Bitcoin

What Bitcoin is

Bitcoin is a decentralized digital money system. There is no company, no central server, and no one in charge. A network of computers — anyone can run one — agrees on a shared ledger of who owns what, and that agreement is enforced by math and economic incentives rather than by trust in any person or institution. A unit on that ledger is called a bitcoin (lowercase), and the total supply is capped at 21 million.

Bitcoin exists to solve one specific problem that had defeated cryptographers for decades: the double-spend problem for digital money. Physical cash is self-evidently hard to copy — if I hand you a $20 bill, I no longer have it. Digital files are trivially copyable, so any online payment has historically required a trusted middleman (a bank, a card network) to record who paid whom and stop anyone from spending the same unit twice. Satoshi Nakamoto's insight was that you could replace that middleman with a public, append-only ledger secured by proof of work, in which the cost of rewriting history literally exceeds the value of doing so.1

The nine-page whitepaper that proposed this, emailed to a cryptography mailing list on October 31, 2008, is one of the most consequential documents in the history of money. It does not invent any single new cryptographic primitive — hashing, digital signatures, and proof of work all predated it. What it does is combine known pieces into a system that, for the first time, allowed strangers on the internet to agree on a single shared record without trusting each other or any third party.

How Bitcoin works

At the most basic level, Bitcoin is a ledger. The ledger records transactions, and transactions move units from one owner to another. What makes it work without a bank is that no one has the authority to write to it alone — instead, thousands of independent nodes each hold a full copy and follow the same rules about what counts as a valid block.

The transaction lifecycle

When you send Bitcoin, your wallet signs a message that says “spend these coins to this address.” A digital signature proves you own the coins (because only you hold the private key that can sign for them), and the message is broadcast to the network. Nodes check the signature, check the coins actually exist and haven't already been spent, and if everything is valid they pass the transaction along.

The transaction sits in the mempool — a holding area of unconfirmed transactions — until a miner includes it in a block. Miners compete to find the next block; the winner adds a batch of transactions to the chain and earns the block subsidy plus any fees. Once a transaction is buried under several blocks it is considered confirmed, and reversing it would require re-mining that block and every block after it — which becomes astronomically expensive the deeper it is buried.

Full nodes, light nodes, and the network

A full node stores and independently verifies the entire blockchain from the genesis block forward — it does not trust anyone else's summary. Running a full node is what gives you sovereignty: you accept only blocks that follow the rules you enforce. A light node (or SPV client) only downloads block headers and the proofs it needs for its own transactions, trusting that the heaviest chain is the valid one. Most mobile wallets are light nodes. The trade-off is convenience versus the independence of not having to trust anyone.

The network is peer-to-peer: nodes connect to each other directly, relay transactions and blocks, and refuse anything that violates the consensus rules. There is no central server to shut down, no API key to revoke, and no company whose outage stops the network.

The technology under the hood

Bitcoin is conservative software. It does not chase the newest cryptography; it uses a small set of well-understood, battle-tested primitives, assembled with care. That conservatism is a feature, not a limitation.

Hashing and SHA-256

A hash function takes any input and produces a fixed-size fingerprint. Bitcoin uses SHA-256, and the property that matters is that the output is unpredictable and effectively irreversible: you cannot derive the input from the output, and any tiny change to the input completely changes the output. Hashing is what links each block to the previous one (each block header contains the hash of the one before it, so tampering with any past block breaks every hash after it), and it is what miners grind on to win the right to add a block.

Proof of work and difficulty adjustment

To add a block, a miner must produce a block header whose hash is below a target value. Because hashes are unpredictable, the only way to find such a hash is to try billions of different inputs (varying a field called the nonce) and hope. This is proof of work170 — energy spent that cannot be faked after the fact. The work is useless for anything except securing Bitcoin, which is the point: an attacker cannot rewrite history without redoing all that work.

Every two weeks the network retargets the difficulty so that, no matter how much or how little hash rate is thrown at it, a block is found roughly every ten minutes. This difficulty adjustment is Bitcoin's economic heartbeat: it is what makes the issuance schedule predictable regardless of Moore's law, electricity prices, or how many miners join or quit.

