Progress pill
The Slow Emergence of Bitcoin

The Birth of Bitcoin

  • The Discovery
  • Preparation
  • The publication of the white paper
  • Monetary Policy and Software Code
  • The Software Release and Network Launch
  • A Progressive Design
After learning where Bitcoin came from, we will focus on its history. This has been the subject of numerous articles, podcasts, and videos, so much so that it has almost become a founding myth. As we have seen, Bitcoin is inseparable from the context in which it was created; the same is true for the events that took place during its early years, which have shaped what it is today, with its qualities and flaws. Bitcoin was created by Satoshi Nakamoto, an unknown individual claiming to be Japanese, who took the time to thoughtfully design it before unveiling it to the public. Subsequently, they did everything to ensure that Bitcoin was launched under the best conditions, that it was well presented in discussions, and that an increasing number of people used it. Ultimately, the creator's effort lay as much in the economic initiation of the system as in its initial design, if not more.
This chapter deals with the birth of Bitcoin, which took place between the fall of 2008 and the winter of 2009. This period was marked by two major events: the publication of the white paper, the foundational document that explains the technical workings of the system, on October 31, 2008; and the launch of the prototype network on January 9, 2009, just over two months later. Thus, we will focus on Satoshi Nakamoto's actions during this period and his few interactions with Bitcoin's early adopters and first detractors.

The Discovery

According to his own testimony, Satoshi Nakamoto began working on Bitcoin during the spring of 2007. After conducting various research on digital currencies, he eventually found a way to solve the double-spending problem without the need for a trusted third party. He kept his model a secret for over a year, wanting to refine it to ensure its robustness. As he wrote later:
"At some point, I became convinced there was a way to do this without any trust required at all and couldn't resist to keep thinking about it. Much more of the work was designing than coding."
To ensure it functioned correctly, Satoshi programmed a prototype before drafting the white paper. This approach is the opposite of what is usually done within the academic community, where concepts are formally presented in scientific papers before implementation. The creator of Bitcoin stated:
"I actually did this kind of backwards. I had to write all the code before I could convince myself that I could solve every problem, then I wrote the paper."

Preparation

It was in August 2008 that Satoshi decided to prepare for the launch of Bitcoin. On the 18th, he reserved the domain name Bitcoin.org through the anonymous service AnonymousSpeech (as well as Netcoin.org, probably having not finalized the choice of name for his concept). The domain name would host the main Bitcoin site. However, Satoshi was unable to reserve the domain name Bitcoin.com, which was then held by a speculator and would be used between 2009 and 2011 by a company called BitCoin Ltd., specializing in micropayments.
On August 20th, the creator of Bitcoin contacted, Adam Back, by sending him an email asking for advice on how to cite his paper on Hashcash in the white paper. It's hard not to see this as a pretext to ensure that the inventor of Hashcash became aware of his new system.
Adam Back in 2012 (source: Adam Back's personal page)
The email contained a link to a draft of the white paper. The PDF file name was ecash.pdf, and its title was "Electronic Cash Without a Trusted Third Party." The abstract is the same as the first version, which will be published in October, with a one-word difference. Unfortunately, we do not have the full document. The day after reading Satoshi's summary (but not the paper), Adam Back redirects him to Wei Dai's b-money proposal, which seems similar to his concept. Satoshi responds by thanking Adam Back for the pointer and specifying that "my ideas start from exactly that point." Adam Back also mentions the existence of MicroMint, but Satoshi does not respond.
The day after that, on August 22, Satoshi sends an email to Wei Dai saying he "is getting ready to release a paper that expands on your ideas into a complete working system" and asks him for the publication year of his page on b-money so he can reference it in the white paper. As in his exchange with Adam Back, he shares the draft of the white paper with Wei Dai.
Despite these interactions, Adam Back and Wei Dai did not immediately take an interest in Satoshi's concept. They would only return to Bitcoin years later: Wei Dai in 2010-2011 and Adam Back in 2013.
For his part, Satoshi finishes preparing to make his invention public. On October 3, he completed the first version of the Bitcoin white paper, which now has its name chosen. On October 5, he registered on the SourceForge project management platform, where the open-source software's source code would be hosted and maintained until 2011.

