Ray Dillinger discusses block reward halving

Ray Dillinger has been around in the Bitcoin space for years, in fact, he was on the same cryptography mailing list that Satoshi announced Bitcoin back in 2008.

Over the years he has made a number of comments over at Bitcoin Talk.  Below are several related to the challenges facing this cryptoledgers especially related to the block rewards (seigniorage subsidies).  Recently he noted:

For what it’s worth, I’ve been looking at the question of mining (and premines, etc) a bit differently.

In my estimation, the block subsidies and transaction fees are what the investors (or holders) pay the miners to keep the blockchain secure.  If these payments get too low relative to the value secured, then the blockchain becomes insecure and you get 51% attacks etc.

In that light the “standard” model we’ve been pursuing of block subsidies halving as the value secured grows larger seems dangerous.  As the value we’re trying to secure grows larger, we intend to pay less for security.  We shall, in that event, GET less security. I’ve been watching alt chains with faster halving periods dying like flies, and I can tell you for sure that this is something that’s real.

That brings us to transaction fees.  We are paying to secure value, and we are not paying transaction fees relative to value.  We are paying transaction fees relative to space.  Space – which is to say hard drive sectors and network bandwidth – is not what secures our value; what secures our value is a monetary hardware investment in ASICs and powerplants.  Which we need in proportion to the value we’re trying to secure.  And which we will not get in proportion to the value we’re trying to secure by paying for space instead.

My conclusion is that if we want to keep the network at zero inflation and pay for security out of  transaction fees, we should be paying transaction fees relative to the value of each transaction.  And if we want to keep the network going without transaction fees that cost a percentage of the transaction, we should accept an inflationary model where each year the block rewards are, eg, 5% larger than they were the previous year.  So, in the long run that approaches 5% inflation.

Both of these options are not popular with the current crop of BTC holders.

Another germane, sobering comment:

Colored Coins etc. make it much harder to know how much value we need the blockchain to protect.  The fact that these values are essentially “hidden” from the protocol means we can’t tell what we need to do to maintain any kind of parity with them.

One popular (and possibly correct) view of things is that in the long run the cheapest available price of electricity times the amount of electricity spent per block, will approach the value of the block reward in a PoW system.

Right now we have a Bitcoin block reward worth approx. $12000.  If this view is correct, we should expect, worldwide, to see about $12000 worth of electricity (increasingly concentrated where electricity is cheapest) expended per block by hashing rigs.

Right now transaction fees are providing a very small percentage (one third of one percent?  I think?) of the block rewards.

At  some point in the future, moving to transaction fees as a primary source of mining revenue, implies that each kilowatt-hour of electricity invested in securing the blockchain will have to secure three hundred times as much value (relative to its own value) from attack as it does now.

I’m convinced that’s not really enough.  If we stick with Proof-of-work, we’re going to have to start charging transaction fees based on how much value is changing hands, because we want to buy security proportional to the value we’re trying to secure, not proportional to the amount of space it takes to store the transaction.  And that means the amount of value changing hands has to be visible, and that therefore Colored Coins etc will have to be more ‘transparent’ in terms of the protocol knowing how much they’re worth (and therefore how much security we need to buy to keep them secure).

The potential death of certain of proof-of-work altcoins:

The hash power devoted to securing altcoin chains is orders of magnitude smaller than the hash power devoted to bitcoin, and the cost of an attack in general is therefore orders of magnitude smaller.  Doge got a special mention because it was used as an example recently of the economic effects of reward halving on hash power distribution – the author of that paper made the point that every time doge cuts their block subsidy in half the hashing power devoted to securing their blockchain will also be cut in half.  Doge was mined too quick; its block reward is cut in half many times more often than Bitcoin’s.  But it isn’t the quickest-mined coin out there by any means; just one that’s a bit remarkable for the size of its current market cap.  All of the quick-mined coins have this problem, and many of them are already gone.  But that’s only the technical side of blockchain safety, and unfortunately that isn’t even the main type of risk.

Altcoins, in general, are a cesspool right now.  In fact it would not be too much to say that the *AVERAGE* altcoin is a scam.  Exchanges are openly taking bribes to list altcoins regardless of merit. Some of them are even developing their own altcoins in house for the sole purpose of trading fraud.  Other people are more or less openly accepting payments to hype coins on Reddit, Twitter, etc, then engaging in blatant price manipulation in order to drive prices up on a particular day so scammers can sell their premines at maximum profit. Several coins a week that are doing “crowdfunding” or “IPO” to sell their initial distribution of coins are simply scammers who then disappear with the money.

If you even consider investing in altcoins, you should first have a definite reason to believe that the one you’re investing in isn’t a scam.  You should second have legal recourse (meaning, you know AND CAN PROVE exactly who the scammers are and where they live) if it does turn out to be a scam.  If you have trouble following that second rule, it’s not because it’s an unreasonable rule; it’s because scams ARE THE NORM in the altcoin world and scammers will not give you enough information for legal recourse.  While some non-scam coins exist, they are rare exceptions.  Nobody in that business is entitled to the benefit of a doubt.

That’s a completely separate issue from chain security w/r/t large (or small) transactions – but once again, if you don’t fully understand why a blockchain is (or isn’t) secure and what resources are required to attack it – then you don’t know enough to even evaluate the security of an altcoin that’s operating with different rules, and if you can’t evaluate the security of its blockchain, then you shouldn’t be investing in it even if it’s a non scam.

On the possibility of failure for a variety of “coins” (including appcoins):

A coin which can survive has at least the following properties.

1.  The dev is not anonymous.  If a coin has an anonymous dev, it’s about three times more likely to be a scam than not. Further, if the dev is not anonymous, there are things you can legally do if it does turn out to be a scam and if the dev is anonymous there aren’t.

2.  It doesn’t halve its remaining coin supply more often than it can double its value.  That’s kind of hard to predict, but at this point I think the double-value time for cryptourrency is up to about a year, maybe two.  It’ll get longer until it catches up to double-value period for the rest of the economy, which is 7 to 15 years depending on the industry.    This is important because whenever the block reward goes down, the hash rate goes down in the same proportion; and when the hash rate gets too low, the blockchain becomes vulnerable to an attack which can destroy its value completely.  Expect any coin that mines out its coin supply too fast, to collapse.  I think even Bitcoin is going to be too fast in the long run; there’ll come a point when its double-value time is slower than its block-reward halving time and alts will start sucking up the hashing power making bitcoin vulnerable to attacks.

3.  It isn’t an IPO where you’re supposed to “buy” coins for some other form of money.   A few of those are honest, but most turn out to be scams.

4.  The dev actually knows how to fix problems in the software.  This is hard to judge straight out of the gate.

5.  There’s a point.  To put it gently, in order for it to be reasonable for someone who’s not scamming to release an altcoin, there has to be something wrong with Bitcoin and they have to believe that they can do better.  In order to believe any altcoin has a long-term future, there has to be something wrong with Bitcoin and that altcoin has to be able to survive where Bitcoin cannot.  Anytime there’s an alt, ask what it does that bitcoin cannot do.  Then ask, does that enable it to survive where bitcoin cannot?

6.  Don’t be taken in by talk of philanthropy.  Money, when functioning as money, has no morals whatsoever, good or bad.  It flows in the reverse direction of the profitable allocation of resources.  Any money that attempts to do anything else will cause market distortions that cripple the economy it’s working in and ultimately cause it to function less well than its competition.

7.  If there’s a premine, be sure that the devs are absolutely honest about the premine.  If they claim that it’ll be used for the good of the community, then the community is entitled to know how every last dime of it gets spent.

8.  If there is any difference at all between the block reward structure they advertise and the one they implement, stay away.

On Nicolas Courtois’ paper (self-termination chains):

It’s true that we don’t know how to implement some of the author’s proposed solutions, but he has a pretty good grasp of some very serious problems.

In particular, he has a good point about what happens when block rewards are multiplied by half.

There’s an investment (in ASIC mining equipment) constantly seeking its most profitable allocation.  That allocation is an equilibrium in which each option pays identically.

At the point where there’s a block reward halving, one of the allocation options has its return cut in half, and the equilibrium has to find a new balance point.

If you’re UNO, and you cut your block reward in half, the total rate of return is hardly affected at all because you represent such a tiny fraction of the total available income.  The allocation of that investment to mining your blockchain, though, gets cut approximately in half, because that’s the point at which the return for mining it remains competitive.

If you’re BTC, and you cut your block reward in half, the total rate of return is cut by almost half.  Suddenly, every *other* allocation opportunity is suddenly worth twice as much of the miner’s remaining hash power investment as it was before, because that’s the rate at which the return for mining it stays competitive with BTC.

Of course, the latter doesn’t account for mining rigs that are no longer profitable to run at all….

Send to Kindle

Gandal & Halaburda paper: Competition in the Crypto-Currency Market

Over the past several months, there have been a near infinite amount of conversations about the continual existence of altcoins — especially as it relates to prices (i.e., rising tide lifts all boats).  Some new preliminary research from Neil Gandal and Hanna Halaburda suggest that cryptocurrencies are not a winner-take-all scenario.  It should be noted that their time scale and usage of a select few exchanges may not be adequate for generalizations yet but some food for thought.

(Paper) (Slides)

Abstract:

We analyze how network effects affect competition in the nascent crypto-currency market. We do so by examining the changes over time in exchange rate data among crypto-currencies. Speci fically, we look at two aspects: (1) competition among different currencies, and (2) competition among exchanges where those currencies are traded. We fou nd that early in the market as Bitcoin becomes more valuable (against the USD), other crypto-currencies become less valuable against Bitcoin. This trend is reversed in the later period. Some of the other crypto-currencies lost most or all of their value. On the other hand, the values of some of the successful currencies increased in price against the USD, and at the faster rate than Bitcoin. The data in the latter period are consistent with the use of crypto-currencies as financial assets (popularized by Bitcoin), and not consistent with \winner-take-all” dynamics. For exchanges, we found little if any evidence of arbitrage opportunities. With no arbitrage opportunities, it is possible for multiple exchanges to coexist in equilibrium despite two-sided network effects.

Send to Kindle

Dalio explains what credit is and how it works

After receiving some feedback on a variety of articles this past month it has been pretty sobering to realize that many Bitcoin advocates simply have no idea how the current economic system works, especially what credit is, where it comes from and how it functions.

Ray Dalio, founder of Bridgewater Associates (the largest hedge fund in the world), put together a short guide called Principles (pdf) and later developed the video below to help explain “How The Economic Machine Works”:

Send to Kindle

Digital currency usage in the developing world

[Note: a revised version of this interview appeared on CoinDesk.  I hold no equity in the company nor is this an endorsement to use the service.]

