Questions related to mining rewards in Bitcoin

A user, Bob, on Bitcoin Talk sent me some question in response to my article:

1) why does one assume transaction fees will substitute decreasing block rewards. are users not equivalent in choosing the operating software in the Bitcoin network why not just charge a mandatory 0.01% charge on all coins that are younger than X blocks and limit free transactions to say 30%. When the thermodynamic limit is achieved economic friction in Bitcoin will be just 0.01% of all energy consumed in the the economy.

2)the thermodynamic limit is not a limit in that there is entropy, the waste heat just becomes an input for a new system, eg. water can be desalinated, cooling as we know it today is a wasteful activity.

3) I also don’t seem to understand why when ASIC chips reach the thermodynamic limit they’ve wouldn’t start decentralizing in location (not ownership). There will always be centralized mining where energy is cheep but there will always be a need for heating at the very least everywhere and that is potentially a free energy input.

The free market is the perfect motivation for innovations not explored in your analysis.  Still you leave me in awe as to how alts are going to evolve as the energy equilibrium evolves.

My responses to Bob are the following:

1) In practice, users of the Bitcoin network do not like including transaction fees and there are endless threads on Bitcoin Talk of people complaining about fees.  In fact, one of the purported — wildly incorrect — selling points with Bitcoin is that it is somehow “free.”  Obviously this is incorrect, utilizing scarce resources is not free.  Someone has to pay.  The people who pay in this case are all bitcoin holders as roughly every 8-10 minutes new bitcoins are minted, diluting the shares of everyone through inflation.

But let us assume that we fast forward 100 years into the future when there are no longer block rewards, that miners will continue providing labor solely for transaction fees.  If these fees are floated and chosen by miners, it is impossible to say a priori what the actual market clearing fee will be.  Will it be 0.1%, 1%, 10%?  Or something in between?

One issue in Bob’s scenario is the “30% free transactions” — this is completely arbitrary.  Miners still have to bear a real cost to transacting and securing the network and only do so today because of block rewards.  If there are no block rewards and they want to continue providing “free” transactions, then they will be doing so out of charity which is not a sustainable business model.

2) The thermodynamic limit is something Andrew Poelstra has written about.  For the purposes of Bob’s specific point, Poelstra’s document can be ignored for the moment because it is still necessary to actually describe what is happening today.  If a bitcoin is worth $1,000, then an economically rational miner will only spend (capital costs + operating costs + taxes, etc.) no more than $1,000 to extract rents on that token.

In practice this is not the case as there are numerous examples of people and companies operating at losses for a variety of reasons, primarily because of price expectations: they believe that the token will eventually appreciate in value and the market value of the token will eventually cover their operating losses.  Thus today, the network is being “oversecured.”

As far as “waste,” that is how Proof-of-work works.  Someone, somewhere has to “burn” (or dissipate) something in order to secure the network.  Irrespective of what part of the supply chain or logistical operations it takes place, market participants are provided signals by token value (e.g. a $1,000 bitcoin) to turn off or on their hashing systems.  It doesn’t matter what the energy source is or how efficient ASICs are, market participants will simply use a calculator to find out if their inputs (capital costs + operating costs, taxes, etc.) allow them to profitably provide their labor.  The same goes for a $1 million bitcoin.

3) Let’s assume that tomorrow several chip manufacturers announced that they were now shipping chips with fabrication node spacing that reaches the Planck limit (see this interesting paper).  That essentially, irrespective of who you bought from, their hardware design was the most maximum efficient chip possible.  We will call this the Alice design.  What would happen in this case is that whoever was able to get a hold of Alice first would profit from it disproportionally at first (as other competing farms were using older less efficient designs).  But over the months, the distribution of Alice became widespread and you could go to a store and buy Alice off the shelf from a neighborhood retailer.

What would happen then is, since everyone is competing with the same hardware, the only variables to profitability would be land costs (plus taxes and compliance costs in your jurisdiction) and operating costs (electricity).  As a consequence, there would be global arbitrage, a dance in which miners would gravitate towards the cheapest region of the globe with favorable tax policies and cheapest electricity prices.

We already observe this happening today, which are discussed in that article.

The benefits that heating may play could be a factor, but if history of cloud computing is any guide, it is relatively unimportant — Google does not put employee housing within the middle of its data center to warm them with a Carnot engine of some kind (yet).  But again, this is unimportant.  All mining facilities, just like any data center, will have a profitability calculator.  Irrespective of how they displace or use the energy they have a bottom line of whether or not they can continue providing the service (via their computational labor) at a profitable rate.

Also, in practice, data centers typically receive subsidies from a variety of sources (like local tax breaks).  Even if you removed all of the subsidies and all geographical regions were “pure free markets” — there are still areas on the planet with better infrastructure, cheaper energy resources, better property rights, etc.  Those are the same locations capital moves to on a yearly basis.

Send to Kindle

Visualizing UTXO patterns on the blockchain

I have a new piece up over at CoinDesk: What Block Chain Analysis Tells Us About Bitcoin.  Note: the title of this blog post was the original title of the CD article (we switched it so that the average reader would find it more of interest).

I really have to thank John Ratcliff for his time, effort and talent for fusing blockchain data with a visualization engine.  Also special thanks to Jonathan Levin for his analysis of what is going on (I have quoted him several times now, including my recent mining piece regarding China).

My own view (not necessarily anyone else’s) is that this data shows that while bitcoin was, on paper, built to be an electronic cash system (a payments system), that in practice it is primarily used as a store-of-value.  Yet in a twist, even the run-up of a $1,000 token last fall did not bring the long-term savers out of their cold sleep.  And more to the point, it is doubtful that even if some of these old holders wanted to sell that in practice they could not because liquidity is very thin and they would likely create huge pay walls in order books that would take days and weeks to plough through.

Thus the question is, what could incentivize long-term holders to actually use the network as a payment platform, to exchange their tokens for wares?  My own view is nothing will in the short-run.  BitPay, Circle and Coinbase are all neat, innovative and have smart people working for them but in their current form they basically just serve early adopters with large quantities of bitcoins to dispose of.  The transactional volume only spikes during price rallies which essentially means that on-chain bitcoins only move in the midst of large market movements.  What this likely means is that, sans the black market, very few people buy bitcoins to spend on conventional goods and services; real economic activity and commerce is still quite low.

As a consequence, if entrepreneurs are looking to capitalize somewhere in this market segment, they may want to incorporate this thesis into their business plan: that most activity involves savings, thus you should build products and financial instruments to hedge the savings from volatility.

Perhaps this is just a temporary phenomenon.  Maybe, as some advocates hypothesize, if and when prices reach a stable value at several thousand dollars this behavior will change.  Fortunately for all interested parties, the blockchain shows us what is actually happening.  It is the real asset.

Update:  Here is John Ratcliff’s latest pie chart based on the same methodology from the article:

piechart

Send to Kindle

How much energy is used to secure a $1 million bitcoin?

I have a new article over at Bitcoin Magazine called, Bitcoin: Made in China.

It’s based off a paper (pdf) I have been working on and is the culmination of numerous exchanges and conversations I have had over the past couple of weeks.

Another interesting article on this subject of capital costs is this recent one by Dario Di Pardo, $46K Spent on Mining Hardware: What Happened Next?

There are several people to keep your eye on for analysis in this space (such as those in the acknowledgements portion of the piece).  Dave Babbitt is working on his master’s thesis on this specific issue (hence his up-to-date numbers), Jonathan Levin is about to defend his thesis (which goes into several mining models), Robert Sams is brilliant with both econometrics and with understanding incentives and Cal Abel speaks in a whole new different league.  I also had some illuminating exchanges with John Ratcliff (he posted some subsequent comments over here).  Andrew Poelstra has a very critical eye and sharp mind for any logical errors and Bryan Vu is both articulate and provided some good counter-points to the hypothetical trend lines.  Dan Forster and Karl Holmqvist helped spark the initial barage of questions, Joseph Chow helped tweak the responses and Petri Kajander made sure my writing was coherent.  Also, thanks to Ruben Alexander, editor at Bitcoin Magazine for his encouraging words.

Lastly, my sources in China including Weiwu are without a doubt, resourceful and survivors.  That region of the world is a very tough market and unfortunately doesn’t receive the respect it deserves.

For instance, below is a Figure 4 from the new U.S.-China Economic and Security Review Commission (pdf) by Lauren Gloudeman.

chinacongress

Thus the next time you hear someone on reddit complain about China in relation to Bitcoin or tell you how Chinese demand did not impact prices, show them this diagram.  Who will replace the Chinese whale?  Maybe Wall Street.