The publication of the white paper

On October 31, 2008, Satoshi Nakamoto publishes the first version of the white paper on an email mailing list dedicated to cryptography, simply called the "Cryptography mailing list." This list has been managed by developer Perry Metzger since 1996, its creation, and has been hosted on his personal site, Metdowd.com, since 2003. It is the successor to the cypherpunks list, with the difference that it is subject to strict moderation. In 2008, several former cypherpunks, such as John Gilmore, Hal Finney, and Len Sassaman, still participated.
In his first email addressed to the list, Satoshi writes:
"I've been working on a new electronic cash system that's fully peer-to-peer, with no trusted third party."
It also lists the main properties of his model:
  • "Double-spending is prevented with a peer-to-peer network."
  • "No mint or other trusted parties."
  • "Participants can be anonymous."
  • "New units are made from a Hashcash-style proof-of-work."
  • "The proof-of-work used for generating new units also allows the network to prevent double-spending."
In his email, he includes a link to the white paper, which is already hosted on Bitcoin.org. This short 9-page document, presented as a scientific article, describes the technical workings of Bitcoin and focuses on the problem of online payments.
Satoshi received a few responses following this announcement, but most were skeptical. He is notably criticized for three things:
  • First, the cypherpunk James A. Donald challenges the scalability of the system by saying that "it does not seem to scale to the required size." Satoshi replies that "the bandwidth might not be as prohibitive as you think."
  • The second negative comment comes from John R. Levine, author of the book Internet for Dummies and a consultant specializing in email infrastructure, spam filtering, and software patents. He criticizes Bitcoin's security by mentioning the computational power held by "zombie machine farms" composed of computers controlled by hackers. He specifically points out that, on the Internet, "the good guys have significantly less computational power than the bad guys." Satoshi responds brilliantly: "The requirement is that the good guys collectively have more computational power than any single attacker."
  • Finally, an individual named Ray Dillinger (using the pseudonym bear) wonders about the value of the unit of account, lamenting the fact that "computational proofs of work have no intrinsic value" and criticizing their inflationary nature due to the technical evolution of computer hardware. Satoshi replies that "the increase in hardware speed is accounted for" by the periodic adjustment of the production difficulty. Even though skepticism is the predominant attitude on the list, it is not shared by everyone subscribed to the mailing list. In particular, one person stands out from the others with their enthusiasm: Hal Finney, who has an optimistic view of the future and never gave up on the idea of electronic cash, despite the failures of the 90s. He stated on this matter a few years later that "cryptographic graybeards [...] tend to become cynical" but that he "was more idealistic" having "always loved cryptography, its mystery, and its paradox." (original: "I've noticed that cryptographic graybeards (I was in my mid 50's) tend to get cynical. I was more idealistic; I have always loved crypto, the mystery and the paradox of it.") Thus, on November 7, he wrote in an email to the list that "Bitcoin seems to be a very promising idea" and compares Satoshi's model to Nick Szabo's bit gold. (original: "Bitcoin seems to be a very promising idea.")
Hal Finney in 2007