Blocks, headers, and Merkle roots

A block contains a header and a list of transactions. The header carries the version, the previous block's hash, a Merkle root summarizing all the transactions, a timestamp, and the difficulty target. The Merkle tree is what lets a light node verify a single transaction is in a block without downloading the whole block — a cryptographic proof that scales to billions of transactions.

The UTXO model

Bitcoin does not track account balances. It tracks UTXOs — unspent transaction outputs. Every transaction consumes existing outputs (the inputs) and creates new outputs. A coin is not a number in an account; it is a chain of unspent outputs stretching back to the block that first created them. This is a different mental model from Ethereum's account model, and it has real consequences: it makes parallel validation easier and gives better privacy tooling (like CoinJoin and coin control), at the cost of more complex wallet logic and a change address on nearly every transaction.

Signatures: ECDSA, then Schnorr

For most of its life Bitcoin used ECDSA signatures over the secp256k1 curve. In 2021, Taproot brought Schnorr signatures, which are smaller, cheaper to verify, and — crucially — allow multiple signers to combine their public keys and signatures into one. This makes multisig look identical to a single-signature transaction on chain, improving both privacy and efficiency. Complex spending conditions are hidden inside a MAST structure, so only the path that actually executes is revealed.

Address types

A Bitcoin address is a short identifier derived from a public key (or a script). Over the years the format has evolved, and all three coexist today:

• Legacy (P2PKH) — addresses starting with 1. The original format, still works, largest and most expensive.
• SegWit (P2SH-P2WPKH / Bech32) — addresses starting with 3 (nested) or bc1q (bech32, native). Introduced in 2017, they fix a long-standing bug called transaction malleability and lower fees by discounting signature data.
• Taproot (P2TR, bech32m) — addresses starting with bc1p. The newest, smallest, and most private, enabled by the 2021 upgrade.

Most modern wallets default to Taproot or native SegWit. The old formats still work because Bitcoin never deletes support — backward compatibility is part of the conservatism.

Mining and issuance

Mining is the process that adds blocks and secures the chain. A miner collects pending transactions, builds a candidate block, and races to find a hash below the target. The winner appends the block and is paid in two ways: the block subsidy (newly created coins) and the transaction fees from the block's contents.

The halving and the 21 million cap

The block subsidy started at 50 BTC and halves every 210,000 blocks (roughly four years). This halving is the mechanism by which Bitcoin approaches its 21 million cap. Because the subsidy is cut in half on a fixed schedule and can be halved only 32 times before it rounds to zero, the total supply is mathematically bounded. The last fraction of a bitcoin will be issued around the year 2140 — after that, miners are paid only in fees.

This is the part most at odds with how money normally works. Central banks expand the money supply to hit policy targets; Bitcoin's supply curve was set in 2009 and cannot be changed without a fork that everyone would have to voluntarily adopt. Whether that is a virtue or a flaw is the central philosophical argument around Bitcoin, and we come back to it below.

Mining pools and the fee market

Solo mining is now a lottery almost no one wins, so miners join pools that split the work and the rewards by contribution. Block space is scarce — roughly a few thousand transactions per block — so users bid for inclusion with fees. This is Bitcoin's fee market: when demand is high, fees rise until some users wait. As the subsidy shrinks over the decades, fees are expected to become the larger share of miner revenue, which is the long-run security budget of the network.

Economics and tokenomics

The economic argument for Bitcoin rests on scarcity and predictability. The supply schedule is known in advance, cannot be inflated away by a political decision, and is verifiable by anyone running a node. Whether this makes Bitcoin money is contested — and the contest is informative.

Store of value vs. medium of exchange

Money is supposed to be a store of value, a medium of exchange, and a unit of account. Bitcoin is a poor medium of exchange at the base layer (slow, limited throughput) and barely a unit of account (prices are still quoted in dollars). Its case rests largely on the first function — as a store of value, or “digital gold.” The counter-argument is that a store of value that swings tens of percent in a week is doing the job badly; the rejoinder is that a young monetary asset is expected to be volatile while its market cap is still small relative to gold, and that volatility has declined with each cycle as liquidity deepens. The honest answer is that this is unresolved. The “what is money” deep dive covers this tension in more detail.

