Glossary / Culture & history
Bitcoin whitepaper
Also known as Whitepaper.
- Definition
- The bitcoin whitepaper is the nine page paper published on October 31, 2008 that describes a payment system settling without a bank, by chaining proof of work into a public history.
Its full title is Bitcoin: A Peer-to-Peer Electronic Cash System. Twelve numbered sections and eight references solve one narrow problem: how a network of strangers agrees on the order of transactions so the same coin cannot be spent twice. Everything you can buy today is an implementation of that argument, and the paper is short enough to read in an hour.
How it works
The bitcoin whitepaper builds its case in a straight line, and each section removes one reason the previous one would fail.
Sections 1 and 2 state the problem. Electronic payments run through financial institutions because someone has to prevent double spending, and a coin is defined as a chain of digital signatures, each owner signing over the coin to the next. That definition alone is not enough: a recipient cannot tell whether an earlier owner also signed the same coin over to somebody else.
Sections 3 to 5 answer that. A timestamp server publishes hashes of batches of transactions, each batch including the hash of the one before it. Proof of work makes publishing costly, so rewriting history means redoing the work. Nodes always treat the longest chain as the correct one, which turns agreement into an economic contest rather than a vote among identified participants.
Section 6 pays for it. New coins are issued to whoever finds a block, an incentive the paper compares to gold miners expending resources to add to circulation, and it states plainly that once a predetermined number of coins exists, the incentive can transition entirely to transaction fees.
Sections 7 to 10 handle the practicalities: discarding spent transaction data using a Merkle tree, verifying payments without running a full node, splitting and combining values across multiple inputs and outputs, and privacy through unlinkable key pairs rather than named accounts.
Section 11 is the one people skip and should not. It models an attacker racing the honest chain as a random walk, and gives the probability that a payment already accepted gets reversed. For an attacker with 10 percent of the hash power, the chance of undoing a payment drops below 0.1 percent once five blocks sit on top of it. That table, and nothing else, is where the habit of waiting for confirmations comes from.
Why this matters when you buy bitcoin
The whitepaper is the only document in this entire market that everyone agrees is authentic, which makes it a free lie detector.
When a platform tells you a coin is the real bitcoin, or a promoter tells you an asset works the way bitcoin does, the paper is the specification you can check the claim against. There is no issuer in it, no company, no yield, no pre-allocation, and no promise about price. An asset that has any of those is doing something the paper never described, whatever ticker it trades under.
It also explains the friction you meet on day one. Waiting for confirmations before an exchange credits a deposit traces to section 11. The advice to use a fresh address for every payment is section 10, written before anyone had built a chain analysis firm. The reason a wallet on your phone works without downloading the entire chain history is section 8. Knowing which of these are protocol facts and which are exchange policy tells you which ones you can shop around for.
One caution on provenance. Authorship of the paper was asserted in court and rejected, with the English High Court reaching that conclusion in 2024, and the document remains freely available from bitcoin.org and dozens of mirrors. Copies turn up in odd places, including one Apple quietly shipped inside macOS that users found in 2021. Read it from a source you chose rather than a PDF emailed to you by someone selling something.
What the whitepaper does not say
Several of the most repeated facts about bitcoin are absent from the whitepaper, and the gaps are worth knowing.
The 21 million supply cap is not in it. The paper describes a predetermined number of coins without stating one; the schedule lives in the code that shipped in January 2009. The word blockchain never appears either, only chains, blocks, and a chain of proof of work. There is no mention of halvings by name, no mention of difficulty adjustment by name, no mention of mining pools, exchanges, or hardware wallets, and no discussion of price at all.
The scale estimates read as artifacts of 2008. Section 7 notes that block headers of 80 bytes at six blocks an hour come to 4.2 megabytes a year, and reasons about memory that was then measured in gigabytes. It also assumes most users will eventually verify payments through simplified payment verification rather than by running full nodes, a prediction that turned out closer to true than most people who quote the paper as scripture would like.
None of that makes the paper wrong. It makes it a design document from before anything existed, which is exactly what it is.
Bitcoin whitepaper vs a BIP
The bitcoin whitepaper describes the original design; a BIP proposes a change to it. The paper was published once, is never revised, and has no authority beyond its argument. A Bitcoin Improvement Proposal is a numbered document in a public repository, written to a template, with an author, a status, and a defined path from draft to final. Segregated Witness is BIP141 and Taproot is BIP341, and both changed things the paper described. When a source cites the whitepaper for how bitcoin behaves today, check whether a BIP has since replaced that behavior.