Monetary Policy and Software Code

Bitcoin uses a distributed consensus algorithm that allows all network nodes to agree on the contents of a ledger, which Hal Finney refers to in his first email as the "block chain," in two words. The correct blockchain chosen is the one that has the most blocks, and conflicts over competing blocks are resolved according to this simple principle. The mechanism would be refined later to account for the amount of work accumulated rather than the number of blocks.
This consensus mechanism allows for the imposition of all sorts of rules and incentives (to use the last phrase of the white paper) within the system. Since Bitcoin constitutes a distributed timestamping service, it is also possible to have these rules interact with time. Hence, the difficulty adjustment algorithm that comes into play to regulate the production of new blocks and the associated bitcoins: if the number of blocks produced over a given period is too high, then the difficulty of production increases; in the opposite case, it decreases. Thus, Bitcoin differs from RPOW, where the work proofs form the units of account. Thanks to this difficulty adjustment, Bitcoin can have a monetary policy, meaning that the amount of new units issued by the protocol can be predetermined. Initially, it is planned for the monetary issuance to be constant to encourage producing nodes to contribute their computing power to the network, and there are no transaction fees. As Satoshi Nakamoto writes in the "Incentive" section of the white paper:
"The steady addition of a constant of amount of new coins is analogous to gold miners expending resources to add gold to circulation."
This property, confirmed by Satoshi on the mailing list and in his private correspondence, does not escape James A. Donald. On November 9, he criticizes the "work of tracking who owns what" (i.e., mining) for being "paid by seigniorage" and for "requiring inflation," even though he notes that "predictable inflation is less objectionable than inflation that gets jiggered around from time to time to transfer wealth from one voting block to another." (original: "in the proposed system the work of tracking who owns what coins is paid for by seigniorage, which requires inflation. This is not an intolerable flaw - predictable inflation is less objectionable than inflation that gets jiggered around from time to time to transfer wealth from one voting block to another.") Furthermore, he notes that a mining node which "ignores all the spends it does not care about" suffers "no adverse consequences," thereby highlighting the problem of censorship. (original: "If one node is ignoring all spends that it does not care about, it suffers no adverse consequences.")
These remarks probably made Satoshi realize that he could implement a transaction fee mechanism that solves both problems, by replacing the creation of new units and encouraging miners to "include all the paying transactions they receive." (original: "nodes would have an incentive to include all the paying transactions they receive.")
At the same time, the questions from his interlocutors prompted him to share the source code of his model. On November 16, Satoshi transmitted the code to Hal Finney, James A. Donald, and Ray Dillinger. On the 17th, in response to James A. Donald on the mailing list, he wrote that he had sent him "the main files," which were "available by request at the moment" and that their "full release" would happen "soon." (original: "I sent you the main files.  (available by request at the moment, full release soon)") In this portion of the code, which was made public in 2013 by Ray Dillinger, one can see that all the foundational elements of Bitcoin are present: the blockchain (then still called "timechain"), proof of work, the coin representation model (UTXO), transaction programmability, transaction fees, and halving.
However, some parameters differ, indicating that they were chosen spontaneously or, as Satoshi wrote, by "educated guess." (original: "educated guess") The block time, the targeted period between each block, is 15 minutes instead of 10. The difficulty adjustment period is 2,880 blocks (equivalent to 30 days for a block time of 15 minutes) instead of 2,016 blocks (which corresponds to 14 days for a block time of 10 minutes). The halving mechanism, present in the GetBlockValue function, dictates that the halving should occur every 100,000 blocks, roughly every 2 years and 311 days:
int64 GetBlockValue(int64 nFees) { int64 nSubsidy = 10000 * CENT; for (int i = 100000; i <= nBestHeight; i += 100000) nSubsidy /= 2; return nSubsidy + nFees; }
There were 100 bitcoins created during the first 100,000 block period, 50 during the second period, etc., so the total number of bitcoins converged towards 20 million. Each bitcoin (COIN) is divisible into 100 cents (CENT), which are divisible into 10,000 base units. Thus, a bitcoin can be divided into 1 million smaller units, not 100 million as in version 0.1, which was released in January.
Hal Finney and Ray Dillinger then conducted a thorough review of the code. Each focused on a specific part of the system: Ray Dillinger was interested in the consensus part, and Hal Finney studied the script system. On December 10, Satoshi created the bitcoin-list mailing list, which was hosted on SourceForge. This list had little success, even though a few emails from interested people were sent over the years. Nonetheless, all of this demonstrates that everything was in place for the launch of the prototype, an event that would occur a month later, at the beginning of 2009.