This past week I spoke with Ron Hose, co-founder and CEO of Coins.ph, the leading Bitcoin exchange in the Philippines. Hose is a graduate of Cornell, a founding partner at Innovation Endeavors and previously co-founded Tokbox which was acquired by Telefónica Digital in 2012.

While Coins.ph began trading late last year, the actual exchange launched publicly in February. According to Hose, “In terms of volume, we have been doing pretty well in growth so far – high double digit, triple digit growth which is a very encouraging sign.” The main reason he credits this success is that, “we focus on building trust with customers through fast customer service. They care about this when dealing with bitcoin – they care that the money is safe. And because emerging markets are more different than developed countries, we had to provide a positive customer service process to where they can trust turning bitcoins into cash and cash into bitcoins. As a consequence we built out a physical network and actually deliver cash through retail locations and even conduct do door-to-door deliveries too.”

Because the team has an active exchange they can now see what customers use it for and have begun building a second layer of applications on top of it creating banking services to those who do not have traditional banking services. “In contrast to developed countries,” noted Hose, “where bitcoins as a payment method are more of a novelty – here it is serving a real problem. For instance, credit card penetration in the Philippines is 3%. Only 3 out of 100 customers that land on an ecommerce site have an immediate way to pay for it. Others have to travel to a bank for 45 minutes on bus, wait in line and then return back on the bus. Before you know it, it takes 3 hours to pay for something online.”

According to Hose there is even a larger pain point: sending and receiving money abroad. With about $25 billion a year the Philippines is the 3rd largest recipient of remittances – roughly half the size of its gross domestic exports. And these funds are predominantly going to people who do not have bank accounts and thus have to pick money up at retail locations like Western Union and consequently pay an average of 9% in fees. “The reason they pay this 9%,” explained Hose, “is because they don’t have a bank account and likely will never have a bank account because they do not have enough savings. Banks have a cost structure (location, tellers, rent) and if you do not have sufficient savings on the first day when you open an account, the bank is already losing money. This pain point is an area where mobile banking and bitcoin can help out. For instance, if a relative abroad sends money to you and you have to pay a transaction fee to a retail location, then that is equivalent in 3-4 days of income that you paid just to pick up your money.”

And, in his view, what differentiates and sets his team apart from other local competition, “we have a well-seasoned Silicon Valley team. And even though Bitcoin is not yet regulated in the Philippines, as well as neighboring countries is that we treat it as if it was regulated. We work to comply with industry standard KYC/AML regulations; we are self-regulated and assume that we are being regulated.” As far as operating in an uncertain environment, “there are definitely a lot of very particular challenges related to working in an emerging markets (for example, there is no automated way for us to do bank-to-bank money transfers here, we actually have someone going to the bank, withdraw cash, and deposit it at another bank.”

So then, what is the most important issue in operating the exchange? In Hose’s view, “again, customer service is the most important area. For instance, they might see my profile or cofounder profile on the website yet there is a lot of trust involved. And so I tell my team, “we are only as good as our last transaction.” Thus we have to make sure the funds go in the right time window.”

According to Hose, virtually anyone can come to Coins.ph, cash out their bitcoin and in turn receive cash at 12 major banks, thousands of retail locations or even have it sent door-to-door by messenger. For its first market, the team launched in the Philippines. However they see themselves as a regional player, aiming towards providing similar services to other markets in the area – expanding into places like Thailand, Malaysia, Indonesia and Vietnam. In addition to a foot network (sneaker net), the team is still quite lean, roughly 10 people – half in engineering and the other half in operations.

To accomplish its goal domestically, the team has built a large physical network and the next step is opening up this network up with an API (a sneaker net API) providing Bitcoin ATM makers the ability to use this infrastructure to send money anywhere else in the Philippines. In terms of physical throughput, Hose noted, “users can put in who they want to receive the funds and when they want to receive it. Next day delivery. We have providers that can do same-date, however we only guarantee next day as it is important to not overcommit to our customers. Part of providing good service is giving people the proper understanding what will happen and standing up for it 100% of the time.”

Concluding, Hose mentioned he was recently on a panel in Singapore (Echelon 2014), and was asked what is going to drive Bitcoin adoption. In his view, “the thing that will drive digital currency adoption is the use-case. It must solve a real problem; there has to be something that is painful enough to convert, somewhere there is enough friction, the thing about emerging markets is that pain exists – you don’t have a bank account or you have to pay 9% to transfer money to your family – so it is much easier to make that leap. And if we can make it so their friend had a positive experience, then through word-of-mouth they have a reason to try and use it as well.”

Send to Kindle

Quote of the day: Unaware of legal environment

Below is a part of an interview between Juan Llanos, executive vice president of Bitreserve and David Landsman, Executive Director of the National Money Transmitters Association (NMTA):

JL: I understand you have been in touch with Bitcoin industry members.  What have those discussions been like?  How do their approaches and strategies compare to yours or the NMTA’s?

DL: Most Bitcoiners I have spoken to are not aware of their legal environment, or in a state of deep denial. It is not only about the federal and state legalities I mentioned above. They lack of awareness of the direct culpability society attaches to the Bitcoin dealer, if it later turns out that his Bitcoin customer dealt in drugs, terror, human smuggling, copyright infringement, hacking, or any type of criminal activity.  How could you have known, you say?  You are not responsible, you say?  Well, it is your responsibility, they say, to develop a credible ‘Know-Your-Customer’ program, one that is ‘reasonably designed’ to prevent, detect and report illegal money that moves through, or is in any way facilitated by, your company.

There are now at least 3 funded startups in the Bitcoin KYC space: Blockscore, Coin Validation and CoinTrust.

This all ties together with a post by Kristo Käärmann back in March: Government backed bitcoin

Send to Kindle

Cryptocurrency in the news #17 (and some on China)

Lot of interesting stories the past couple of weeks but I need to close some tabs.  One older post of interest — for you statistics buffs — comes from Distributome Data & Activity: Horse Kicks which describes the use of a Poisson distribution to model how Prussian Calvary officers were kicked and killed by horses between the years 1875 and 1894.

Other notable links related to China as well cryptocurrencies (and sometimes both):

Send to Kindle

Many thanks to those who have helped provide feedback

It is pretty easy to find people who are strictly bullish or bearish on a particular asset or idea (or philosophy).  It is another to find people who take the time to look at the details and also give of their time to help educate you.

Over the last few weeks, I’ve had the fortunate chance to speak with a diverse group of experts, entrepreneurs and educated contrarians.  And without their feedback, my thought processes and writings would be much weaker, poorly structured and lacking data.  This is not to say I am correct in my analysis — perhaps just slightly less wrong!

Below is a list of these individuals.  I should point out that their inclusion does not mean they endorse my own views, in fact several strongly disagree.  These are the people who are creating or trying to create the future in the roller coaster world.

  • Taariq Lewis
  • Petri Kajander
  • Jonathan Levin
  • Dave Babbitt
  • Dave Hudson
  • Jack Wang
  • Ron Hose
  • Raffael Danielli
  • Preston Byrne
  • Oliver Bruce
  • Chris Turlica
  • Karl Holmqvist
  • John Ratcliff
  • Adam Stradling
  • Robert Sams
  • Robby Dermody
  • Joseph Chow
  • Andrew De Gabriele
  • Peter Todd
  • Mike Hearn
  • Andrew Poelstra
  • Bryan Vu
  • Steve Kirsch
  • Ryan Orr
  • Matt Wilson
  • Daniel Cawrey
  • Pamela Morgan
  • Pete Rizzo
  • Jon Southurst
  • David Shin
  • Sidney Zhang
  • Stephanie Murphy
  • Adam B. Levine
  • Greg Simon
  • David Mondrus
  • Andrew White
  • Martin Harrigan
  • James Duchenne
  • Mark DeWeaver
  • Byron Gibson
  • DC, Cukeking and David S
Send to Kindle

Separating activity from growth on Bitcoin’s network

[Note: the following article was reposted on Business Insider, a PDF version is available]

One of the contentious areas of writing about Bitcoin data and emerging markets, is discussing what conclusions and interpretations (if any) can be drawn from say, transactional volume.

Let us put that aside for a moment and consider ways to estimate real commercial volume. Are there any other ways to do so besides a full traffic analysis?

Sell side pressure

On any given day there are at least three entities that continuously sell bitcoins onto the market: merchants (and merchant processors), miners and mining manufacturers (who are sometimes paid in bitcoin).

As I noted in my previous article, last month BitPay announced that it was processing about $1 million in daily payments. It is unclear what amount of bitcoins that constitutes, depending on the time frame and therefore price levels (early December or the month of May) it could represent 1,000-2,000 tokens per day.

Let us assume that the other merchant processors such as Coinbase and BIPS are also processing a similar amount. And that altogether between 5,000-10,000 bitcoins per day are collectively being spent on commercial activities through these processors.

This puts pressure on the sell side of the price equation. That is to say, to minimize exposure to volatility, nearly all merchants elect to immediately convert bitcoins into fiat and those bitcoins are sold onto the market (both Ben Edelman and David Evans have written on this before).

Similarly, because miners have to pay real costs – capital and operating costs – they too sell their mining rewards on the market: around 3,600 each day (because again, MV=MC).

It is unclear how much mining manufacturers have to sell each day to fund their own developmental and logistical operations, but for the sake of simplicity and roundedness, let us say 1,400 bitcoins (it could also be as little as zero).

Thus altogether, there is a regular 10,000 – 15,000 bitcoins representing commerce that are sold daily on the market today. It also bears mentioning that, although technically the miners receive money, virtually all of it is spent towards utility (electricity) and hardware, not on the bitcoin ecosystem itself. While it is unclear how much other positive-sum value exchange is taking place (such as remittances, houses or cars) we can see that the transactional volume of potential commerce has remained flat during the past six months:

excluding popular addressesIs there a chart that shows this amount of transactions?

In my last article, I mentioned Total Volume Output – the total value of all transaction outputs per day – yet this includes coins which were returned to the sender as “change” and thus the real number trying to be measured is substantially less. And taken to its maximum readings, roughly 1,000,000 bitcoin outputs (UTXOs) are used each day.

If only 10,000 – 15,000 bitcoins are being used in real commercial activities (instead of merely zero-sum activities like gambling, mixing of coins or cybercrime), then the perceived Total Volume Output is potentially two orders in magnitude larger than the real economy.

What is the real economy? While the debate over what percentage of bitcoins are being spent in positive-sum activities, between October 15 and December 18 of last year, 41,928 bitcoins were sent to addresses controlled by Cryptolocker (a type of malware) – this is not real economic growth, in fact it is negative-sum. And because it signaled to the market that it was a successful way of generating (stealing) wealth, there are numerous copycats using similar methods (including CryptoDefense and Cryptolocker 2.0).

The cost of information security

For the moment, let us ignore the buy side of the equation, that in order to keep the same price level, at least 10,000 – 15,000 bitcoin are being acquired by other parties each day (primarily high-net worth individuals and institutions through OTC brokers).

