Non-technical Prompt Engineering and GPU count

Creating (and refining) prompts used by LLMs has been a side-hobby for the past year.  Below are three non-technical prompts that illustrate using an LLM to answer casual questions.

For instance, my young daughter currently plays hockey. Last March one of her coaches mentioned that there were outsized scholarship opportunities from NCAA Division III colleges for women’s hockey. To start fact-checking that statement, I began with a prompt:

There are 67 teams in NCAA Division III women’s hockey. Please list them in order based on the school rankings from U.S. News & World Report.

At the time, ChatGPT 4 said it did not have access to UNSWR or Forbes and couldn’t complete the ranking.  

Fast forward to today, while ChatGPT 4o still does not have direct access to these two ranking indices, it did pivot by asking if it could provide a different sorting (although not by academic ranking).

During the summer, when Ask Venice launched, I tried asking what the etymology of a “no-coiner” was.  While it didn’t provide the history of the phrase, it did provide some footnotes which at the time few LLMs did.  Fast forward to today, the same question still does not provide a satisfactory answer (e.g., it lacks history: it doesn’t say who the first people were to use the term).

This past fall I queried:

What was the participation in the PSAT / SAT over the past 10 years. And, assuming birth rates / immigration trends continue, what the participation rate would be the next 15.  

Following those I asked what the previous participation in the AMC 8, AMC 10, and AMC 12 were the past 10 years. And, likewise, what the trend lines look for the next 15 years.

ChatGPT 4 drew some decent line charts to visualize those trends.  The motivation for this were various parents discussing the rat race of cram schools in the Boston area during a time in which some matriculation numbers for the city are declining.

A number of other casual searches involved finding local activities for my daughter and even writing or reading contests.  The answers typically are often better than what Google provides.

The refinement process for prompts is probably something that will not go away even with more accurate reasoning models (such as DeepSeek R1) are deployed.  Does that mean people being paid $200k a year for their help chatting with bots in 2023 translates into a long-term moat for creative prompt writing?  No, but there does seem to be an art for conjuring and revising them at this time.  

Counting GPUs

We have discussed the flexibilities of GPUs over the years… I even wrote a “How-to” guide for mining Dogecoin over a decade ago.

I saw a germane tweet this past week that piqued my interest in part because it was a little inaccurate:

Source: David Holz

Someone is (a little) wrong on the internet!

My quibble, and one that was echoed by a couple of others in that thread, is that there are a lot more than 5 million GPUs manufactured each year.  For instance, in Q1 2024 around 70 million discrete and integrated GPUs were shipped by Nvidia, Intel, and AMD combined.  These were for both desktops and laptops.  In Q2 2024, approximately 9.5 million discrete GPUs for desktop PCs (not laptops) were shipped by the same three manufacturers.

And one other GPU segment that David appears to have missed in his calculation are video game consoles.  For example, more than 60 million Playstation 5’s have been sold since 2020.  Likewise around 31 million Xbox Series X and Series S have been sold in that same time frame.  While neither of these are particularly powerful relative to a new GPU from Nvidia today, when they were first released they were all considered high performance.

As LLMs become more accurate, with better reasoning abilities, a scenario that David and others rightly ask is: wouldn’t the demand for GPUs outstrip the supply?  That is to say, if an AGI (however defined) is capable of running on a discrete GPU, how many people with the means, will purchase and install one at home versus renting them off a cloud provider?  Maybe the TAM for on-premise AGI would be as large as on-premise e-mail users?

Let’s check in again on this in a couple of years to see what level of artificial intelligence can run off the forthcoming 5090 and its successor.  Hopefully they’ll be more accurate, because during the drafting of this post, ChatGPT 4o used outdated video game console numbers (without footnotes!) that I eventually tracked down with… Google.

And if you have access to the newly released DeepResearch, feel free to leave a comment about what it assesses are the merits and demerits of Jeffrey Emanuel’s essay on Nvidia as well as the energy and resource usage estimates from Rohit Krishnan.

Book review: The Truth Machine

A friend of mine sent me a copy of The Truth Machine which was published in February 2018.  Its co-authors are Michael Casey and Paul Vigna, who also previously co-wrote The Age of Cryptocurrency a few years ago.

I had a chance to read it and like my other reviews, underlined a number of passages that could be enhanced, modified, or even removed in future editions.