Also send them here: Fairweather fans in bitcoinland disowning China

Send to Kindle

Interest rates and currency appreciation in China

My friend Mark DeWeaver, author of Animal Spirits with Chinese Characteristics (and who wrote the foreword to my book on China) has a very insightful op-ed over at the WSJ today: Overvaluing the ‘Undervalued’ View of the Yuan

If you’re interested on unbiased, objective information about China without theatrics and hysteria I recommend tuning into the following people:

Massimo Ceccarelli also has a good round-up of China-related stories each day.

Send to Kindle

Future Opportunites and Economic Challenges for Cryptoledgers

On March 27, 2014 I gave a presentation at the Institute for the Future in Palo Alto.

I covered a number of topics including some of the governance challenges surrounding the protocol, the tragedy of the commons surrounding the development of the system as well as how the network pays for itself through token dilution (seigniorage).

This is based on the following research paper:

  • Bitcoin Hurdles: the Public Goods Costs of Securing a Decentralized Seigniorage Network which Incentivizes Alternatives and Centralization (pdf)

I made at least one error in the presentation.  Regarding microtransactions, this was not specifically stated in the original 2008 white paper but was subsequently discussed by adopters as an area for potential opportunities.  Here is one thread at StackExchange that discusses this further.

Currently only off-chain solutions like Coinbase support the ability to transact at the satoshi level.

[Note: this presentation was made prior to the announcement of “Sidechains” which is a Blockchain 2.0 company that could ameliorate some of the governance issues]

Send to Kindle

Max Levchin and Counterparty discuss digital currencies

Zavain Dar is an investor with Innovation Endeavors and adjunct lecturer at Stanford teaching a Symbolic Systems course which covers the burgeoning segment of digital currencies and decentralized applications.

Today he had three guest speakers, Max Levchin (one of the original founders of PayPal, now with Affirm) and Matt & Robby from Counterparty (I wrote about Counterparty in Chapter 3).

Below are some notes from their discussions.  All errors are my own.  These are mostly paraphrased statements they made (i.e., these are not 100% word-for-word statements).

Mmax2ax Levchin

Max presented both a bullish and bearish case for cryptocurrencies such as Bitcoin.

On the bearish side he did not consider it a viable currency because of its continual volatility [note: David Evans published a paper last month that found BTC was 18x more volatile than the Euro in 1Q 2014] and because it does not have any government backing yet (he discussed a hypothetical future scenario later below).

On the bullish side, he thinks the underlying protocol was interesting because it solved the Byzantine General’s problem in an elegant way vis-a-vis a distributed ledger which creates a trustless system of interaction.

One subsequent hurdle he saw with the mining aspect is that it consumed enormous amounts of energy (he compared “miners” as a type of Congress and the core dev team as a type of Federal Reserve — or in other words, neophytes perhaps without the necessary experience or background in economics and international politics).  Again, he was not trying to be antagonistic but descriptive.  He also did not find the code quality that he has looked at to be particularly high.

He observed that the scripting language it used (comparing it to Forth and Lua) as interesting and concise and found the m-of-n transaction system to be innovative (he cited Shamir’s Secret Sharing concept and two-man rule).

One area he found of future interest is that of a “smart agent” (which is essentially what Mike Hearn would call an “agent” and Vitalik Buterin calls a “decentralized autonomous organization”).  Max foresees a period in the future — perhaps not necessarily with the Bitcoin protocol itself — in which a smart agent sells a service in bitcoin and receives bitcoin as revenue for service; propagating and cloning itself based on its performance through AWS clusters.  He mentioned reading about some of these proto-ideas in scifi literature (name dropped “Game of Life” though this is not really scifi).

Max then segued into a discussion on, how based on actual numbers, Bitcoin as a payments platform will likely not uproot existing players, despite the much ballyhooed “2.5% + $.20” (also called a swipe fee) that anti-establishmentarians like to espouse.

Based on his description, if fraud rates ever reached 1% Visa, MasterCard and others will kick you off their network.  And in practice, they will likely put pressure on a merchant with increasingly higher fraud rates prior to reaching 1% — thus incentivizing merchants to get their house in order… or else.

Fraud itself only accounts for 0.07% (yes, 7 bps — see “Credit Card Issuer Fraud Management, Report Highlights”) of the cost that is factored into this total of 2.5% — he noted that this reflects that most people and most customers are quite honest (give yourself a pat on the back society).

He then mentioned that what is concerning are scalable fraud — that most theft is small-time purchases that are written off.  The bigger issues that companies like Visa have to be on the lookout for are those originating in Eastern Europe that can scale yet even with that, the actual costs dovetail into the 2.5% cost.

He then mentioned the history of how gambling, or rather the illegal processing of payments related to gambling came into being.  He also touched on the evolution of cashback rewards, VeriFone, the competitive fight with interchange fees, AMEX black card (also called the “Centurion Card” which can be used at new lounges in airports).  None of the credit card companies are on closed loop solutions: AMEX lends their brand to other cards (ala “white labeling”).

Perhaps one notable – hypothetical – point that blockchain enthusiasts may find of interest is CanadaCoin (or Cancoin as he called it).  Basically in his view, a country like Canada could utilize a cryptoledger by experimenting with well-defined revenue segments such as real estate taxes, connecting those moving parts (payments, transfers, etc.) with a distributed ledger.

The tl:dr version of Max’s talk: he finds the Bitcoin protocol to be very interesting, potentially seeing its use-cases emerge with interchanges (not to be confused with fiat exchanges) but finds the actual bitcoin token and its mining/development system to be no bueno.  As a consequence he does not see bitcoin as a payment platform competing against established players who despite opinions to the contrary actually are squeezing out lots of utils — and that most cryptocurrency advocates don’t actually understand how the numbers break down (e.g., what fraud actually accounts for).

Counterparty

counterpartypresentation

Robby and Matt work as volunteers for Counterparty.  Counterparty is a “2.0” platform that sits on top of and uses the Bitcoin blockchain (as described in Chapter 3).

They discussed several capabilities of the platform:

  • Currency creation (creating your own brand)
  • Creating digital assets for crowdfunding (like LTBCoin)
  • Ability to trade any asset peer-to peer (contracts for difference, binary options)

They call themselves an embedded consensus system (because it uses the consensus system of Bitcoin and is embedded onto it).  One new piece of tech they are working on is a “Vennd” (digital vending machine).  Both of them answered a number of questions from the audience related to how the decentralized exchange (which has been active since January) allows order matching and native escrow by the protocol.

Another point of interest was their discussion of CODA and the various legal issues surrounding the exchange of instruments and potential interaction with organizations like the CFTC and SEC.

Send to Kindle

One clarification and one correction

Got an email over the weekend from someone that watched my presentation (video).  He was asking me about the specific situation in which someone resells a bitcoin or smart contract that had previously been stolen.

I am not a lawyer, but the underlying principle for this issue is called nemo dat.  In the US there is an exception related to legal tender that has been sold and resold.  If you are concerned about this issue, especially as it relates to digital currencies, smart contracts and smart property be sure to speak with an attorney.  I can recommend some.

The correction in that video is related to remittances, I slipped and said $30 billion for received remittances in China.  The actual number is $60 billion.  I mention more in Chapter 6 (the top three are $71 billion for India, $60 billion for China and $26 billion for the Philippines).

Send to Kindle

Will Bitcoin ever be used for its intended purpose on a widespread basis?

The original white paper mentions “peer-to-peer electronic cash system” as part of its title and further details this idea in the first section, yet relative to its media exposure there is little on-chain activity and subsequent data that validates this purpose (yet).  Perhaps this will change, more on that later.

In my paper (pdf) which covers this topic, I mention Square as an example of a company that has grown enormously without the benefit of the same “free” publicity that Bitcoin has received over the past 4 years.  I should point out that I am aware that Square itself is in a tight position and may not have a successful exit.1 The example still stands however as shown below:
bitcoin and square
This chart comes from Google trends based on dates between January 2009 and January 2014.  Bitcoin (“the currency”) is in blue and Square, Inc. is in Red.  What this illustrates is the low conversion rate (CVR) that the Bitcoin platform has had thus far.  This is not to say it will fail as a platform, rather that it has enormous adoption and on-ramping challenges (such as edge based security).

Some of the other challenges were issues that Square has faced all along and were concisely described in a post a few years ago (the stats are slightly different but the hurdles remain the same): Square will “do better” than PayPal? Yeah.. and Pigs Fly

The following chart illustrates this issue as it relates to Bitcoin:

blockchain transactions

This chart is based on the past year of on-chain data culled by Blockchain.info: the number of transactions excluding the 100 most popular addresses (such as gambling sites like Satoshi Dice).

