Separating activity from growth on Bitcoin’s network

[Note: the following article was reposted on Business Insider, a PDF version is available]

One of the contentious areas of writing about Bitcoin data and emerging markets, is discussing what conclusions and interpretations (if any) can be drawn from say, transactional volume.

Let us put that aside for a moment and consider ways to estimate real commercial volume. Are there any other ways to do so besides a full traffic analysis?

Sell side pressure

On any given day there are at least three entities that continuously sell bitcoins onto the market: merchants (and merchant processors), miners and mining manufacturers (who are sometimes paid in bitcoin).

As I noted in my previous article, last month BitPay announced that it was processing about $1 million in daily payments. It is unclear what amount of bitcoins that constitutes, depending on the time frame and therefore price levels (early December or the month of May) it could represent 1,000-2,000 tokens per day.

Let us assume that the other merchant processors such as Coinbase and BIPS are also processing a similar amount. And that altogether between 5,000-10,000 bitcoins per day are collectively being spent on commercial activities through these processors.

This puts pressure on the sell side of the price equation. That is to say, to minimize exposure to volatility, nearly all merchants elect to immediately convert bitcoins into fiat and those bitcoins are sold onto the market (both Ben Edelman and David Evans have written on this before).

Similarly, because miners have to pay real costs – capital and operating costs – they too sell their mining rewards on the market: around 3,600 each day (because again, MV=MC).

It is unclear how much mining manufacturers have to sell each day to fund their own developmental and logistical operations, but for the sake of simplicity and roundedness, let us say 1,400 bitcoins (it could also be as little as zero).

Thus altogether, there is a regular 10,000 – 15,000 bitcoins representing commerce that are sold daily on the market today. It also bears mentioning that, although technically the miners receive money, virtually all of it is spent towards utility (electricity) and hardware, not on the bitcoin ecosystem itself. While it is unclear how much other positive-sum value exchange is taking place (such as remittances, houses or cars) we can see that the transactional volume of potential commerce has remained flat during the past six months:

excluding popular addressesIs there a chart that shows this amount of transactions?

In my last article, I mentioned Total Volume Output – the total value of all transaction outputs per day – yet this includes coins which were returned to the sender as “change” and thus the real number trying to be measured is substantially less. And taken to its maximum readings, roughly 1,000,000 bitcoin outputs (UTXOs) are used each day.

If only 10,000 – 15,000 bitcoins are being used in real commercial activities (instead of merely zero-sum activities like gambling, mixing of coins or cybercrime), then the perceived Total Volume Output is potentially two orders in magnitude larger than the real economy.

What is the real economy? While the debate over what percentage of bitcoins are being spent in positive-sum activities, between October 15 and December 18 of last year, 41,928 bitcoins were sent to addresses controlled by Cryptolocker (a type of malware) – this is not real economic growth, in fact it is negative-sum. And because it signaled to the market that it was a successful way of generating (stealing) wealth, there are numerous copycats using similar methods (including CryptoDefense and Cryptolocker 2.0).

The cost of information security

For the moment, let us ignore the buy side of the equation, that in order to keep the same price level, at least 10,000 – 15,000 bitcoin are being acquired by other parties each day (primarily high-net worth individuals and institutions through OTC brokers).

What this actual activity translates into is the following:

Miners are the labor force that secures and processes transactions. And because this labor force has real depreciating capital costs and operating expenses, in theory, the cost for their services amounts to roughly $2 million per day (3,600 bitcoins X $600 per bitcoin).

In practice however, most miners are operating at losses. In fact, the network is vastly oversecured by miners operating at losses probably by a factor of 2-5x (described in Estimated costs). For instance, according to a recent report from the National Science Foundation (NSF), a now-banned researcher used, “about $150,000 worth of NSF-supported computer use at the two universities to generate bitcoins worth about $8,000 to $10,000.” Or in other words, the researcher externalized the real costs of mining (energy and capital deprecation) onto another party (the NSF and therefore taxpayers). This is inefficient, yet there are many cases of such activity taking place each day.

Thus while the Bitcoin ‘trust fund’ (a more accurate description for the network which divvies out a finite amount of block rewards) pays out security of $2 million each day, the labor force is providing significantly more security than they are being paid, probably closer to $6 – $10 million if not more (Hass McCook has additional estimates).

Simultaneously, they are providing these services for commercial activity that ranges from as little as 5,000 bitcoins to perhaps as high as 15,000 bitcoins. Or $30 million to $90 million respectively in today’s prices.

For comparison, MasterCard spent $299 million on their capital expenditures in 2013. As part of these expenses, it builds data centers similar to the “fortresses” (with moats) that Visa has also built. In 2013, MasterCard and Visa processed a combined $7.4 trillion in purchases.  Together with American Express and Discover, these four companies generated $61.3 billion in revenue during the same period.

While this is not an entirely apples-to-apples comparison, what this means is that the Bitcoin network is enormously oversecured compared with other transactional platforms. The reason this is, is because it is decentralized which creates overhead (since all the nodes have to process and verify the transactions). Yet, as shown with GHash.io over the past month, the network is qualitatively insecure due to economies of scale. That is to say, so as long as the proof-of-work mechanism can be economically scaled, this leads towards centralization. No amount of white papers or tweets will change that.

If the labor force of bitcoin is spending $10 million on protecting the network yet real commerce is only $30 million, this would be equivalent to a mall issuing 1 out of 3 customers a personal security detail to go shopping. Or in other words it is, arguably, quantitatively oversecure (it is not qualitatively trustless as shown by GHash.io and previously, Deepbit). Perhaps this mix will change over time. However one thing to consider is that some bullish advocates contend that the Bitcoin network will one day supplant and compete head on with Paypal and even Visa. In order to do so, the Bitcoin labor force are still (assumedly) being paid a fixed income to provide the same services. Thus perhaps in the future, the opposite will occur – the network could become undersecure due to disproportional rewards.

I spoke with Greg Simon, co-founder of Cryptowerks who worked as head of International Equity Sales for JP Morgan in Japan. According to him,

Cryptoledger miners are Japanese banks. They are producing an oversupply of crypto trust relative to an under supply of borrowers of that trust. Their only solution, producing an ever increasing supply of crypto trust, is making the problem worse, not better. It is the equivalent of central bank QE [quantitative easing], or pushing on as string. Just as an oversupply of central bank produced money causes the value of each unit of money to decline, so does an oversupply of crypto ledger miner produced crypto trust cause the value of each unit crypto trust, which we can measure in units of ghash, to decline. The problem is not the aggregate supply of crypto trust. The problem is aggregate demand for crypto trust. Until demand for crypto trust improves, either from monetary or non-monetary borrowers, we can expect the same fate for crypto trust in the crypto economy as we are seeing for fiat money in the legacy central bank fiat economy.

Another way to visualize this phenomenon is the chart below:

age of last send transactionJohn Ratcliff recently published an explanation about zombie bitcoins (coins, or rather UTXOs, that have not been active in more than 18 months) which is where the chart above comes from. Each color band represents the last time a private key corresponding to these UTXOs was used.

Thus, one take-away from this chart is that liquidity – as shown by the One Day, One Week and perhaps One Month bands – represents between 100,000 to 2,000,000 bitcoins. What is the actual number? Without a full traffic analysis we probably will never know.

But we can tell from spikes that the largest movements take place during volatile time periods, specifically during price run-ups. So, for instance, in the spring of 2013 there was enormous Western media attention and a subsequent boom that peaked in mid-April (when Mt. Gox had to temporarily shut down). Similarly, in November and early December corresponds with additional global media coverage and Chinese adopters coming online – with prices peaking on December 4th. Or in other words, transactional volume rises and falls with price levels – that the bulk of on-chain activity corresponds primarily to day trading and speculation. This, despite the fact that Ratcliff notes, that prices during this 18 month time span increased 4,000%.

That is to say, even though there are more than 100,000 merchants that accept bitcoin and even though token valuation has risen logarithmically, UTXO holders as a whole prefer speculating over conducting actual commercial activity. What could change this behavior?

Maybe nothing will because Bitcoin is a recreation of a medieval agrarian economy; few people spend, in part because the network codifies what is essentially negative time value of money.

Money and credit

There is an endless stream of papers and books on the topic of what constitutes and attributes of money. Arguably one of the most thorough explanations of what money is and how it arose is, The Ascent of Money by Niall Ferguson which was later turned into a good PBS series.

Despite what some Bitcoin advocates claim, gold itself was not used on a large scale since time immemorial. In practice, there were numerous types of physical assets ranging from metals to stones. England even used a system of money known as tally sticks for several hundred years. And the reality is that prior to the birth of civilizations, many tribes and villages operated with barter and gift systems with themselves and one another (some never even created something akin to “money”).

As noted by Ferguson, up until the Renaissance, there were no real financial instruments or professionalized banking or hedging methods in the West. Bonds, joint-stock corporations and insurance companies evolved throughout time (all post-Fibonacci). And consequently, this is reflected in the dearth of economic output at the time. That without a way to expand credit – to create loans to start businesses – the pie cannot be enlarged. In his words, “Credit and debt, in short are among the essential building blocks of economic development, as vital to creating the wealth of nations as mining, manufacturing or mobile technology.” In contrast, poverty (subsistence) more often, “has more to do with a lack of financial institutions, with the absence of banks, not their presence.”

Thus, I would argue that ultimately Coinbase could turn into a fully-fledged bank, providing interest to bitcoin holders to be able to loan out bitcoins (much like BTCJam does). And they could do this through a fractional reserve process. In fact, Huobi’s new Hong Kong branch (BitVC) is heading in that direction; users can lend funds to Huobi for interest and Huobi will then lend it out to users to trade on margin. Contrary to what many Bitcoin adopters contend, fractional reserve banking itself is not inherently a bad thing but that is a topic for another article.

