs central-bank discretion. The cypherpunk debate, Wei Dai's 2013 regret, and 15 years of cryptocurrency variants.

Adam Back's reply to a question about whether Bitcoin faces near-term risk from quantum computing, pointing at NIST-standardized SLH-DSA and a 20–40 year horizon.

Adam Back's answer to a NYT investigation naming him as a leading stylometric match to Satoshi: "i'm not satoshi," followed by his account of his cypherpunk interest in ecash from about 1992.

Cobra's response on X, posted hours after the London High Court ordered bitcoin.org to remove the Bitcoin whitepaper following Craig Wright's default judgment.

Hal Finney's tweet, the first known reference to running Bitcoin from a machine other than Satoshi's, posted two days after Bitcoin v0.1 was released.

WikiLeaks announces it will accept anonymous Bitcoin donations to its public address, six months after a financial blockade from Bank of America, Visa, MasterCard, PayPal and Western Union.

Where Bitcoin's current reality has drifted from Satoshi's design intent: four axes — mining (one-CPU-one-vote to ASIC oligopoly), custody (own keys to exchange IOUs), governance, and scaling.

Satoshi coded Bitcoin on Windows for 27 months, mainly with MinGW. In November 2009 he finished the Linux build Martti Malmi had started; by mid-2010 there were Windows, Linux and Mac releases.

Start here if you know nothing about Bitcoin beyond the price. A five-part guide to what a bitcoin is, who keeps the record, how new coins appear, and why no one can cheat it.

Eugen Leitl contradicts Satoshi's claim that bitcoin.sourceforge.net was working, reporting the site is still down, and asks whether Debian (.deb) packages for Bitcoin are available.

NewLibertyStandard reports occasional Bitcoin crashes while running under Wine 1.0.1, speculates a possible correlation with wallet balance, and shares the terminal output produced at startup.

Which Bitcoin assets are at risk from a cryptographically relevant quantum computer, and what the timeline and migration debate around post-quantum cryptography looks like.

What Satoshi's design assumed about a fee-only future, and the documented debate over whether transaction fees alone can sustain proof-of-work security after the block subsidy ends around 2140.

How the 2010-08-15 overflow incident unfolded: the soft-fork rescue, why a 5-hour response was possible only then, what the transactions themselves show, and the centralization paradox.

Why Bitcoin's 2015-2017 fork wars were fights over what Bitcoin is, not OSS disputes: the authority vacuum after 2011, the money riding on rule choices, and three layers binding code to currency.

The August 2010 overflow recovery rested on knightmb's snapshot. Secondary sources have since attached a misattributed 10%-holder claim and a contested Tennessee identification to the same handle.

Gavin Andresen publicly announces taking on active project management for Bitcoin with Satoshi's blessing, creating the bitcoin/bitcoin GitHub staging tree and proposing a development process.

NewLibertyStandard proposes adopting the Thai baht currency symbol ฿ as the official Bitcoin currency symbol and BTC as the three-letter currency code — the notation that became standard.

Satoshi Nakamoto's post: "Key pool feature for safer wallet backup".

Satoshi Nakamoto's reply in the thread "BitCoin Wikipedia page DELETED!!!".

Vitalik Buterin's BitcoinTalk announcement of Ethereum on the Altcoins board, January 23, 2014. The principal Bitcoin-community-facing record of the Ethereum whitepaper publication.

Entrepreneur (1979–). Memory Dealers founder, early Bitcoin angel investor, bitcoin.com operator, Bitcoin Cash advocate. Renounced US citizenship 2014; arrested in Spain April 2024.

Chinese entrepreneur (1986–). Translated Bitcoin whitepaper into Chinese (2011), co-founded Bitmain (2013), backed Bitcoin Cash with hashpower (2017), later founded Matrixport and Bitdeer.

American engineer. He co-authored SPDY, the basis of HTTP/2, co-founded BitGo for institutional Bitcoin custody, and signed the New York Agreement, then called off SegWit2x (November 2017).

French software engineer. Founded Bitcoin ABC, led the 2017 BCH hard fork, defended BCH in the 2018 BSV hash war, led the 2020 split into eCash.