What this actual activity translates into is the following:

Miners are the labor force that secures and processes transactions. And because this labor force has real depreciating capital costs and operating expenses, in theory, the cost for their services amounts to roughly $2 million per day (3,600 bitcoins X $600 per bitcoin).

In practice however, most miners are operating at losses. In fact, the network is vastly oversecured by miners operating at losses probably by a factor of 2-5x (described in Estimated costs). For instance, according to a recent report from the National Science Foundation (NSF), a now-banned researcher used, “about $150,000 worth of NSF-supported computer use at the two universities to generate bitcoins worth about $8,000 to $10,000.” Or in other words, the researcher externalized the real costs of mining (energy and capital deprecation) onto another party (the NSF and therefore taxpayers). This is inefficient, yet there are many cases of such activity taking place each day.

Thus while the Bitcoin ‘trust fund’ (a more accurate description for the network which divvies out a finite amount of block rewards) pays out security of $2 million each day, the labor force is providing significantly more security than they are being paid, probably closer to $6 – $10 million if not more (Hass McCook has additional estimates).

Simultaneously, they are providing these services for commercial activity that ranges from as little as 5,000 bitcoins to perhaps as high as 15,000 bitcoins. Or $30 million to $90 million respectively in today’s prices.

For comparison, MasterCard spent $299 million on their capital expenditures in 2013. As part of these expenses, it builds data centers similar to the “fortresses” (with moats) that Visa has also built. In 2013, MasterCard and Visa processed a combined $7.4 trillion in purchases.  Together with American Express and Discover, these four companies generated $61.3 billion in revenue during the same period.

While this is not an entirely apples-to-apples comparison, what this means is that the Bitcoin network is enormously oversecured compared with other transactional platforms. The reason this is, is because it is decentralized which creates overhead (since all the nodes have to process and verify the transactions). Yet, as shown with GHash.io over the past month, the network is qualitatively insecure due to economies of scale. That is to say, so as long as the proof-of-work mechanism can be economically scaled, this leads towards centralization. No amount of white papers or tweets will change that.

If the labor force of bitcoin is spending $10 million on protecting the network yet real commerce is only $30 million, this would be equivalent to a mall issuing 1 out of 3 customers a personal security detail to go shopping. Or in other words it is, arguably, quantitatively oversecure (it is not qualitatively trustless as shown by GHash.io and previously, Deepbit). Perhaps this mix will change over time. However one thing to consider is that some bullish advocates contend that the Bitcoin network will one day supplant and compete head on with Paypal and even Visa. In order to do so, the Bitcoin labor force are still (assumedly) being paid a fixed income to provide the same services. Thus perhaps in the future, the opposite will occur – the network could become undersecure due to disproportional rewards.

I spoke with Greg Simon, co-founder of Cryptowerks who worked as head of International Equity Sales for JP Morgan in Japan. According to him,

Cryptoledger miners are Japanese banks. They are producing an oversupply of crypto trust relative to an under supply of borrowers of that trust. Their only solution, producing an ever increasing supply of crypto trust, is making the problem worse, not better. It is the equivalent of central bank QE [quantitative easing], or pushing on as string. Just as an oversupply of central bank produced money causes the value of each unit of money to decline, so does an oversupply of crypto ledger miner produced crypto trust cause the value of each unit crypto trust, which we can measure in units of ghash, to decline. The problem is not the aggregate supply of crypto trust. The problem is aggregate demand for crypto trust. Until demand for crypto trust improves, either from monetary or non-monetary borrowers, we can expect the same fate for crypto trust in the crypto economy as we are seeing for fiat money in the legacy central bank fiat economy.

Another way to visualize this phenomenon is the chart below:

age of last send transactionJohn Ratcliff recently published an explanation about zombie bitcoins (coins, or rather UTXOs, that have not been active in more than 18 months) which is where the chart above comes from. Each color band represents the last time a private key corresponding to these UTXOs was used.

Thus, one take-away from this chart is that liquidity – as shown by the One Day, One Week and perhaps One Month bands – represents between 100,000 to 2,000,000 bitcoins. What is the actual number? Without a full traffic analysis we probably will never know.

But we can tell from spikes that the largest movements take place during volatile time periods, specifically during price run-ups. So, for instance, in the spring of 2013 there was enormous Western media attention and a subsequent boom that peaked in mid-April (when Mt. Gox had to temporarily shut down). Similarly, in November and early December corresponds with additional global media coverage and Chinese adopters coming online – with prices peaking on December 4th. Or in other words, transactional volume rises and falls with price levels – that the bulk of on-chain activity corresponds primarily to day trading and speculation. This, despite the fact that Ratcliff notes, that prices during this 18 month time span increased 4,000%.

That is to say, even though there are more than 100,000 merchants that accept bitcoin and even though token valuation has risen logarithmically, UTXO holders as a whole prefer speculating over conducting actual commercial activity. What could change this behavior?

Maybe nothing will because Bitcoin is a recreation of a medieval agrarian economy; few people spend, in part because the network codifies what is essentially negative time value of money.

Money and credit

There is an endless stream of papers and books on the topic of what constitutes and attributes of money. Arguably one of the most thorough explanations of what money is and how it arose is, The Ascent of Money by Niall Ferguson which was later turned into a good PBS series.

Despite what some Bitcoin advocates claim, gold itself was not used on a large scale since time immemorial. In practice, there were numerous types of physical assets ranging from metals to stones. England even used a system of money known as tally sticks for several hundred years. And the reality is that prior to the birth of civilizations, many tribes and villages operated with barter and gift systems with themselves and one another (some never even created something akin to “money”).

As noted by Ferguson, up until the Renaissance, there were no real financial instruments or professionalized banking or hedging methods in the West. Bonds, joint-stock corporations and insurance companies evolved throughout time (all post-Fibonacci). And consequently, this is reflected in the dearth of economic output at the time. That without a way to expand credit – to create loans to start businesses – the pie cannot be enlarged. In his words, “Credit and debt, in short are among the essential building blocks of economic development, as vital to creating the wealth of nations as mining, manufacturing or mobile technology.” In contrast, poverty (subsistence) more often, “has more to do with a lack of financial institutions, with the absence of banks, not their presence.”

Thus, I would argue that ultimately Coinbase could turn into a fully-fledged bank, providing interest to bitcoin holders to be able to loan out bitcoins (much like BTCJam does). And they could do this through a fractional reserve process. In fact, Huobi’s new Hong Kong branch (BitVC) is heading in that direction; users can lend funds to Huobi for interest and Huobi will then lend it out to users to trade on margin. Contrary to what many Bitcoin adopters contend, fractional reserve banking itself is not inherently a bad thing but that is a topic for another article.

However, for the time being, Coinbase and others – while on-ramping a lot of new users and providing utility through ease-of-use functionality – have a long way to go before this occurs. For instance, this past week Coinbase announced instant buyback (once you spend bitcoins, you can buy more). However, the reddit comment below sums up actually what happens:

coinbaseAgain, there is a difference between the economy Bob wants to have versus the economy Bob currently has. Today Bitcoin, as I have argued, is at most an emerging market akin to a pre-industrialized agrarian economy with enormous frictions. Internally it is an inflexible command economy that outsources and arbitrarily rations its scarce resources (block rewards) irrespective of economic conditions (e.g., Bob, the miner, is rewarded whether or not he processes transactions).   Front loading rewards the first four years without processing any transactions is an unsustainable activity. In fact, as Jonathan Levin, co-founder of Coinometrics, notes in his upcoming paper, Creating a decentralised payment network, he found that “[i]n total over the network history there have been 84,469 blocks with no transactions.” Yet because there is no one at the helm, no entrepreneur to rationally allocate block rewards or market value for those rewards the first year, ultimately 4.2 million bitcoins were given out for naught.

Many adopters note that this was done to help bootstrap the economy and that the initial distribution of bitcoins through the block reward is purportedly not how bitcoin will operate in the long run. And that at some point Bitcoin’s internal economy will somehow be incentivized by transaction fees only – or at least that is theoretical transition (see Reducing and removing block rewards). But the fact that miners were rewarded irrespective and arbitrarily of their actual work is very similar to how top-down command economies work rationing wages. This is a topic that will likely be debated over the coming years.

For additional perspective I spoke with Martin Harrigan, a software developer and founder of Quantabytes, a cryptocurrency analytics start-up. In his view:

The initial distribution of bitcoins is a one-time process that is distorting our understanding of the Bitcoin economy. I think that the peaks in transaction volume during the price run-ups are a form of secondary distribution: early adopters are distributing their bitcoins, for profit, to new users. This is a vital part of Bitcoin’s distribution process and may continue for as long as there are periods of significant price increase. It may be that institutional investors will take-over a significant portion of this process for several years. Then, at some point, when the technology, infrastructure, regulatory frameworks, and our understanding of cryptocurrencies has matured, the price will stabilise and Bitcoin will return to individual users as a stable transactional currency in the traditional sense.

Of course, I’m speculating wildly here. My point is that we don’t have a good null model. We’re not seeing “hockey stick growth” but maybe that’s okay. Many start-ups need this type of growth to survive — I don’t think Bitcoin does. During the Bitcoin crash of 2011 the price dropped 93% and didn’t recover until 2013. The difficulty also dropped and remained stagnant for a year and half. Although I can’t quantify it, the “mood” on the Bitcointalk forums was grim. The equivalent event would have been fatal to most start-ups.

Perhaps at Harrigan noted, this will change in the future. And perhaps those frictions are still lower than the cost of doing business in certain regions (like the Philippines). And this is not to single-out Coinbase. I still think they are one of the best companies in this space, I even consider them one of the most promising in part because they are trying to create value (and have). But that does not mean this particular service is frictionless. For instance, David Evans recently delved into the specific transaction costs of various platforms and explained how the actual roundtrip cost of Coinbase is 2% + $.15, not the 1 percent that is frequently cited (Evans also had another good explanation of how Coinbase and merchants like Overstock work).

Building a continuous series of bubbles or building utility

One of the common refrains about altcoins and appcoins in general is that none of the underlying systems are able to give out real equity and thus cannot have P/E expectations – neither does bitcoin, nor will it. This is a bug and it is why I argue that using the “TCP/IP” analogy is probably incorrect.  The internet is an amalgam of private-public intranets cobbled together and cost real capital to build.  It was not built with magic; real incentives had to be provided to build it.  Imagine if those incentives decreased 50% every 4 years?  That’s Bitcoin’s internal economy. The Bitcoin network cannot operate without bitcoins – the app or currency or commodity (choose your definition). The two are united together. Yet TCP/IP, the protocol, can still work even if substantial portions of the network fail; it is not tied to a specific set of hardware or token (TCPIPCoin).