However, for the time being, Coinbase and others – while on-ramping a lot of new users and providing utility through ease-of-use functionality – have a long way to go before this occurs. For instance, this past week Coinbase announced instant buyback (once you spend bitcoins, you can buy more). However, the reddit comment below sums up actually what happens:

coinbaseAgain, there is a difference between the economy Bob wants to have versus the economy Bob currently has. Today Bitcoin, as I have argued, is at most an emerging market akin to a pre-industrialized agrarian economy with enormous frictions. Internally it is an inflexible command economy that outsources and arbitrarily rations its scarce resources (block rewards) irrespective of economic conditions (e.g., Bob, the miner, is rewarded whether or not he processes transactions).   Front loading rewards the first four years without processing any transactions is an unsustainable activity. In fact, as Jonathan Levin, co-founder of Coinometrics, notes in his upcoming paper, Creating a decentralised payment network, he found that “[i]n total over the network history there have been 84,469 blocks with no transactions.” Yet because there is no one at the helm, no entrepreneur to rationally allocate block rewards or market value for those rewards the first year, ultimately 4.2 million bitcoins were given out for naught.

Many adopters note that this was done to help bootstrap the economy and that the initial distribution of bitcoins through the block reward is purportedly not how bitcoin will operate in the long run. And that at some point Bitcoin’s internal economy will somehow be incentivized by transaction fees only – or at least that is theoretical transition (see Reducing and removing block rewards). But the fact that miners were rewarded irrespective and arbitrarily of their actual work is very similar to how top-down command economies work rationing wages. This is a topic that will likely be debated over the coming years.

For additional perspective I spoke with Martin Harrigan, a software developer and founder of Quantabytes, a cryptocurrency analytics start-up. In his view:

The initial distribution of bitcoins is a one-time process that is distorting our understanding of the Bitcoin economy. I think that the peaks in transaction volume during the price run-ups are a form of secondary distribution: early adopters are distributing their bitcoins, for profit, to new users. This is a vital part of Bitcoin’s distribution process and may continue for as long as there are periods of significant price increase. It may be that institutional investors will take-over a significant portion of this process for several years. Then, at some point, when the technology, infrastructure, regulatory frameworks, and our understanding of cryptocurrencies has matured, the price will stabilise and Bitcoin will return to individual users as a stable transactional currency in the traditional sense.

Of course, I’m speculating wildly here. My point is that we don’t have a good null model. We’re not seeing “hockey stick growth” but maybe that’s okay. Many start-ups need this type of growth to survive — I don’t think Bitcoin does. During the Bitcoin crash of 2011 the price dropped 93% and didn’t recover until 2013. The difficulty also dropped and remained stagnant for a year and half. Although I can’t quantify it, the “mood” on the Bitcointalk forums was grim. The equivalent event would have been fatal to most start-ups.

Perhaps at Harrigan noted, this will change in the future. And perhaps those frictions are still lower than the cost of doing business in certain regions (like the Philippines). And this is not to single-out Coinbase. I still think they are one of the best companies in this space, I even consider them one of the most promising in part because they are trying to create value (and have). But that does not mean this particular service is frictionless. For instance, David Evans recently delved into the specific transaction costs of various platforms and explained how the actual roundtrip cost of Coinbase is 2% + $.15, not the 1 percent that is frequently cited (Evans also had another good explanation of how Coinbase and merchants like Overstock work).

Building a continuous series of bubbles or building utility

One of the common refrains about altcoins and appcoins in general is that none of the underlying systems are able to give out real equity and thus cannot have P/E expectations – neither does bitcoin, nor will it. This is a bug and it is why I argue that using the “TCP/IP” analogy is probably incorrect.  The internet is an amalgam of private-public intranets cobbled together and cost real capital to build.  It was not built with magic; real incentives had to be provided to build it.  Imagine if those incentives decreased 50% every 4 years?  That’s Bitcoin’s internal economy. The Bitcoin network cannot operate without bitcoins – the app or currency or commodity (choose your definition). The two are united together. Yet TCP/IP, the protocol, can still work even if substantial portions of the network fail; it is not tied to a specific set of hardware or token (TCPIPCoin).

This is not the first time a set of unrealistic expectations have been created in the past 10 years.

cleantechSo what kind of bubble is bitcoin then? Some claim that it “crashes upwards” which makes no rational sense at all. Bitcoin (the token) is not immune to the laws of economics. Perhaps as illustrated above (source), the current investment cycle in Bitcoin is more akin to Cleantech circa 2005? What this means is that, as noted in my previous article, even though many of the startups are clever, they may lack sustainable business models. Once this froth is removed, the businesses that survive will likely be those that are actually creating real pain killers (utility) to real needs; perhaps reusing the infrastructure of the network (like merged mining proposed by Blockstream or that of Cryptowerks) to process contracts and titles. Again, all of this is speculative, yet it warrants attention because Cleantech also had a similar dedicated ideological group of early adopters that created economic activity (though, not much growth yet) and wanted to change the world. And despite their best efforts it popped.

In conclusion, expanding credit alone is not the answer to Bitcoin’s stagnant economy. For instance, China’s money supply grew leaps and bounds since November 2008 (when it implemented a series of stimulus packages). It also signed bilateral currency agreements with new countries every year which led many outside commentators to erroneously conclude that this somehow leads to mass adoption of the RMB. Yet the stark reality is that the RMB only accounts for 1.4% of global payments compared with the dollar at 42.5%. This is unlikely to change either. However, even in its current doldrums, the Chinese economy still produces real goods and services to the tune of trillions of dollars per annum. Obviously it is unfair to compare Bitcoin, a five-and-a-half-year old “startup” to China. Yet the emerging market aspect, the reuse of capital stock, the implementation of new financial instruments, the training of unskilled laborers and ultimately the creation of needed utility to outside parties can be viewed as facsimiles to learn and grow from.

As noted by John Kenneth Galbraith in the last article, there is only so much capital that can be extracted from the “fleece-me” crowds of reddit. Significantly more capital is needed to scale operations to enterprise-level reliability. While some advocates believe eschewing the ancien regime of venture funds and private equity is the way to move forward, this is short-sighted.

Below is a list of companies I think have potential to create value in this digital ecosystem – embryonic solutions to this quagmire (I hold no equity in them):

Beyond exchanges and wallets

Below are some start-ups or at least young companies in this cryptocurrency space that are trying to move beyond primary exchange functionality (simple order books) and/or hosted wallet services.  Note: this is not an endorsement of them as an investment or service.

API: Chain, Blockr, HelloBlock, BlockCypher, HiBitcoin
Analytics: Coinalytics, Coinometrics
KYC: CoinTrust, Block Score, Coin Validation
Decentralized cloud: MaidSafe, StackMonkey, decloud, Bitcloud, StorJ
Hedging/lending: BTCJam, Bitreserve, Bitfinex
Platforms: SecondMarket (BIT), CampBX, TruCoin, Coinfloor, Atlas ATS, Kraken, Coinsetter, Vaurum, itBit, ICBIT, LedgerX

 

Modeling economic growth and zero-sum games in Bitcoin

lotteryI have a new article that went up over at Let’s Talk Bitcoin yesterday called, Can Bitcoin change from a bubble economy into a growth economy? (pdf).  It is essentially part 2 to the previous piece and put together based on feedback I received this past week.

I should mention that while I did use an equation in the middle of the article to describe prices, I do not think the regression itself is valid.  As my friend RD mentioned, the error term does not seem random. There is a deterministic trend that would have to be filtered out first.  It is the same problem with modeling long term GDP growth.  After all, why would we need all these economic models if we can simply draw a straight line and predict GDP using high school math?  Many things follow an exponential growth curve, that is nothing new. The exciting thing is to forecast it in the short term, which this method is extremely bad at (the same criticism can be lobbed at models like Elliot wave theory).

Over the last 12 hours I have received some criticism about one particular point: zero-sum games and gambling.

In one email exchange, Bob disagreed that gambling was zero-sum, stating:

Gambling in and of itself does not create productivity, but the businesses that surround gambling certainly can. See: casinos, bitcoin mixing services.

Also, if the house makes a bunch of money, and the owning entrepreneur uses those funds to start another, productive business, then in some sense the gambling has facilitated economic development by liberating wealth from unproductive suckers who participate in online gambling to a highly productive entrepreneur. This was, of course, exactly the case with the most popular bitcoin gambling website.

The issue here is a measurable one.  A zero-sum game is one in which wealth is merely redistributed and not grown.  What Bob described above is economic activity but not economic growth.  Gambling is zero-sum game as is speculating on stocks or cryptocoins, no new utility itself is created.  Tokens are simply being moved from person to person. Eventually many people are left with assets that they cannot sell because all the demand has been fulfilled, and at that point the price may actually crash.  In other words, to make money in a zero-sum game, it is only because others have lost an equal amount.  In fact, in many cases, value diminishes because of interchange fees or in the case of mixing services, transaction fees.

This touches on an economic principle of opportunity costs (the “seen” and “unseen”) — the traditional example used is Alice throwing a brick through a shop keepers window.  While the seen result is a repairman being hired to fix the window, thus spurring economic activity, this does not actually create economic growth because the shop keeper must now forgo certain opportunities to spend repairing existing physical stock.

Note: Gambling has the name “math tax” because it is a tax on people who are not good with statistics (49.5% odds means in the long-run, you will always lose to the house).  This is derived from Ambrose Bierce’s quote, “Lottery: A tax on people who are bad at math.”

After a quick Google scholar search, I think there is more concise explanation of this phenomenon in Gambling and speculation, by Borna & Lowry:

Unproductive nature of gambling

For players, gambling, at best, is a zero-sum game, i.e., the aggregate wealth of the players will not be altered due to a gambling activity. The losses of one party are precisely equal to the gains of the other participants. Of course, if the gambling activity were taxed by the government, or there were other ‘leakages,’ then the expected value of winning would be negative, i.e., the aggregate wealth of the players after the play would not be equal to their original wealth.

Although gambling is a sterile transfer of money or goods among individuals creating no new money or goods, it nevertheless consumes the players’ time and resources and may subtract from the national income. From a macro-economic point of view, the aggregate wealth of the players will change, in the long run, due to the fact that the transfer of wealth is usually among unequal productive sources. It may be argued that the productivity lost due to a transfer of money from one player will be offset by an increase in the productivity of the other player. This assumption is true only if both the winners’ and losers’ production schedules were assumed to be identical and linear.

One last note: there are a number of people I would like to thank for their comments included in this article; this does not mean they agree with or endorse my view.  This includes: Dave Babbitt, RD, Mark DeWeaver, Dave Hudson, JL, Taariq Lewis, CK, Petri Kajander and Chris Turlica.