Russian-Canadian programmer (1994–). Bitcoin community member from 2011, Bitcoin Magazine co-founder, pybitcointools author, Ethereum whitepaper author (late 2013).

Mihai Alisie and Vitalik Buterin launched Bitcoin Magazine in 2012; first print issue May 2012. Grew out of Buterin's writing for the Bitcoin Weekly blog; became a long-running Bitcoin outlet.

Vincent Durham launched Namecoin on April 18, 2011 — the first altcoin and first fork of the Bitcoin codebase. It implemented the BitDNS proposal as a decentralized name registration system.

Charlie Lee launched Litecoin on October 13, 2011 as a Bitcoin-codebase fork with Scrypt PoW, 2.5-minute blocks, and 84 M cap. He framed it as 'silver to Bitcoin's gold'.

Markus and Palmer launched Dogecoin on December 6, 2013, built on Luckycoin (a Litecoin fork) around the 'Doge' meme. Initially a satire of crypto speculation, it grew into a top-10 cryptocurrency.

Mike Hearn and Gavin Andresen released Bitcoin XT 0.11A, a Bitcoin Core fork implementing BIP 101 — 8 MB blocks doubling every two years. The launch opened the public phase of the block-size war.

Bitcoin Cash forked from Bitcoin after block 478558; ViaBTC mined its first block (1.9 MB) at 18:12 UTC. The 8 MB chain without SegWit became the first protocol fork to last as a separate network.

Mike Belshe suspended the SegWit2x hard fork on the mailing list, about a week before the planned 2 MB activation at block 494784. The New York Agreement collapsed without a chain split.

Bitcoin SV (Satoshi Vision) split from Bitcoin Cash on November 15, 2018, and a hash war with the Bitcoin ABC faction followed. The SV chain restored larger blocks and 'original' opcodes.

Genealogy of every Bitcoin protocol fork that left a separate chain alive (Bitcoin Cash, SV, Gold) and the adjacent cryptocurrencies derived from Bitcoin (Namecoin, Litecoin, Dogecoin).

Dorian Prentice Satoshi Nakamoto (1949–): Japanese-American engineer in Temple City, CA. Falsely identified by Newsweek (2014) as Bitcoin's creator. He denied it. The community raised 67+ BTC for him.

Paul Calder Le Roux (1972–): E4M (TrueCrypt precursor) author who built an international criminal empire. Arrested 2012; weighed as a Satoshi candidate by Evan Ratliff in 2019.

How the 2014 'Bitcoin Core' rebrand changed the language of authority in Bitcoin: the internal disagreement over PR #3408, the 2015-2017 forks, and Hearn's regret in 2025.

Japanese software developer and researcher (1970-2013) who released Winny in 2002 and was tried for aiding copyright infringement (2004-2011). A Satoshi candidate in Japanese-language discussion.

On November 21, 2011, Bitcoin v0.5 shipped with the Crypto++ SHA-256 subset removed and replaced by OpenSSL. Wei Dai's library, a direct codebase dependency since v0.1, was gone.

Wei Dai's b-money is whitepaper reference [1], his Crypto++ shipped inside Bitcoin v0.1, and he was the second person Satoshi contacted. The evidence for Wei Dai as Satoshi, weighed.

March 25, 2014 Forbes feature: Andy Greenberg followed the Temple City coincidence to Hal Finney, then dropped the theory after seeing Finney's 2009 emails with Satoshi and his wallet record.

He built RPOW, received the first Bitcoin transaction, and lived blocks from Dorian Satoshi Nakamoto. The evidence for Hal Finney as Satoshi, weighed.

Bitcoin Institute's reanalysis of van Dorst's stylometric corpus for the five most-cited candidates. Szabo led them, in the top 4.67% of 12,739 authors, but 594 unnamed authors came closer.

Aston University Centre for Forensic Linguistics released Project Bitcoin (April 2014): a stylometric study under Jack Grieve naming Szabo as the most likely whitepaper author among 11 candidates.

On April 13, 2024, Bas van Dorst published Where is Satoshi?, a large-scale stylometric corpus comparing Satoshi against 75,000+ cryptography mailing-list authors and 70,000+ Reddit commenters.