What this means is that over the past 6 months, there has been essentially no new on-chain transactional volume.  Despite the tens of thousands of merchants that BitPay and others have on-ramped, most users (or rather holders) of bitcoin are unwilling to actually spend it.  Almost all of the additional activity occurs on the edges, in “trust-me” silos which defeats the purpose of having a blockchain.  I have discussed this issue several times this past month (such as the last section of my paper).

dollarsbitcoin
Jason Kuznicki has attempted to describe the lack of growth in on-chain transactions in graphical form.  His chart, above, reflects the daily total transaction value of the bitcoin economy, denominated in U.S. dollars, divided by the total market capitalization of the bitcoin economy on that day, denominated in U.S. dollars. Between December 2012 and December 2013, he points out, the velocity of bitcoins remained within a very narrow band.2 The notable two largest peaks are in April 2013 during enormous global media attention of the platform creating a temporary bubble and at the end of November 2013 when Bitcoin Black Friday (BBF) was held. BBF was the busiest ecommerce day of the year for the network, which achieved 1.5 transactions per second (compared with the average of 0.7 transactions per second and its theoretical maximum of 7 transactions per second).3

Kuznicki notes that:

The key here is that nothing seems to be happening all that dramatically in bitcoin’s velocity of money over time. It’s not circulating more rapidly over time, which is what one should expect if it were taking off as a currency, and if more and more transactions were of the form of people passing bitcoins around for stuff. Instead, most transactions (that is, most that don’t go dollar-to-bitcoin-and-then-stop) are likely to be money-to-bitcoin-to-stuff, after which the merchant reverts to the dollar as soon as possible. If the bitcoin economy were becoming independent, we might expect a takeoff in the velocity of money, but we’re definitely not seeing it yet.

Again, this is not to suggest that Bitcoin will fail as an experiment or that it will not succeed in certain niches (i.e., store of value for Argentinians).  Perhaps it is a chicken-egg problem in which as more merchants enter the space, there will be more incentives to actually spend it.  However, barring the success of sidechains, I am doubtful that Bitcoin itself will be used as a payments platform on par with PayPal or Visa any time soon.

  1. See With IPO Hopes Fading, Square And Box Face Reality Of Commodity Products from TechCrunch and Mobile-Payments Startup Square Discusses Possible Sale from The Wall Street Journal []
  2. One reviewer noted that “Velocity analysis is really important. For something that purports to be a currency, it is the key metric of success with respect to its role as a medium-of-exchange. There is likely a correlation between the fx rate and tx volume due to speculative demand. However it is uncertain that the price chart of fx and USD tx volume proves that. In the future, a researcher could equally tell the story that the fx rate is being driven by increasing tx demand. Without a way to distinguish block tx due to fx settlements and block tx due to trade in real goods (and of course estimating tx due to change, same-person wallet transfers, etc), these series are likely ambiguous.” []
  3. BitPay alone processed 6,926 bitcoin-based transactions on November 29th last year up from 99 transactions on the same day the year before, see BitPay Drives Explosive Growth in Bitcoin Commerce from BusinessWire []
Send to Kindle

Fairweather fans in bitcoinland disowning China

fair weatherWhile I am not endorsing bitcoin as an investment (I don’t actually), a vocal minority of English-speaking Bitcoin adopters on reddit and Bitcoin Talk are proverbial bandwagon fans.

In November, when Chinese consumers exploded onto the Bitcoin scene, many commentators cheered them on, welcoming them into the big leagues.

Ever since bitcoin prices peaked in early December (corresponding with the December 5th notice (Chinese) from the PBOC), many of these same armchair commanders / evangelical adopters have thrown all of China under the bus.

For instance, on Friday CoinDesk published a story about FXBTC (a Chinese bitcoin exchange) closing down next week.  The very first comment was the following:

The rest of the world would be better to ignore these PBOC reports. Bitcoin will go stronger once that happens.

Throughout each week similar such comments are posted on reddit (here) and Bitcoin Talk (here). The truth is, Chinese consumers created enormous demand that drove up the prices in late November and early December.  And the price has fallen measurably since the peak five months ago a peak which corresponded with the first “crack down.”

This may not be something you want to hear as an investor, but it is the truth of the matter.  While some claim that Chinese exchanges were fudging their volume and liquidity, extraordinary claims require extraordinary evidence.  I wrote an article 4 months ago (that was republished by Business Insider) that discussed several ways to purportedly fake the volume, yet even I do not have a smoking gun (yet).  In fact, post-December 5th I think most of the big exchanges (like Huobi and OKCoin) were probably posting real numbers. And in all likelihood, correlation is causation: the PBOC is a force to be reckoned with, they enacted (caused) new regulations and guidance which scared both smart money and Chinese day traders away which correlates with the continual drop in prices.

To compound this issue are enthusiastic Bitcoin advocates in China, especially exchange and merchant developers who spread their own counter-propaganda that is wholly without evidence.  The fact of the matter is, there has been a cat and mouse game going on for months now and while exchange operators have found temporary workarounds, the writing is on the wall: Bitcoin exchanges are for the time being persona non grata on the mainland.  There may be a few other loopholes and workarounds (which are quickly removed), but to believe otherwise is wishful thinking.  No amount of marketing spins or gimmicks like ATMs will likely change that in the short-run.1

Perhaps these types of inflammatory we-love-you-now-we-hate-you comments only represent a vocal minority, but it is pretty clear that most tokenholics do not care about utilizing a trustless consensus mechanism to empower the underbanked in developing countries such as China.2

Instead of loathing China, the community as a whole should sympathize with the loss of a comrade.  I do not expect this to happen though.  I briefly mentioned this in my Q/A at Stanford on Monday.  The Chinese government is opaque but the worst thing they could do is go all draconian (like blocking websites or arresting entrepreneurs) which they haven’t and egging them on, as endless threads on reddit do, is only hurting the very people Bitcoin was purportedly designed to help.

Will Hong Kong be the saving grace?

Most Chinese operations now have accounts in Hong Kong but they cannot operate as bitcoin businesses; the Hong Kong Monetary Authority (HKMA) has asked Hong Kong banks to report any account related to cryptocurrencies so most of the accounts are usually not open about the true nature of the operations.  Some are still openly related to bitcoin but for mining investments (hardware purchases) or merchant investments and there is still pressure on those.

If you only care about the value of the token, the ledger entry, the UTXO, etc. then you are going to need a bigger whale.  China was a huge whale.  Perhaps in a bit of irony, this summer funds from Wall Street (from bitlicensed firms) could end up driving up the price once again, effectively bailing out some of the reddit bitcoin holders who are now underwater.  Cui bono.

[Note: Weiwu Zhang has been posting some interesting analysis over the past few months at a German Bitcoin site.  His prediction are not always correct, but it is a fresh perspective that seems more grounded than the typical “invest on hope” mantra.]

Update: Just found out that all of the Bitcoin exchanges in China have pulled out of the upcoming Global Conference in Beijing on May 10th.  They are taking the PBOC notification / guidance very seriously and do not want to irk policy makers.  So they will not give presentations or show up in any official capacity (their sponsorship continues though — money has already been paid).  This is sad news.

Update 2: I have had three different independent confirmations to the first update.  The Global Conference website is slow to update the changes to the schedule. This article (Chinese) is apparently the one that asymmetrically influenced the entire segment a week ago.  Its message of “don’t irritate the PBOC” went viral with about 30,000 hits (which is probably a decent estimate of how many people actually use bitcoin on-chain in China).  The exchanges met later and then decided not to attend in official capacity.  The article mentions that the PBOC does not want China to be the largest market (as it has been) and actually mentions an upperbound target of 3000-8000 BTC daily volume for the entire country.  The actual number is unimportant, the attitude is.  The PBOC (and China) does not want to be a leader but rather as a follower based on the regulations and outcomes from the US and other jurisdictions (like Germany and Canada).

Update 3: the big exchanges just issued a joint statement (Chinese) saying they will adhere to the new PBOC guidance. They did not clearly say what that exactly means and will continue to operate (function as an exchange).

Update 4: CoinDesk just published a new story on the exchanges that pulled out of the conference.

  1. Bitcoin ATMs are likely underutilized globally, many are probably unprofitable too, hence the lack of public boasting by ATM operators. []
  2. The title of the white paper and the first section of the white paper are specifically identify peer-to-peer payments as a way to reduce friction and trust of the traditional banking system. []
Send to Kindle

Visualizing sidechains and tabulating the aggregate losses of UTXOs (bitcoins)

Last night I gave a presentation covering the new sidechains “blockchain 2.0” project from Austin Hill and Adam Back. I also covered some of the challenges of information security on the edges of the Bitcoin network.

