Written by Dex Calloway, resident contrarian at Bitcoin Institute.
Hot take: the ex-nihilo Satoshi — the solitary oracle who sat down, surveyed the entire field, and wrote the definitive answer in one uninterrupted flash of genius — never existed. That version of the story is fan fiction. The real one, sitting in his own mailbox, is messier and honestly more interesting.
Here's the timeline nobody wants to sit with. Satoshi's own accounting puts the start of the work around 2007. By August 2008 — more than a year into writing the code — he still hadn't read the one proposal that sat closest to what he was building: Wei Dai's b-money.
The receipts
On August 20, 2008, Satoshi emailed Adam Back to nail down the correct citation for Hashcash — proof he already knew and was actively using Back's work. One day later, Back pointed him toward something else: Wei Dai's 1998 b-money proposal, the nearest thing in the literature to what Satoshi was building. Satoshi's reply, verbatim:
Thanks, I wasn't aware of the b-money page, but my ideas start from exactly that point.
Read that again. Not "I'd forgotten the details." "I wasn't aware of the b-money page." The whitepaper wouldn't post for another ten weeks. b-money went into the references list as citation [1] only because Adam Back happened to mention it in an email.
It gets better. Ten days after that whitepaper finally went out, Satoshi wrote to Hal Finney and explained how the whole project actually went down:
I actually did this kind of backwards. I had to write all the code before I could convince myself that I could solve every problem, then I wrote the paper.
Code first. Convince-yourself-it-works second. The paper — the document that cites the prior art — dead last. That is not what "I surveyed the field, synthesized the state of the art, then built the answer" looks like. That's what "I built the thing I could think of, then went looking for who else had been here" looks like.
Here's where it gets genuinely embarrassing for the myth
Adam Back wasn't just holding a citation Satoshi needed. Ten years earlier, in the very channel where b-money lived, he'd already named the configuration Bitcoin would build on. Replying to Wei Dai on the Cypherpunks list on December 6, 1998, Back proposed Hashcash as b-money's minting function: "to create value you burn CPU time, just like with hashcash." A one-line sketch he never implemented — no ledger, no consensus, no supply cap, and an inflation problem he himself flagged and left open — but still: proof-of-work as money issuance, named a decade early, inside the one thread Satoshi documented never having opened.
So was the closest prior work sitting in plain sight the whole time, one thread away, and Satoshi simply never walked in?
Read the full email chain and what it means for the "lone genius" framing
The obvious objections, dealt with
"He cited it! Within a day!" Correct — and that's the point. Fast credit for prior art you just discovered is honest. It is not the same thing as having built on that prior art from the start. Citation-after-the-fact is what post-hoc synthesis looks like, not what omniscience looks like.
"Maybe he'd quietly read it years earlier and just forgot." Maybe — nobody can prove a negative about someone's reading history. But Wei Dai's own 2014 read on the guy who cited him doesn't help the lone-genius case either:
My guess is that he's not anyone who was previously active in the academic cryptography or cypherpunks communities, because otherwise he probably would have been identified by now based on his writing and coding styles.
That's Dai — author of the very proposal Satoshi missed — betting the man who cited him was never in the room at all. It's a probability call, not a proof; a quiet lurker who read everything and posted nothing would fit the record too. But notice what the lone-genius myth needs here: it needs Satoshi inside the room, fluent in the whole canon. The one insider who actually weighed the evidence bet the other way.
"Fine, but Bitcoin still isn't derivative." Also correct. And it's the one point I'll hand over without a fight.
The one concession
Decentralized consensus. The UTXO model. Difficulty adjustment. The fixed 21-million cap. None of that is in b-money, in Hashcash, in Bit Gold, in anything on the reference list. Nobody had shipped an integrated answer to "how do strangers agree on a ledger with no referee" before Satoshi did. That part of the myth is true, and I'm not here to pretend otherwise.
So which pieces are genuinely his and which are borrowed, line by line? The full component-by-component breakdown is in the archive.
Back on offense
But "Bitcoin contains real invention" and "Satoshi was the all-seeing lone genius who surveyed the field and transcended it" are two different claims, and only the archive backs the first one. The second collapses the moment you read his own mail. More than a year into writing the code, he hadn't read the paper his own project would later be measured against. He built the missing pieces anyway — the consensus rule, the cap, the difficulty adjustment — working half-blind to the very field he was about to define.
That's not a smaller story than the lone-genius myth. It's a better one: a guy alone with a hard problem, provably wrong at least once about who else was already working on it, who filled in the gaps nobody else had filled in yet. Ex-nihilo genius is comic-book stuff. A synthesis built partly in ignorance of its own field, that still lands the parts nobody else could land — that's what real invention actually looks like.
Tell me why I'm wrong.
Top comments (0)