Overall: I do not recommend the first edition. For comparison, here are several other reviews.

This book seemed overly political with an Occupy Wall Street tone that doesn’t mesh well with what at times is a highly technical topic.

I think a fundamental challenge for anyone trying to write book-length content on this topic is that as of 2018, there really aren’t many measurable ‘success’ stories – aside from speculation and illicit activities – so you end up having to fill a couple hundred pages based on hypotheticals that you (as an author) probably don’t have the best optics in.

Also, I am a villain in the book. Can’t wait?  Scroll down to Chapter 6 and also view these specific tweets for what that means.

Note: all transcription errors are my own. See my other book reviews on this topic.

Preface

on p. x they write:

The second impact is the book you are reading. In The Age of Cryptocurrency, we focused primarily on a single application of Bitcoin’s core technology, on its potential to upend currency and payments.

Would encourage readers to peruse my previous review of their previous book. I don’t think they made the case, empirically, that Bitcoin will upend either currency or payments. Bitcoin itself will likely exist in some form or fashion, but “upending” seems like a stretch at this time.

On p. xi they write in a footnote:

We mostly avoid the construct of “blockchain” as a non-countable noun.

This is good. And they were consistent throughout the book too.

Introduction

They spent several pages discussing ways to use a blockchain for humanitarian purposes (and later have a whole chapter on it), however, it is unclear why a blockchain alone is the solution when there are likely other additional ways to help refugees.

For instance, on p. 3 they write:

Just as the blockchain-distributed ledger is used to assure bitcoin users that others aren’t “double-spending” their currency holdings – in other words, to prevent what would otherwise be rampant digital counterfeiting – the Azraq blockchain pilot ensures that people aren’t double-spending their food entitlements.

But why can’t these food entitlements be digitized and use something like SNAP cards? Sure you can technically use a blockchain to track this kind of thing, but you could also use existing on-premise or cloud solutions too, right?  Can centralized or non-blockchain solutions fundamentally not provide an adequate solution?

On p. 4 they write:

Under this new pilot, all that’s needed to institute a payment with a food merchant is a scan of a refugee’s iris. In effect, the eye becomes a kind of digital wallet, obviating the need for cash, vouchers, debit cards, or smartphones, which reduces the danger of theft (You may have some privacy concerns related to that iris scan – we’ll get to that below.) For the WFP, making these transfers digital results in millions of dollars in saved fees as they cut out middlemen such as money transmitter and the bankers that formerly processed the overall payments system.

Get used to the “bankers” comments because this book is filled with a dozen of them. Intermediaries such as MSBs and banks do take cuts, however they don’t really dive into the fee structure. This is important because lots of “cryptocurrency”-focused startups have tried to use cryptocurrencies to supposedly disrupt remittances and most basically failed because there are a lot of unseen costs that aren’t taken into account for.

Another unseen cost that this book really didn’t dive into was: the fee to miners that users must pay to get included into a block.  They mention it in passing but typically hand-waved it saying something like Lightning would lower those costs.  That’s not really a good line of reasoning at this stage in development, but we’ll look at it again later.

On p. 6 they write:

That’s an especially appealing idea for many underdeveloped countries as it would enable their economies to function more like those of developed countries – low-income homeowners could get mortgages, for example; street vendors could get insurance. It could give billions of people their first opening into the economic opportunities that the rest of us take for granted.

That sounds amazing, who wouldn’t want that?  Unfortunately this is a pretty superficial bit of speculation.  For example, how do street vendors get insurance just because of the invention of a blockchain?  That is never answered in the book.

On p. 7 they write:

The problem is that these fee-charging institutions, which act as gatekeepers, dictating who can and cannot engage in commercial interactions, add cost and friction to our economic activities.

Sure, this is true and there are efforts to reduce and remove this intermediation. The book also ignores that every cryptocurrency right now also charges some kind of fee to miners and/or stakers. And with nearly all coins, in order to obtain it, a user typically must buy it through a trusted third party (an exchange) who will also charge a markup fee… often simultaneously requiring you to go through some kind of KYC / AML process (or at least connect to a bank that does).

Thus if fee-charging gatekeepers are considered a problem in the traditional world, perhaps this can be modified in the next edition because these type of gatekeepers exist throughout the coin world too.

On p. 8 they list a bunch of use-cases, some of which they go into additional detail later in the book. But even then the details are pretty vague and superficial, recommend updating this in the next edition with more concrete examples.