Cryptocurrency in the news #16

Some relevant news of interest as I close some tabs:

Interview with core developer, Peter Todd

A new interview is up with IamSatoshi Network and Bitcoin core developer, Peter Todd.  While the first part explains the politics of getting code into (or out of the protocol) — which many enthusiasts gloss over — I especially found Peter’s discussions in Part 2 of germane interest due to the sky-is-falling on reddit surrounding Ghash.io the last few days.  Here is one such comment thread.  And I think this comment sums it up the best:

If a 51% can occur, all trust in bitcoin should be lost forever. An investment that relies on people begging random strangers on reddit not to ruin it every couple of weeks is not really something that seems like a great thing to pour actual money into, tbqh.

Tbqh means “to be quite honest” (that same user made other good points about this issue too).  And here is also another interesting subthread (mulligan for that decentralization + neutrality notion…).

Ghash.io is the largest mining pool on the Bitcoin network (it actually supports merged mining for Devcoin, Namecoin and Ixcoin as well) and it hit 48% of the network hashrate this past weekend (it is now 43%, see this chart).  Its parent operating company is Cex.io and the system is run in a cloudhashing manner — customers rent hashrate by purchasing contracts with bitcoin.  Interestingly enough, the cost of these contracts is now more than what you receive as a reward for hashing, leading to the joke that Ghash (and other such services) are pay-for faucets.  That is to say, faucets are way to distribute tokens, for free (usually by filling out some Captcha once a day).  Yet in this case, because of bitcoin volatility the past 5 months, users are actually paying to receive a minute amount of bitcoins — they might as well terminate their contracts and buy bitcoins on the open market.

One common refrain that some Bitcoin advocates say about mitigating 51% attacks is that hashers in mining pools can simply move and/or point their hashing equipment at another pool.  This may be possible in the “early” days of today, yet there are two problems as time goes on:

1) As we approach the top of the S-curve in ASIC tech improvements, mining farms (and pools) will gravitate to locations with the best and cheapest network and energy infrastructure.  This itself creates centralization risks that I and many others have written about.  If you are renting out equipment (hashing systems) from a cloud provider at one of these locations, you can no longer physically move the equipment to another farm and perhaps in some cases, you may not be able to direct your miner to other farms (there is one proposal by Greg Maxwell that hasn’t been reported on involving tamper resistant private keys physically built into the gear, but that’s a story for another post).

2) Block size increases.  In order to make the Bitcoin network more competitive as a payments and transportation network, there have been many proposals to increase the hard cap of 1 MB block sizes by several orders of magnitude.  To date however, the average block size is around 350 KB, with an average of 0.7 transactions per second — thus the need to increase it is low (primarily because few people actually use the chain for much activity such as commerce).  If block sizes are increased, without the use of something like tree chains, then centralization will occur because miners (and fully validating nodes) will need to pay for larger bandwidth options, larger hard drives, etc. which squeezes out marginal players.  This is a known issue but Peter Todd highlights this as a hurdle for hashers wanting to move to another pool for the same reasons mentioned in point #1.

Confirmation bias and Bitcoin

A week ago I did an interview with Adam and Stephanie over at Let’s Talk Bitcoin.  The interview was actually done ad hoc as we were supposed to interview someone else entirely but due to a scheduling issue at the last moment, he did not arrive.  Instead, Adam asked me what I was working on, I started talking, he started recording, Stephanie asked some follow-up questions and one thing led to another:

This interview was not planned and as a consequence I wrote a lengthier follow-up that explains more of these issues in detail including data from the blockchain:  A Marginal Economy versus a Growth Economy

And again, I’m not anti-Bitcoin, but a lot of the “facts” that some advocates say about how many bitcoin users there are — most of which are widely exaggerated —  and this will not help data-driven companies who are on the fence of adopting the protocol.  At some point these same companies will figure out that adoption rates are actually relatively low, so might as well be upfront about it.  In addition, I think many of these challenges are surmountable, especially the technical ones.  Lastly, I like the tech, I still go to meet-ups and start-up presentations on a weekly basis to meet more in this space too.  And, I could also be incorrect.

I have also begun receiving some messages and mail.  The one below is one I received from Bob moments ago:

I was going to tweet but I chose to go private.

I had to stop listening to the show because I just couldnt believe the nonesense that was coming out of your mouth. I was cringing because I know you are actually very intelligent. You sounded like a daft fundamentalist politician from the deep south. You make sweeping value judgements, logical fallacies and aspersions. If you continue on like this, no-one will take you seriously. I’m frankly stunned – you know what it sounded like? Like someone arguing the earth is flat and that the sun revolves the earth.

I don’t care if you dont drink the koolaid, dont invest or hodl (sic) bitcoins, but you have to stop talking nonesense or you will end up branded the next Professor Bitcorn http://www.professorbitcorn.com/

I’m going to promptly forget I ever listened to that because I usually find your writings intelligent and well thought out.

It is fine to disagree with me, in fact, my skeptical views are held by a mere a small minority.  However, the blockchain is public and the data reinforces all of the claims in the interview which I later in A Marginal Economy versus a Growth Economy.  And in terms of what Bob is looking for — someone to confirm his Bitcoin-to-the-moon views —  this just creates an echo chamber, a confirmation bias that happens a lot in ideologically driven organizations.  This technology is open-sourced and institutions will likely just cobble together the parts that provide utility to them and not drink the kool-aid, just as they did with the F/OSS community in the mid to late 90s.

Thread of the day: List of all the known dead altcoins

The past year has seen what some the “Cambrian explosion” in altcoins.  Most are complete pump-and-dump scams.  Others experimentally toy with a couple variables and a remote few actually bring something genuinely new to the scene (like proof-of-transaction in Fluttercoin).

Wouldn’t it be neat to see a list of all the known altcoins and a little bit about what they were before they became ledger rot?

For the last couple of months Ray Dillinger on Bitcoin Talk has been attempting to chronicle this digital death in: Necronomicon thread: Altcoins which are dead.  I wonder who holds the record for creating the most alts?  Is that something you brag about at a bar?

Furthermore, here are some patterns that Ray sees are emerging based on alts that are not (completely obvious) scams:

  • Alts have a plethora of different hashing algorithms, but there are really only three divisions that matter between their proof of work.  Either they are CPU dominated, GPU dominated, or they are mined with a particular kind of algorithm-specific ASIC.  ASICs exist for SHA256D coins like bitcoin and for Scrypt coins like Litecoin.  No other algorithm-specific hardware exists, so no other difference in hashing algorithm matters.
  • Within each division, coins rapidly reach an equilibrium where whichever hardware generates their proof of work is allocated in direct proportion to the financial reward per minute of the block reward.   Usually this means that halving the block reward of an alt, other things being equal, halves the hashing power securing its block chain.
  • Most alts become unstable when 3/4 or more of their coin supply has been mined (second reward halving), even if no other factors have made the cryptocurrency unstable prior to that time.  If the value being secured exceeds the block reward by too great a fraction, 51% attacks and forks are to be expected.
  • “Burst mining” or “automatically switching multipools” act like positive feedback amplifiers with a delay loop in mining – they make it VERY difficult for an alt to maintain a ‘stable’ block rate when its hash rate gets too small relative to the pool (GPU, CPU, or specific ASIC type) of hashing power it belongs to.  This is a heavy contributing factor in the 51% attacks and forks mentioned above.
  • Several alts switched to proof-of-stake after to this instability led to bad forks or “stuck” block chains where miners essentially had given up due to a burst miner leaving the chain at a ridiculously high difficulty level.
  • A shift from proof-of-work to to proof-of-stake, whatever its effect on market value, has usually led to stagnation or decline in the community surrounding the alt.  In turn this usually leads to a collapse in value of the alt, unless heroic measures (such as direct giveaways by stakeholders to non-stakeholders) are used to bring people into the community.

See also: Different proof-of-work mechanisms and several altcoins that have been hit with a 51% attack

The increasing importance of energy sources and location for bitcoin mining

I mentioned BitFury in passing in my lengthy piece on energy arbitrage.  Last week they announced that they had received $20 million in venture financing.

But one story that has not been translated into English yet (here is the Finnish version) is that their facility in Finland is nearing completion.  They are reusing an old steel mill on Kimito Island and are coming up with a way to increase the efficiency of the heat recovery process to surpass that of Google (which also has a data center in the area).  And according to my friend who helped translate it for me, BitFury has a 20 MW power plant at that location and it’s almost entirely in use.

And that is with a token below $1,000.

For more on the $1 million token, see Bitcoins: Made in China (pdf) (BM)

Fun fact: Litecoin’s hashrate nearly doubled after Bitcoin’s halvingday

What Dogecoin (of all cryptocurrencies) is highlighting is the huge importance of incentivizing the labor force to stay and continue providing security and utility.  With each halvingday Doge has gone through, this has led an exodus of labor elsewhere, sometimes to competing chains like Litecoin.

Again, a halving day is when the network informs the labor force that they are now receiving a 50% wage cut.

One common refrain that some Bitcoin advocates have stated in the past is that Bitcoin does not have a similar incentives issue.  As I have described in numerous articles and papers, this is false.

For instance, below is data from the Litecoin Hashrate statistics database at Bitinfo Charts.  The numbers expressed represent the collective hashing power of the Litecoin network:

  • 576.8 megahash/s on November 25, 2012
  • 572.62 megahash/s on November 26, 2012
  • 578.92 megahash/s on November 27, 2012
  • 687.47 megahash/s on November 28, 2012
  • ——— Bitcoin Halving Day ————
  • 1.11 gigahash/s on November 29, 2012
  • 1.28 gigahash/s on November 30, 2012
  • 1.14 gigahash/s on December 1, 2012
  • 834.75 megahash/s on December 2, 2012

What we see here is that some marginal miners that were previously hashing on the Bitcoin network left and began providing their labor on a competing network (Litecoin) that was temporarily more profitable to them (or at least, what they may have seen as future profitability relative to their costs).

These were likely GPU-based miners as FPGAs were increasingly being acquired and used by larger Bitcoin mining farms.  Remember, while there were some proprietary ASICs that were developed and used in this time frame, they were not available to the public at-large — the first ASICs that were sold to the public (from Avalon) did not come online till the end of January / beginning of February the following year.

