The Bitcoin Whitepaper

Value transferred directly between parties — no bank, no PayPal, no trusted intermediary required.

Before Bitcoin, sending money online meant trusting a third party to process, hold, and reverse payments. Satoshi's opening line frames the entire project: a purely peer-to-peer version of electronic cash would allow payments to be sent directly without going through a financial institution. This is the mission statement. Everything else in the paper is the engineering that makes it possible.

The fundamental unsolved challenge of digital cash: a digital file can be copied and spent twice.

Every prior attempt at digital cash — DigiCash, e-gold, b-money — ultimately required a central server to prevent double-spending. Without one, what stops someone from broadcasting the same coin to two recipients simultaneously? Satoshi solved this by replacing the trusted server with a public distributed ledger. All transactions are announced to the network, and nodes vote on their ordering with computational work. Once a transaction is buried deep enough in the chain, reversing it becomes computationally infeasible.

Computational effort as an unforgeable signal of truth — rewriting history requires redoing all subsequent work.

Proof-of-work is the engine of Bitcoin's security. To add a block, a miner must find a hash that meets the network's difficulty target — a brute-force search requiring real energy expenditure. This work is immediately verifiable but expensive to produce. To alter a past transaction, an attacker must redo the proof-of-work for that block and every block after it, faster than the honest network keeps adding new blocks. The longer the chain, the more embedded each transaction becomes. Energy isn't wasted — it's the cost of making the ledger tamper-resistant.

Cryptographically chained blocks: altering any past record invalidates every block that follows it.

Each block contains the cryptographic hash of the block before it. This hash is a fingerprint — change any single byte in a block's data and its hash changes entirely, breaking the link to the next block and every block after. The chain of hashes creates a tamper-evident history. The further back a transaction is buried, the more work would be required to rewrite it. Satoshi called this a "timestamp server" — each block publicly announces the existence of its transactions and the entire prior chain.

Longest-chain rule: honest nodes always accept the chain with the most accumulated proof-of-work.

No central coordinator decides which version of the ledger is valid. Instead, all nodes follow a single rule: the chain with the most accumulated proof-of-work is the truth. When two nodes produce valid blocks simultaneously, the network temporarily forks — but whichever branch gets extended first becomes the consensus chain, and honest nodes switch to it. As long as more than half the network's hashpower is controlled by honest participants, the honest chain always grows faster than any attacker's chain. Coordination emerges from incentives, not authority.

Mining rewards and fees make honest participation economically dominant over attacking the network.

Satoshi designed the incentives so that honesty is always the most profitable strategy. A miner who successfully adds a block earns newly created coins plus transaction fees. To attack the network, that same miner would need to acquire more hashpower than all honest miners combined — an investment that would only pay off if the attack succeeded. But a successful attack would destroy confidence in Bitcoin, making the attacker's rewards worthless. As Satoshi wrote: he ought to find it more profitable to play by the rules than to undermine the system.

A new privacy model: public keys replace identities. Anyone can verify transactions without knowing who's behind them.

Traditional banking achieves privacy by restricting access — only the parties involved and the bank see a transaction. Bitcoin inverts this. The entire ledger is public, but the parties are identified only by public keys, not names or accounts. The whitepaper describes this as a new privacy model: by keeping public keys anonymous, the flow of information is public but ownership remains concealed. You can verify any transaction in history without knowing whose coins they are.