On p. 9 they write:

Silicon Valley’s anti-establishment coders hadn’t reckoned with the challenge of trust and how society traditionally turns to centralized institutions to deal with that.

There may have been a time in which the majority of coders in the Bay area were “anti-establishment” but from the nearly 5 years of living out here, I don’t think that is necessarily the case across the board. Recommend providing a citation for that in the future.

On p. 10 they write:

R3 CEV, a New York-based technology developer, for one, raised $107 million from more than a hundred of the world’s biggest financial institutions and tech companies to develop a proprietary distributed ledger technology. Inspired by blockchains but eschewing that lable, R3’s Corda platform is built to comply with banks’ business and regulatory models while streamlining trillions of dollars in daily interbank securities transfers.

This whole paragraph should be updated (later in Chapter 6 as well):

  • The Series A funding included over 40 investors, not 100+.
  • The ‘community’ version of Corda is open sourced and available on github, so anyone can download, use, and modify it. There is also a Corda Enterprise version that requires a license and is proprietary.
  • While initially eschewing the term “blockchain,” Corda is now actively marketed as a “blockchain” and even uses the handle @cordablockchain on Twitter, on podcast advertisements, and in public presentations.1
  • I am unaware of any current publicly announced project that involves streamlining trillions of dollars in daily interbank securities transfers. Citation?

On p. 10 they briefly mention the Hyperledger Project.  Recommend tweaking it because of its own evolution over the years.

For example, here is my early contribution: what is the difference between Hyperledger and Hyperledger.

On p. 11 they write:

While it’s quite possible that many ICOs will fall afoul of securities regulations and that a bursting of this bubble will burn innocent investors, there’s something refreshingly democratic about this boom. Hordes of retail investors are entering into early stage investment rounds typically reserved for venture capitalists and other professional.

This paragraph aged horribly since the book was published in February.

All of the signs were there: we knew even last year that many, if not all, ICOs involved overpromising features and not disclosing much of anything to investors. As a result, virtually every week and month in 2018 we have learned just how much fraud and outright scams took place under the guise and pretext of the “democratization of fund raising.”

For instance, one study published this summer found that about 80% of the ICOs in 2017 were “identified scams.” Another study from EY found that about 1/3 of all ICOs in 2017 have lost “substantially all value” and most trade below their listing price.

Future versions of this book should remove this paragraph and also look into where all of that money went, especially since there wasn’t – arguably – a single cryptocurrency application with a real user base that arose from that funding method (yet).

On p. 11 they write:

Not to be outdone, Bitcoin, the grandaddy of the cryptocurrency world, has continued to reveal strengths — and this has been reflected in its price.

This is an asinine metric. How exactly does price reflect strength? They never really explain that yet repeat roughly the same type of explanation in other places in this book.

Interestingly, both bitcoin’s price and on-chain transaction volume have dramatically fallen since this book was first published. Does that mean that Bitcoin weakened somehow?

On p. 12 they write:

Such results give credence to crypto-asset analysts Chris Burniske and Jack Tatar’s description of bitcoin as “the most exciting alternative investment of the 21st century.”

Firstly, the Burniske and Tatar book was poorly written and wrong in many places: see my review

Secondly, bitcoin is a volatile investment that is arguably driven by a Keynesian beauty contest, not for the reasons that either book describes (e.g., not because of remittance activity).

On p. 12 they write:

The blockchain achieves this with a special algorithm embedded into a common piece of software run by all the computers in the network.

To be clear: neither PoW nor PoS are consensus protocols which is implied elsewhere on page 12.

On p. 12 they write:

Once new ledger entries are introduced, special cryptographic protections make it virtually impossible to go back and change them.

This is not really true. For coins like Bitcoin, it is proof-of-work that makes it resource intensive to do a block reorganization. Given enough hashrate, participants can and do fork the network. We have seen it occur many times this year alone. There is no cryptography in Bitcoin or Ethereum that prevents this reorg from happening because PoW is separate from block validation.2

On p. 13 they write:

Essentially, it should let people share more. And with the positive, multiplier effects that this kind of open sharing has on networks of economic activity, more engagement should in turn create more business opportunities.

These statement should be backed up with supporting evidence in the next edition because as it stands right now, this sounds more like a long-term goal or vision statement than something that currently exists today in the cryptocurrency world.

