What Is the Bitcoin Whitepaper? Satoshi's 2008 Paper

The Bitcoin whitepaper is the paper Satoshi Nakamoto announced on the Cryptography Mailing List on 31 October 2008. The nine-page PDF most people read sets out electronic cash that moves between two people with no bank in the middle. It also forecast the growth of Bitcoin's block headers, which reached 77.8 MB by the late-October 2026 close.

Section 7 put each header at about 80 bytes, or 4.2MB a year at one block every 10 minutes. The chain ran faster, at 9.62 minutes a block on average between the genesis block and that close, and ended up with 3.90% more blocks than the paper's pace gives. Even so, those headers fill under 4% of the 2GB of RAM the paper cites for a 2008 computer.

The Bitcoin Whitepaper at a Glance

What Is the Bitcoin Whitepaper?

The bitcoin whitepaper is Bitcoin's design document, announced about ten weeks before the software's first release in January 2009. The PDF on bitcoin.org gives the title, the name Satoshi Nakamoto and an email address, then 12 numbered sections from an introduction to a conclusion.

Its abstract opens with the whole idea, "A purely peer-to-peer version of electronic cash would allow online payments to be sent directly from one party to another without going through a financial institution."

The problem it solves is double-spending, where the owner of a digital coin pays two people with it. The common fix in 2008 was a trusted mint that checked every transaction, and the paper swaps it for a public record that every node keeps.

If you want the shortest bitcoin whitepaper summary, it's Satoshi's own first line of the conclusion, "We have proposed a system for electronic transactions without relying on trust."

Its eight references run from a 1957 probability textbook to a 2002 paper on Hashcash. Many crypto projects publish a document in the same format, and Phemex Academy lists eight things to check in one before investing.

How Does the Bitcoin Whitepaper's System Work?

The bitcoin whitepaper explained the system in under ten pages, and the design starts with the coin. "We define an electronic coin as a chain of digital signatures," section 2 says. Each owner passes a coin on by signing a hash of the last transaction and the next owner's public key.

A signature proves who owned a coin but can't prove it wasn't spent twice. So the paper timestamps transactions into blocks and makes each block's hash include the one before it, which links them into a chain.

To make that chain costly to rewrite, a node has to find a value that gives its block's SHA-256 hash a required number of leading zero bits. The paper calls proof-of-work "essentially one-CPU-one-vote" and treats the longest chain as the majority decision, since it carries the most work. Phemex Academy's explainer on proof of work and blockchain network security covers the puzzle in more depth.

Section 5 lists the six steps that run the network.

1. New transactions are broadcast to every node on the network.

2. Each node collects the new transactions it hears into a block.

3. Each node works on a difficult proof-of-work for its block.

4. A node that finds one broadcasts its block to all nodes.

5. Nodes accept the block only if all its transactions are valid and unspent.

6. Nodes show acceptance by building the next block on top of its hash.

Two later sections keep the system light. Section 7 prunes old transactions through a Merkle tree, and section 8 lets you check a payment while keeping only the block headers.

Privacy comes from anonymous public keys. Section 10 adds that "a new key pair should be used for each transaction" to keep payments from being linked to one owner.

Who Wrote the Bitcoin Whitepaper?

Satoshi Nakamoto, a pseudonym, is the only author the bitcoin whitepaper names. That name sits above an email address and the line www.bitcoin.org, and the paper gives no biography, employer or country.

The same name signed the October 2008 list post and the January 2009 release note. The Satoshi Nakamoto whitepaper and those posts don't say who chose the name or how many people used it, so no identity theory counts as fact here.

Hal Finney, the PGP developer and first bitcoin recipient, replied to the post on the list in November 2008.

When Was the Bitcoin Whitepaper Published?

The bitcoin whitepaper was published on 31 October 2008, in Satoshi's post to the Cryptography Mailing List titled "Bitcoin P2P e-cash paper". The post opens "I've been working on a new electronic cash system that's fully peer-to-peer, with no trusted third party" and links the PDF.

The PDF that bitcoin.org serves is a later revision, though. Its metadata gives a creation date of 24 March 2009. Byte for byte it matches the Satoshi Nakamoto Institute's copy and the Wayback Machine's earliest capture of July 2010, and the Wayback Machine holds no copy from 2008 or 2009.

The words moved too. In October 2008 the emailed abstract said the honest chain wins "as long as honest nodes control the most CPU power on the network". The hosted file has "a majority of CPU power" held by "nodes that are not cooperating to attack the network".

The two abstracts differ by seven word-level edits in all, and the hosted file drops "the burdens of" from the opening sentence. So the date people search for belongs to the post, and the file most people read is the March 2009 revision.

Does the Bitcoin Whitepaper Still Match the Bitcoin Network?

On storage it does, with room to spare. Section 7 puts "a block header with no transactions" at "about 80 bytes" and, at one block every 10 minutes, gets "4.2MB per year". With machines "typically selling with 2GB of RAM as of 2008", it says storage "should not be a problem even if the block headers must be kept in memory".

The chain held 972,849 block headers at the late-October 2026 close, counting the genesis block as block 0 and ending at block 972,848. Every header is exactly 80 bytes, so together they come to about 77.8 MB.