This is not the first time a set of unrealistic expectations have been created in the past 10 years.

cleantechSo what kind of bubble is bitcoin then? Some claim that it “crashes upwards” which makes no rational sense at all. Bitcoin (the token) is not immune to the laws of economics. Perhaps as illustrated above (source), the current investment cycle in Bitcoin is more akin to Cleantech circa 2005? What this means is that, as noted in my previous article, even though many of the startups are clever, they may lack sustainable business models. Once this froth is removed, the businesses that survive will likely be those that are actually creating real pain killers (utility) to real needs; perhaps reusing the infrastructure of the network (like merged mining proposed by Blockstream or that of Cryptowerks) to process contracts and titles. Again, all of this is speculative, yet it warrants attention because Cleantech also had a similar dedicated ideological group of early adopters that created economic activity (though, not much growth yet) and wanted to change the world. And despite their best efforts it popped.

In conclusion, expanding credit alone is not the answer to Bitcoin’s stagnant economy. For instance, China’s money supply grew leaps and bounds since November 2008 (when it implemented a series of stimulus packages). It also signed bilateral currency agreements with new countries every year which led many outside commentators to erroneously conclude that this somehow leads to mass adoption of the RMB. Yet the stark reality is that the RMB only accounts for 1.4% of global payments compared with the dollar at 42.5%. This is unlikely to change either. However, even in its current doldrums, the Chinese economy still produces real goods and services to the tune of trillions of dollars per annum. Obviously it is unfair to compare Bitcoin, a five-and-a-half-year old “startup” to China. Yet the emerging market aspect, the reuse of capital stock, the implementation of new financial instruments, the training of unskilled laborers and ultimately the creation of needed utility to outside parties can be viewed as facsimiles to learn and grow from.

As noted by John Kenneth Galbraith in the last article, there is only so much capital that can be extracted from the “fleece-me” crowds of reddit. Significantly more capital is needed to scale operations to enterprise-level reliability. While some advocates believe eschewing the ancien regime of venture funds and private equity is the way to move forward, this is short-sighted.

Below is a list of companies I think have potential to create value in this digital ecosystem – embryonic solutions to this quagmire (I hold no equity in them):

Send to Kindle

Beyond exchanges and wallets

Below are some start-ups or at least young companies in this cryptocurrency space that are trying to move beyond primary exchange functionality (simple order books) and/or hosted wallet services.  Note: this is not an endorsement of them as an investment or service.

API: Chain, Blockr, HelloBlock, BlockCypher, HiBitcoin
Analytics: Coinalytics, Coinometrics
KYC: CoinTrust, Block Score, Coin Validation
Decentralized cloud: MaidSafe, StackMonkey, decloud, Bitcloud, StorJ
Hedging/lending: BTCJam, Bitreserve, Bitfinex
Platforms: SecondMarket (BIT), CampBX, TruCoin, Coinfloor, Atlas ATS, Kraken, Coinsetter, Vaurum, itBit, ICBIT, LedgerX

 

Send to Kindle

Modeling economic growth and zero-sum games in Bitcoin

lotteryI have a new article that went up over at Let’s Talk Bitcoin yesterday called, Can Bitcoin change from a bubble economy into a growth economy? (pdf).  It is essentially part 2 to the previous piece and put together based on feedback I received this past week.

I should mention that while I did use an equation in the middle of the article to describe prices, I do not think the regression itself is valid.  As my friend RD mentioned, the error term does not seem random. There is a deterministic trend that would have to be filtered out first.  It is the same problem with modeling long term GDP growth.  After all, why would we need all these economic models if we can simply draw a straight line and predict GDP using high school math?  Many things follow an exponential growth curve, that is nothing new. The exciting thing is to forecast it in the short term, which this method is extremely bad at (the same criticism can be lobbed at models like Elliot wave theory).

Over the last 12 hours I have received some criticism about one particular point: zero-sum games and gambling.

In one email exchange, Bob disagreed that gambling was zero-sum, stating:

Gambling in and of itself does not create productivity, but the businesses that surround gambling certainly can. See: casinos, bitcoin mixing services.

Also, if the house makes a bunch of money, and the owning entrepreneur uses those funds to start another, productive business, then in some sense the gambling has facilitated economic development by liberating wealth from unproductive suckers who participate in online gambling to a highly productive entrepreneur. This was, of course, exactly the case with the most popular bitcoin gambling website.

The issue here is a measurable one.  A zero-sum game is one in which wealth is merely redistributed and not grown.  What Bob described above is economic activity but not economic growth.  Gambling is zero-sum game as is speculating on stocks or cryptocoins, no new utility itself is created.  Tokens are simply being moved from person to person. Eventually many people are left with assets that they cannot sell because all the demand has been fulfilled, and at that point the price may actually crash.  In other words, to make money in a zero-sum game, it is only because others have lost an equal amount.  In fact, in many cases, value diminishes because of interchange fees or in the case of mixing services, transaction fees.

This touches on an economic principle of opportunity costs (the “seen” and “unseen”) — the traditional example used is Alice throwing a brick through a shop keepers window.  While the seen result is a repairman being hired to fix the window, thus spurring economic activity, this does not actually create economic growth because the shop keeper must now forgo certain opportunities to spend repairing existing physical stock.

Note: Gambling has the name “math tax” because it is a tax on people who are not good with statistics (49.5% odds means in the long-run, you will always lose to the house).  This is derived from Ambrose Bierce’s quote, “Lottery: A tax on people who are bad at math.”

After a quick Google scholar search, I think there is more concise explanation of this phenomenon in Gambling and speculation, by Borna & Lowry:

Unproductive nature of gambling

For players, gambling, at best, is a zero-sum game, i.e., the aggregate wealth of the players will not be altered due to a gambling activity. The losses of one party are precisely equal to the gains of the other participants. Of course, if the gambling activity were taxed by the government, or there were other ‘leakages,’ then the expected value of winning would be negative, i.e., the aggregate wealth of the players after the play would not be equal to their original wealth.

Although gambling is a sterile transfer of money or goods among individuals creating no new money or goods, it nevertheless consumes the players’ time and resources and may subtract from the national income. From a macro-economic point of view, the aggregate wealth of the players will change, in the long run, due to the fact that the transfer of wealth is usually among unequal productive sources. It may be argued that the productivity lost due to a transfer of money from one player will be offset by an increase in the productivity of the other player. This assumption is true only if both the winners’ and losers’ production schedules were assumed to be identical and linear.

One last note: there are a number of people I would like to thank for their comments included in this article; this does not mean they agree with or endorse my view.  This includes: Dave Babbitt, RD, Mark DeWeaver, Dave Hudson, JL, Taariq Lewis, CK, Petri Kajander and Chris Turlica.

Send to Kindle

Cryptocurrency in the news #16

Some relevant news of interest as I close some tabs:

Send to Kindle

Interview with core developer, Peter Todd

A new interview is up with IamSatoshi Network and Bitcoin core developer, Peter Todd.  While the first part explains the politics of getting code into (or out of the protocol) — which many enthusiasts gloss over — I especially found Peter’s discussions in Part 2 of germane interest due to the sky-is-falling on reddit surrounding Ghash.io the last few days.  Here is one such comment thread.  And I think this comment sums it up the best:

If a 51% can occur, all trust in bitcoin should be lost forever. An investment that relies on people begging random strangers on reddit not to ruin it every couple of weeks is not really something that seems like a great thing to pour actual money into, tbqh.

Tbqh means “to be quite honest” (that same user made other good points about this issue too).  And here is also another interesting subthread (mulligan for that decentralization + neutrality notion…).

Ghash.io is the largest mining pool on the Bitcoin network (it actually supports merged mining for Devcoin, Namecoin and Ixcoin as well) and it hit 48% of the network hashrate this past weekend (it is now 43%, see this chart).  Its parent operating company is Cex.io and the system is run in a cloudhashing manner — customers rent hashrate by purchasing contracts with bitcoin.  Interestingly enough, the cost of these contracts is now more than what you receive as a reward for hashing, leading to the joke that Ghash (and other such services) are pay-for faucets.  That is to say, faucets are way to distribute tokens, for free (usually by filling out some Captcha once a day).  Yet in this case, because of bitcoin volatility the past 5 months, users are actually paying to receive a minute amount of bitcoins — they might as well terminate their contracts and buy bitcoins on the open market.

One common refrain that some Bitcoin advocates say about mitigating 51% attacks is that hashers in mining pools can simply move and/or point their hashing equipment at another pool.  This may be possible in the “early” days of today, yet there are two problems as time goes on:

1) As we approach the top of the S-curve in ASIC tech improvements, mining farms (and pools) will gravitate to locations with the best and cheapest network and energy infrastructure.  This itself creates centralization risks that I and many others have written about.  If you are renting out equipment (hashing systems) from a cloud provider at one of these locations, you can no longer physically move the equipment to another farm and perhaps in some cases, you may not be able to direct your miner to other farms (there is one proposal by Greg Maxwell that hasn’t been reported on involving tamper resistant private keys physically built into the gear, but that’s a story for another post).

2) Block size increases.  In order to make the Bitcoin network more competitive as a payments and transportation network, there have been many proposals to increase the hard cap of 1 MB block sizes by several orders of magnitude.  To date however, the average block size is around 350 KB, with an average of 0.7 transactions per second — thus the need to increase it is low (primarily because few people actually use the chain for much activity such as commerce).  If block sizes are increased, without the use of something like tree chains, then centralization will occur because miners (and fully validating nodes) will need to pay for larger bandwidth options, larger hard drives, etc. which squeezes out marginal players.  This is a known issue but Peter Todd highlights this as a hurdle for hashers wanting to move to another pool for the same reasons mentioned in point #1.

Send to Kindle

Confirmation bias and Bitcoin

A week ago I did an interview with Adam and Stephanie over at Let’s Talk Bitcoin.  The interview was actually done ad hoc as we were supposed to interview someone else entirely but due to a scheduling issue at the last moment, he did not arrive.  Instead, Adam asked me what I was working on, I started talking, he started recording, Stephanie asked some follow-up questions and one thing led to another:

This interview was not planned and as a consequence I wrote a lengthier follow-up that explains more of these issues in detail including data from the blockchain:  A Marginal Economy versus a Growth Economy

And again, I’m not anti-Bitcoin, but a lot of the “facts” that some advocates say about how many bitcoin users there are — most of which are widely exaggerated —  and this will not help data-driven companies who are on the fence of adopting the protocol.  At some point these same companies will figure out that adoption rates are actually relatively low, so might as well be upfront about it.  In addition, I think many of these challenges are surmountable, especially the technical ones.  Lastly, I like the tech, I still go to meet-ups and start-up presentations on a weekly basis to meet more in this space too.  And, I could also be incorrect.

I have also begun receiving some messages and mail.  The one below is one I received from Bob moments ago:

I was going to tweet but I chose to go private.

