Satoshi's Design Goals — Bitcoin as Money

Film · Satoshi’s design goals · 1:35

Block ———

A short film in the language of this site's homepage, in Satoshi Nakamoto's own words: why digital money can be spent twice; why every earlier answer needed a mint in the middle; trust as the root problem with conventional currency; the white paper's goal, electronic cash sent directly from one party to another; block 0 and its headline; proof-of-work, nodes that anyone can run, and a supply no issuer controls; and fiat currency against bitcoin.

Read the film, with its sources

Module 1 of 4Satoshi’s design goals. What problem was bitcoin built to solve? Its designer said so plainly, in his own words.
The problemDigital money is just data, and data can be copied. If I pay you with a digital token, what stops me paying someone else with the same one? This is the double-spending problem.
Before BitcoinBefore Bitcoin, the answer was a trusted middleman: a mint, or a bank, that keeps the ledger, checks every payment and refuses the second spend. Earlier electronic cash systems had one at their centre. Satoshi’s paper named the flaw: “the fate of the entire money system depends on the company running the mint”.Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008), section 2, Transactions
11 February 2009Announcing the software in 2009, Satoshi put the root problem in one sentence: “The root problem with conventional currency is all the trust that’s required to make it work.” A central bank, he went on, must be trusted not to debase the currency, but “the history of fiat currencies is full of breaches of that trust”.Satoshi Nakamoto, “Bitcoin open source implementation of P2P currency”, P2P Foundation, 11 February 2009 (Satoshi Nakamoto Institute archive)
31 October 2008Satoshi’s answer was a paper of 9 pages: “Bitcoin: A Peer-to-Peer Electronic Cash System”. Its first sentence states the goal: online payments sent directly from one party to another “without going through a financial institution”. It has no section on price; it describes a payment system.Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008), abstract
31 October 2008The same day, he announced it to a cryptography mailing list as a new electronic cash system, “fully peer-to-peer, with no trusted third party”.Satoshi Nakamoto, “Bitcoin P2P e-cash paper”, Cryptography Mailing List, 31 October 2008 (Satoshi Nakamoto Institute archive)
3 January 2009Bitcoin’s first block, block 0, is dated 3 January 2009. Into it Satoshi wrote that day’s front-page headline from The Times: “Chancellor on brink of second bailout for banks”. It proves the date, and records what the old system was doing the day the new one began.Bitcoin block 0 (the genesis block), coinbase transaction
Proof-of-workBitcoin solves double-spending without a mint. Proof-of-work puts every payment into one shared order, a chain of blocks that gets harder to rewrite with every block added. If two payments spend the same coin, the one in the chain first is the one that counts: nodes accept a block only if its payments are valid and “not already spent”.Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008), section 5, Network
Open to allEvery computer running Bitcoin checks every block for itself, and anyone can run one. No one has to be trusted, because anyone can verify: as the paper’s conclusion puts it, a system for electronic transactions “without relying on trust”.Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008), section 12, Conclusion
No issuerThere is no issuer. New coins go only to the miners who add each block, “since there is no central authority to issue them”, on a schedule fixed in the software from the start: never more than 21,000,000 coins.Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008), section 6, Incentive
The contrastFiat currency asks you to trust its issuer: a central bank that can always make more. Bitcoin was designed so that you don’t have to: no issuer, a supply fixed by rule, and rules anyone can check. Few prices are set in bitcoin yet, and keeping it safe takes care.
The Bitcoin TransitionCash without a trusted third party.

The Bitcoin whitepaper is nine pages long. It is titled Bitcoin: A Peer-to-Peer Electronic Cash System. The abstract, which takes less than half a page, states the design goal with unusual precision:

A purely peer-to-peer version of electronic cash would allow online payments to be sent directly from one party to another without going through a financial institution. Digital signatures provide part of the solution, but the main benefits are lost if a trusted third party is still required to prevent double-spending. We propose a solution to the double-spending problem using a peer-to-peer network.

Every line of the rest of the paper serves that goal. This is worth noticing. Most technical papers attempt many things. The Bitcoin whitepaper attempts exactly one: an electronic cash system with no trusted third party.

The Double-Spend Problem

The problem Satoshi solved is specific. In any digital payment system, a unit of value is just a string of bits. Bits can be copied. If I pay you with a digital token, what prevents me from paying someone else with the same token? Before Bitcoin, the answer was always: a trusted third party keeps a ledger and refuses to accept the second attempt.

This is the reason every previous electronic cash system required a central issuer. DigiCash, e-gold, and a dozen others all needed someone at the centre to prevent double-spends. They all failed, because the central issuer was a single point of attack — technically, legally, and politically.

Satoshi's innovation was to solve the problem without a central issuer. The proof-of-work chain creates a shared, cryptographically verified ordering of transactions. If two transactions conflict, the one that appears first in the longest valid chain is the one that wins. Everyone can verify this independently. No central authority is needed.

The Sections of the Paper

Sections 1–2 set out the problem and introduce the concept of a chain of digital signatures
Sections 3–4 describe the proof-of-work mechanism and the chain structure
Sections 5–7 cover the network behaviour — broadcasting, validation, and how nodes reach consensus
Section 8 introduces simplified payment verification, the basis of lightweight clients
Sections 9–11 cover privacy, economic incentives, and attack analysis
Section 12 concludes with a single-paragraph summary of why the system solves the problem

There is no section on investment returns. There is no section on price. There is no discussion of Bitcoin as a store of value in the asset management sense. The paper is about a payment system. Everything else — the store-of-value property, the monetary policy debate, the role as a reserve asset — is a consequence of the design, not its stated goal.

Reading the Paper Yourself

The whitepaper is accessible to anyone comfortable with high-school mathematics and basic computer science. It is not an exclusive document. Read it in full before relying on anyone's summary, including this one. Nine pages. One afternoon. The text is unambiguous and the argument is precise. Few documents in monetary history are as clear about their own intent.

The 21 Million Cap