Below are the corresponding dates on the Bitcoin network using the same database:

  • 24.65 terrahash/s on November 25, 2012
  • 26.52 terrahash/s on November 26, 2012
  • 25.29 terrahash/s on November 27, 2012
  • 29.47 terrahash/s on November 28, 2012
  • ——– Bitcoin Halving Day ———
  • 28.2 terrahash/s on November 29, 2012
  • 21.71 terrahash/s on November 30, 2012
  • 28.31 terrahash/s on December 1, 2012
  • 24.19 terrahash/s on December 2, 2012

The chart below is a visual representation of this phenomenon.

bitcoinhashrate

I have described the reasons for why this has occurred in the following articles:

Comment of the day: Mining Rewards

Yesterday Ray Dillinger from this thread messaged me on Bitcoin Talk and said:

I think the economics of “mining” reveal a design flaw in proof-of-work cryptocurrencies.

The idea that people can ‘farm’ the money supply by buying and powering hashing hardware guarantees that the difference between the amount of value produced and the amount of resources expended will approach zero.

It’s something like a tautology, where people are spending money in an auction for the right to print money.  Such an auction is more or less guaranteed to bring the costs of printing money right up to its value, which is an unnecessary (and unwanted) feature.

Aside from externalities and subsidies in the markets for electrical power and waste heat making the auction unfair from the beginning, that simply is not a necessary feature of a currency.  Certainly no government-issued fiat currency is so resource-intensive to supply.  But that comes about mostly because the government can impose additional costs (such as jail time) on unauthorized printing which are not borne by those doing authorized printing.

And that distinction between “authorized” and “unauthorized” is something that peer-to-peer and distributed systems don’t have access to.

For more information on this issue I recommend interested readers visit a great post by Robert Sams, “The Marginal Cost of Cryptocurrency.”  Earlier this month I wrote a detailed follow-up post that Sams also helped contribute to (especially the concluding remarks) which discusses some of the the issues that Bob mentioned in the above comment.

I think in the long-run both Ray and Robert will likely be proven correct though there may be some interim solutions such as sidechains that delay or mitigate some of these problems.

Will colored coin extensibility throw a wrench into the automated information security costs of Bitcoin?

[Note: a version of this appeared at Business Insider.  A PDF is also available of the version below.]

The cost of securing the Bitcoin network for a given length of time is roughly equivalent to the value of the block reward over the same time. In economic terms this reads as MP = MC. In Bitcoin and most of its descendants, the labor force (called miners) are provided a hard-coded wage, a seigniorage subsidy called a block reward roughly every 8-10 minutes in consideration for their providing security and processing transactions. In return, this labor force provides the security in a method called “proof-of-work” – hashing through benign math work until it finds a special number, broadcasting that solution to the network (the other laborers) and, once a block is found, repeating the cycle once again.

Is there an economic flaw of proof-of-work as it relates to security?  For instance, on most cryptocurrency chains the asset value of the chain has to be proportional to the proof-of-work otherwise this could lead to an economic incentive to attack the chain. Compounding this issue are new financial instruments such as metacoins, colored coins and smart contracts that can be exchanged on the same chains and unquestionably increase the enterprise value of the chain, yet which do not proportionally incentivize security beyond the existing seigniorage subsidy.

Economically rational laborers will not spend more than the value of a bitcoin to extract the rents of that bitcoin. Because mining rewards were fixed with the genesis block in 2009 (providing a fixed income on a scheduled time table), and market participants are able to determine the percentage of the overall hashrate at a given time that their mining equipment represents, only relatively simple calculations are required to gauge the potential profitability of their mining activities.

In practice, laborers on the Bitcoin network must account for the capital costs of their hashing equipment, rent for the land, administrative overhead, taxes and increasingly important, the energy costs which can be very specific to their locality, depending on the equipment’s geographic location. All of these costs are tallied against an inelastic wage which can only be attained if the hashing equipment they control is able to outcompete other such miners – it is a zero-sum game. And it can be scaled.

The Hashrate Wars

This subsequent escalation, dubbed a “hashrate war” (the competitive fight for ever increasing hashing equipment) created a technological S-curve that looks similar to the chart below:

hashrate over time

The vertical axis in the chart above is logarithmic and illustrates the hashing rate (showing that it will slow down once ASICs hit fabrication node limitations). The horizontal axis projects two years into the future (see also Bespoke Silicon).

Ignoring all of the various issues related to public goods challenges and game theory (such as “selfish mining”), this system has served the bootstrapping phase with relative ease. If it continues to expand at its current rate, the hardware side could potentially become commoditized in the next 3-4 years whereupon a miner’s competitive advantage will solely lay in energy arbitrage. In fact, Satoshi Nakamoto, the pseudonymous creator of the protocol foresaw this noting in the original FAQ that “When Bitcoins start having real exchange value, the competition for coin creation will drive the price of electricity needed for generating a coin close to the value of the coin.”

Thus the relationship between enterprise value and hashing power has been known for some time.

A challenge however, presents itself when this seigniorage subsidy is halved, a structural feature of most cryptocurrencies. With Bitcoin, every 4 years (or every 210,000 blocks) the subsidy is reduced by 50%. This is equivalent to the miners – the labor force – being told they would receive a 50% pay cut. While this issue typically remains hidden and muted when token values appreciate and rise, in the long run continual halvings discentivize laborers from providing security and utility to the network. There have been several “cryptocurrencies” whose labor force fled after their profitability period was over – most notably with Auroracoin – and as a consequence the network was left insecure and vulnerable to double-spending attacks (called a 51% attack).

One such popular token that is currently facing this dilemma is Dogecoin, which is losing 20-30% of its security force every 2 months. While there are potential solutions Dogecoin developers could adopt, incorporate or migrate to, because Dogecoin is still relatively young it has the flexibility of moving towards a different security mechanism. This issue has the potential to become systemic – and thus more difficult to address – in other digital currency ecosystems.

dogecoin comparison chart

Are there any other areas of asymmetric, unbalanced security?

Colored coins, metacoins, smart contracts and user-created assets are buzzwords trumpeted by many cryptocurrency enthusiasts this past year. I even wrote a short book about these groundbreaking possibilities. Considerable publicity has been dedicated to new functionality which promises to expand the extensibility of cryptoprotocols to go beyond tracking ledger entries for just one specific blockchain-managed asset (a coin) and allows users to instead “colored” tokens to represent cars, houses, commodities, stocks, bonds and other financial instruments and wares. For example, there are several colored coin projects currently in beta that allow users to take a fraction of a bitcoin, such as 0.001 BTC and “color” it “blue” (or any other arbitrary color) which represents say, a specific make and model of an automobile like a 2010 Camry LE. The user can then transfer that asset, the title of the Camry, along a cryptoledger (such as the Bitcoin network) to other individuals. Instead of having to transfer tens, hundreds or thousands of bitcoins in exchange for a good or service, users can instead exchange and manage entire asset classes in a trustless, relatively decentralized framework.

However, in this model the labor force providing security has no incentive to consume more capital or create additional hashrate just because the market value of colored coins is in excess of the uncolored value (since the value of miners’ new coins will be solely based on uncolored exchange value). Just because social conventions on the edges of the network add value perceptions to the network, based on the current code, miners do not automatically receive any additional value for providing that security.

So we should ask: does this raise the risk of a double-spend? Perhaps, because more hashrate is required for a proof-of-work blockchain with additional color value transactions on the chain. Yet, there is no automatic mechanism to do reward this additional labor leading a (remote) possibility of having to remove some Script’s altogether. Script is the built-in scripting language used for creating and customizing transactions.

The gap between mining value and enterprise value

For instance, assuming this colored coin technology works and is adopted by 1,000 people the following scenario could take place. The total market value of a block reward (currently 25 bitcoins) is roughly $12,500 (or $500 per bitcoin), thus ceteris paribus the labor force is only spending $12,500 every 10 minutes to secure the blockchain (in practice it is a lot more, there are several exceptions). One such exception is the expectation of token value appreciation – that is to say that if Bob the miner believes that a bitcoin’s value is $1000, but the price is currently $500, Bob is still willing to expend up to $1000 for mining each bitcoin, discounted by his internal calculation for the probability that bitcoin will rise to that price. However, if colored coins are adopted and used via the built-in scripting methods, there is potential for a seemingly unlimited amount of assets to be traded on the Bitcoin network. If these several thousand colored coin users add additional value, this creates an incentive for attackers to attack the network through colored coin-based double-spending attacks.

For example, where each of these 10,000 users places the title of a 2010 Camry each valued at $10,000 that would theoretically add $100 million in value that the network is transferring, but for which miners are not being proportionally rewarded or paid to secure those assets. As a consequence, over time as tens of thousands of assets – and functionality – are added to the network, the gap between mining reward value and enterprise value widens which creates a vulnerability, an economic incentive for criminals to use hashrate to attack the network. A rogue attacker could sell an asset and build a competing tree (consensus in Bitcoin is based on whatever is the longest tree of blocks). After a successful 51% attack, the rogue attacker could then broadcast a fake chain built without the corresponding asset, having switched it out thus effectively double-spending. And if the total value that the network is transacting is at least twice as much as bitcoin value is, then there is a financial incentive for rogue participants to attack the network. The impact of a successful attack involves a lot of speculation and will likely fill continue to provide researchers many more volumes of conjecture and modeling.

Money for nothing

This scenario raises the question: what then is the potential divergence in value between bitcoin the currency and bitcoin the network (which can transfer and protect other data)? This issue only presents itself now as, previously, only bitcoins – and no other apps, assets or instruments – existed on the network. This gives rise to a coordination problem because miners would have to also keep track of the color, keep track of the exchanges the color is being traded on, and keep track of the settlement price (if there is such a thing) so that they could adequately gauge market clearing prices and readjust the coinbase reward every 10 minutes.  Again, even if this coordination problem is solved the seigniorage reward does not increase – the current fixed income does not reflect the actual value being transacted on the network.  So colored coins on a fully decentralized network could end up on an undersecured network of their own making with the only solution: recode the block rewards based on the value of the color and this presents a number of technical and social engineering challenges. In some ways this issue is related to the hypothetical economic disconnection between blacklisted and whitelisted tokens (due to Coin Validation) – a blacklisted token would be sold for less than what a whitelisted token would sell for.