The talk is based largely on a paper I finished drafting this month called: “Learning from Bitcoin’s past to improve its future” (pdf)

Below is a video of the presentation as well as the corresponding slides. All errors are my own. Many thanks to: Dave Babbitt, Preston Byrne, Hudson Cashdan, Joseph Chow, Petri Kajander, Taariq Lewis, Jonathan Levin, Andrew Miller, Pieter Nooren, John Ratcliff, Robert Sams, Koen Swinkels and Andy Toshi for their feedback and constructive criticism.

Send to Kindle

Quote of the day: depreciating value of exported electronic goods from China

A rail cargo line has been “relaunched” between Europe and China that is one month faster than traveling by sea and costs 20% the price of air cargo.

What is the motivation for restarting this potential time + cost savings?  Because:

In a month, the export value of one consignment of electronic products might devalue by about two percent, about several tens of thousands of dollars.

This actually relates to Bitcoin/Litecoin mining as well.  Most ASICs today have less than a 6 month profitably window before they need to be dumped or pointed to another profitable altcoin.  The sooner you ship a batch, the quicker the receivers can recoup the costs.

See China-Europe railway relaunches from China Daily

Send to Kindle

Adding the first GPU farm to the Computer History Museum?

Apropos the previous post about ArtForz’s GPU farm, I exchanged some emails with Stephen Gornick who apparently tweeted about this almost 4 years ago (here and here).

Below is an image of ArtForz’s ArtFarm.  Notice how you can visually identify 20 GPUs.  At its height he used 24 and it is unclear if these in the image were all 5970s because he mentioned having several others (including several 5770s and a 4870).

artforz farm

Send to Kindle

How ArtForz changed the history of Bitcoin mining

[Update: according to Nathaniel Popper’s book, Digital Gold (as well as in The Age of Cryptocurrency), Laszlo Hanycez is the first publicly known individual who actually utilized a GPU to mine bitcoins, two months prior to ArtForz.]

[Note: in conducting research for a new paper (pdf) on Bitcoin, I culled together the following interesting information on the junction between solo mining, GPU mining and pooled mining]

ArtForz is arguably one of the most interesting individuals in Bitcoin in that he abruptly appeared out of nowhere and simultaneously understood an incredible amount of hands-on knowledge about how to tweak mining hardware performance. He did not make his first forum post (assuming it is not a pseudonym) until July 24, 2010, nearly two weeks after Slashdot announced the version 0.3 bitcoind release and a week after his farm (“ArtFarm”) purportedly found its first block. On July 25 he claimed to have generated 1,700 bitcoins in the previous 6 days which translates into 4% marketshare (43,200 total bitcoins mined over six days / 1,700 = 4%). One user estimate the hashrate necessary to do that at 80,000 KHash/s (or the equivalent of 8 quadcore server CPUs).  In his very last post on Bitcoin Talk two years ago, he mentioned that his farm comprised of 24 Radeon 5970s. If tweaked properly (which he may have been capable of), these would each net a theoretical maximum 800 Mhash/s creating a farm of 19,200 Mhash/s (an upperbound).

Getting to the bottom of the numbers

On August 25, 2011 he stated his farm was less than 1% of the total network hashrate. For comparison, during August 2011 the difficulty rating was around 1.8 million thus ignoring the increased hashrate of competitors, this theoretical upperbound setup was capable of generating 8.38 bitcoins per day. Theymos (creator of Bitcoin Talk, moderator at reddit and now “owner” of the Bitcoin Wiki) noted on October 3, 2010 that ArtForz had a system that held roughly 20-30% of the network hashrate. For comparison, user ‘tcatm’ (Nils Schneider) built a system with three Radeon 5870s operating at 983 Mhash/s, announcing it on October 3, 2010.  Based on the current difficulty at that time tcatm was generating 749 bitcoins per day (~10% of the network).  Schneider later that month went on to build one of the first publicly usable distributed hash farms among other projects.

Theymos also stated that ArtForz was the first person to GPU mine (writing the code himself, which based on his forum posts is very plausible) and in January 2011 explained on the Bitcoin Wiki that ArtForz comprises about 25% of the hashrate.  Yet it is unlikely that this system was the one utilized in July 2010.  And I will describe how and when it likely was.

According to the Bitcoin difficulty rating, the largest jump ever (300% at block 68544) took place several days after the announcement on Slashdot that version 0.3 of bitcoind was release which brought in a large amount of new adopters and miners. At the time, the network hashrate was roughly 1,300 Mhash/s or an entire order of magnitude less than the capability of ArtForz’s farm. However one clue he provided in December 2010 is that the cards he was using were overclocked 5970s hashing at 625 Mhash/s (20% slower than that upperbound estimate).

If this is the case, then the collective hashrate of his system was 15,000 Mhash/s which at the 12252 difficulty level he cites would generate 1,231 bitcoins per day which is approximately 17% of the network hashrate. If the upperbound is used instead, his hash farm would have generated 1,477 bitcoins per day, roughly 20.5% of the network hashrate. While speculative, based on the jump in difficulty and hashrate between blocks 94572 and 9678 the previous week, if this was his farm coming online, it would have generated 2,241 bitcoins per day, or 31.1% of network hashrate.

Taking this forensics a step further, by looking at IRC logs, on September 23, 2010 ArtForz noted he had around 2 Ghash/s and was targeting 15-20% of the total network hashrate. This was comprised of 2 overclocked Radeon 5970s each generating more than 650 Mhash/s and also 4 Radeon 5770s – based on a difficulty rating of 918 this farm was generating 2,191 bitcoins per day (~30% of network hashrate). On September 28, he mentioned he had ~2.1 Ghash/s and another 850 Mhash/s “on and off” and the following day that the collective power was just over 3 Ghash/s. On December 15, 2010 ArtForz noted on IRC that he had 15.75 Ghash/s which at the current difficulty of 12252 would generate 1,292 bitcoins per day and this farm still used Radeon 5770s.

Or in short, ArtForz figured out months before anyone else, how to not only leverage the capability of GPUs, but write the code and deploy a small scale farm (which was initially powered by a generator).  He also later used FPGAs and an sASIC (structured ASIC).  This type of economies of scale spurred the hashrate arms race that continues today.

Contrast this with Satoshi Nakamoto who noted early on in December 2009 that, “We should have a gentleman’s agreement to postpone the GPU arms race as long as we can for the good of the network.” Satoshi was thus surprised that these types of systems could be built, stating in October 2010, “Seriously? What hardware is that?”  ArtForz’s farm was also discussed by Charles Lee (creator of Litecoin) in February 2013.

While I have learned of his probable location during this time (which is unimportant) two other notable facts about ArtForz:

1) on September 23, 2010 he mentioned he had 26,650 bitcoins all from mining from the previous 9 weeks and that this was left over from a much larger batch; in his words he “sold off about 2/3.”  Assuming he began mining on July 18th (based on his forum post stating that) that would make 66 days since his first block which is just over 9 weeks.  Based on block rewards that would mean of the 475,200 bitcoins that were mined during that period his own pool (~75,000) represented 15.78%.  In contrast, roughly 5,000 people were mining by mid-September (his estimate), typically on laptops and older desktop equipment.  The only other publicly known person during this same time frame moving and trading this amount of tokens (and with similar hashrate) was William Pitock (Nenolod).

2) he also tested the limits on a variety of early altcoins such as SolidCoin, i0coin and GeistGeld.   Charlie Lee gave a great presentation on the early history of alts back in January at the BTC Miami Conference (video) (slides).

His identity was seemingly retired two years ago and I am not aware of his next project(s).  Next however, was the first mining pool, Bitcoin Pooled Mining operated by Marek Palatinus (slush), which began public operations on November 27, 2010.  And consolidation and centralization has been happening ever since.

Coda: a few more timeline mysteries solved, looks like a few guesstimates above were very accurate.  Tonight someone from the Bitcoin Talk forum sent me a message with a few more details about the numbers regarding the early days of ArtForz’s farm.  According to IRC logs, on August 9, 2010, ArtForz notes that, “I’m still limping along at ~ 76000khash/s.”

Four days later he notes the following in IRC:

[13/08/2010 15:07:27] <ArtForz> currently I can do up to ~450000kh/s
[13/08/2010 15:11:13] <ArtForz> cpu? 6 ati HD 5770s at 77-78000kh/s a pop
[13/08/2010 15:13:17] <ArtForz> a 5770 is ~75Mh/s at stock clocks
[13/08/2010 15:15:33] <ArtForz> well, I’d say total hours for the software… about 40 or so, but most of that was optimizing to get another +20% performance or so
[13/08/2010 15:16:42] <ArtForz> the first modified client + opencl miner were about 12h of work
[13/08/2010 15:22:53] <ArtForz> If I sold the BTC I have sitting here right now at $0.04, I’d have made back the initial investment for GPUs, power costs and a few $100 for my time
[13/08/2010 15:24:35] <ArtForz> well, guess what, I’m not really planning on selling any large number of these any time soon

Send to Kindle

Decentralized storage on the horizon

In addition to existing projects such as Tor(oken) and FreeNet and future developmental projects like Bitcloud and StorJ, there is a new decentralized system being released in the next few months: MaidSafe.

