Rabbit Hole / Library / Bit Gold
◆   The Sound-Money Library

Bit Gold

By Nick Szabo · 2005 · Short paper (~10 pages) · Advanced
Central Thesis A monetary system can be built on chained, timestamped, computationally-expensive proofs-of-work — issuing scarce digital units that mimic gold's monetary properties without trusted intermediaries.
Precious metals and collectibles have an unforgeable scarcity due to the costliness of their creation. This once provided money the value of which was largely independent of any trusted third party. Can we do something similar in cyberspace? — Nick Szabo, Bit Gold

Summary

Szabo's Bit Gold design (conceived 1998, written 2005) is the proposal that comes closest to Bitcoin without being Bitcoin. The architecture: a participant solves a computational puzzle whose solution can be verified cheaply but generated only at substantial computational cost. Each solution is timestamped and cryptographically chained to previous solutions, creating a tamper-evident sequence. Solutions function as scarce digital units — bit gold. The chained structure, the proof-of-work issuance mechanism, the design goal of replicating gold's “unforgeable scarcity” without trusted intermediaries — all of this would later become Bitcoin's core architecture. Szabo's design did not solve the double-spending problem at scale (he proposed a Byzantine agreement on a quorum of servers), and the system was never deployed. But the design space Szabo defined is directly the design space Satoshi solved within. Many in the community have speculated Szabo and Satoshi might be the same person; Szabo has consistently denied it.

Why It Matters for Bitcoin

Bitcoin is, structurally, Bit Gold with the double-spending problem solved. Reading Szabo's paper is the cleanest way to see what was already in the design space before Satoshi, what was not, and exactly what Satoshi's contribution actually was. The contribution turns out to be smaller than mythology suggests — most of Bitcoin's structural elements (proof-of-work, chained timestamps, decentralized issuance, cryptographic verification of solutions) were already specified by Szabo. What Satoshi added was the breakthrough on Sybil-resistant Byzantine agreement: using proof-of-work itself as the consensus mechanism (rather than a quorum of trusted servers) to settle which transaction history is canonical. Read Bit Gold and the whitepaper back-to-back to see the leap. The paper is also a useful corrective to Satoshi-as-lone-genius mythology: Bitcoin emerged from a two-decade conversation among cypherpunks, and Szabo was the conversation's most consequential voice.

Where to Read