A follow-up question that the community will likely debate is: Why wouldn’t the value of a bitcoin increase as items of value are transferred on the blockchain via colored coins or another protocol, such that the miner’s block rewards would adequately compensate the miners? According to Preston Byrne, a securitization attorney in London the answer to this is “that the value of bitcoin used in a colored coin transaction does not need to bear any relationship to the value of the associated asset – the network is being used to transmit information, and that information represents rights, and is the rights – not the token – which are valuable.” If the price of bitcoin does not adequately incentivize the miners, then there will be a difference between value of a bitcoin and the network and then some entity will have to step in to compensate for that difference. Whether collective action is sufficient to provide this compensation is currently unknown but there are coordination problems inherent in this model that would make this difficult.

In contrast, the Ripple protocol, sidechains and perhaps even a proof-of-stake system could probably alleviate at least this specific concern. These alternative consensus mechanisms have one advantage to hash-based proof of work systems like Bitcoin, at least for the transfer of non-crypto value (i.e., colored coins).  For instance, Ripple’s distributed consensus mechanism allows users to exchange assets via gateways without needing to proportionally incentivize the security labor force. This is not necessarily an endorsement of this particular platform, rather it serves as examples of how it is immune to that particular attack vector.

Alternative approaches to network security

I reached out to several experts for their views on this issue. According to Robert Sams, founder of Krtyptonomic and Cryptonomics:

One of the arguments against the double-spend and 51% attacks is that it needs to incorporate the effect a successful attack would have on the exchange rate. As coloured coins represent claims to assets whose value will often have no connection to the exchange rate, it potentially strengthens the attack vector of focusing a double spend on some large-value colour. But then, I’ve always thought the whole double-spend thing could be reduced significantly if both legs of the exchange were represented on a single tx (buyer’s bitcoin and seller’s coloured coin).

The other issue concerns what colour really represents. The idea is that colour acts like a bearer asset, whoever possesses it owns it, just like bitcoin. But this raises the whole blacklisted coin question that you refer to in the paper. Is the issuer of colour (say, a company floating its equity on the blockchain) going to pay dividends to the holder of a coloured coin widely believed to have been acquired through a double-spend? With services like Coin Validation, you ruin fungibility of coins that way, so all coins need to be treated the same (easy to accomplish if, say, the zerocoin protocol were incorporated). But colour? The expectations are different here, I believe.

On a practical level, I just don’t see how psudo-anonymous colour would ever represent anything more than fringe assets. A registry of real identities mapping to the public keys would need to be kept by someone. This is certainly the case if you ever wanted these assets to be recognised by current law.

But in a purely binary world where this is not the case, I would expect that colour issuers would “de-colour” coins it believed were acquired through double-spend, or maybe single bitcoin-vs-colour tx would make that whole attack vector irrelevant anyway. In which case, we’re back to the question of what happens when the colour value of the blockchain greatly exceeds that of the bitcoin monetary base? Who knows, really depends on the details of the colour infrastructure. Could someone sell short the crypto equity market and launch a 51% attack? I guess, but then the attacker is left with a bunch of bitcoin whose value is…

The more interesting question for me is this: what happens to colour “ownership” when the network comes under 51% control? Without a registry mapping real identities to public keys, a psudo-anonymous network of coloured assets on a network controlled by one guy is just junk, no longer represents anything (unless the 51% hasher is benevolent of course). Nobody can make a claim on the colour issuer’s assets. So perhaps this is the real attack vector: a bunch of issuers get together (say, they’re issuers of coloured coin bonds) to launch a 51% attack to extinguish their debts. If the value of that colour is much greater than cost of hashing 51% of the network, that attack vector seems to work.

In other words, while these new financial instruments could technically be exchanged in a trustless manner, the current protocol cannot automatically incentivize their protection or account for their enterprise value, the equivalent of using a mall security guard to protect Fort Knox. While miners may be able to protect against amateurish shoplifters or even unorganized cat burglars, once organized criminals calculate and realize that one “color” asset is worth the economic effort of attacking the vault they may try to do so.   And because the blockchain is public and color assets could be known to the world-at-large, taking the Fort Knox analogy further, this would be like a mall cop standing in front of the contents of Fort Knox piled up on an open field (or behind a see-through glass vault). It is an attempt to guard the Crown jewels not in a fortress with armed guards, tanks and turrets, but with Paul Blart.

On this point, Jonathan Levin, co-founder of Coinometrics explained that:

We don’t know how much proof of work is enough for the existing system and building financially valuable layers on top do not contribute any economic incentives to secure the network further. These incentives are fixed in terms of Bitcoin – which may lead to an interesting result where people who are dependent on coloured coin implementations hoard bitcoins to attempt to and increase the price of Bitcoin and thus provide incentives to miners.

It should also be noted that the engineers and those promoting extensibility such as colored coins do not see the technology as being limited in this way. If all colored coins can represent is ‘fringe assets’ then the level of interest in them would be minimal. Time will tell whether this is the case. Yet if Bob could decolor assets, in this scenario, an issuer of a colored coin has (inadvertently) granted itself the ability to delegitimize the bearer assets as easily as it created them.  And arguably, decoloring does not offer Bob any added insurance that the coin has been fully redeemed, it is just an extra transaction at the end of the round trip to the issuer. That is an implicit negative for investors and users.  This raises some concerns in the future, if a party had the ability to invalidate Bitcoin accounts based on their own criteria that the miners might gain an influence over the colored coins and may bias various aspects of the economy incentivized through some kind of backchannel payment.  For instance, BitUndo is a new “double spending as a service” project that is trying to do just that, provide a way for users to send transactions to a mining pool in an attempt to reverse transactions something that has created a flurry of reactions in the community. In the end, colored coins ends up being expensive through imposed TX fees, and thus becomes less attractive to issuers and users.

According to Alex Mizrahi, lead developer of Chromawallet a colored coin project:

It is true that currently block subsidy has a significant impact on network’s security, but it is not meant to work this way in the long run.

We’ll go through 5 subsidy halvings in next 20 years, at that point block subsidy will be around 0.78 BTC. Reward miners get from fees is already on that scale (e.g. 0.134 BTC here) even though blocks aren’t full yet.

So transaction fees are going to play bigger role than subsidy. And value of those fees is linked to usefulness of transactions (i.e. value of those transactions) rather than to exchange rate.

Colored coins increase incentive to attack, but they also increase usefulness of transactions, thus it isn’t clear whether they will have negative or positive impact on network security.

A couple other comments: “Script” is not required for colored coins, they work with very plain bitcoin transactions too. The incentive structure for bitcoin mining sucks from security perspective anyway, so I hope we’ll eventually upgrade to a better protocol (e.g. including proof-of-stake) regardless of colored coin woes. And merged-mined sidechains will have even worse problems unless they are ‘hardened’ in some way.

I also contacted Jack Wang, co-founder of Bitfoo, a hosted wallet that was the first to implement proof-of-reserves. In his view:

The security of the network depends on the aggregate hashing power.  In one method of implementation, if Colored Coins could pay just one pool, say Eligius, extra to prioritize their transactions, but Eligius had only, say 25% of the network power, then the rest of the network could collectively decide to exclude the blocks that Eligius mined.  This makes some sense to me since Eligius itself couldn’t secure the network, yet is the only pool extracting the extra value out of Colored Coins.  Colored Coins would need to distribute the extra rents to at least 50% of the network, and unless this lies within one pool then this is a danger to the Bitcoin network, but if it is 2 or more, this requires coordination and introduces potential holdout problems.

A more natural way to implement this would be that colored coins users would pay higher transaction fees on their own so that any and all miners that included those transactions in their blocks would get more fees. But unless those fees are mandated by colored coins, what is the incentive for individual colored coins users to pay extra?

Towards a more functional future

While this is a speculative issue, what is knowable is that the economics behind it are math-based and built into these protocols. What is also known is that some proposed solutions should be easier to implement than others. For instance, Bitcoin developers could fork the code and create a proof-of-stake ledger proposed by Stephen Reed. Alternatively, because this new extensibility could create fungibility issues, a different – and admittedly impractical – solution might be for mining pools to utilize a trusted Oracle data feed to colored coin exchanges and adjust mining rewards accordingly. Perhaps removing scripts entirely and relying on merge-mined sidechains, instead, could alleviate this potential pain point as well.

What is definitely known is that market participants have every incentive to keep miners mining. If fees are floated users will likely pay higher transaction fees if they do not want miners to go elsewhere. While speculative, colored coins users could become the biggest payer of transaction fees, though in practice, most users do not like paying any fee. Over the past several months this is an issue that Mastercoin and Counterparty developers have promoted: pay the miners higher fees for access to these new platforms because miners expect the value of these special transactions to go beyond the excess of bitcoin transactions. Miners could potentially auction block priority to these transactions over regular bitcoin transactions. One pool, Eligius, operated by Luke-Jr is already filtering out specific bitcoin transaction today. In conclusion, the interaction between second-generation blockchain technology and first-generation incentive mechanisms will continue to be thought-provoking. It is certainly an issue to keep one’s eye on in the coming years.

[Note: I would like to thank Preston Byrne, Petri Kajander and Taariq Lewis for their comments; and Joshua Zeidner for bringing this issue to my attention and for his extensive feedback.]

Cryptocurrency in the news #15

Need to close some tabs, here are some links of interest:

Quote of the day: formulating the Byzantine Generals problem

The subfield of research involving Byzantine fault tolerance has existed for three decades and one of the areas in computer science that Bitcoin provided a decentralized solution for was the Byzantine Generals Problem.

How did the term Byzantine Generals Problem come to exist?  Here’s an answer from the creators:

The Byzantine Generals Problem  (with Marshall Pease and Robert Shostak)
ACM Transactions on Programming Languages and Systems 4, 3 (July 1982), 382-401. PDF


I have long felt that, because it was posed as a cute problem about philosophers seated around a table, Dijkstra’s dining philosopher’s problem received much more attention than it deserves.  (For example, it has probably received more attention in the theory community than the readers/writers problem, which illustrates the same principles and has much more practical importance.)  I believed that the problem introduced in [41] was very important and deserved the attention of computer scientists.  The popularity of the dining philosophers problem taught me that the best way to attract attention to a problem is to present it in terms of a story.

There is a problem in distributed computing that is sometimes called the Chinese Generals Problem, in which two generals have to come to a common agreement on whether to attack or retreat, but can communicate only by sending messengers who might never arrive.  I stole the idea of the generals and posed the problem in terms of a group of generals, some of whom may be traitors, who have to reach a common decision.  I wanted to assign the generals a nationality that would not offend any readers.  At the time, Albania was a completely closed society, and I felt it unlikely that there would be any Albanians around to object, so the original title of this paper was The Albanian Generals Problem.  Jack Goldberg was smart enough to realize that there were Albanians in the world outside Albania, and Albania might not always be a black hole, so he suggested that I find another name.  The obviously more appropriate Byzantine generals then occurred to me.