Stock-to-flow, scarcity, and the fee-market transition

Tokenomics arguments often invoke stock-to-flow — the ratio of existing supply to new production. Gold's high stock-to-flow is cited as why it holds value; Bitcoin's is designed to rise over time and eventually exceed gold's, then go to infinity when issuance stops. The model is popular and also heavily criticized as a narrative rather than a predictor. What is undeniable is that issuance is on a fixed downward glide path, and that at some point the network must pay for its own security with fees alone. Whether fee revenue will be enough is the most important long-run economic question for Bitcoin.

The philosophy

Bitcoin is not just a technology; it is a set of beliefs about money, trust, and power. Those beliefs did not appear from nowhere — they trace back to a specific movement and a specific intellectual tradition, and understanding them is part of understanding Bitcoin itself.

Cypherpunk roots

Bitcoin descended directly from the cypherpunks, a movement of the late 1980s and 1990s who believed that cryptography could protect individual liberty against state power169. They wrote the manifestos, built the precursor systems (eCash, Hashcash, Bit Gold, and others), and spent two decades failing to solve the exact problem Satoshi solved. Satoshi stood on their shoulders.213

Sound money and Austrian economics

A lot of Bitcoin culture draws on the sound money tradition and Austrian economics — the view that money should be scarce, hard to produce, and immune to political manipulation. The 1971 end of Bretton Woods and the subsequent fiat era loom large in this worldview: the argument is that unbacked money lets governments inflate away savings and fund themselves without consent, and that a money supply no one can change fixes that. Not everyone shares the premise, but it is the premise a great deal of Bitcoin's support is built on.

Self-sovereignty, censorship resistance, and “don't trust, verify”

The core value is self-sovereignty: the idea that you should hold your own keys and verify the rules yourself rather than entrust a custodian. This is the meaning of “don't trust, verify” and of censorship resistance — no central party can freeze your coins or block your transaction, because there is no central party. It is also why immutability matters: the chain does not roll back for anyone, which is the same property that means nobody can roll it back against you.

The maximalism debate, fairly

A visible strand of the culture is Bitcoin maximalism — the view that Bitcoin is the only cryptocurrency that matters and that everything else is, at best, a distraction and, at worst, a scam. The strongest version of the argument is that Bitcoin's simplicity, conservatism, Lindy effect, and unmatched security make it the only credible long-run settlement layer, and that the rest of crypto recreates trust and counterparty risk that Bitcoin was built to remove. The strongest counter is that this is self-serving dogma that ignores genuine innovation in programmability, privacy, and scaling elsewhere — and that the sometimes-hostile tone (“toxic” maximalism) repels people who might otherwise benefit from self-custody. Both points have merit, and most thoughtful people hold some version of each.

Governance and the BIP process

Bitcoin has no CEO, no foundation with authority over the protocol, and no single maintainer who decides what ships. The closest thing to a process is the Bitcoin Improvement Proposal (BIP) system, modeled on the older internet RFC tradition. Anyone can write a BIP; it is discussed, implemented, reviewed, and — only if a broad coalition of developers, miners, exchanges, and users voluntarily adopt it — it becomes part of the protocol.

This is governance by consensus, not by vote. There is no on-chain governance, no token vote, and no entity that can force an upgrade. The result is that Bitcoin changes slowly and rarely. In seventeen years it has had only a handful of meaningful upgrades, each years in the making. Critics call this stagnation; supporters call it the most valuable property a monetary protocol can have — predictability.

Soft forks vs. hard forks

A soft fork tightens the rules in a way old nodes still accept (they see the new blocks as valid), so it can activate without everyone upgrading. A hard fork loosens or changes the rules such that old nodes reject the new blocks — it is, in effect, a split into two networks. Bitcoin has historically refused hard forks to its consensus rules; when factions have insisted (the block-size fight), the dissenters left and Bitcoin kept its rules. This is why there is one Bitcoin and many altcoins that began as Bitcoin forks.

The block-size war and the forks

The most contentious moment in Bitcoin's history was the block-size war of 2015–2017. The dispute was technical — how big should blocks be? — but it was really about what kind of network Bitcoin should become: a high-throughput payment network that might need bigger, more centralized blocks, or a lean settlement layer that anyone could validate on modest hardware, with scaling pushed to higher layers.