On February 22, 2021, Evan Hatch published Len Sassaman and Satoshi: a Cypherpunk history on Medium — the article that became the foundational case for the Sassaman = Satoshi Nakamoto hypothesis.

On December 1, 2013, blogger Skye Grey published Satoshi Nakamoto is (probably) Nick Szabo — the first public stylometric study naming Szabo as Satoshi, reported by TechCrunch on December 5.

On May 15, 2015, the New York Times published Nathaniel Popper's Decoding the Enigma of Satoshi Nakamoto — a Digital Gold excerpt naming Bit Gold designer Nick Szabo as Satoshi. Szabo denied it.

He conceived Bit Gold, and three of the four most-cited stylometric studies place him first. The evidence for Nick Szabo as Satoshi, weighed.

Hanyecz recalls his Satoshi correspondence around the April 19, 2010 macOS port. The private emails are unreleased; quotes are from later interviews. He called Satoshi paranoid, bossy, and weird.

Hanyecz recalls Satoshi's private pushback on his May 10, 2010 BitcoinTalk GPU-mining announcement. The verifiable element is the announcement; Satoshi's side comes from Hanyecz's later interviews.

Adam Back announces Hashcash to the Cypherpunks list — a proof-of-work postage scheme against spam, pitched as a stopgap until digicash spread or a fallback if it failed.

Adam Back replies to Wei Dai on Cypherpunks, identifying seven monetary-design issues in b-money and proposing Hashcash as the minting mechanism — a substantive analysis ten years before Bitcoin.

Bitcoin v0.1 reuses one cypherpunk primitive (PoW from Hashcash), borrows general CS components (Merkle trees, linked timestamping, ECDSA), and synthesizes the rest (UTXO, mining, 21M cap, P2P).

On April 8, 2026, the New York Times published John Carreyrou's investigation naming Adam Back as the most likely Satoshi based on stylometric analysis. Back denied the identification.

Hashcash's inventor and the first person Satoshi contacted. In April 2026 the NYT named him the closest stylometric match among 620 cryptography-mailing-list writers. The evidence, weighed.

Satoshi has been hunted in public for years and left a large trail of material, yet remains unidentified. Why all that searching and all that material have not led to a name.

How "Satoshi Nakamoto" stayed unidentified through development, the public phase and withdrawal, in six layers: pseudonym, channels, language, development environment, genesis constants and handover.

A reply that read like the continuation of Satoshi's thought — and two days later, Satoshi went silent. The evidence for HBO's Peter Todd identification, weighed.

Twelve recurring Satoshi candidates, compared across four independent layers: profile match, stylometric attribution, direct correspondence and development environment.

The only Japanese-named candidate, creator of the anonymous P2P system Winny. The evidence for Isamu Kaneko as Satoshi, weighed.

American cryptographer (1980-2011), Mixmaster lead developer, KU Leuven PhD candidate. Died by suicide 68 days after Satoshi's last message. Later named in a Satoshi-identity hypothesis.

After Len Sassaman's death (July 3, 2011), security researcher Dan Kaminsky embedded an ASCII-art tribute into the Bitcoin blockchain, announced July 30 and revealed at Black Hat USA 2011.

The Mixmaster developer who died 68 days after Satoshi's last known email. The evidence for Len Sassaman as Satoshi, weighed.

Jameson Lopp argues Hal Finney could not have been Satoshi: on April 18, 2009, Finney was running a 10-mile race in Santa Barbara during a window of Satoshi network activity.

In September 2010, Satoshi privately tells Andresen he is working on other projects — the earliest documented sign of his intent to step back. Andresen later received the repository and the alert key.

Gavin Andresen announces on BitcoinTalk topic 2367 he is taking over active project management of Bitcoin with Satoshi's blessing. Same day, he creates the bitcoin/bitcoin GitHub repo.

Interactive D3 timeline of every documented Satoshi event — correspondence, mailing lists, BitcoinTalk, P2P Foundation, SourceForge — from August 20, 2008 to the disputed 2014 P2P Foundation post.