The main reason for writing this paper was to assign the new name to the problem.  But a new paper needed new results as well.  I came up with a simpler way to describe the general 3n+1-processor algorithm.  (Shostak’s 4-processor algorithm was subtle but easy to understand; Pease’s generalization was a remarkable tour de force.)  We also added a generalization to networks that were not completely connected.  (I don’t remember whose work that was.)  I also added some discussion of practical implementation details.

Different proof-of-work mechanisms and several altcoins that have been hit with a 51% attack

realityJonathan Levin was recently interviewed by CoinTelegraph.  One of the notable remarks was the following:

CT: You also mentioned at CoinSummit that Proof-of-work model may not be here to stay. What would you think would be a viable alternative which could be created should the popularity of Bitcoin explode in the next few years?

JL: I think the concept of proof of work is always going to be here to stay. Whether this proof of work will be running a hashing algorithm like SHA-256 or something different remains to be seen. I am a big fan of other forms of proof of work that can be combined with or replace the proof of work that Bitcoin uses. An example of this could be proof of solar power generation. There are many great minds thinking about this problem and I am sure there will be some interesting developments over the next year.

While I think that most proof-of-work (as seen so far) generally leads towards centralization (due to economies of scale), perhaps there will be solutions in the future (though I suspect that is not the case because of MV=MC).

With that said, there are several different types of proof-of-work mechanisms used in cryptocurrenices today:

  • SHA256d which is used in Bitcoin and numerous clones (good thread on StackExchange) and is based on HashCash
  • scrypt which is used with Litecoin, Dogecoin, Feathercoin and numerous others
  • X11 used notably with Darkcoin
  • Dagger which may be flawed but was intended to be used in Ethereum
  • Kimoto gravity well, which adjusts difficulty, is used with Megacoin (explanation here and here)
  • Other experimental variations include: Scrypt-N, Scrypt Jane, Groestel (Grøestl), Keccak, and Quark

Based on my blockhalving article, I received an email yesterday about the potential for a 51% attack on Bitcoin and other chains:

I’ve been told that the system is secure because anyone with the computational power to conduct a 51% attack would just mine instead. If all coins are mined and there aren’t high enough transaction fees then you lose that argument right?

In theory, you would think that is when the network was the most vulnerable but in practice there are numerous chains that become extinct long before coins (or the money supply) are completely divvied out and are actually never hit with a 51% attack.  A joke I heard last year when I helped build some mining system for a few friends is that most altchains do not survive their second halving.  While no one has yet to actually do the empirical study on this, the truth is (at least back in spring of 2013) probably pretty accurate.  If you spend any amount of time in the announcement alt thread on Bitcoin Talk most new chains are pumped and then dumped by a coordinated few (like Fontas).

When prices enter a prolonged bear market there are fewer incentives for miners to stick around to provide security and thus the chain is abandoned even before halvingday.  While there are several reasons why someone would spend the costs to actually attack a dying chain — to test out their old equipment (or “LULZ”) — I do not think any research has been published yet that categorizes the various empirical examples of such deaths.  If anyone is interested in reading about early attacks, I highly recommend reading through ArtForz‘s posts on Bitcoin Talk.  He figured out all sorts of exploits with some of the early alts like i0coin and SolidCoin.

Below are five chains that have been known to be hit by 51% attacks, I’m sure the actual number is in the dozens at this point:

xkcd_security

There are other cheaper ways to attack the network that don’t require achieving 51%.  One is simply with social engineering: since there are only a small number of Bitcoin pools (roughly 12) you could go the old fashioned route and blackmail them, physically attack the locations, regulate them, etc.  But those can happen with other types of information security too.  Dave Babbitt is finishing up his master’s thesis and he has an interesting statistic that I will be sure to post once it is published.

As far as Dogecoin goes, something to keep in mind is even if it is temporarily profitable (or less costly) for Bob’s Litecoin Farm to attack the chain creating a loss-of-confidence in dogecoin, those dogecoin miners that leave the network could end up on Litecoin, creating new competition for Bob.  So while it would hurt the confidence in Dogecoin, those profitably able to hash on Litecoin would likely create more headaches for Bob than is worth the effort.  But not all miners think in these terms.

[Note: as of this writing the Dogecoin hashrate is ~40 gigahash/s versus roughly 220 gigahash/s for Litecoin.]

With that said, in reading through some of the comments from the article yesterday, Stephen Gornick posted the following hypothetical:

A 51% attack for the purpose of double spending against the exchanges would need about $5M worth of the new Scrypt ASIC hardware mining away on a private fork of the Dogecoin blockchain. LIkely even less than $5M is necessary as a successful attack will likely involve DDoS’g the existing pools such that the total hashing on the public chain is lowered.

Additionally, the attacker doesn’t need to invest $5M just on this attack. Those Scrypt ASICs are only needed for about an hour — and can go back to mining Litecoin or whatever after the attack. So all that is needed is to direct $5M worth of hardware to the private Dogecoin blockchain fork for a short time until the aim of the attack (sell Dogecoins for bitcoins, litecoins or other non-reversible payment method, then withdraw the funds) is complete.

Stephen is probably correct, though, again a 51% attack is probably best described as an opportunity cost attack.  That is to say, what other more profitable and productive effort could the systems you are using to attack with have been used for instead?

This topic is a never ending and there are many interesting papers, threads, articles, videos and podcasts covering the same topic from multiple angels.  Perhaps Dogecoin will stave off any such attack.

Digital currency wingmen (and women)

save-FerrisI have a new article up over at CoinDesk discussing some of the challenges facing Dogecoin as it relates to block halving rewards:  What Dogecoin Must Do to Survive

There were some edits and a few things were removed, so for those interested I also have my original copy in (pdf) that has one more option, a chart, plus a few more details and links.  The title of the original is “Dogecoin likely needs a wingman to survive” (it also links to the MemoryCoin “death”).

There are a number of potential solutions and many well-intentioned, motivated people are trying to organize a variety of ways to “Save Doge” happen.

For instance, this is/was a very popular Dogecoin thread from yesterday: Here’s your ASICs and pools — one of the developers has purchased ASICs from gridseed and is giving them to randomly selected people with the stipulation that they turn the hashrate towards dogecoin.

There are four problems with this specific proposal:

  1. It will simply increase the difficulty rate, pushing out other marginal miners who cannot profitably provide security on doge towards other more profitable chains (this  has occurred with Bitcoin in the past as well).
  2. From my reading it does not appear that there is any way to control those who receive the ASICs from pointing the ASICs on to another more profitable chain(s).  Whoever is distributing these would need to do some kind of “lock-in” otherwise this will occur.
  3. The question of who pays electricity is not highlighted or answered in the top of the thread.
  4. Nor is the question of who keeps the coins that are generated.  Are the holders of the coins required to keep them, sell them, trade them?  If they have to pay for electricity, taxes, logistics then they will likely need to liquidate those coins.

What this essentially amounts to is temporarily subsidizing hashrate on the doge network but with several unintended consequences that will likely create more challenges down the road.

Again, I think competition and choice is good.  I do not think (and this is just my opinion) that a monopoly-of-ideas behind just one token is an effective way to promote a new innovation that itself was purportedly designed to compete with other forms of payment.  In an open market, market participants decide and their preferences can change based upon economic conditions.  It impossible to predict what the market will decide a priori thus despite these predictions and trends the market may move in a different direction.

However, this reddit plan above ultimately just sends money to the utility companies, postponing the inevitable by writing checks to an electrical money pit.

The “pain point” of payments in the developed world

paymentsVitalik Buterin is one of the smartest writers and developers in the digital currency space. At the ripe age of 20 he has put together a repertoire of code, articles and most importantly challenges that the “cryptocurrency” world faces.

He recently penned an article that argues what Bitcoin needs today is usage by employers, not just more merchants.  That one of the ways to subdue and mitigate the high levels of volatility is for employers to pay employees in the digital currency whereupon employees then can pay for wares from existing merchants whom in turn pay their employees in bitcoin.

This sounds nice in theory — a fully enclosed system — but there are a number of problems with it, namely that in practice bitcoin is treated as a commodity or collectible (not a currency) by market participants and its deflationary allocation + inelastic money supply makes it a poor modern medium of exchange.

This point is argued in a recent paper by Ferdinando Ametrano:

The unfeasibility of a bitcoin loan is similar to that of a bitcoin salary: neither a borrower nor an employer would want to face the risk of seeing their debt or salary liabilities grow hundredfold in few years. A manufacturing firm cannot accept an order in bitcoin with the risk of its value doubling or halving on a single bad day. Even the development of a derivative market could only hedge these risks with an implausibly high price. This is the cryptocurrency paradox: arguably the best ever kind of money by any metrics, marred by the severe inability to serve as reliable unit of account.

Perhaps this will change over time, maybe one solution is through hard forks involving “growthcoin” (as proposed by Robert Sams) and “stablecoin” (as proposed by Ametrano).

However, one of the challenges will always be the “pain point” — what incentive do people have to switch to a competing platform in the first place?  Why should consumers or employers want to adopt bitcoin the currency?  For instance, most users in the developed world do not have to deal with double-spending or rampant inflation.  Credit card fraud rates represent roughly just 7 bps and some cards provide other types of incentive like cash-back rewards or frequent flier miles — something that bitcoin cards (if they existed) would have a uphill task of providing.  Similarly many modern savings accounts provide some form of interest rate plus deposit insurance — trying to on-board these types of users would be difficult because there is no current equivalent with Bitcoin (yet).  [Note: savings is different than speculative hoarding, see discussions here and possibly here.]

Two days ago Ben Edelman explained how in most circumstances, customers pay more just to use bitcoin yet without gaining any additional benefits.  By “use” he means using it for actual commerce and not holding on to it for speculative purposes.  Because of this friction, because bitcoin users typically need to spend more than the alternative forms of payment, despite the large increase in adoption by merchants over the past 6 months there has been very little corresponding transactional volume.  Instead it is being treated as a novelty, a speculative collectible.