I had to stop listening to the show because I just couldnt believe the nonesense that was coming out of your mouth. I was cringing because I know you are actually very intelligent. You sounded like a daft fundamentalist politician from the deep south. You make sweeping value judgements, logical fallacies and aspersions. If you continue on like this, no-one will take you seriously. I’m frankly stunned – you know what it sounded like? Like someone arguing the earth is flat and that the sun revolves the earth.

I don’t care if you dont drink the koolaid, dont invest or hodl (sic) bitcoins, but you have to stop talking nonesense or you will end up branded the next Professor Bitcorn http://www.professorbitcorn.com/

I’m going to promptly forget I ever listened to that because I usually find your writings intelligent and well thought out.

It is fine to disagree with me, in fact, my skeptical views are held by a mere a small minority.  However, the blockchain is public and the data reinforces all of the claims in the interview which I later in A Marginal Economy versus a Growth Economy.  And in terms of what Bob is looking for — someone to confirm his Bitcoin-to-the-moon views —  this just creates an echo chamber, a confirmation bias that happens a lot in ideologically driven organizations.  This technology is open-sourced and institutions will likely just cobble together the parts that provide utility to them and not drink the kool-aid, just as they did with the F/OSS community in the mid to late 90s.

Send to Kindle

Thread of the day: List of all the known dead altcoins

The past year has seen what some the “Cambrian explosion” in altcoins.  Most are complete pump-and-dump scams.  Others experimentally toy with a couple variables and a remote few actually bring something genuinely new to the scene (like proof-of-transaction in Fluttercoin).

Wouldn’t it be neat to see a list of all the known altcoins and a little bit about what they were before they became ledger rot?

For the last couple of months Ray Dillinger on Bitcoin Talk has been attempting to chronicle this digital death in: Necronomicon thread: Altcoins which are dead.  I wonder who holds the record for creating the most alts?  Is that something you brag about at a bar?

Furthermore, here are some patterns that Ray sees are emerging based on alts that are not (completely obvious) scams:

  • Alts have a plethora of different hashing algorithms, but there are really only three divisions that matter between their proof of work.  Either they are CPU dominated, GPU dominated, or they are mined with a particular kind of algorithm-specific ASIC.  ASICs exist for SHA256D coins like bitcoin and for Scrypt coins like Litecoin.  No other algorithm-specific hardware exists, so no other difference in hashing algorithm matters.
  • Within each division, coins rapidly reach an equilibrium where whichever hardware generates their proof of work is allocated in direct proportion to the financial reward per minute of the block reward.   Usually this means that halving the block reward of an alt, other things being equal, halves the hashing power securing its block chain.
  • Most alts become unstable when 3/4 or more of their coin supply has been mined (second reward halving), even if no other factors have made the cryptocurrency unstable prior to that time.  If the value being secured exceeds the block reward by too great a fraction, 51% attacks and forks are to be expected.
  • “Burst mining” or “automatically switching multipools” act like positive feedback amplifiers with a delay loop in mining – they make it VERY difficult for an alt to maintain a ‘stable’ block rate when its hash rate gets too small relative to the pool (GPU, CPU, or specific ASIC type) of hashing power it belongs to.  This is a heavy contributing factor in the 51% attacks and forks mentioned above.
  • Several alts switched to proof-of-stake after to this instability led to bad forks or “stuck” block chains where miners essentially had given up due to a burst miner leaving the chain at a ridiculously high difficulty level.
  • A shift from proof-of-work to to proof-of-stake, whatever its effect on market value, has usually led to stagnation or decline in the community surrounding the alt.  In turn this usually leads to a collapse in value of the alt, unless heroic measures (such as direct giveaways by stakeholders to non-stakeholders) are used to bring people into the community.

See also: Different proof-of-work mechanisms and several altcoins that have been hit with a 51% attack

Send to Kindle

The increasing importance of energy sources and location for bitcoin mining

I mentioned BitFury in passing in my lengthy piece on energy arbitrage.  Last week they announced that they had received $20 million in venture financing.

But one story that has not been translated into English yet (here is the Finnish version) is that their facility in Finland is nearing completion.  They are reusing an old steel mill on Kimito Island and are coming up with a way to increase the efficiency of the heat recovery process to surpass that of Google (which also has a data center in the area).  And according to my friend who helped translate it for me, BitFury has a 20 MW power plant at that location and it’s almost entirely in use.

And that is with a token below $1,000.

For more on the $1 million token, see Bitcoins: Made in China (pdf) (BM)

Send to Kindle

Fun fact: Litecoin’s hashrate nearly doubled after Bitcoin’s halvingday

What Dogecoin (of all cryptocurrencies) is highlighting is the huge importance of incentivizing the labor force to stay and continue providing security and utility.  With each halvingday Doge has gone through, this has led an exodus of labor elsewhere, sometimes to competing chains like Litecoin.

Again, a halving day is when the network informs the labor force that they are now receiving a 50% wage cut.

One common refrain that some Bitcoin advocates have stated in the past is that Bitcoin does not have a similar incentives issue.  As I have described in numerous articles and papers, this is false.

For instance, below is data from the Litecoin Hashrate statistics database at Bitinfo Charts.  The numbers expressed represent the collective hashing power of the Litecoin network:

  • 576.8 megahash/s on November 25, 2012
  • 572.62 megahash/s on November 26, 2012
  • 578.92 megahash/s on November 27, 2012
  • 687.47 megahash/s on November 28, 2012
  • ——— Bitcoin Halving Day ————
  • 1.11 gigahash/s on November 29, 2012
  • 1.28 gigahash/s on November 30, 2012
  • 1.14 gigahash/s on December 1, 2012
  • 834.75 megahash/s on December 2, 2012

What we see here is that some marginal miners that were previously hashing on the Bitcoin network left and began providing their labor on a competing network (Litecoin) that was temporarily more profitable to them (or at least, what they may have seen as future profitability relative to their costs).

These were likely GPU-based miners as FPGAs were increasingly being acquired and used by larger Bitcoin mining farms.  Remember, while there were some proprietary ASICs that were developed and used in this time frame, they were not available to the public at-large — the first ASICs that were sold to the public (from Avalon) did not come online till the end of January / beginning of February the following year.

Below are the corresponding dates on the Bitcoin network using the same database:

  • 24.65 terrahash/s on November 25, 2012
  • 26.52 terrahash/s on November 26, 2012
  • 25.29 terrahash/s on November 27, 2012
  • 29.47 terrahash/s on November 28, 2012
  • ——– Bitcoin Halving Day ———
  • 28.2 terrahash/s on November 29, 2012
  • 21.71 terrahash/s on November 30, 2012
  • 28.31 terrahash/s on December 1, 2012
  • 24.19 terrahash/s on December 2, 2012

The chart below is a visual representation of this phenomenon.

bitcoinhashrate

I have described the reasons for why this has occurred in the following articles:

Send to Kindle

Comment of the day: Mining Rewards

Yesterday Ray Dillinger from this thread messaged me on Bitcoin Talk and said:

I think the economics of “mining” reveal a design flaw in proof-of-work cryptocurrencies.

The idea that people can ‘farm’ the money supply by buying and powering hashing hardware guarantees that the difference between the amount of value produced and the amount of resources expended will approach zero.

It’s something like a tautology, where people are spending money in an auction for the right to print money.  Such an auction is more or less guaranteed to bring the costs of printing money right up to its value, which is an unnecessary (and unwanted) feature.

Aside from externalities and subsidies in the markets for electrical power and waste heat making the auction unfair from the beginning, that simply is not a necessary feature of a currency.  Certainly no government-issued fiat currency is so resource-intensive to supply.  But that comes about mostly because the government can impose additional costs (such as jail time) on unauthorized printing which are not borne by those doing authorized printing.

And that distinction between “authorized” and “unauthorized” is something that peer-to-peer and distributed systems don’t have access to.

For more information on this issue I recommend interested readers visit a great post by Robert Sams, “The Marginal Cost of Cryptocurrency.”  Earlier this month I wrote a detailed follow-up post that Sams also helped contribute to (especially the concluding remarks) which discusses some of the the issues that Bob mentioned in the above comment.

I think in the long-run both Ray and Robert will likely be proven correct though there may be some interim solutions such as sidechains that delay or mitigate some of these problems.

Send to Kindle

Will colored coin extensibility throw a wrench into the automated information security costs of Bitcoin?

[Note: a version of this appeared at Business Insider.  A PDF is also available of the version below.]

The cost of securing the Bitcoin network for a given length of time is roughly equivalent to the value of the block reward over the same time. In economic terms this reads as MP = MC. In Bitcoin and most of its descendants, the labor force (called miners) are provided a hard-coded wage, a seigniorage subsidy called a block reward roughly every 8-10 minutes in consideration for their providing security and processing transactions. In return, this labor force provides the security in a method called “proof-of-work” – hashing through benign math work until it finds a special number, broadcasting that solution to the network (the other laborers) and, once a block is found, repeating the cycle once again.

Is there an economic flaw of proof-of-work as it relates to security?  For instance, on most cryptocurrency chains the asset value of the chain has to be proportional to the proof-of-work otherwise this could lead to an economic incentive to attack the chain. Compounding this issue are new financial instruments such as metacoins, colored coins and smart contracts that can be exchanged on the same chains and unquestionably increase the enterprise value of the chain, yet which do not proportionally incentivize security beyond the existing seigniorage subsidy.

Economically rational laborers will not spend more than the value of a bitcoin to extract the rents of that bitcoin. Because mining rewards were fixed with the genesis block in 2009 (providing a fixed income on a scheduled time table), and market participants are able to determine the percentage of the overall hashrate at a given time that their mining equipment represents, only relatively simple calculations are required to gauge the potential profitability of their mining activities.

In practice, laborers on the Bitcoin network must account for the capital costs of their hashing equipment, rent for the land, administrative overhead, taxes and increasingly important, the energy costs which can be very specific to their locality, depending on the equipment’s geographic location. All of these costs are tallied against an inelastic wage which can only be attained if the hashing equipment they control is able to outcompete other such miners – it is a zero-sum game. And it can be scaled.

The Hashrate Wars

This subsequent escalation, dubbed a “hashrate war” (the competitive fight for ever increasing hashing equipment) created a technological S-curve that looks similar to the chart below:

hashrate over time

The vertical axis in the chart above is logarithmic and illustrates the hashing rate (showing that it will slow down once ASICs hit fabrication node limitations). The horizontal axis projects two years into the future (see also Bespoke Silicon).

Ignoring all of the various issues related to public goods challenges and game theory (such as “selfish mining”), this system has served the bootstrapping phase with relative ease. If it continues to expand at its current rate, the hardware side could potentially become commoditized in the next 3-4 years whereupon a miner’s competitive advantage will solely lay in energy arbitrage. In fact, Satoshi Nakamoto, the pseudonymous creator of the protocol foresaw this noting in the original FAQ that “When Bitcoins start having real exchange value, the competition for coin creation will drive the price of electricity needed for generating a coin close to the value of the coin.”