The Small Block side won. SegWit activated in August 2017 through a user-activated soft fork194, a mechanism by which nodes and users — not just miners — signaled readiness and forced the issue. The Big Block faction hard-forked away to create Bitcoin Cash, and later Bitcoin SV. None of the forks matched the original's market value or hash rate, and the episode settled, for now, the question of how Bitcoin makes decisions: slowly, conservatively, and only with overwhelming consensus.195 The full deep dive →

The security model

What actually keeps Bitcoin safe is a combination of cryptography and economics. The cryptography guarantees that no one can forge a signature, spend coins they don't own, or quietly edit the ledger. The economics guarantees that rewriting a lot of history costs a lot of real energy — more than you could profit from doing so.

The 51% attack

A 51% attack is the textbook threat: if a single miner controls more than half the hash rate, they can censor transactions and reorganize recent blocks to double-spend. They cannot steal coins they don't own or print new ones — that still requires valid signatures — but they can break short-range finality. In practice this has never happened on Bitcoin at scale, because acquiring a majority of the network's hash rate means out-spending the rest of the world's miners, and doing so visibly would crash the price you are trying to profit from. The attack is self-defeating against an asset you hold.

The user's security responsibility

Bitcoin secures the chain; it does not secure your keys. If you lose your seed phrase, your coins are gone — there is no support line. If you reveal it, anyone can take everything. This is the trade-off of self-custody: you get censorship resistance and no counterparty risk, but you also get no safety net. Most lost Bitcoin is lost this way, not to hackers — the famous “lost coins” are mostly keys people misplaced, not exploits. See the Cold Storage lab and the Mnemonic Demo for how this works in practice.

The network stack and Lightning

The base layer of Bitcoin is deliberately small and slow — a few transactions per second, a block every ten minutes, settlement in tens of minutes to hours. This is the price of a chain anyone can validate on a cheap computer. Scaling to millions of payments per second happens on top, not by bloating the base chain.

The main Layer 2 is the Lightning Network, a network of bidirectional payment channels. Two parties open a channel with an on-chain transaction, then send each other unlimited off-chain payments by updating the channel balance, and close it with one final on-chain transaction. Payments across the network route through chains of channels using HTLCs (hash-locked contracts) so that each hop is atomic — either the whole payment completes or none of it does. Lightning can settle in milliseconds for fractions of a cent, but it has real limitations: channel liquidity, routing complexity, and the channel jamming problems that are still being worked out. The Lightning deep dive →

This is the layered model: a maximally secure, minimally expressive base for final settlement, with faster and cheaper systems built on top that inherit the base layer's credibility. It is the opposite of the approach that puts every feature on the base chain, and it is the crux of the Bitcoin-vs-Ethereum design debate.

History and milestones

Adoption and use cases

What Bitcoin is used for has shifted repeatedly, and the shifts are part of the story.

Digital gold and a savings technology

The dominant use today is as a store of value — a digital, portable, non-sovereign savings asset. People hold it for the same reason they hold gold: as a hedge against fiat debasement and jurisdictional risk, with the added property that it can be moved across a border with a memorized phrase. The “stack sats” culture is just dollar-cost-averaging into this thesis.

Remittances, settlements, and the unbanked

Where banking is expensive or absent, Bitcoin (often over Lightning) is a working way to send value across borders without a correspondent bank. This matters most in places with broken payment rails; it matters least where a credit card already works.

Nation-state adoption

El Salvador made Bitcoin legal tender in 2021206, launched a national wallet, and built a geothermal mining operation. It remains the most ambitious state experiment with Bitcoin, and the verdict is still out: adoption has been uneven, but the country has drawn tourism and investment from the experiment.49 Other states have explored it more cautiously, mostly as a reserve or mining play rather than legal tender.

Corporate treasury and the spot-ETF era

MicroStrategy's Bitcoin treasury strategy began a wave of corporate balance-sheet adoption, and the 2024 approval of US spot Bitcoin ETFs opened the door to pensions, endowments, and retirement accounts.6 That is a deep irony worth naming: the very institutions the cypherpunks wanted to route around are now the largest on-ramps. The trade-off is that ETFs reintroduce custodial exposure — investors in a Bitcoin ETF do not hold their own keys, which is precisely the thing Bitcoin's philosophy says you should do. The culture is still working out what to make of that.

