Ordinals

Bitcoin's ledger records amounts, not objects, so nothing in the protocol knows one satoshi from another. Ordinal theory adds that distinction from the outside, numbering all 2,099,999,997,690,000 satoshis from zero and moving them through transactions first in, first out. Nothing about your coins changes, but the software you keep them in may need to.

How it works

Ordinal theory is a convention for reading the blockchain, not a change to it.

Two rules produce the entire system. Satoshis are numbered in the order they are mined, so the very first one is number 0 and the count runs to 2,099,999,997,689,999. When a transaction is made, satoshis leave the inputs and enter the outputs in the order they appear, first in and first out, with anything paid as a fee travelling to the miner's coinbase output behind the newly created subsidy.

Nothing enforces this. No soft fork was needed, no BIP was ever assigned, and a Bitcoin Core node has no idea the scheme exists. The tracking lives in a separate index, and Casey Rodarmor released the software that maintains it, called ord, in January 2023. Two indexers following the same rules will agree with each other; an indexer with a bug will not, and there is no network to settle the argument.

The scheme also gives some satoshis a claim to be interesting. The first satoshi of every block is called uncommon. The first of every difficulty period, one in 2,016 blocks, is rare. The first of every halving epoch, one in 210,000 blocks, is epic. The first of a cycle, where a halving and a difficulty adjustment fall together, is legendary, and that has not happened yet. Satoshi 0 is mythic, and there is exactly one of those.

Why this matters when you buy bitcoin

Ordinals reaches an ordinary buyer in two ways, and neither of them involves wanting a collectible.

The first is the fee market. Numbering satoshis costs nothing, but the market it created does: attaching content to particular satoshis fills blocks, and that space is space your withdrawal is bidding for. Block 840,000, mined on April 20, 2024, collected around 37.6 bitcoin in fees, more than any block before or since, because a token launch and a hunt for rare satoshis arrived in the same ten minutes. If your exchange withdrawal happened to be queued that afternoon, you paid for the collision.

The second is quieter and catches people who never opened a marketplace. Coins arriving from an exchange are ordinary satoshis, and one of them may be a satoshi somebody once paid to inscribe. Your wallet cannot see that, so it will spend the satoshi as change or hand it to a miner as a fee. Nothing is lost in money terms. The reverse case does lose money: if you deliberately hold an inscribed satoshi, a wallet with no coin control will merge it into a payment and destroy the thing you bought.

The defence is unglamorous and it is the same one this site recommends for other reasons. Use a wallet that lets you see and freeze individual outputs, keep collectibles in a different wallet from savings, and treat any platform offering to look after both as a custodian carrying all the usual risks. The hardware wallets reviewed here pair with desktop software that shows every output separately, which is the setup that makes the problem visible before it costs you anything.

Worked example: the epic satoshi in block 840,000

Block 840,000 was mined on April 20, 2024, and the first satoshi it created is one of only four epic satoshis in existence.

The arithmetic is checkable without an indexer. Four halving epochs had completed by that height, each 210,000 blocks long, paying 50, then 25, then 12.5, then 6.25 bitcoin per block. That is 210,000 multiplied by 93.75 bitcoin, or 19,687,500 bitcoin, which comes to 1,968,750,000,000,000 satoshis. The first satoshi minted in block 840,000 therefore carries ordinal number 1,968,750,000,000,000, and because that height opens the fifth epoch, ordinal theory calls it epic.

It sat in a coinbase output paying the new 3.125 bitcoin subsidy to the pool that found the block. Whether anyone should pay extra for it is a question about collectors rather than about bitcoin. What the example shows is that the label is derived, not issued: nobody granted that satoshi a status, and anybody applying the same two rules to the same chain arrives at the same answer.

Ordinals vs inscription

Ordinals is the numbering; an inscription is a file bolted onto one of the numbers. You can run ordinal theory across the whole chain back to 2009 and find rare satoshis in blocks mined years before anyone thought of the scheme, because the numbering is arithmetic on the subsidy schedule and nothing more. Inscriptions are the opposite: each is a deliberate act that puts new bytes into a Taproot witness and pays real fees to do it. The distinction matters when reading a wallet warning. A message about an ordinal usually means the satoshi is rare under the numbering, while a message about an inscription means somebody attached content to it, and only the second is destroyed by careless spending in a way the owner will notice.