Thus the relationship between enterprise value and hashing power has been known for some time.

A challenge however, presents itself when this seigniorage subsidy is halved, a structural feature of most cryptocurrencies. With Bitcoin, every 4 years (or every 210,000 blocks) the subsidy is reduced by 50%. This is equivalent to the miners – the labor force – being told they would receive a 50% pay cut. While this issue typically remains hidden and muted when token values appreciate and rise, in the long run continual halvings discentivize laborers from providing security and utility to the network. There have been several “cryptocurrencies” whose labor force fled after their profitability period was over – most notably with Auroracoin – and as a consequence the network was left insecure and vulnerable to double-spending attacks (called a 51% attack).

One such popular token that is currently facing this dilemma is Dogecoin, which is losing 20-30% of its security force every 2 months. While there are potential solutions Dogecoin developers could adopt, incorporate or migrate to, because Dogecoin is still relatively young it has the flexibility of moving towards a different security mechanism. This issue has the potential to become systemic – and thus more difficult to address – in other digital currency ecosystems.

dogecoin comparison chart

Are there any other areas of asymmetric, unbalanced security?

Colored coins, metacoins, smart contracts and user-created assets are buzzwords trumpeted by many cryptocurrency enthusiasts this past year. I even wrote a short book about these groundbreaking possibilities. Considerable publicity has been dedicated to new functionality which promises to expand the extensibility of cryptoprotocols to go beyond tracking ledger entries for just one specific blockchain-managed asset (a coin) and allows users to instead “colored” tokens to represent cars, houses, commodities, stocks, bonds and other financial instruments and wares. For example, there are several colored coin projects currently in beta that allow users to take a fraction of a bitcoin, such as 0.001 BTC and “color” it “blue” (or any other arbitrary color) which represents say, a specific make and model of an automobile like a 2010 Camry LE. The user can then transfer that asset, the title of the Camry, along a cryptoledger (such as the Bitcoin network) to other individuals. Instead of having to transfer tens, hundreds or thousands of bitcoins in exchange for a good or service, users can instead exchange and manage entire asset classes in a trustless, relatively decentralized framework.

However, in this model the labor force providing security has no incentive to consume more capital or create additional hashrate just because the market value of colored coins is in excess of the uncolored value (since the value of miners’ new coins will be solely based on uncolored exchange value). Just because social conventions on the edges of the network add value perceptions to the network, based on the current code, miners do not automatically receive any additional value for providing that security.

So we should ask: does this raise the risk of a double-spend? Perhaps, because more hashrate is required for a proof-of-work blockchain with additional color value transactions on the chain. Yet, there is no automatic mechanism to do reward this additional labor leading a (remote) possibility of having to remove some Script’s altogether. Script is the built-in scripting language used for creating and customizing transactions.

The gap between mining value and enterprise value

For instance, assuming this colored coin technology works and is adopted by 1,000 people the following scenario could take place. The total market value of a block reward (currently 25 bitcoins) is roughly $12,500 (or $500 per bitcoin), thus ceteris paribus the labor force is only spending $12,500 every 10 minutes to secure the blockchain (in practice it is a lot more, there are several exceptions). One such exception is the expectation of token value appreciation – that is to say that if Bob the miner believes that a bitcoin’s value is $1000, but the price is currently $500, Bob is still willing to expend up to $1000 for mining each bitcoin, discounted by his internal calculation for the probability that bitcoin will rise to that price. However, if colored coins are adopted and used via the built-in scripting methods, there is potential for a seemingly unlimited amount of assets to be traded on the Bitcoin network. If these several thousand colored coin users add additional value, this creates an incentive for attackers to attack the network through colored coin-based double-spending attacks.

For example, where each of these 10,000 users places the title of a 2010 Camry each valued at $10,000 that would theoretically add $100 million in value that the network is transferring, but for which miners are not being proportionally rewarded or paid to secure those assets. As a consequence, over time as tens of thousands of assets – and functionality – are added to the network, the gap between mining reward value and enterprise value widens which creates a vulnerability, an economic incentive for criminals to use hashrate to attack the network. A rogue attacker could sell an asset and build a competing tree (consensus in Bitcoin is based on whatever is the longest tree of blocks). After a successful 51% attack, the rogue attacker could then broadcast a fake chain built without the corresponding asset, having switched it out thus effectively double-spending. And if the total value that the network is transacting is at least twice as much as bitcoin value is, then there is a financial incentive for rogue participants to attack the network. The impact of a successful attack involves a lot of speculation and will likely fill continue to provide researchers many more volumes of conjecture and modeling.

Money for nothing

This scenario raises the question: what then is the potential divergence in value between bitcoin the currency and bitcoin the network (which can transfer and protect other data)? This issue only presents itself now as, previously, only bitcoins – and no other apps, assets or instruments – existed on the network. This gives rise to a coordination problem because miners would have to also keep track of the color, keep track of the exchanges the color is being traded on, and keep track of the settlement price (if there is such a thing) so that they could adequately gauge market clearing prices and readjust the coinbase reward every 10 minutes.  Again, even if this coordination problem is solved the seigniorage reward does not increase – the current fixed income does not reflect the actual value being transacted on the network.  So colored coins on a fully decentralized network could end up on an undersecured network of their own making with the only solution: recode the block rewards based on the value of the color and this presents a number of technical and social engineering challenges. In some ways this issue is related to the hypothetical economic disconnection between blacklisted and whitelisted tokens (due to Coin Validation) – a blacklisted token would be sold for less than what a whitelisted token would sell for.

A follow-up question that the community will likely debate is: Why wouldn’t the value of a bitcoin increase as items of value are transferred on the blockchain via colored coins or another protocol, such that the miner’s block rewards would adequately compensate the miners? According to Preston Byrne, a securitization attorney in London the answer to this is “that the value of bitcoin used in a colored coin transaction does not need to bear any relationship to the value of the associated asset – the network is being used to transmit information, and that information represents rights, and is the rights – not the token – which are valuable.” If the price of bitcoin does not adequately incentivize the miners, then there will be a difference between value of a bitcoin and the network and then some entity will have to step in to compensate for that difference. Whether collective action is sufficient to provide this compensation is currently unknown but there are coordination problems inherent in this model that would make this difficult.

In contrast, the Ripple protocol, sidechains and perhaps even a proof-of-stake system could probably alleviate at least this specific concern. These alternative consensus mechanisms have one advantage to hash-based proof of work systems like Bitcoin, at least for the transfer of non-crypto value (i.e., colored coins).  For instance, Ripple’s distributed consensus mechanism allows users to exchange assets via gateways without needing to proportionally incentivize the security labor force. This is not necessarily an endorsement of this particular platform, rather it serves as examples of how it is immune to that particular attack vector.

Alternative approaches to network security

I reached out to several experts for their views on this issue. According to Robert Sams, founder of Krtyptonomic and Cryptonomics:

One of the arguments against the double-spend and 51% attacks is that it needs to incorporate the effect a successful attack would have on the exchange rate. As coloured coins represent claims to assets whose value will often have no connection to the exchange rate, it potentially strengthens the attack vector of focusing a double spend on some large-value colour. But then, I’ve always thought the whole double-spend thing could be reduced significantly if both legs of the exchange were represented on a single tx (buyer’s bitcoin and seller’s coloured coin).

The other issue concerns what colour really represents. The idea is that colour acts like a bearer asset, whoever possesses it owns it, just like bitcoin. But this raises the whole blacklisted coin question that you refer to in the paper. Is the issuer of colour (say, a company floating its equity on the blockchain) going to pay dividends to the holder of a coloured coin widely believed to have been acquired through a double-spend? With services like Coin Validation, you ruin fungibility of coins that way, so all coins need to be treated the same (easy to accomplish if, say, the zerocoin protocol were incorporated). But colour? The expectations are different here, I believe.

On a practical level, I just don’t see how psudo-anonymous colour would ever represent anything more than fringe assets. A registry of real identities mapping to the public keys would need to be kept by someone. This is certainly the case if you ever wanted these assets to be recognised by current law.

But in a purely binary world where this is not the case, I would expect that colour issuers would “de-colour” coins it believed were acquired through double-spend, or maybe single bitcoin-vs-colour tx would make that whole attack vector irrelevant anyway. In which case, we’re back to the question of what happens when the colour value of the blockchain greatly exceeds that of the bitcoin monetary base? Who knows, really depends on the details of the colour infrastructure. Could someone sell short the crypto equity market and launch a 51% attack? I guess, but then the attacker is left with a bunch of bitcoin whose value is…

The more interesting question for me is this: what happens to colour “ownership” when the network comes under 51% control? Without a registry mapping real identities to public keys, a psudo-anonymous network of coloured assets on a network controlled by one guy is just junk, no longer represents anything (unless the 51% hasher is benevolent of course). Nobody can make a claim on the colour issuer’s assets. So perhaps this is the real attack vector: a bunch of issuers get together (say, they’re issuers of coloured coin bonds) to launch a 51% attack to extinguish their debts. If the value of that colour is much greater than cost of hashing 51% of the network, that attack vector seems to work.

In other words, while these new financial instruments could technically be exchanged in a trustless manner, the current protocol cannot automatically incentivize their protection or account for their enterprise value, the equivalent of using a mall security guard to protect Fort Knox. While miners may be able to protect against amateurish shoplifters or even unorganized cat burglars, once organized criminals calculate and realize that one “color” asset is worth the economic effort of attacking the vault they may try to do so.   And because the blockchain is public and color assets could be known to the world-at-large, taking the Fort Knox analogy further, this would be like a mall cop standing in front of the contents of Fort Knox piled up on an open field (or behind a see-through glass vault). It is an attempt to guard the Crown jewels not in a fortress with armed guards, tanks and turrets, but with Paul Blart.

On this point, Jonathan Levin, co-founder of Coinometrics explained that:

We don’t know how much proof of work is enough for the existing system and building financially valuable layers on top do not contribute any economic incentives to secure the network further. These incentives are fixed in terms of Bitcoin – which may lead to an interesting result where people who are dependent on coloured coin implementations hoard bitcoins to attempt to and increase the price of Bitcoin and thus provide incentives to miners.