Energy and environment

Bitcoin's proof of work uses real electricity — by some estimates comparable to a medium-sized country. Whether that is a catastrophic waste or a productive use is one of the most heated arguments in crypto, and it deserves to be taken fairly from both sides.

The critique is straightforward: spending terawatt-hours on a guessing game looks absurd in a climate-constrained world. The defense has several strands. First, the absolute figure is smaller than gold mining or many industrial sectors that draw less scrutiny. Second, miners are location-agnostic and tend to chase the cheapest energy, which is often stranded or curtailed — hydro that has nowhere to go, natural gas that would otherwise be flared (with miners capturing the methane, a climate-positive twist). Third, mining is flexible load that can shut off in seconds, which makes it useful for grid balancing and for subsidizing renewable build-out that would not otherwise pay for itself. The Cambridge index203 and the Digiconomist index204 disagree on methodology, and the honest position is that the truth depends heavily on the energy mix each miner uses. The energy deep dive covers both sides in detail →

Critiques and risks

A serious treatment of Bitcoin has to take the strongest criticisms at face value rather than wave them off.

• Volatility. The price regularly moves tens of percent in short windows, which makes it a poor unit of account and a scary store of value over short horizons. The response is that this is the expected behavior of a young, illiquid monetary asset, and that volatility has compressed with each cycle; the counter is that “this time it's different” is the oldest line in finance.
• Scaling limits. The base layer processes a handful of transactions per second, and Lightning, while real, has not yet reached mass-payments scale. If Lightning or a successor never delivers, Bitcoin risks being only a settlement layer for large value, not everyday money.
• Lost coins and supply uncertainty. A meaningful fraction of the 21 million is permanently lost (forgotten keys, deceased holders, sent to wrong addresses). The effective supply is lower and unknown, which complicates the “fixed supply” narrative even if it does not break it.
• Custody risk. Self-custody is hard and unforgiving; custodial solutions (exchanges, ETFs) reintroduce the exact counterparty risk Bitcoin was designed to eliminate. Mt. Gox, FTX, and a long list of exchange failures are the evidence that the custody problem is not solved, merely moved.
• Regulatory risk. States can ban exchanges, tax transactions punitively, or criminalize self-custody. They cannot easily stop the network itself, but they can sharply curtail access — and most users interact with Bitcoin through regulated intermediaries.
• Quantum computing. A sufficiently powerful quantum computer could break the elliptic-curve cryptography Bitcoin relies on. This is a real long-run threat, though the consensus is that it is decades away for the relevant key sizes, and a quantum-resistant signature scheme can be added via a soft fork before it becomes urgent. The harder problem is coins in already-exposed public keys, which is why post-quantum migration is being thought about now, not later.

None of these are reasons to dismiss Bitcoin; they are the reasons its outcome is genuinely uncertain. The interesting question is not whether the risks exist — they do — but whether the design is robust enough to address them over time without abandoning the properties that make it Bitcoin.

Wallets and custody

A wallet is not a container for coins — the coins never leave the chain. A wallet is really a key manager: it stores the private keys that let you sign for your UTXOs. Lose the keys and you lose access; never lose the keys and you never lose access.

Custodial vs. non-custodial

A custodial wallet (an exchange, some apps) holds the keys for you — convenient, but you are trusting the custodian and are back to counterparty risk. A non-custodial wallet means you hold the keys; the trade-off is the full weight of responsibility. The Bitcoin ethos is firmly on the non-custodial side, summed up as not your keys, not your coins.

Hot, cold, and hardware wallets

A hot wallet is connected to the internet — convenient for spending, exposed to compromise. A cold setup keeps signing keys offline. A hardware wallet is a dedicated device that signs transactions without ever exposing the key to the computer it plugs into, which is the practical sweet spot for most people holding meaningful value. The Cold Storage walkthrough shows how this is actually done.