The Software Release and Network Launch

On January 8, 2009, at 19:27, Satoshi Nakamoto published the first version of the software (numbered 0.1.0) on the Metzdowd.com mailing list. The C++ source code was released openly under the MIT license, so anyone could copy, modify, and use it as they wished. It notably contains the genesis block data, the first block of the chain from which the latter must extend. The software only works on Windows. In his email announcement, Satoshi wrote:
"Announcing the first release of Bitcoin, a new electronic cash system that uses a peer-to-peer network to prevent double-spending. It's completely decentralized with no server or central authority."
He specifies that "the software is still in alpha and in an experimental phase" and that "there is no guarantee that the system's state won't have to be restarted at some point if it becomes necessary." (original: "The software is still alpha and experimental. There's no guarantee the system's state won't have to be restarted at some point if it becomes necessary") There are two ways to obtain Bitcoins: by receiving funds from someone else or by activating coin generation using a CPU. There are also two ways to send units: using the recipient's IP address or through a Bitcoin address, which allows for sending a payment offline. Finally, the email describes Bitcoin's final monetary policy, which we will discuss in the following chapter. The code released is a bit more complex than presented and is written for the future development of an interface that would allow for more functionalities than just transferring bitcoins. Satoshi indeed integrated into the client the basics of an "eBay style marketplace" (original: "an eBay style marketplace built in to the client") which could notably "make it easy for anyone to offer currency exchange" (original: "make it easy for anyone to offer currency exchange"). The code also contains some functions dedicated to the potential setup of a poker application directly in the software. Online poker was experiencing a fantastic boom in the United States since 2003 (thanks to the "Moneymaker effect") but fell victim to a form of financial censorship following the adoption of the Unlawful Internet Gambling Enforcement Act in 2006, which explains this addition.
A few hours after the announcement, on the night from January 8 to January 9, Satoshi began to mine. He validated the second block of the chain, block 1, on January 9 at 2:54 AM. This block's production marks the network's effective launch, and other links are added to the chain in the following hours.
Once this is done, Satoshi takes it upon himself to notify the various individuals with whom he has communicated about this launch. At 5:21 AM, he sends an email to Hal Finney informing him that "the Bitcoin v0.1 release with EXE and full source code is available on Sourceforge." (original: "the Bitcoin v0.1 release with EXE and full sourcecode is up on Sourceforge") The next day, he contacts Adam Back and Wei Dai by sending them a personalized email. In these last emails, he particularly includes a description published by Hal Finney on the mailing list, which mentions proof of work and b-money.
On January 10th, Hal Finney attempted to launch the executable file of the software but encountered a technical issue that crashed his computer. He contacted Satoshi and began exchanging with him on this matter. Despite the difficulties, Hal Finney managed to get the software working. On the night of January 10th to 11th, at 1 a.m., he found his first block (the block 78) and thus earned 50 bitcoins. An hour later, he sent a praiseworthy email to the Cryptography mailing list where he congratulated Satoshi on the release of the alpha version and highlighted the monetary policy of the unit of account. Finally, at 3:33 a.m., he shared his experience on Twitter (a then-emerging social network) stating that he was "[r]unning [B]itcoin". This is the first tweet about Bitcoin.
From these exchanges between Satoshi and Hal Finney emerged version 0.1.3, published on January 12th, which was much more stable than the previous ones. Satoshi also took advantage of his conversation with Hal Finney to give him some bitcoins: he sent him 10 bitcoins via his IP address in the night from January 11th to 12th, at 3:30 a.m. This was the first transfer from one person to another on the network. But Hal Finney is not the only person trying Bitcoin at that time. This is also the case for Dustin D. Trammell, an American computer security researcher who was then interested in digital currencies (and particularly in the electronic version of the Liberty Dollar), who discovered Bitcoin via the mailing list. On January 11, he runs the software on one of his work machines (but he does not mine his first block until the 13th due to a technical problem). During the night of January 11 to 12, he extensively gets in touch with Satoshi, with whom he communicates over the following days. On January 15, Dustin Trammell receives also 25 bitcoins from him.
Dustin Trammell (source: Dustin Trammell's blog archive)
Subsequently, other people try to get the software working. This is the case for Nicholas Bohm, a British lawyer, who sent an email on January 25 on the bitcoin-list because he encountered a technical problem and exchanged privately with Satoshi. A certain Jeff Kane managed to get version 0.1.3 working on January 30. Nicholas Bohm will be mentioned alongside Dustin Trammell in the credits of version 0.1.5 of the software released in early February.
Since January 9, 2009, the network has not stopped. Block after block, the chain will continue to lengthen. And Bitcoin will eventually achieve success.

A Progressive Design

What we can take away from this account of Bitcoin's design is that it took place progressively. Between the first idea in the spring of 2007 and the actual launch of the network in the winter of 2009, more than a year and a half had passed. Moreover, some elements of the model evolved, as we saw with the monetary policy and the transaction fee mechanism that appeared after the publication of the first version of the white paper on October 31, 2008.
However, this work was insufficient, and it took Satoshi's perseverance to kickstart his system. From the beginning, he knew that few people had seriously considered his model and that it would be complicated to attract new users and contributors. That's why he tried to generate excitement by selling his idea as best he could. We will explore this aspect in the following chapter, which covers much of 2009.
Quiz
Quiz1/5
Where did Satoshi Nakamoto publish the Bitcoin white paper on October 31, 2008?