At the paper's supposed pace, the 6,502 days between the genesis block's timestamp and that last block's would hold 936,321 blocks, or about 74.9 MB of headers. The chain made 36,528 more. That's 3.90% above the 10-minute pace and one block every 9.62 minutes on average from 2009 to the late-October close.

So the headers grew by about 4.37 MB a year against the paper's 4.2MB, and all 77.8 MB fits into 2008's typical 2GB of memory more than 25 times.

Each 80-byte header commits to its block's transactions through one Merkle root, and Phemex Academy breaks down Merkle trees and the Merkle root step by step.

Method: header bytes are 80 times the count of blocks 0 to 972,848, read through two independent public Bitcoin block-explorer APIs, which returned identical hashes and timestamps. The 10-minute pace divides the seconds between the two blocks' timestamps by 600 and adds one for the genesis block.

Check: the close block's 80-byte header, hashed twice with SHA-256, reproduces its own block hash on both APIs.

How Is the Bitcoin Whitepaper Different From the Bitcoin Software?

The paper describes a design, and the software that launched in January 2009 set the numbers. The bitcoin.org PDF contains no "21" and no "million", and it never uses the words "halving" or "blockchain". Bitcoin itself appears only in the title and the www.bitcoin.org line.

The 21 million cap appears in Satoshi's January 2009 release email for Bitcoin v0.1. "Total circulation will be 21,000,000 coins," Satoshi wrote, with "the amount cut in half every 4 years".

That line grew into the halving schedule, which Phemex Academy follows to its end in how many bitcoins are left to mine.

The paper leaves difficulty loose, as "a moving average targeting an average number of blocks per hour". The software set a retarget every 2,016 blocks, two weeks at 10 minutes a block, which keeps the chain's average near the paper's pace.

The software also added the genesis block, whose header timestamp reads 3 January 2009. The block's first transaction carries "The Times 03/Jan/2009 Chancellor on brink of second bailout for banks", the same line Bitcoin Core's chain parameters file still holds.

What Risks Does the Bitcoin Whitepaper Describe?

The main risk is an attacker with more CPU power than the honest nodes. Even a winning attacker can't create coins or take money that never belonged to him. The paper says he "can only try to change one of his own transactions to take back money he recently spent".

The Double-Spend Race

Section 11 treats that race as a gambler's ruin problem and solves for a merchant's wait. With 10% of the CPU power, an attacker's odds of catching up fall under 0.1% once the payment has 5 blocks on top. At 30% the wait is 24 blocks, and at 45% it's 340. The paper sets no six-confirmation rule. Each attacker share gets its own wait in the table.

Fooled Light Wallets

Keeping only block headers has a weak spot. The paper warns that the shortcut "can be fooled by an attacker's fabricated transactions for as long as the attacker can continue to overpower the network". Businesses that receive frequent payments "will probably still want to run their own nodes", it adds.

Linked Keys

Public keys hide your name only until one of your keys is tied to you. A transaction with several inputs shows that one owner held them all, and section 10 warns that "linking could reveal other transactions that belonged to the same owner".

What Does the Bitcoin Whitepaper Mean for Bitcoin Traders?

For a trader, the paper is the specification behind the asset. When you wait for confirmations on a deposit, you're waiting out the attacker race that section 11 priced.

The pace matters as well. Halvings are set by block height, and by the late-October close the chain stood about 254 days ahead of a strict 10-minute schedule. So dates worked out from the 10-minute assumption have run late against the chain.

The 21 million scarcity you're trading rests on the 2009 software's rule, which the paper never states.

Bitcoin closed late October 2026 at 81,151.8 USDT on Phemex's BTCUSDT perpetual, down 0.30% on the day. That perpetual runs up to 150x leverage with funding every 8 hours. Futures use leverage, and a leveraged position is closed automatically if losses reach its margin.

Frequently Asked Questions

How many pages is the bitcoin whitepaper?

It runs nine pages in the PDF you can download from bitcoin.org. Those pages hold 12 numbered sections, from the introduction to the conclusion, and a list of eight references on the last page.

What year was the bitcoin whitepaper published?

It came out in 2008, with Satoshi Nakamoto's post to the Cryptography Mailing List on 31 October 2008. The PDF most people read is a revision created in March 2009.

What does the bitcoin whitepaper say?

It says digital cash can move between two people with no trusted third party. Digital signatures prove who owns a coin, and a public chain of proof-of-work blocks settles the order of payments so no coin is spent twice.

Does the bitcoin whitepaper mention 21 million bitcoin?

The paper gives no supply number at all. Satoshi stated the 21,000,000-coin cap in the January 2009 release email for Bitcoin v0.1, along with a reward cut in half every four years.

Bottom Line

The bitcoin whitepaper got the engineering nearly right and left the economics to the code. Its header forecast ran under 4% short across almost 18 years of blocks. The 21 million cap that sets Bitcoin's scarcity wasn't in it at all and was spelled out ten weeks later, in a release email.

You can check both halves yourself. The mechanism lives in under ten pages, and the money rules live in the software Bitcoin's nodes run.

Disclaimer: This article is for informational purposes only and is not financial advice. Cryptocurrency trading involves substantial risk. Always do your own research before making investment decisions.