It should also be noted that the engineers and those promoting extensibility such as colored coins do not see the technology as being limited in this way. If all colored coins can represent is ‘fringe assets’ then the level of interest in them would be minimal. Time will tell whether this is the case. Yet if Bob could decolor assets, in this scenario, an issuer of a colored coin has (inadvertently) granted itself the ability to delegitimize the bearer assets as easily as it created them.  And arguably, decoloring does not offer Bob any added insurance that the coin has been fully redeemed, it is just an extra transaction at the end of the round trip to the issuer. That is an implicit negative for investors and users.  This raises some concerns in the future, if a party had the ability to invalidate Bitcoin accounts based on their own criteria that the miners might gain an influence over the colored coins and may bias various aspects of the economy incentivized through some kind of backchannel payment.  For instance, BitUndo is a new “double spending as a service” project that is trying to do just that, provide a way for users to send transactions to a mining pool in an attempt to reverse transactions something that has created a flurry of reactions in the community. In the end, colored coins ends up being expensive through imposed TX fees, and thus becomes less attractive to issuers and users.

According to Alex Mizrahi, lead developer of Chromawallet a colored coin project:

It is true that currently block subsidy has a significant impact on network’s security, but it is not meant to work this way in the long run.

We’ll go through 5 subsidy halvings in next 20 years, at that point block subsidy will be around 0.78 BTC. Reward miners get from fees is already on that scale (e.g. 0.134 BTC here) even though blocks aren’t full yet.

So transaction fees are going to play bigger role than subsidy. And value of those fees is linked to usefulness of transactions (i.e. value of those transactions) rather than to exchange rate.

Colored coins increase incentive to attack, but they also increase usefulness of transactions, thus it isn’t clear whether they will have negative or positive impact on network security.

A couple other comments: “Script” is not required for colored coins, they work with very plain bitcoin transactions too. The incentive structure for bitcoin mining sucks from security perspective anyway, so I hope we’ll eventually upgrade to a better protocol (e.g. including proof-of-stake) regardless of colored coin woes. And merged-mined sidechains will have even worse problems unless they are ‘hardened’ in some way.

I also contacted Jack Wang, co-founder of Bitfoo, a hosted wallet that was the first to implement proof-of-reserves. In his view:

The security of the network depends on the aggregate hashing power.  In one method of implementation, if Colored Coins could pay just one pool, say Eligius, extra to prioritize their transactions, but Eligius had only, say 25% of the network power, then the rest of the network could collectively decide to exclude the blocks that Eligius mined.  This makes some sense to me since Eligius itself couldn’t secure the network, yet is the only pool extracting the extra value out of Colored Coins.  Colored Coins would need to distribute the extra rents to at least 50% of the network, and unless this lies within one pool then this is a danger to the Bitcoin network, but if it is 2 or more, this requires coordination and introduces potential holdout problems.

A more natural way to implement this would be that colored coins users would pay higher transaction fees on their own so that any and all miners that included those transactions in their blocks would get more fees. But unless those fees are mandated by colored coins, what is the incentive for individual colored coins users to pay extra?

Towards a more functional future

While this is a speculative issue, what is knowable is that the economics behind it are math-based and built into these protocols. What is also known is that some proposed solutions should be easier to implement than others. For instance, Bitcoin developers could fork the code and create a proof-of-stake ledger proposed by Stephen Reed. Alternatively, because this new extensibility could create fungibility issues, a different – and admittedly impractical – solution might be for mining pools to utilize a trusted Oracle data feed to colored coin exchanges and adjust mining rewards accordingly. Perhaps removing scripts entirely and relying on merge-mined sidechains, instead, could alleviate this potential pain point as well.

What is definitely known is that market participants have every incentive to keep miners mining. If fees are floated users will likely pay higher transaction fees if they do not want miners to go elsewhere. While speculative, colored coins users could become the biggest payer of transaction fees, though in practice, most users do not like paying any fee. Over the past several months this is an issue that Mastercoin and Counterparty developers have promoted: pay the miners higher fees for access to these new platforms because miners expect the value of these special transactions to go beyond the excess of bitcoin transactions. Miners could potentially auction block priority to these transactions over regular bitcoin transactions. One pool, Eligius, operated by Luke-Jr is already filtering out specific bitcoin transaction today. In conclusion, the interaction between second-generation blockchain technology and first-generation incentive mechanisms will continue to be thought-provoking. It is certainly an issue to keep one’s eye on in the coming years.

[Note: I would like to thank Preston Byrne, Petri Kajander and Taariq Lewis for their comments; and Joshua Zeidner for bringing this issue to my attention and for his extensive feedback.]

Send to Kindle

Cryptocurrency in the news #15

Need to close some tabs, here are some links of interest:

Send to Kindle

Quote of the day: formulating the Byzantine Generals problem

The subfield of research involving Byzantine fault tolerance has existed for three decades and one of the areas in computer science that Bitcoin provided a decentralized solution for was the Byzantine Generals Problem.

How did the term Byzantine Generals Problem come to exist?  Here’s an answer from the creators:

The Byzantine Generals Problem  (with Marshall Pease and Robert Shostak)
ACM Transactions on Programming Languages and Systems 4, 3 (July 1982), 382-401. PDF


I have long felt that, because it was posed as a cute problem about philosophers seated around a table, Dijkstra’s dining philosopher’s problem received much more attention than it deserves.  (For example, it has probably received more attention in the theory community than the readers/writers problem, which illustrates the same principles and has much more practical importance.)  I believed that the problem introduced in [41] was very important and deserved the attention of computer scientists.  The popularity of the dining philosophers problem taught me that the best way to attract attention to a problem is to present it in terms of a story.

There is a problem in distributed computing that is sometimes called the Chinese Generals Problem, in which two generals have to come to a common agreement on whether to attack or retreat, but can communicate only by sending messengers who might never arrive.  I stole the idea of the generals and posed the problem in terms of a group of generals, some of whom may be traitors, who have to reach a common decision.  I wanted to assign the generals a nationality that would not offend any readers.  At the time, Albania was a completely closed society, and I felt it unlikely that there would be any Albanians around to object, so the original title of this paper was The Albanian Generals Problem.  Jack Goldberg was smart enough to realize that there were Albanians in the world outside Albania, and Albania might not always be a black hole, so he suggested that I find another name.  The obviously more appropriate Byzantine generals then occurred to me.

The main reason for writing this paper was to assign the new name to the problem.  But a new paper needed new results as well.  I came up with a simpler way to describe the general 3n+1-processor algorithm.  (Shostak’s 4-processor algorithm was subtle but easy to understand; Pease’s generalization was a remarkable tour de force.)  We also added a generalization to networks that were not completely connected.  (I don’t remember whose work that was.)  I also added some discussion of practical implementation details.

Send to Kindle

Different proof-of-work mechanisms and several altcoins that have been hit with a 51% attack

realityJonathan Levin was recently interviewed by CoinTelegraph.  One of the notable remarks was the following:

CT: You also mentioned at CoinSummit that Proof-of-work model may not be here to stay. What would you think would be a viable alternative which could be created should the popularity of Bitcoin explode in the next few years?

JL: I think the concept of proof of work is always going to be here to stay. Whether this proof of work will be running a hashing algorithm like SHA-256 or something different remains to be seen. I am a big fan of other forms of proof of work that can be combined with or replace the proof of work that Bitcoin uses. An example of this could be proof of solar power generation. There are many great minds thinking about this problem and I am sure there will be some interesting developments over the next year.

While I think that most proof-of-work (as seen so far) generally leads towards centralization (due to economies of scale), perhaps there will be solutions in the future (though I suspect that is not the case because of MV=MC).

With that said, there are several different types of proof-of-work mechanisms used in cryptocurrenices today:

  • SHA256d which is used in Bitcoin and numerous clones (good thread on StackExchange) and is based on HashCash
  • scrypt which is used with Litecoin, Dogecoin, Feathercoin and numerous others
  • X11 used notably with Darkcoin
  • Dagger which may be flawed but was intended to be used in Ethereum
  • Kimoto gravity well, which adjusts difficulty, is used with Megacoin (explanation here and here)
  • Other experimental variations include: Scrypt-N, Scrypt Jane, Groestel (Grøestl), Keccak, and Quark

Based on my blockhalving article, I received an email yesterday about the potential for a 51% attack on Bitcoin and other chains:

I’ve been told that the system is secure because anyone with the computational power to conduct a 51% attack would just mine instead. If all coins are mined and there aren’t high enough transaction fees then you lose that argument right?

In theory, you would think that is when the network was the most vulnerable but in practice there are numerous chains that become extinct long before coins (or the money supply) are completely divvied out and are actually never hit with a 51% attack.  A joke I heard last year when I helped build some mining system for a few friends is that most altchains do not survive their second halving.  While no one has yet to actually do the empirical study on this, the truth is (at least back in spring of 2013) probably pretty accurate.  If you spend any amount of time in the announcement alt thread on Bitcoin Talk most new chains are pumped and then dumped by a coordinated few (like Fontas).

When prices enter a prolonged bear market there are fewer incentives for miners to stick around to provide security and thus the chain is abandoned even before halvingday.  While there are several reasons why someone would spend the costs to actually attack a dying chain — to test out their old equipment (or “LULZ”) — I do not think any research has been published yet that categorizes the various empirical examples of such deaths.  If anyone is interested in reading about early attacks, I highly recommend reading through ArtForz‘s posts on Bitcoin Talk.  He figured out all sorts of exploits with some of the early alts like i0coin and SolidCoin.

Below are five chains that have been known to be hit by 51% attacks, I’m sure the actual number is in the dozens at this point:

xkcd_security

There are other cheaper ways to attack the network that don’t require achieving 51%.  One is simply with social engineering: since there are only a small number of Bitcoin pools (roughly 12) you could go the old fashioned route and blackmail them, physically attack the locations, regulate them, etc.  But those can happen with other types of information security too.  Dave Babbitt is finishing up his master’s thesis and he has an interesting statistic that I will be sure to post once it is published.

As far as Dogecoin goes, something to keep in mind is even if it is temporarily profitable (or less costly) for Bob’s Litecoin Farm to attack the chain creating a loss-of-confidence in dogecoin, those dogecoin miners that leave the network could end up on Litecoin, creating new competition for Bob.  So while it would hurt the confidence in Dogecoin, those profitably able to hash on Litecoin would likely create more headaches for Bob than is worth the effort.  But not all miners think in these terms.

[Note: as of this writing the Dogecoin hashrate is ~40 gigahash/s versus roughly 220 gigahash/s for Litecoin.]

With that said, in reading through some of the comments from the article yesterday, Stephen Gornick posted the following hypothetical:

A 51% attack for the purpose of double spending against the exchanges would need about $5M worth of the new Scrypt ASIC hardware mining away on a private fork of the Dogecoin blockchain. LIkely even less than $5M is necessary as a successful attack will likely involve DDoS’g the existing pools such that the total hashing on the public chain is lowered.

Additionally, the attacker doesn’t need to invest $5M just on this attack. Those Scrypt ASICs are only needed for about an hour — and can go back to mining Litecoin or whatever after the attack. So all that is needed is to direct $5M worth of hardware to the private Dogecoin blockchain fork for a short time until the aim of the attack (sell Dogecoins for bitcoins, litecoins or other non-reversible payment method, then withdraw the funds) is complete.