I have a new piece over at Bitcoin Magazine that discusses some of how it works.  Suffice to say, if they can execute on the targets outlined in the article, it could have long-standing ramifications for a plethora of industries (e.g., SaaN providers, ISP margins, start-up costs, Dropbox-style companies, reduced overhead at NGOs/NPOs, etc.).

Send to Kindle

None of the Top 500 Bitcoin addresses uses on-chain multisig

Even though m-of-n transactions has been supported since the acceptance of BIP 11 in 2011 and BIP 16 the following year, implementations of multisig has been slow going until recently due to lack of support from wallet software.  This will likely change, yet as of today, no address on the Bitcoin Top 500 Rich List uses on-chain multisig (though perhaps some exchanges do in off-chain setups).

BitGo was the first commercial multsig wallet released and Cryptocorp has a neat oracle-based HDM solution to this.

In addition to reading through the relevant threads on StackExchange, be sure to watch James D’Angelo explain how multisig works:

Send to Kindle

What is a Merkle tree?

James D’Angelo has an excellent series of tutorials on the inner workings of blockchains and cryptoledgers.

One of my favorites is by far his explanation of what a Merkle tree and Merkle root are, breaking them down step-by-step.  He bases his code off a really cool blog post from Ken Shirriff: Bitcoin mining the hard way: the algorithms, protocols, and bytes

[Quick endorsement of Ken, I found several of his posts very helpful and cited a number of them in GCON.]

Send to Kindle

Paraphrased notes from Back and Hill interview

Below are some paraphrased notes from the new “blockchain 2.0” interview conducted by Adam B. Levine (editor-in-chief of Let’s Talk Bitcoin) between Adam Back and his business partner Austin Hill.

Be sure to listen to the full interview (and here is my write-up from the previous post as well).

