Litecoin: Three Parameters Scaled by Exactly Four, and a Founder Who Sold Every Coin He Held

Charlie Lee posted the launch of Litecoin and used the same post to state what he thought he was doing to Bitcoin’s code:

One of the goals of Litecoin is to not change what’s working (from Bitcoin) unless there was a good reason to.

Read against the actual diff, that sentence understates the case. Only four settings moved at all, and three of the four moved by exactly the same number: four.

Four numbers, one ratio

The two scaled intervals cancel out on the calendar. Bitcoin’s first halving lands after 210,000 blocks at 10 minutes each — about 2.1 million minutes, or four years. Litecoin’s lands after 840,000 blocks at 2.5 minutes each — the same 2.1 million minutes, the same four years. Blocks arrive four times as often; the halving still falls on the date it would have kept under Bitcoin’s own clock. The starting block reward carries the identical coincidence forward: 50 LTC, the same number Bitcoin started with. Among the fifteen currencies the fixed-supply comparison sets side by side, Litecoin is the one that changed only the scale and stayed on the capped side.

One setting inside that same announcement did not move at all. Bitcoin retargets its mining difficulty every 2,016 blocks, roughly two weeks; Litecoin kept the identical block count. At four times the block rate, those 2,016 blocks pass in about three and a half days — a difficulty adjustment four times more frequent than Bitcoin’s, riding on an interval its own announcement never mentioned changing.

A design premise that silicon proved wrong

The one change that was not a multiple of four is where the stated caution gave way to an untested design choice. His reasoning, from the same post:

We really liked Tenebrix’s Scrypt proof of work. Using Scrypt allows one to mine Litecoin while also mining Bitcoin.

Scrypt was not built for mining. Colin Percival, the FreeBSD developer who wrote it, designed it in 2009 as a key-derivation function for his own Tarsnap backup service, specifically to make attacks with custom hardware expensive. Litecoin runs it with the parameters N=1024, r=1, p=1, which commit each single hash attempt to roughly 128 kilobytes of working memory, read and rewritten repeatedly before a result comes out. SHA-256 rewards raw arithmetic throughput, and a circuit built for nothing else runs it hundreds of times faster than a general-purpose chip. Scrypt’s assumption was that a memory requirement would narrow that gap, because custom silicon does not get cheap memory the way it gets cheap arithmetic.

128 kilobytes turned out to be a small enough requirement that the assumption didn’t hold. Scrypt’s memory requirement can also be traded for extra computation, keeping only some of the intermediate values and recomputing the rest when they are needed. In March 2014 KnCMiner took preorders for Titan, a miner built on a Scrypt ASIC, and Litecoin mining went the way of Bitcoin’s, into dedicated hardware. Bitmain’s own rise through that period is Jihan Wu’s record to tell. Monero built its own proof-of-work on the identical memory-hardness premise and watched dedicated hardware defeat it the same way, years later.

Scrypt changed the puzzle, not the mechanism: Litecoin still secures itself with spent electricity, and it sits on the proof-of-work side of the proof-of-work versus proof-of-stake comparison alongside Bitcoin, Dogecoin and Monero.

Borrowing hash rate to keep a fork honest

Scrypt produced one further consequence nobody designed for. When Dogecoin was built on Litecoin’s codebase in December 2013, through the Litecoin fork Luckycoin, it inherited Scrypt along with everything else — and a hash rate too thin to make a 51% attack expensive. In April 2014, Lee proposed the fix: let Dogecoin accept Litecoin’s own proof-of-work as its own. Dogecoin’s team announced the plan that August, and auxiliary proof-of-work (AuxPoW) went live on the network that September.

The mechanism costs a miner nothing extra. A Litecoin miner is already hashing candidate blocks with Scrypt, hunting for a result under Litecoin’s difficulty target. Merge-mining has that same miner commit a hash of a candidate Dogecoin block inside the coinbase transaction it was building anyway. If the resulting hash clears Litecoin’s target, it becomes a Litecoin block, exactly as before. If the identical hash also clears Dogecoin’s much lower difficulty target, that single proof of work is valid on both chains at once, and the miner is paid twice for one unit of computation. Dogecoin’s resistance to a 51% attack has run on Litecoin’s hash rate, not its own, ever since.

Governance, and the chain that adopted SegWit first

No single body can rewrite Litecoin’s protocol. In 2017, Lee left his post as engineering director at Coinbase to work full time on the Litecoin Foundation, a Singapore-registered nonprofit that funds and promotes development without holding unilateral authority over the code — contributors decide what ships, and the founder remains one voice among them, not the only one. The cross-chain comparison records Litecoin’s governance as “Contributors; founder publicly active,” which is this split between who funds the work and who writes the code.

That governance shape produced Litecoin’s sharpest technical first. On May 10, 2017, at block height 1,201,536, Litecoin activated Segregated Witness, which moves signature data out of the transaction data to raise effective capacity — the first major cryptocurrency to do so, months ahead of Bitcoin’s own SegWit lock-in that August.

The ledger itself stayed exactly as transparent as it had been at launch, with one opt-in exception: Mimblewimble Extension Blocks (MWEB), activated May 19, 2022 at block height 2,257,920, let a holder move coins into a confidential extension block that hides the amount and the counterparties. Nothing changes for anyone who does not opt in. The creator’s own description of the privacy on offer stayed characteristically modest:

For most people, that’s good enough. It’s the difference between living in a glass house vs living in a house with windows.

What Lee has kept saying about Bitcoin

Litecoin’s creator has ranked his own chain second with a consistency unusual among the founders of a competing currency:

Bitcoin is obviously the soundest form of money around, and Litecoin, I would say, is the second soundest.

The ranking had hardened into an image:

Bitcoin is currency for kings and Litecoin is currency for the people.

The one time Lee changed his own relationship to that ranking was December 20, 2017, when he announced he had sold or given away every LTC he owned. The reason he gave was not price. It was the asymmetry between what he said and what the market did with it:

Some people even think I short LTC! So in a sense, it is conflict of interest for me to hold LTC and tweet about it because I have so much influence.

Lee limited his own standing to speak about the coin he made by giving up his holding of it. About Bitcoin, he has kept speaking without placing that limit on himself.

Litecoin’s supply trajectory sits alongside Bitcoin’s and ten other currencies’ on a single normalized index:

Significance to Bitcoin

Litecoin is a controlled experiment Bitcoin never ran on itself: hold the codebase constant, move three settings by an identical factor and swap one function, and see what still works. What still works is everything — a coin that halves on Bitcoin’s own calendar, mines on a different function, and settles under a Singapore nonprofit instead of no one at all. That result says the specific numbers in Bitcoin’s own design — 21 million, 210,000 blocks, 10 minutes — were choices among workable options, not physical constraints the protocol was forced into.

Measured against the six features Bitcoin Institute uses to read digital-gold status, Litecoin matches Bitcoin on three: system decentralization, a fair, mined-from-block-one launch, and a hard cap it has never revisited. It fails a fourth, the founder’s departure. Satoshi’s departure left Bitcoin with no one left to ask; Lee never left, and has spent more than a decade telling audiences that his own coin ranks under Bitcoin’s. When his own visibility became the conflict of interest, in December 2017, he did not stop talking — he sold the coin he was talking about. Where Satoshi separated Bitcoin from its founder by disappearing, Lee tried the opposite operation: stay, keep speaking, and hold nothing that the speech could move.