Or as a friend of mine, Bob, calls it a “My Little Pony” toy.  In a nutshell Bob compares the bitcoin currency system with the My Little Pony collectible.  Bob has a daughter and according to her each Pony has its own story in its own little special universe filled with cartoons, video games, clothes and toys and that’s how bitcoin the currency is treated: many early bitcoin adopters enjoy the ever grander mythos and backstory, that it was created by an anonymous developer, the ledger entry cannot be double-spent, its distribution and promotion involves volunteers organically threaded together via Meet-ups and bulletin boards and is purportedly impervious to political whims.  This brings it to life in a more colorful way that other systems like Square or Stripe have not similarly created (see Seth Godin’s Purple Cow).  And according to Bob, My Little Pony characters can also have plight-filled adventures, though none involving subpoenas (yet).  See also: Bitcoin: a Money-like Informational Commodity

Perhaps Buterin’s solution will gather momentum over the coming years, however unless the average consumer needs to spend less (not more) to gain the same level of advantages and protections that current platforms have, it is unlikely that a snowball effect in payments will take place anytime soon.  Incidentally, one crowdfunded innovation that could likely move beyond “toy” phase soon is the Trezor hardware wallet because it fulfills a real pain point today, horribad security issues with protecting private keys.

The advantages and challenges of mining bitcoins in China

I received some feedback from a veteran of the mining subindustry in China regarding my previous research on this space.

According to him there are a number of other moving pieces at play that are fluid will not necessarily last.

For instance, providers such as HashRatio have succeeded, not by designing their own chip but by figuring out the best combination of system and power configurations.  Going from chip to working system is non-trivial.   The end result are systems which are not necessarily pretty to look at, but they work.

One of the issues this new source had with my report was that because of guanxi is relatively hard to quantify, knowing whether or not you have the best price of a particular resource (like energy) is always a lingering question.  That is to say, even if Alice knows the boss of a coal mine, another competitor, Bob, may know his bosses boss which gives Bob even cheaper rates than what you thought you were receiving.  Improving guanxi is a millennia old Herculean task.

Some other highlights according to the source:

  •        If Alice’s metric is purely dollars per ghash, the analysis was correct. This is because there are two important figures: Alice’s new ASIC kWh/hash multiplied by her electricity cost / kWh.
  •        While Moses Lake is quoted in many news reports at being 1.7 cents per kWh, there are many other parts of the state which are very low, some averaging 2.3 cents per kWh.  And Washington has a much better infrastructure (both for electricity and internet) than China which makes it a very competitive geographic region.
  •        Similarly, Russia is 1 to 1.2 cents per kWh, though, you would be in Russia.
  •        China is cheap relative to a lot of countries, but relative to Washington and Russia the community capacity is still limited by State Grid, a large state owned enterprise (SOE) with a flat rate of 0.3 RMB kWh buying in any power station linked to it.  Miners will likely be unable to go under that.
  •        While Alice can do some meter fiddling or go off grid power, those options are hard to find and probably will not last long.
  •        State Grid has likely heard of bitcoin mining, but the wattage usage is not big enough to pique their interest or oversight.
  •        Inner Mongolia, as part of China, has overinvested in wind farms.  Yet there are large areas that are not linked to the grid yet.  And due to the unstable nature of wind, as well as poor internet infrastructure, none of the mining pools has gone there yet.  And it is sparsely populated which leads to potential difficulties in sourcing human capital and talent to run a pool.
  •        Mongolia, the country, imports roughly 10-20% of its electricity from Russia, so Bob might as well go to Russia if he is willing to set up a facility in Mongolia.

Interesting posts to add to your reading stack

  • I highly recommend re-reading Robert Sams’ post from earlier this year, The Marginal Cost of Cryptocurrency.  Through many exchanges I have incorporated several of his thoughts into my own writings and think he is one of the top thought leaders in this space.  He was on the Economic panel last week in Amsterdam too.
  • I came across a new blog that deals with block reward incentives and network costs and one particular post in particular stuck out: Megawatts Of Mining.  All of Dave’s posts there and on Bitcoin Talk are thought provoking.
  • I will probably get some hate mail from some friends, but I thought Ben Dyson’s post, Bitcoin’s 3 Fatal Design Flaws made a couple of good points.  I’m not swayed by point 3 but his first 2 are pretty accurate.  Bitcoin was supposed to be an electronic peer-to-peer payment platform, in fact, according to Mike Hearn, Satoshi originally was working on building a P2P marketplace.  Based on some cryptic notes at the Amsterdam conference last week, Hearn purportedly said, “when Satoshi launched bitcoin he was working on a p2p marketplace and you would be able to rate buyers and sellers and the weight would be according to how much mining they had done.”

Irrespective of what Satoshi’s plan was, in practice, what has happened is the token has turned it into a speculative asset, a store of value with little velocity.  And we see that in actual blockchain behavior.  So, Dyson’s first two points are worth thinking over once again.

Update: Mike Hearn sent me a note and mentioned that the marketplace was never finished and Satoshi deleted the code.

  • Lastly, two notes about exchanges.  Caleb Chen had a good post on the HKCEx scam and the WSJ noted today that a couple exchanges (Mt. Gox and BitInstant) are under investigation for ties to illicit trade (through Silk Road).  Again, if Bitcoin is considered a developing economy, historically the successful ways to grow an economy is to take the existing capital stock and make it more productive.  The sale of drugs does not create engines of growth.  And scams are not helping the average person trust the safety and security of the ecosystem.  The solutions to these involve creating real on-chain utility beyond gimmicky entertainment apps.  There are also a lot of good wallets either being developed or in production now, I’ll likely post a round-up of those at some point this year.  I do not think paper wallets are the solution as you need to be a genius to use them and it defeats the purpose of having or using an electronic asset.

Questions related to mining rewards in Bitcoin

A user, Bob, on Bitcoin Talk sent me some question in response to my article:

1) why does one assume transaction fees will substitute decreasing block rewards. are users not equivalent in choosing the operating software in the Bitcoin network why not just charge a mandatory 0.01% charge on all coins that are younger than X blocks and limit free transactions to say 30%. When the thermodynamic limit is achieved economic friction in Bitcoin will be just 0.01% of all energy consumed in the the economy.

2)the thermodynamic limit is not a limit in that there is entropy, the waste heat just becomes an input for a new system, eg. water can be desalinated, cooling as we know it today is a wasteful activity.

3) I also don’t seem to understand why when ASIC chips reach the thermodynamic limit they’ve wouldn’t start decentralizing in location (not ownership). There will always be centralized mining where energy is cheep but there will always be a need for heating at the very least everywhere and that is potentially a free energy input.

The free market is the perfect motivation for innovations not explored in your analysis.  Still you leave me in awe as to how alts are going to evolve as the energy equilibrium evolves.

My responses to Bob are the following:

1) In practice, users of the Bitcoin network do not like including transaction fees and there are endless threads on Bitcoin Talk of people complaining about fees.  In fact, one of the purported — wildly incorrect — selling points with Bitcoin is that it is somehow “free.”  Obviously this is incorrect, utilizing scarce resources is not free.  Someone has to pay.  The people who pay in this case are all bitcoin holders as roughly every 8-10 minutes new bitcoins are minted, diluting the shares of everyone through inflation.

But let us assume that we fast forward 100 years into the future when there are no longer block rewards, that miners will continue providing labor solely for transaction fees.  If these fees are floated and chosen by miners, it is impossible to say a priori what the actual market clearing fee will be.  Will it be 0.1%, 1%, 10%?  Or something in between?

One issue in Bob’s scenario is the “30% free transactions” — this is completely arbitrary.  Miners still have to bear a real cost to transacting and securing the network and only do so today because of block rewards.  If there are no block rewards and they want to continue providing “free” transactions, then they will be doing so out of charity which is not a sustainable business model.

2) The thermodynamic limit is something Andrew Poelstra has written about.  For the purposes of Bob’s specific point, Poelstra’s document can be ignored for the moment because it is still necessary to actually describe what is happening today.  If a bitcoin is worth $1,000, then an economically rational miner will only spend (capital costs + operating costs + taxes, etc.) no more than $1,000 to extract rents on that token.

In practice this is not the case as there are numerous examples of people and companies operating at losses for a variety of reasons, primarily because of price expectations: they believe that the token will eventually appreciate in value and the market value of the token will eventually cover their operating losses.  Thus today, the network is being “oversecured.”

As far as “waste,” that is how Proof-of-work works.  Someone, somewhere has to “burn” (or dissipate) something in order to secure the network.  Irrespective of what part of the supply chain or logistical operations it takes place, market participants are provided signals by token value (e.g. a $1,000 bitcoin) to turn off or on their hashing systems.  It doesn’t matter what the energy source is or how efficient ASICs are, market participants will simply use a calculator to find out if their inputs (capital costs + operating costs, taxes, etc.) allow them to profitably provide their labor.  The same goes for a $1 million bitcoin.

3) Let’s assume that tomorrow several chip manufacturers announced that they were now shipping chips with fabrication node spacing that reaches the Planck limit (see this interesting paper).  That essentially, irrespective of who you bought from, their hardware design was the most maximum efficient chip possible.  We will call this the Alice design.  What would happen in this case is that whoever was able to get a hold of Alice first would profit from it disproportionally at first (as other competing farms were using older less efficient designs).  But over the months, the distribution of Alice became widespread and you could go to a store and buy Alice off the shelf from a neighborhood retailer.

What would happen then is, since everyone is competing with the same hardware, the only variables to profitability would be land costs (plus taxes and compliance costs in your jurisdiction) and operating costs (electricity).  As a consequence, there would be global arbitrage, a dance in which miners would gravitate towards the cheapest region of the globe with favorable tax policies and cheapest electricity prices.

We already observe this happening today, which are discussed in that article.

The benefits that heating may play could be a factor, but if history of cloud computing is any guide, it is relatively unimportant — Google does not put employee housing within the middle of its data center to warm them with a Carnot engine of some kind (yet).  But again, this is unimportant.  All mining facilities, just like any data center, will have a profitability calculator.  Irrespective of how they displace or use the energy they have a bottom line of whether or not they can continue providing the service (via their computational labor) at a profitable rate.

Also, in practice, data centers typically receive subsidies from a variety of sources (like local tax breaks).  Even if you removed all of the subsidies and all geographical regions were “pure free markets” — there are still areas on the planet with better infrastructure, cheaper energy resources, better property rights, etc.  Those are the same locations capital moves to on a yearly basis.