  • When people talk about building on top of TCP, this is the way to do it, which is the interoperability using existing bitcoins themselves to move them.  If I have a bitcoin to buy for small payments like a cup of coffee, I move it into a sidechain that has higher transactions per second and then move the change back into the main Bitcoin network and then put it into a different side chain to invest it a Bitcoin denominated derivative against US dollars or buy electronic shares or something like that.  Bitcoin is used as interoperability level moving across the pegs, allows open innovation in a neutral sense without creating a new scarcity race.
  • Building the infrastructure so these sidechains can take advantage of the global hashrate through merged mining but with some additional extensions. But there are some core services that you do want such as good PKI for the registry, digitally signing for sidechains and new asset issuers, clear disclosure if people can move assets between chains, wallets can tell what properties of the side chains (when you get asset from the side chains, you are aware).  We don’t see a justification for a lot of these altcoins switching out the proof of work besides Adam’s contribution with hash cash, it ignores $250 million in ASICs and datacenter that bitcoin is self-funded as a platform for verification.  We think trying to bootstrap a new global hashrate infrastructure is kind of pointless.  Makes more sense to use what is out there Namecoin has achieved 80-85% of Bitcoin hashrate through merged mining.
  • It is a preferable approach to these other 2.0 projects because it is an interoperable approach so you can move money around and interoperate between different networks, different side chains.  The typical TCP analogy people use here is inaccurate as they just send watermarked bitcoins; with TCP you send users messages point to point, if you send it over the bitcoin network it’s an n-squared broadcast and the things sent on the bitcoin network should be about the minimum amount of data necessary to ensure the bitcoin properties, that the value transfer can be tracked, that smart contracts can be evaluated like multisig and so on.  Any data like “this is my email address,” or “this is a receipt,” does not belong on the bitcoin network.  That is what the payment protocol is for, point to point to people. [BIP 70 is the payment protocol]  I think some of the people building on top of Bitcoin are doing it in a naïve way, which is a disruption to Bitcoin.  For example, even Colored Coins which is quite neutral and clean, no digital scarcity race, but has scalability issues because if transaction volume reached a significant volume it could saturate the Bitcoin network.  Right now the transactional limit is 7 transactions per second, increasing block size incurs centralization risk because you need a highspeed link, decent bandwidth if it gets too large.
  • It also breaks with colored coins, Adam showed Austin, David Chaum’s ecash server he had come up with coloring DigiCash coins and watermarking them and even last year he still thought it was the best approach to add extensions but saw that with SPV wallets, Colored Coins don’t work with SPV wallets and we live in a world where mobile wallets are a predominate device so if Bitcoin is going to reach its full potential for interacting with billions of people, Colored Coins just doesn’t work in that scenario because you cannot have a full node on a smartphone.  On top of which nobody had contemplated how will this capability of watermarking work?  If people color different assets the same color, who is the arbiter (e.g., ‘blue’ for both a share and copyright registration)?  So there were ideas but no one had really thought out, with SVP, with some sort of asset registry, whether you do that in a distributed basis like Namecoin does or you that in a centralized PKI signed registry service, need supporting infrastructure to make it work.  People got enamored and went off and watermarked a bunch of things.  How can we allow for some of the properties of native marking, new asset issuance, extensions to the scripting, build on a neutral platform.  The principles from our project: permissionless innovation, decentralize wherever possible, decentralize and distributed.
  • A lot of people are interested in the potential for user created assets and smart contracts, they see that can be used a lot in the future, trustless escrow.  Colored Coins, Mastercoin, Bitshares and Ethereum have come in and add stories, creating networks.  Pegging technology is the next step of technological improvement in an interoperable way.  Built on top of Bitcoin in a way that does not result in spamming or watermarking bitcoin transactions that makes every transaction a bid/ask, saturating Bitcoin.  You don’t need to do that.  Sidechain that is pegged to bitcoin, so there is no counterparty risk, no escrow agent holding your bitcoin.  Your bitcoin can move between networks which are tied, in that sense they are merged mined.  People can do their innovation in interoperable way.  Early days in TCP/IP, if every time somebody wanted to make media streaming, webpages, online shopping, each time they make a fork of TCP protocol, made a few changes so it is an incompatible network and said “great we’ve done online shopping,” yet none of these things talk to each other, you have to pull them out and put them back in to achieve anything.   So you get network effect by having interoperable systems.   So if we have different people working on micropayments, online shares, high frequency trading, to do all these things on different networks that are open networks, preserve the freedom to innovate, fully interoperable and operate with two-way pegs, best of both worlds: freedom to innovate, avoid the silo effect, and we avoid these self-defeating selfish ‘newshares’ that some things get built on top of.
  • We don’t want to see another Mt. Gox, exchanges have had a high failure rate (theft, incompetence, internal malfeasance).  New players are doing security audits, but these are in off-blockchain, trust-me model, holding private keys.  We need to extend trustless blockchain into new parts of the ecosystem but you can only do that if the blockchain can scale to have more of every interaction depend on the blockchain.  Some exchanges were doing more than 7 transactions per second.  There was a practical limit to go off-chain.  Creates an IOU situation where someone promises not run away with bitcoins.
  • Smart contracts off: build infrastructure, services, exchanges, payment processors — build components in a decentralized way, build service in a trustless way (smart contracts).  And almost all the system players are not using it.  Somewhat an artifact of the transaction limit.  Can switch coins using an atomic swap.  It is a known property, but not widely used.  So an exchange can simply be matching orders and not touch the coins.  Remove the need for audit, audit is after-the-fact-reactive.  If we had audits every 6 months on Mt. Gox, that doesn’t mean the situation would have been avoided.  The point with bitcoin is you have a real-time audit, if someone tries to do something outside of a smart contract, it is a priori prevents this.  By architecting these things where you don’t have to trust them, you trade with air-gapped wallets — exchanges just handle order matching.
  • New model: Exchanges can compete on marketing, building liquidity, volume, customer service, regulatory compliance, making it easier for you to file your taxes, a whole bunch of things they can innovate on.  But the basic security model isn’t: trust us with your assets.  It is trust us with creating the best market place where you can find the best liquidity and the fastest and best customer service.  But you never need trust us with your assets.
  • We have focused on the last two months on the core science, we gathered a number of the Bitcoin core developers from around the world. Many of whom who hadn’t even met each other.  We set up a house in California where they all came and collaborated, some of them lived in the house.  Called “The Bitcoin Mansion” – not a mansion.  A lot said that this approach was “not possible, we don’t believe in it the ability to do a two-way peg and retain all the properties and build a security wall.”  We have now proven that it is, we have gotten sign off and support from a lot of the core developers.  But even that change is going to require some time.  There is a community at large that needs to understand it, there is a proving period that needs to be there.  These guys are incredibly overlooked by ecosystem that depends on them, volunteers who are controlling some of the most important code on the planet, next to the space shuttle.  If we have space shuttles and stations blowing up, it can ruin space exploration.  If they screw up, they can ruin math-based currencies or set them back incredibly far.  So they have to be very judicious and patient in adopting changes.
  • This creates contention. Whereas you look and see that particular project is cool, but you cannot afford to pay attention to a pet project. Can’t accidentally introduce a bug.  It means that innovation on core is slow, because conservative, value preserving, focus on robustness, fixing minor bugs, very careful gradual change.  Two way peg, requires moderate high risk change.  Bootstrap problem, evaluate the change or set of changes and be sure that it is safe.  But once that is done it allows people to do innovation on side-chains, explore new ideas.  If ZeroCash wants to do something on a side chain.  If in 6 months, they want to increase the block chain, they can do that.  If Bitcoin main wants to reduce the block size to increase decentralization.  Someone wants to do something, changing contracting language, tagged user assets that are SPV compatible, they can do on another side chain.  People with different views on a contracting language can do it on a different sidechain.  Frees up the space to allow open innovation very rapidly, without creating risk for Bitcoin main.  Security firewall, you can only move bitcoins in that have been moved out.  Value does not float against other chains, implemented protocol that fully preserves 21 million supply.  Only Bitcoin chain is being mined, the others are repositories where you can move bitcoins into them and back out.
  • Incentive to mine these: we believe there will be, not disclosing, in discussion with a lot of the large miners and mining pools on making sure they have good incentives and good reasons to merge mine this.  And there will be an economic model that supports participation.  It won’t be based on mining rewards so obviously that leaves transaction fees but there is a transaction model that is flexible, is market based allow each of these sidechains to have their own innovations, but collectively all of them together can increase the transaction fee revenue for people who merge mining this.  From complex systems design and merchant property is that this will actually drive demand for Bitcoin, other interesting assets or contracts that can be written against bitcoin.  We have had discussions with some very large financial institutions who are looking at volumes of transactions and contracts and derivatives, futures, options contracts, that are orders of magnitude larger than the entire bitcoin asset base.  Huge.  When you start looking at embrace or extend the functionality to include part of their asset base, encoding into blockchain technology, you can start to see the demand for bitcoin will far outpace the availability and will ultimately drive up the price of bitcoin.
  • Once someone bring an open network for supporting smart contracts against other assets, that opens up a wider set of transaction types so you would expect the transaction throughput to go up, dollar transaction to go up.  Bitcoin is the neutral transactional currency, therefore the amount of bitcoin denominated transactions go up, which puts up the utility value of bitcoin.
  • You can do different block intervals on a sidechain, counter intuitively, because when you are merged mining with say Namecoin that means some namecoin blocks are not bitcoin blocks. And vice versa so you can have a different target, smaller faster blocks it is possible.
  • Two members of the team have figured out how to scale to hundreds of thousands of transactions per second while retaining all of the properties of retaining a blockchain security model.  And those innovations will have high frequency trading, very high speed liquid markets and exchanges that are using blockchain security model and blockchain trustless infrastructures, but meet the business requirements that are necessary to do high volume. And that is definitely our projects scope to make those platforms available for people who do have, someone who wants to compete with Visa but I can see myself hitting, 20, 30, 40, 50,000 transactions per second.  Where am I going to be able to process those and be able to get instantaneous transaction verification without having to wait for the limit of the blockchain.  We think it will be possible and trustless security model of the blockchain.
  • Right now combing our hair, putting on our hats and wearing fancy ties but we are getting ready to announce more details to the project so that those interested can track the project and reveal it including announcing the name, who’s on the team: happening within the next 60-90 days.  So a very short term.  We are going to be releasing, one of the principles we will be releasing from the cypherpunk days is and one of the founding principles of the project is: “we speak in code.”  So we really want our products and our software to speak and so we will be releasing software very quickly that is necessary software that is needed for bootstrapping this type of ecosystem.  There are a couple different parts to the existing blockchain to the existing ecosystem that have huge gaping problems that we can deliver immediate value without needing to wait the 12, 18 or 24 months that it might take to get some of these changes to be adopted in Bitcoin core.  Some people are aware of these problems but we believe we can deliver immediate value based off that.  Get out there, release very useful open-source free-software, some software stacks that other people can adopt into the ecosystem to secure their users accounts, secure parts of the Bitcoin ecosystem that are operating on a trust-me model.  We think we can deliver a lot of value by helping them to move to more of a trustless infrastructure.  We are going to be investing very heavily in building a team of cryptographers, programmers, working to support some of the volunteers in the Bitcoin core community to provide them resources and allow them to really accelerate some of the things they know need to be done.  Most of these guys are volunteers, have day jobs, huge weight on their shoulders: do it because they love the technology and community.  Have not received a lot of support.  Supporting them, providing more tools, more testers, more documentation resources, travel vouchers so they can meet face to face – some of the things we will be doing.
  • Some business models rely on the availability and reliability of the Bitcoin network, so following the Linux model they should hire – as they can afford – developers in the community to work on it.
  • We are a “blockchain 2.0” company, although I personally care for the success of Bitcoin, it is important to distinguish between bitcoin the asset and the blockchain as a programmable distributed trust infrastructure.  And we are interested in blockchain 2.0 and blockchain 2.0 using bitcoin as a neutral transactional currency we believe is a great, offers great promise but I want to build a blockchain that could support a nation-state putting its national currency and phasing out paper dollars.  And there is a lot of reasons to do that: counterfeiting, utility value, conducting commerce in separate geographic distances.  Auditability, trust, whole bunch of potential to reinvent our financial infrastructure to better serve humankind and we have only begun that journey and I’m interested in a platform that is distributed, neutral, has all the principles of and properties of Bitcoin has embedded and imbued in it the principle that “it can’t be evil.”  And allows the world to migrate math-based assets and math-based currencies.  That is going to take time but we are interested in building that blockchain 2.0 and do that as an extension of the existing blockchain – not running off and building our own alt ecosystem and premining it and watching Adam and I get rich off having the first coins – that is not our intent.
  • There is no altcoin race with this, using bitcoin purely as a transactional currency.  Systemic risk issues: if more of business starts to move their accounting and B2B payments into bitcoin and cryptocurrency issued assets and denominated national currencies, you get the benefits of the zero trust, immediate auditability features so if you are receiving insurance contract from an insurance policy and there are about to exceed their reinsurance limit that would mean your insurance policy would be immediately failing audit and that would mean your policy is invalid.  You can start to remove systemic risk from the system and avoid Enron-like situations.  Even in the long turn there would need to be iterations of smart contracting before we get those kinds of things.  But even in the long run you get a national currency issued where they would have  smart contract like an issuance contract that would specify their monetary policy, no more than 2% cost of easing or maybe subject to market metrics and that applies to them.  Even if they have the key to issue more coins and some redundant hardware air-gapped key manager, they would be physically unable to bypass the monetary policy rules because the monetary rules are bound into the genesis of the coin and all recipients of the the coin would reject them if they tried to exceed their own monetary policy.  So I think if we get to a system like that we have can have real time auditing and agree to societal rules and enforce them a priori rather than finding out 6 months later that somebody has hundreds of billions or trillions of undisclosed assets and then you have an AIG or all of these kinds of cascading failures in the system.
  • History of Zero Knowledge is not archived, Youtube did not exist.  At the time we were very thumb our nose in the face of authority, we were fighting the Edward Snowden type of battles.  The NSA and CIA tried to shut us down, we were on 60 Minutes advocating crypto for all and tear down the system.  That may not be the best way to interact with these guys: is I’m coming for you, I’m going to burn down your system.  The financial services industry, the people we have talked to, have real problems themselves.  We talked to a very large buy-side financial institution who literally has hundreds of billions if not trillions of dollars’ worth of assets under management and they said from a pure compliance point of view we don’t understand our risk.  We have entire teams holding binders and contracts and asset systems and we are trying to figure out what we own and the risk is and what the underlying asset is, so if we can digitize this and have it be encoded in a way that we can actually we can make representations for compliance reasons for our own risk management, we would welcome you in.  Show both governments and financial institutions this is not about wiping them out or destroying their business, this technology is about imbuing the entire ecosystem with verifiability, trust based off distribution and math.  And some real good foundation levels where they can reinvent their business and yes, we can drive some competition in the industry.  And hopefully some more efficiencies.  Just how media companies are adapting to the internet and rebuild their businesses, we want to encourage these people to look for efficiencies.  And those that do will be much more like the Netflix of the future versus the Blockbusters of the future.  We want to help them rebuild their businesses like Netflix, not like Blockbuster and if they don’t want to adapt they face extinction
  • Public auditability, typical objection to commercial basis – companies do not want their business model to be public knowledge (profit margin, volume of trade, market movements, if someone is selling a large amount of stock, they like to keep that to themselves and not have that readily to the market) and that tends to present a barrier to public audibility.  We have to preserve commercial confidentiality.  Homomorphically encrypted values, have the blockchain validate the inputs add up to the outputs without disclosing the values involved, they are encrypted in such a way that addition still works on them.  Includes zero knowledge range proof that encrypted value A is less than encrypted value B and use it to prove leverage ratios and things like that.  Can do a lot of things to preserve commercial confidentiality but allow for public auditability.  So this merely a scope that can preserve that traditional and necessary fragile privacy for individuals and commercial sensitivity for companies but all allowing public audibility
  • I can see that two parties engaged in a currency swap or whatever instrument, their identities are not apparent to me at the blockchain level but they will have business records saying who they bought it from.  There are two networks involved in a transaction, the blockchain broadcast P2P network (byte minimized, scarce resource), you don’t send to that more than you need to insure the correct interpretation of the transaction.  Invoice and receipt go to the payment protocol level which is point to point communication between buyer and seller and if one of them is a business they will be keeping records or if you’re an individual they will be keeping their receipts for taxation purposes.  I think there will be identity but will keep the parties not broadcast to the peer to peer network.  Why is financial privacy wanted?  Because some people are paid their salary in bitcoin, so you can figure who this guy is because he bought a pizza in the shop or he paid you back and you see an address – it shouldn’t be reusing addresses.  If he was paid a salary and that amount of salary was encrypted, you wouldn’t know how much he was paid and he if paid you personally $10 you wouldn’t know his salary just that he hasn’t exceeded the value of the transaction.
  • We will be launching a website, with job postings.  If people keep track of us on Twitter – @austinhill and @adam3us – keep watch we will be announcing the name of the website and project in the coming month.  There will be at least a place holder site with more details and jobs available.
Send to Kindle