Stephen is probably correct, though, again a 51% attack is probably best described as an opportunity cost attack.  That is to say, what other more profitable and productive effort could the systems you are using to attack with have been used for instead?

This topic is a never ending and there are many interesting papers, threads, articles, videos and podcasts covering the same topic from multiple angels.  Perhaps Dogecoin will stave off any such attack.

Send to Kindle

Digital currency wingmen (and women)

save-FerrisI have a new article up over at CoinDesk discussing some of the challenges facing Dogecoin as it relates to block halving rewards:  What Dogecoin Must Do to Survive

There were some edits and a few things were removed, so for those interested I also have my original copy in (pdf) that has one more option, a chart, plus a few more details and links.  The title of the original is “Dogecoin likely needs a wingman to survive” (it also links to the MemoryCoin “death”).

There are a number of potential solutions and many well-intentioned, motivated people are trying to organize a variety of ways to “Save Doge” happen.

For instance, this is/was a very popular Dogecoin thread from yesterday: Here’s your ASICs and pools — one of the developers has purchased ASICs from gridseed and is giving them to randomly selected people with the stipulation that they turn the hashrate towards dogecoin.

There are four problems with this specific proposal:

  1. It will simply increase the difficulty rate, pushing out other marginal miners who cannot profitably provide security on doge towards other more profitable chains (this  has occurred with Bitcoin in the past as well).
  2. From my reading it does not appear that there is any way to control those who receive the ASICs from pointing the ASICs on to another more profitable chain(s).  Whoever is distributing these would need to do some kind of “lock-in” otherwise this will occur.
  3. The question of who pays electricity is not highlighted or answered in the top of the thread.
  4. Nor is the question of who keeps the coins that are generated.  Are the holders of the coins required to keep them, sell them, trade them?  If they have to pay for electricity, taxes, logistics then they will likely need to liquidate those coins.

What this essentially amounts to is temporarily subsidizing hashrate on the doge network but with several unintended consequences that will likely create more challenges down the road.

Again, I think competition and choice is good.  I do not think (and this is just my opinion) that a monopoly-of-ideas behind just one token is an effective way to promote a new innovation that itself was purportedly designed to compete with other forms of payment.  In an open market, market participants decide and their preferences can change based upon economic conditions.  It impossible to predict what the market will decide a priori thus despite these predictions and trends the market may move in a different direction.

However, this reddit plan above ultimately just sends money to the utility companies, postponing the inevitable by writing checks to an electrical money pit.

Send to Kindle

The “pain point” of payments in the developed world

paymentsVitalik Buterin is one of the smartest writers and developers in the digital currency space. At the ripe age of 20 he has put together a repertoire of code, articles and most importantly challenges that the “cryptocurrency” world faces.

He recently penned an article that argues what Bitcoin needs today is usage by employers, not just more merchants.  That one of the ways to subdue and mitigate the high levels of volatility is for employers to pay employees in the digital currency whereupon employees then can pay for wares from existing merchants whom in turn pay their employees in bitcoin.

This sounds nice in theory — a fully enclosed system — but there are a number of problems with it, namely that in practice bitcoin is treated as a commodity or collectible (not a currency) by market participants and its deflationary allocation + inelastic money supply makes it a poor modern medium of exchange.

This point is argued in a recent paper by Ferdinando Ametrano:

The unfeasibility of a bitcoin loan is similar to that of a bitcoin salary: neither a borrower nor an employer would want to face the risk of seeing their debt or salary liabilities grow hundredfold in few years. A manufacturing firm cannot accept an order in bitcoin with the risk of its value doubling or halving on a single bad day. Even the development of a derivative market could only hedge these risks with an implausibly high price. This is the cryptocurrency paradox: arguably the best ever kind of money by any metrics, marred by the severe inability to serve as reliable unit of account.

Perhaps this will change over time, maybe one solution is through hard forks involving “growthcoin” (as proposed by Robert Sams) and “stablecoin” (as proposed by Ametrano).

However, one of the challenges will always be the “pain point” — what incentive do people have to switch to a competing platform in the first place?  Why should consumers or employers want to adopt bitcoin the currency?  For instance, most users in the developed world do not have to deal with double-spending or rampant inflation.  Credit card fraud rates represent roughly just 7 bps and some cards provide other types of incentive like cash-back rewards or frequent flier miles — something that bitcoin cards (if they existed) would have a uphill task of providing.  Similarly many modern savings accounts provide some form of interest rate plus deposit insurance — trying to on-board these types of users would be difficult because there is no current equivalent with Bitcoin (yet).  [Note: savings is different than speculative hoarding, see discussions here and possibly here.]

Two days ago Ben Edelman explained how in most circumstances, customers pay more just to use bitcoin yet without gaining any additional benefits.  By “use” he means using it for actual commerce and not holding on to it for speculative purposes.  Because of this friction, because bitcoin users typically need to spend more than the alternative forms of payment, despite the large increase in adoption by merchants over the past 6 months there has been very little corresponding transactional volume.  Instead it is being treated as a novelty, a speculative collectible.

Or as a friend of mine, Bob, calls it a “My Little Pony” toy.  In a nutshell Bob compares the bitcoin currency system with the My Little Pony collectible.  Bob has a daughter and according to her each Pony has its own story in its own little special universe filled with cartoons, video games, clothes and toys and that’s how bitcoin the currency is treated: many early bitcoin adopters enjoy the ever grander mythos and backstory, that it was created by an anonymous developer, the ledger entry cannot be double-spent, its distribution and promotion involves volunteers organically threaded together via Meet-ups and bulletin boards and is purportedly impervious to political whims.  This brings it to life in a more colorful way that other systems like Square or Stripe have not similarly created (see Seth Godin’s Purple Cow).  And according to Bob, My Little Pony characters can also have plight-filled adventures, though none involving subpoenas (yet).  See also: Bitcoin: a Money-like Informational Commodity

Perhaps Buterin’s solution will gather momentum over the coming years, however unless the average consumer needs to spend less (not more) to gain the same level of advantages and protections that current platforms have, it is unlikely that a snowball effect in payments will take place anytime soon.  Incidentally, one crowdfunded innovation that could likely move beyond “toy” phase soon is the Trezor hardware wallet because it fulfills a real pain point today, horribad security issues with protecting private keys.

Send to Kindle

The advantages and challenges of mining bitcoins in China

I received some feedback from a veteran of the mining subindustry in China regarding my previous research on this space.

According to him there are a number of other moving pieces at play that are fluid will not necessarily last.

For instance, providers such as HashRatio have succeeded, not by designing their own chip but by figuring out the best combination of system and power configurations.  Going from chip to working system is non-trivial.   The end result are systems which are not necessarily pretty to look at, but they work.

One of the issues this new source had with my report was that because of guanxi is relatively hard to quantify, knowing whether or not you have the best price of a particular resource (like energy) is always a lingering question.  That is to say, even if Alice knows the boss of a coal mine, another competitor, Bob, may know his bosses boss which gives Bob even cheaper rates than what you thought you were receiving.  Improving guanxi is a millennia old Herculean task.

Some other highlights according to the source:

  •        If Alice’s metric is purely dollars per ghash, the analysis was correct. This is because there are two important figures: Alice’s new ASIC kWh/hash multiplied by her electricity cost / kWh.
  •        While Moses Lake is quoted in many news reports at being 1.7 cents per kWh, there are many other parts of the state which are very low, some averaging 2.3 cents per kWh.  And Washington has a much better infrastructure (both for electricity and internet) than China which makes it a very competitive geographic region.
  •        Similarly, Russia is 1 to 1.2 cents per kWh, though, you would be in Russia.
  •        China is cheap relative to a lot of countries, but relative to Washington and Russia the community capacity is still limited by State Grid, a large state owned enterprise (SOE) with a flat rate of 0.3 RMB kWh buying in any power station linked to it.  Miners will likely be unable to go under that.
  •        While Alice can do some meter fiddling or go off grid power, those options are hard to find and probably will not last long.
  •        State Grid has likely heard of bitcoin mining, but the wattage usage is not big enough to pique their interest or oversight.
  •        Inner Mongolia, as part of China, has overinvested in wind farms.  Yet there are large areas that are not linked to the grid yet.  And due to the unstable nature of wind, as well as poor internet infrastructure, none of the mining pools has gone there yet.  And it is sparsely populated which leads to potential difficulties in sourcing human capital and talent to run a pool.
  •        Mongolia, the country, imports roughly 10-20% of its electricity from Russia, so Bob might as well go to Russia if he is willing to set up a facility in Mongolia.
Send to Kindle

Interesting posts to add to your reading stack

  • I highly recommend re-reading Robert Sams’ post from earlier this year, The Marginal Cost of Cryptocurrency.  Through many exchanges I have incorporated several of his thoughts into my own writings and think he is one of the top thought leaders in this space.  He was on the Economic panel last week in Amsterdam too.
  • I came across a new blog that deals with block reward incentives and network costs and one particular post in particular stuck out: Megawatts Of Mining.  All of Dave’s posts there and on Bitcoin Talk are thought provoking.
  • I will probably get some hate mail from some friends, but I thought Ben Dyson’s post, Bitcoin’s 3 Fatal Design Flaws made a couple of good points.  I’m not swayed by point 3 but his first 2 are pretty accurate.  Bitcoin was supposed to be an electronic peer-to-peer payment platform, in fact, according to Mike Hearn, Satoshi originally was working on building a P2P marketplace.  Based on some cryptic notes at the Amsterdam conference last week, Hearn purportedly said, “when Satoshi launched bitcoin he was working on a p2p marketplace and you would be able to rate buyers and sellers and the weight would be according to how much mining they had done.”

Irrespective of what Satoshi’s plan was, in practice, what has happened is the token has turned it into a speculative asset, a store of value with little velocity.  And we see that in actual blockchain behavior.  So, Dyson’s first two points are worth thinking over once again.

Update: Mike Hearn sent me a note and mentioned that the marketplace was never finished and Satoshi deleted the code.

  • Lastly, two notes about exchanges.  Caleb Chen had a good post on the HKCEx scam and the WSJ noted today that a couple exchanges (Mt. Gox and BitInstant) are under investigation for ties to illicit trade (through Silk Road).  Again, if Bitcoin is considered a developing economy, historically the successful ways to grow an economy is to take the existing capital stock and make it more productive.  The sale of drugs does not create engines of growth.  And scams are not helping the average person trust the safety and security of the ecosystem.  The solutions to these involve creating real on-chain utility beyond gimmicky entertainment apps.  There are also a lot of good wallets either being developed or in production now, I’ll likely post a round-up of those at some point this year.  I do not think paper wallets are the solution as you need to be a genius to use them and it defeats the purpose of having or using an electronic asset.
Send to Kindle