Bitcoin Whitepaper: The Nine Pages Satoshi Nakamoto Posted on Halloween 2008

At 2:10 in the afternoon, New York time, on Friday 31 October 2008, a message landed on a small email list for cryptographers. The subject line was "Bitcoin P2P e-cash paper". The sender called himself Satoshi Nakamoto, and the first sentence read: "I've been working on a new electronic cash system that's fully peer-to-peer, with no trusted third party." Below it was a link to a PDF.

The PDF was nine pages long and titled "Bitcoin: A Peer-to-Peer Electronic Cash System". It described a kind of money that could be sent from one person to another over the internet without a bank, a card company or a government in the middle. Eighteen years later, the system it described is worth about $1.65 trillion at mid-October 2026 prices, with one bitcoin trading near $82,000. Its author has never been identified.

A plan for money without a bank

The timing was hard to miss. Lehman Brothers, the Wall Street investment bank, had filed for bankruptcy six weeks earlier, on 15 September 2008. Governments in the United States and Britain were spending public money to rescue the banks that had caused the crisis. Trust in the people who kept the world's accounts was at a low.

The paper never mentions the crisis. It is dry and technical, with diagrams and a page of probability maths. But its opening line set out the ambition plainly: online payments sent "directly from one party to another without going through a financial institution". When Satoshi later launched the network, he left a note in its very first record that quoted a headline from The Times of London of 3 January 2009: "Chancellor on brink of second bailout for banks." Readers have treated that line as the motive ever since.

The problem nobody had solved

The paper's real achievement was a fix for something computer scientists call the double-spending problem. A digital file can be copied endlessly. That is harmless for a photo, but fatal for money: if a digital coin can be copied, it can be spent twice, and then it is worth nothing. Every earlier form of internet money solved this the same way, by having a central company keep the master ledger and approve each payment, much as a broker's back office confirms that a share has not already been sold.

Satoshi removed the back office. In the paper's design, every payment is broadcast to a network of ordinary computers. Those computers bundle recent payments into a block, a page of the ledger, and compete to seal it. Sealing a page requires "proof-of-work": the computers must burn real electricity making billions of guesses until one finds a number that fits, a kind of costly lottery. The winner adds the page to the end of a shared chain of pages, which is why the ledger came to be called a blockchain, and is paid in new coins. That payment is what later became known as mining.

Rewriting history would mean redoing all that work faster than every honest computer on the network combined. The abstract puts it in one sentence: as long as honest computers control most of the computing power, they will outpace attackers. In plain terms, the ledger is kept honest by making cheating more expensive than playing fair.

Built on other people's work

Satoshi did not invent the parts. The reference list on page nine cites eight sources, all from other people. The first is "b-money", a 1998 proposal by the computer engineer Wei Dai. The sixth is Hashcash, a 2002 scheme by the British cryptographer Adam Back that used computing work to fight email spam, which became the model for Bitcoin's proof-of-work. Three are papers by Stuart Haber and W. Scott Stornetta on time-stamping digital documents, one of them co-written with Dave Bayer. Others cite the cryptographer Ralph Merkle, a Belgian team that included Jean-Jacques Quisquater, and the probability textbook of William Feller.

Two names often linked to the paper are not in it. Nick Szabo's "bit gold" and David Chaum's DigiCash, the best-known earlier designs for digital cash, are not cited, even though both are regularly named as Bitcoin's ancestors.

From PDF to working money

The first reply was not warm. On 2 November 2008 a list member named James A. Donald wrote that the world "very, very much" needed such a system, but that, as he understood the proposal, it did not seem to scale. Others doubted it too. Hal Finney, a respected cryptographer, was one of the few who engaged seriously, and he became Satoshi's first real collaborator.

The paper became software quickly. Satoshi started the network on 3 January 2009 by creating its first block, the genesis block. He announced version 0.1 of the program on the same mailing list on 8 January. On 12 January he sent 10 bitcoin to Finney, the first transfer from one person to another. For the next two years Satoshi wrote code and answered questions on forums, then handed control to other developers. His last known messages date from April 2011, when he told colleagues he had moved on to other things.

The fight over who wrote it

The author's silence created a vacuum, and people tried to fill it. The most persistent claimant was Craig Wright, an Australian computer scientist who said for years that he was Satoshi and that he owned the copyright in the paper. On 14 March 2024, at the end of a trial brought by the Crypto Open Patent Alliance, a group of crypto companies, Mr Justice Mellor of the High Court in London ruled that Wright was not the author of the whitepaper, was not Satoshi and did not create Bitcoin. In his written judgment of 20 May 2024 the judge found that Wright had lied to the court and forged documents on a large scale.

In October 2024 an HBO documentary, "Money Electric: The Bitcoin Mystery" by Cullen Hoback, named the Canadian developer Peter Todd as Satoshi. Todd denied it, writing "I am not Satoshi Nakamoto", and said the claim put his safety at risk. No claim has been proven.

The paper itself turned up in an unexpected place. In April 2023 the American technologist Andy Baio found that every Mac sold since the macOS Mojave update of 2018 carried a copy of the whitepaper, hidden inside a scanner-testing tool as a sample document. Apple removed it from a test version of macOS Ventura later that month without explaining why it had been there. Copies remain free to read on bitcoin.org, where the PDF was first posted.