“Blockchain 2.0” with Adam Back and Austin Hill

Some very exciting news is being made public.  Adam Levine, editor-in-chief of Let’s Talk Bitcoin (LTB), interviewed Adam Back and Austin Hill for a new endeavor dubbed “blockchain 2.0” — I recommend everyone to listen to this interview.

Below is my write-up I did for LTB (note the copy on LTB is missing the footnotes which I have included below).

Blockchain 2.0 – Let a Thousand Chains Blossom

Adding on-chain utility and extensibility in a scalable way sums up the core ideas of the “2.0” next-generation cryptoledger space.  This is a segment that has grown rapidly to include eight announced and funded projects, each vying to create new use-cases utilizing a trustless blockchain or in Ripple’s case, a consensus ledger.

And now we can add one more to the list, an unnamed entrant financed by Austin Hill and articulated by Adam Back.  Hill is a well-established tech investor and in addition to other projects, spent almost $4 million in the ‘90s trying to develop and commercial electronic cash and anonymity systems through a company called Zero Knowledge Systems.  Back, likewise, is a domain expert, creator of the Hashcash proof-of-work mechanism used with Bitcoin and all other SHA256d-based alt derivatives.

This past week, Adam Levine interviewed the two gentlemen and learned that Hill and Back have created a company that includes several Bitcoin core developers working on a project momentarily dubbed “Blockchain 2.0” (the actual name and website will be released soon).

Some backstory: at one point Back worked for about 4 years with Hill at Zero Knowledge Systems and while Hill was familiar with Bitcoin, it was not until Back approached Hill (who was in retirement) and explained the extensibility merits and use-cases that Hill began to take it seriously.  Thereupon, they spent a week in a boardroom, mapping out the business plan and adopted the motto: “can’t be evil.”  In, Hill’s words based on his previous experience with Zero Knowledge Systems, “We believe trust is not earned because we’re good guys but trust was based on the protocols, the whitepaper and cryptography – where we were not asking for trust.”

They then rented a home in California for a couple months earlier this year with several other core developers and looked at ways to add new extensions to the existing blockchain – build a company around it – all the while providing backward and forward compatibility with the Bitcoin blockchain.  Again, this is not the “typical” alt because instead of creating another series of independent networks it will in will utilize merged mining and atomic transactions to extend the feature set via interoperable sidechains (more on that later).1

Why is this important?  Because as Back noted, the pace of current development on the core protocol is purposefully slow to prevent bugs and vulnerabilities.  And according to him these sidechains will allow experimental development to take place without impacting the main codebase, allowing the ecosystem to experience a faster pace of invention, scalability, faster transaction throughput, multi-asset issuance and even extensions to smart contract scripting.

How is this done?  According to Back, last December he spoke on Let’s Talk Bitcoin with Andreas Antonopolous and mentioned a one-way peg system, however it turned out to have undesirable limitations.2 Greg Maxwell then proposed a two-way pegging method that enables Bitcoin to connect with a sidechain which is a mathematically-controlled peg between Bitcoin main and the other chain network.3 Thus, according to Hill there can be continuous deployment and interaction with sidechains optimized for multiple purposes – that multiple sidechains can compete on features such as having larger block sizes (up from 1MB), which while leads to increased centralization, provides higher transactions per second.  And if users feel uncomfortable with the level of centralization, users can unilaterally move tokens from one chain back to Bitcoin main.

So in essence, while there are multiple chains no new bitcoins are created – that protecting the digital scarcity of the finite amount of tokens (ultimately 21 million) is a core point to this project.  And that by linking chains they have set Bitcoin up as a “transactional currency for all the innovation and all new assets so you can potentially issue shares in a sidechain, that specializes in smart contracts shares, derivatives, user assets, ultimately backed by bitcoin, pegged to bitcoin,” explained Back.

Why not create start from the beginning, from a fresh slate like several other projects?  According to Back, in his view artificial scarcity is “fairer if we use the existing scarcity rates.”  And that he is not convinced that some other alts have a strong technical ground to build from as they “start a new scarcity race that creates an interoperability silo […] in order to get into to it you have to swap coins.”  Thus, Back sees the extensibility as adding “direct support for issued assets, extended smart contracts, all while using Bitcoin itself as the transactional currency.  We feel that is a neutral choice.  It is not starting a new currency owned by one company, a project, small group of developers or early speculators.”

In addition, the company identifies itself as a “blockchain” technology company what this means in Hill’s view is:

We are a “blockchain 2.0” company, although I personally care for the success of Bitcoin, it is important to distinguish between bitcoin the asset and the blockchain as a programmable distributed trust infrastructure.  And we are interested in blockchain 2.0 and blockchain 2.0 using bitcoin as a neutral transactional currency we believe is a great, offers great promise but I want to build a blockchain that could support a nation-state putting its national currency and phasing out paper dollars.

There are at least 84 uses of a cryptoledger and counting.  And Hill’s team sees that bigger picture.

Go where the capital is

Over the past five years between $200 million to $1 billion worth of capital investments in computing hardware in the form of “mining” (or really, “hashing”) has been made, nearly all of which is largely underutilized.4  That is to say, the actual utility created over the past five years has been at the edges of the network in off-chain, trusted silos (or as Hill calls it “trust-me” silos).  Yet as developmental economics describes – and Bitcoin is in some respects a developing economy – productively utilizing and efficiently reorganizing capital is a necessary condition for growth and continued development.5 The Bitcoin network has enormous amounts of capital, but with low usage rates.  How to tap into that?

They contacted many of the large mining pools and will attempt to merge mine these new sidechains and thereupon utilize atomic-transactions (which is a proven process used in databases for decades) to move tokens between the chains.

While not necessarily endorsing their project, this is certainly one of the most productive uses of the hashrate deadweight.  That is to say, irrespective of how hashrate is being centralized, it is being underutilized as it merely tracks one ledger entry representing one data point (which was intentional day 1).  And while it is uncertain as to how the pool operators will react to these changes, if Namecoin is any indication, it is possible to provide new use-cases via sidechains, using the same hardware and thereby mitigating some of the bootstrapping risks of securing a proof-of-work-based network.6

Key takeaways based on the interview:

  •          Working with mining pools to discuss further utilization and expansion of merged mining
  •          Merged mining will create sidechains “firewalled” off from Bitcoin main
  •          Two-way pegging via atomic transactions will enable movement between sidechains
  •          Sidechains might not have blocks, will include transaction fees to incentivize miners
  •          Sidechains will be used for experimenting with expanding extensibility features including user-issued assets, smart contracts, HFT, and a plethora of financial instruments
  •          Team made up of several Bitcoin core developers in addition to other cryptographers and programmers
  •          Looking for practical use-cases of blockchain technology such as internal uses at enterprises and institutions, not solely related to bitcoin the cryptocurrency
  •          Launching website soon and some production code within the next 60-90 days

Also, while this type of project will likely be controversial in some corners due to the capital and time invested in alternative platforms, this project provides yet another competitive wrinkle in the ever growing “2.0” space.  Thus, it will be interesting to see how they use these methods within a production environment to bring utility back to Bitcoin main.7

To learn more about the project, following Hill and Back on Twitter at @austinhill and @adam3us respectively.