Seed phrases and multisig

Modern wallets derive all keys from a seed phrase (a sequence of words defined by BIP39), so you back up one phrase instead of hundreds of keys. For larger holdings, multisig (e.g. “2 of 3” keys required to spend) protects against a single lost or stolen key — try it in the Multisig lab. The recurring lesson across all of this is that custody is the part Bitcoin cannot do for you: the network is bulletproof; the human holding the keys is the soft target.

The people and culture

Bitcoin has a culture as much as a protocol, and the culture is part of why it has held together without a leader.

Satoshi, the cypherpunks, and Hal Finney

The cast is small at the start: Satoshi Nakamoto, who disappeared in 2011 and whose ~1.1 million BTC have never moved; Hal Finney, the cypherpunk who received the first transaction and kept believing even as ALS took everything else; and the wider cypherpunk movement whose two decades of failed attempts made Bitcoin possible. Satoshi's exit was not an accident — it removed the single point of failure a known founder would have become.

HODL, stacking sats, and the lexicon

The culture has its own language. HODL began as a typo (“I AM HODLING”) and became the shorthand for holding through volatility. Sats — satoshis, the hundred-millionth of a bitcoin — is the unit people actually think in; “stacking sats” is steady accumulation regardless of price. Pleb is the self-deprecating term for an ordinary holder, and proof of keys is an annual tradition of withdrawing from exchanges to self-custody. None of this is decoration: the shared language is how a leaderless community coordinates a shared worldview.

The maximalism debate, revisited

The harder-edged side of the culture — “toxic” Bitcoin maximalism — is genuinely divisive. Its defenders argue the hostility is a useful filter against the constant flood of scams and that it has kept the base layer uncompromised. Its critics argue it repels newcomers and allies, and substitutes loyalty for thought. The truth is that the culture is not monolithic; the people actually building and running nodes are often far quieter than the loudest voices online.

The road ahead

Bitcoin's future is not predetermined, but several transitions are visible on the horizon.

• The end of issuance (~2140). When the block subsidy reaches zero, miners live on fees alone. Whether fee revenue will sustain enough security is the single most important long-run question for the protocol, and it has no certain answer.
• Lightning's maturity. If Lightning (and related layers) reach everyday-payments scale, Bitcoin becomes a credible medium of exchange on top of a settlement layer. If they stall, it remains primarily a store of value.
• Institutional integration vs. self-custody. The ETF-and-treasury wave brings scale and legitimacy, but it also brings custodial concentration and a constituency with different incentives than early holders. Reconciling Wall Street custody with not your keys, not your coins is an open cultural question, not just a technical one.
• Protocol evolution. Covenants, Schnorr-based vaults, and other proposed upgrades are debated with the usual Bitcoin conservatism. The pattern is slow consensus-building, and that is unlikely to change.

What is striking is how little the fundamentals have changed in nearly two decades. The issuance schedule is the one Satoshi set. The block time is ten minutes. The cap is still 21 million. Almost everything that has happened since — the exchanges, the hacks, the ETFs, the nation-states — has happened around Bitcoin, not to it. That stability, more than any single feature, is what the people who support it are really supporting.

Key takeaways

• Bitcoin is a decentralized ledger secured by proof of work, with a fixed supply of 21 million and a predictable issuance schedule that halves roughly every four years until it ends around 2140.
• It solves the double-spend problem without a trusted third party by making it more expensive to rewrite history than to extend it — cryptography enforces the rules, and economics funds the enforcement.
• The design is deliberately conservative: a small, slow, anyone-can-validate base layer, with scaling pushed to layers like Lightning. Most “missing” features are absent on purpose.
• Its philosophy descends from the cypherpunks and the sound-money tradition: self-sovereignty, censorship resistance, and “don't trust, verify.” Whether that worldview is right is a real argument, not a settled one.
• Governance is by consensus, not vote: Bitcoin changes slowly and rarely, and has refused hard forks to its consensus rules even under intense pressure (the block-size war).
• The real risks are custody (lost keys, failed exchanges), regulation, and the long-run fee-market transition — not, so far, a 51% attack or a cryptographic break.
• For the deeper stories behind each of these — Satoshi, the cypherpunks, Mt. Gox, the block-size war, Lightning, the energy debate — follow the related Deep Dives below.