Visualizing UTXO patterns on the blockchain

I have a new piece up over at CoinDesk: What Block Chain Analysis Tells Us About Bitcoin.  Note: the title of this blog post was the original title of the CD article (we switched it so that the average reader would find it more of interest).

I really have to thank John Ratcliff for his time, effort and talent for fusing blockchain data with a visualization engine.  Also special thanks to Jonathan Levin for his analysis of what is going on (I have quoted him several times now, including my recent mining piece regarding China).

My own view (not necessarily anyone else’s) is that this data shows that while bitcoin was, on paper, built to be an electronic cash system (a payments system), that in practice it is primarily used as a store-of-value.  Yet in a twist, even the run-up of a $1,000 token last fall did not bring the long-term savers out of their cold sleep.  And more to the point, it is doubtful that even if some of these old holders wanted to sell that in practice they could not because liquidity is very thin and they would likely create huge pay walls in order books that would take days and weeks to plough through.

Thus the question is, what could incentivize long-term holders to actually use the network as a payment platform, to exchange their tokens for wares?  My own view is nothing will in the short-run.  BitPay, Circle and Coinbase are all neat, innovative and have smart people working for them but in their current form they basically just serve early adopters with large quantities of bitcoins to dispose of.  The transactional volume only spikes during price rallies which essentially means that on-chain bitcoins only move in the midst of large market movements.  What this likely means is that, sans the black market, very few people buy bitcoins to spend on conventional goods and services; real economic activity and commerce is still quite low.

As a consequence, if entrepreneurs are looking to capitalize somewhere in this market segment, they may want to incorporate this thesis into their business plan: that most activity involves savings, thus you should build products and financial instruments to hedge the savings from volatility.

Perhaps this is just a temporary phenomenon.  Maybe, as some advocates hypothesize, if and when prices reach a stable value at several thousand dollars this behavior will change.  Fortunately for all interested parties, the blockchain shows us what is actually happening.  It is the real asset.

Update:  Here is John Ratcliff’s latest pie chart based on the same methodology from the article:

piechart

How much energy is used to secure a $1 million bitcoin?

I have a new article over at Bitcoin Magazine called, Bitcoin: Made in China.

It’s based off a paper (pdf) I have been working on and is the culmination of numerous exchanges and conversations I have had over the past couple of weeks.

Another interesting article on this subject of capital costs is this recent one by Dario Di Pardo, $46K Spent on Mining Hardware: What Happened Next?

There are several people to keep your eye on for analysis in this space (such as those in the acknowledgements portion of the piece).  Dave Babbitt is working on his master’s thesis on this specific issue (hence his up-to-date numbers), Jonathan Levin is about to defend his thesis (which goes into several mining models), Robert Sams is brilliant with both econometrics and with understanding incentives and Cal Abel speaks in a whole new different league.  I also had some illuminating exchanges with John Ratcliff (he posted some subsequent comments over here).  Andrew Poelstra has a very critical eye and sharp mind for any logical errors and Bryan Vu is both articulate and provided some good counter-points to the hypothetical trend lines.  Dan Forster and Karl Holmqvist helped spark the initial barage of questions, Joseph Chow helped tweak the responses and Petri Kajander made sure my writing was coherent.  Also, thanks to Ruben Alexander, editor at Bitcoin Magazine for his encouraging words.

Lastly, my sources in China including Weiwu are without a doubt, resourceful and survivors.  That region of the world is a very tough market and unfortunately doesn’t receive the respect it deserves.

For instance, below is a Figure 4 from the new U.S.-China Economic and Security Review Commission (pdf) by Lauren Gloudeman.

chinacongress

Thus the next time you hear someone on reddit complain about China in relation to Bitcoin or tell you how Chinese demand did not impact prices, show them this diagram.  Who will replace the Chinese whale?  Maybe Wall Street.

Also send them here: Fairweather fans in bitcoinland disowning China

Interest rates and currency appreciation in China

My friend Mark DeWeaver, author of Animal Spirits with Chinese Characteristics (and who wrote the foreword to my book on China) has a very insightful op-ed over at the WSJ today: Overvaluing the ‘Undervalued’ View of the Yuan

If you’re interested on unbiased, objective information about China without theatrics and hysteria I recommend tuning into the following people:

Massimo Ceccarelli also has a good round-up of China-related stories each day.

Future Opportunites and Economic Challenges for Cryptoledgers

On March 27, 2014 I gave a presentation at the Institute for the Future in Palo Alto.

I covered a number of topics including some of the governance challenges surrounding the protocol, the tragedy of the commons surrounding the development of the system as well as how the network pays for itself through token dilution (seigniorage).

This is based on the following research paper:

  • Bitcoin Hurdles: the Public Goods Costs of Securing a Decentralized Seigniorage Network which Incentivizes Alternatives and Centralization (pdf)

I made at least one error in the presentation.  Regarding microtransactions, this was not specifically stated in the original 2008 white paper but was subsequently discussed by adopters as an area for potential opportunities.  Here is one thread at StackExchange that discusses this further.

Currently only off-chain solutions like Coinbase support the ability to transact at the satoshi level.

[Note: this presentation was made prior to the announcement of “Sidechains” which is a Blockchain 2.0 company that could ameliorate some of the governance issues]

Max Levchin and Counterparty discuss digital currencies

Zavain Dar is an investor with Innovation Endeavors and adjunct lecturer at Stanford teaching a Symbolic Systems course which covers the burgeoning segment of digital currencies and decentralized applications.

Today he had three guest speakers, Max Levchin (one of the original founders of PayPal, now with Affirm) and Matt & Robby from Counterparty (I wrote about Counterparty in Chapter 3).

Below are some notes from their discussions.  All errors are my own.  These are mostly paraphrased statements they made (i.e., these are not 100% word-for-word statements).

Mmax2ax Levchin

Max presented both a bullish and bearish case for cryptocurrencies such as Bitcoin.

On the bearish side he did not consider it a viable currency because of its continual volatility [note: David Evans published a paper last month that found BTC was 18x more volatile than the Euro in 1Q 2014] and because it does not have any government backing yet (he discussed a hypothetical future scenario later below).

On the bullish side, he thinks the underlying protocol was interesting because it solved the Byzantine General’s problem in an elegant way vis-a-vis a distributed ledger which creates a trustless system of interaction.

One subsequent hurdle he saw with the mining aspect is that it consumed enormous amounts of energy (he compared “miners” as a type of Congress and the core dev team as a type of Federal Reserve — or in other words, neophytes perhaps without the necessary experience or background in economics and international politics).  Again, he was not trying to be antagonistic but descriptive.  He also did not find the code quality that he has looked at to be particularly high.

He observed that the scripting language it used (comparing it to Forth and Lua) as interesting and concise and found the m-of-n transaction system to be innovative (he cited Shamir’s Secret Sharing concept and two-man rule).

One area he found of future interest is that of a “smart agent” (which is essentially what Mike Hearn would call an “agent” and Vitalik Buterin calls a “decentralized autonomous organization”).  Max foresees a period in the future — perhaps not necessarily with the Bitcoin protocol itself — in which a smart agent sells a service in bitcoin and receives bitcoin as revenue for service; propagating and cloning itself based on its performance through AWS clusters.  He mentioned reading about some of these proto-ideas in scifi literature (name dropped “Game of Life” though this is not really scifi).

Max then segued into a discussion on, how based on actual numbers, Bitcoin as a payments platform will likely not uproot existing players, despite the much ballyhooed “2.5% + $.20” (also called a swipe fee) that anti-establishmentarians like to espouse.

Based on his description, if fraud rates ever reached 1% Visa, MasterCard and others will kick you off their network.  And in practice, they will likely put pressure on a merchant with increasingly higher fraud rates prior to reaching 1% — thus incentivizing merchants to get their house in order… or else.

Fraud itself only accounts for 0.07% (yes, 7 bps — see “Credit Card Issuer Fraud Management, Report Highlights”) of the cost that is factored into this total of 2.5% — he noted that this reflects that most people and most customers are quite honest (give yourself a pat on the back society).

He then mentioned that what is concerning are scalable fraud — that most theft is small-time purchases that are written off.  The bigger issues that companies like Visa have to be on the lookout for are those originating in Eastern Europe that can scale yet even with that, the actual costs dovetail into the 2.5% cost.

He then mentioned the history of how gambling, or rather the illegal processing of payments related to gambling came into being.  He also touched on the evolution of cashback rewards, VeriFone, the competitive fight with interchange fees, AMEX black card (also called the “Centurion Card” which can be used at new lounges in airports).  None of the credit card companies are on closed loop solutions: AMEX lends their brand to other cards (ala “white labeling”).

Perhaps one notable – hypothetical – point that blockchain enthusiasts may find of interest is CanadaCoin (or Cancoin as he called it).  Basically in his view, a country like Canada could utilize a cryptoledger by experimenting with well-defined revenue segments such as real estate taxes, connecting those moving parts (payments, transfers, etc.) with a distributed ledger.

The tl:dr version of Max’s talk: he finds the Bitcoin protocol to be very interesting, potentially seeing its use-cases emerge with interchanges (not to be confused with fiat exchanges) but finds the actual bitcoin token and its mining/development system to be no bueno.  As a consequence he does not see bitcoin as a payment platform competing against established players who despite opinions to the contrary actually are squeezing out lots of utils — and that most cryptocurrency advocates don’t actually understand how the numbers break down (e.g., what fraud actually accounts for).

Counterparty

counterpartypresentation

Robby and Matt work as volunteers for Counterparty.  Counterparty is a “2.0” platform that sits on top of and uses the Bitcoin blockchain (as described in Chapter 3).

They discussed several capabilities of the platform:

  • Currency creation (creating your own brand)
  • Creating digital assets for crowdfunding (like LTBCoin)
  • Ability to trade any asset peer-to peer (contracts for difference, binary options)

They call themselves an embedded consensus system (because it uses the consensus system of Bitcoin and is embedded onto it).  One new piece of tech they are working on is a “Vennd” (digital vending machine).  Both of them answered a number of questions from the audience related to how the decentralized exchange (which has been active since January) allows order matching and native escrow by the protocol.

Another point of interest was their discussion of CODA and the various legal issues surrounding the exchange of instruments and potential interaction with organizations like the CFTC and SEC.