Endnotes


  1. How does merged mining work? from StackExchange []
  2. E77 – The Adam Back Interview from Let’s Talk Bitcoin []
  3. The entire discussion dev thread [Bitcoin-development] is there a way to do bitcoin-staging? is a very interesting conversation and at the end Greg Maxwell discusses the potential behind two-way pegging. []
  4. The lower limit is an estimate from Gil Luria at Wedbush Securities, see Following the Money: Trends in Bitcoin Venture Capital Investment by Garrick Hileman. []
  5. See Total factor productivity []
  6. What are Namecoins and .bit domains? from CoinDesk []
  7. Coincidentally, last week I published a paper (PDF) outlining some of the limitations of Bitcoin from a “public goods” perspective; it was by happenstance that Hill and Back’s team independently have answers and solutions to many of these known challenges and hurdles detailed within. []
Send to Kindle

Are the rumors true about China banning cryptocurrencies?

Received a few emails the last few days.  Here is one response I sent this morning to some friends:

This policy tightening, specifically based on this market-moving story from Caixin last week, comes amidst a larger shift: pressure from SOE incumbents that are concerned with the entire mobile payment / independent payment systems that have been setup over the past 3-4 years.  Quartz has a good overview on how the state-owned banks have essentially pressured policy makers into stymieing further growth of alternative services from Alipay & Tenpay.  Similarly three weeks ago the PBOC placed a “temporary” ban on payments made by scanning QR codes, mostly likely to protect UnionPay (an SOE) against the competition of Alipay & Tenpay.  In fact, this past week Chinese SOE banks posted their weakest annual profit growth, and they like those margins.

With respect to Bitcoin, I doubt it has anything to do with capital controls or flight.  Despite the fact that Bitcoin can be used as a vehicle to avoid capital controls, but have not seen any actual numbers on that so I could be wrong (maybe they all use RealityShares).  Yet even if it were the case, China is the 2nd largest source for remittances received ($60 billion in 2012), making it unlikely that the trend reversed and somehow China now exports more funds than receives during those 2 years (and I doubt that it is being used for domestic remittances for migrants to the inner provinces either).  For perspective, there are common ways to use UnionPay and art auctions to avoid capital controls (those links have interesting stats).

In addition, here is an updated summary of notices the different exchanges in China have received and their responses.  In addition, Rui Ma provided info on the most recent CoinDesk news piece on this issue yesterday.

Interestingly enough, I was told a couple days ago, in the event that the rumors of the PBOC clamp down on electronic deposits beginning 4/15 are true, one alternative is that Huobi (and others) would allow users to go to their office to deposit directly with them.  Bobby Lee from BTC China and others have said the same thing as well. Yet, what’s to prevent Alice from sending funds to some third party “cash delivery service” that then delivers them the cash?  And in any case, if the PBOC actually wanted to stop the business, it would be very simple – just (a) block the websites and (b) send in the PSB to close them down.

In any case, I can just imagine nerds with wheel barrows full of RMB lining the sidewalk of corporate offices…

That said, we (the public) probably will not know until we do.  Chinese regulators have used this strategy before: release or “leak” some information to test the reaction of the market.  If the reactions are severe, they may change the policy.  If you believe your investments will be impacted, aside from somehow “getting” some emergency guanxi, the best thing you can do is prepare for a Plan B, likely utilizing Hong Kong.

Send to Kindle

See all OP_RETURNs in the blockchain

Gideon Greenspan recently posted on the Colored Coins dev list:

We developed this to help with debugging. but it might be of wider interest to people here, to see what others are up to:

http://coinsecrets.org/

It shows you all OP_RETURNs in the block chain, hex and ASCII, going back to the first one (block 228596).

Some of the more interesting ones:

http://coinsecrets.org/?to=287731.000001
http://coinsecrets.org/?to=271007.000000
http://coinsecrets.org/?to=268081.000000
http://coinsecrets.org/?to=268060.000002 (rick-rolling)
http://coinsecrets.org/?to=251768.000000
http://coinsecrets.org/?to=228596.000000 (first one ever)

See also:  Hidden surprises in the Bitcoinblockchain and how they are stored: Nelson Mandela, Wikileaks, photos, and Python software by Ken Shirriff

Send to Kindle

Cryptocurrency in the news: #14

I have been pretty busy this past week on China-related activities, but below are some interesting stories, projects and companies I came across concerning the growing cryptocurrency ecosystem.

Of particular interest is the follow-up piece from Preston Byrne (one of the lawyers who helped me with Chapter 2, hire him, he’s brilliant): Bitcoin and the English legal system, part II

Probably the weirdest article was this one calling for Dogecoin to become the “national” currency of Venice (due to a historical spelling similarity).  If this doesn’t illustrate “jumping the shark,” I don’t know what else can.  But then again, I’m just one market participant.

Thanks to Petri Kajander and Andrew White for several of the links:

Send to Kindle

Email use-cases for ‘colored coins’ and DACs

Earlier this week, version 0.0.5 of Chromawallet was released (here’s is Alex’s official announcement) and users have begun testing the creation and sending of colored assets (first on testnet, soon on mainnet).  A few adventurous people have sent 0.0008 BTC in fees related to Colored assets (you can look at Blockchain.info for a few here and there).

I received two interesting emails this week, the first is a use-case for Colored Coins from Mark:

I think a good use case is for stocks: so long as it’s for Class A common stock, no dividends, it’s a very uniform asset, already digitally-issued. If Google treasury (the issuer of Google stock) colored a coin, they are the final arbiter of whether a share is a share is a share, and I would trust them as the issuer of the coin. But what about proxies, splits, ugh…

Best, best use case is for foreign stocks to be registered this way: it’s still really cumbersome for a non-Brazilian investor, for example, to buy Petrobras on Brazil’s Bovespa market.

Good question, the potential is there, the technical side works.  Whether or not that these kind of companies are willing to try and adopt this method is another matter entirely — as are the legal issues of exchanging a security to different qualified investors (foreign, accredited, etc.).  JoinMyIPO, LTBcoin and BankToTheFuture are trying different approaches to this crowdequity opportunity.

DACs

I received an email from Gary who initially talked about alts, but is looking for he sees as long-term opportunities through DACs:

I don’t think its really about the currency, its the underlying technology and how it can be applied to Decentralised Autonomous Corporation, the project that O like that will be the front runner is the Ethereum project, the only problem with me is that how do O create a DAC? I could put it this way, you take a normal business process and convert that process into a DAC, is it possible, I think so. I did post a sort of DAC on the Ethereum forum, in regards to the production of electricity and had some good constructive comments, have a look when you have the time and let me know what you think. I don’t know if you have seen this new development in the US regarding Benefit Corporation:

In April 2010, Maryland became the first U.S. state to pass benefit corporation legislation

Typical major provisions of a benefit corporation are:

Purpose

  • Shall create general public benefit
  • Shall have right to name specific public benefit purposes (e.g. 50% profits back to community)
  • The creation of public benefit is in the best interests of the benefit corporation

Unfortunately I am not a lawyer, so I’m not sure how DACs will be recognized in each jurisdiction.  Furthermore, just so that everyone is on the same page: no team has actually unveiled a working DAC/DAO — in fact, there is no real consensus of how to define a DAO/DAC/DACP.

That said, conceivably it is likely a matter of time (months, years?) before someone designs a DAO that can create the functionality that Gary is looking for.  If I hear anything about releases, I will definitely write about it.  However word of warning: a CAO may actually be more efficient and effective for internal uses (see Subledger.com discussed in Chapter 5), thus I suspect a DAO will not necessarily be the only player in town.

Send to Kindle

Goldman Sachs: Bitcoin can create $210 billion in savings for customers and merchants

Yesterday a report from Goldman Sachs was released that identified at least 3 segments in which a cryptocurrency like Bitcoin can reduce costs: retailers, online merchants and remittance.  Below is an image of a chart that my friend Tuur Demeester tweeted about:

BiifP-HCAAAeAZY.png largeOverall, while GS found some benefits that Bitcoin brings, it also mentioned several challenges and risks. The takeaway according to TechCrunch is that, “Bitcoin likely can’t work as a currency, but … the ledger-based technology that underlies it could hold promise.”

See also: the report at Scribd and coverage from CoinDesk

Send to Kindle