On p. 13 they mention “disintermediation” but throughout the book, many of the cryptocurrency-related companies they explore are new intermediaries. This is not a consistent narrative.

On p. 14 they write:

If I can trust another person’s claims – about their educational credentials, for example, or their assets, or their professional reputation – because they’ve been objectively verified by a decentralized system, then I can go into direct business with them.

This is a non sequitur. Garbage in, garbage out (GIGO) — in fact, the authors make that point later on in the book in Chapter 7.

On p. 15 they write:

Blockchains are a social technology, a new blueprint for how to govern communities, whether we’re talking about frightened refugees in a desolate Jordanian output or an interbank market in which the world’s biggest financial institutions exchange trillions of dollars daily.

This is vague and lacks nuance because there is no consensus on what a blockchain is today. Many different organizations and companies define it differently (see the Corda example above).

Either way, what does it mean to call a blockchain “social technology”? Databases are also being used by refugee camp organizers and financial infrastructure providers… are databases “social technology” too?

Chapter 1

On p. 17 they write:

Its blockchain promised a new way around processes that had become at best controlled by middlemen who insisted on taking their cut of every transaction, and at worst the cause of some man-made economic disasters.

This is true and problematic and unfortunately Bitcoin itself doesn’t solve that because it also has middlemen that take a cut of every transaction in the form of a fee to miners. Future editions should add more nuance such as the “moral hazard” of bailing out SIFIs and TBTF and separate that from payment processors… which technically speaking is what most cryptocurrencies strive to be (a network to pay unidentified participants).

On p. 18 they write:

Problems arise when communities view them with absolute faith, especially when the ledger is under control of self-interested actors who can manipulate them. This is what happened in 2008 when insufficient scrutiny of Lehman Brother’s and other’s actions left society exposed and contributed to the financial crisis.

This seems to be a bit revisionist history. This seems to conflate two separate things: the type of assets that Lehman owned and stated on its books… and the integrity of the ledgers themselves. Are the authors claiming that Lehman Brother’s ledgers were being maliciously modified and manipulated? If so, what citation do they have?

Also a couple pages ago, the authors wrote that blockchains were social technology… but we know that from Deadcoins.com that they can die and anything relying on them can be impacted.

Either way, in this chapter the authors don’t really explain how something Bitcoin itself would have prevented Lehman’s collapse. See also my new article on this topic.

On p. 19 they write:

A decentralized network of computers, one that no single entity controlled, would thus supplant the banks and other centralized ledger-keepers that Nakamoto identified as “trusted third parties.”

Fun fact: the word “ledger” does not appear in the Bitcoin white paper or other initial emails or posts by Nakamoto.

Secondly, perhaps an industry wide or commonly used blockchain of some kind does eventually displace and remove the role some banks have in maintaining certain ledgers, but their statement, as it is currently worded, seems a lot like of speculation (projection?).

We know this because throughout the book it is pretty clear they do not like banks, and that is fine, but future editions need to back up these types of opinions with evidence that banks are no longer maintaining a specific ledger because of a blockchain.

On p. 20 they write:

With Bitcoin’s network of independent computers verifying everything collectively, transactions could now be instituted peer to peer, that is, from person to person. That’s a big change from our convoluted credit and debit card payment systems, for example, which routes transactions through a long sequence of intermediaries – at least two banks, one or two payment processors, a card network manager (such as Visa or Mastercard), and a variety of other institutions, depending on where the transaction take place.

If we look back too 2009, this is factually correct of Bitcoin at a high level.3 The nuance that is missing is that today in 2018, the majority of bitcoin transactions route through a third party, some kind of intermediary like a deposit-taking exchange or custodial wallet.4 There are still folks who prefer to use Bitcoin as a P2P network, but according to Chainalysis, last year more than 80% of transactions went through a third party.5

On p. 20 they write:

Whereas you might think that money is being instantly transferred when you swipe your card at a clothing store, in reality the whole process takes several days for the funds to make all those hops and finally settle in the storeowner’s account, a delay that create risks and costs. With Bitcoin, the idea is that your transaction should take only ten to sixty minutes to fully clear (not withstanding some current capacity bottlenecks that Bitcoin developers are working tor resolve). You don’t have to rely on all those separate, trusted third parties to process it on your behalf.

This is mostly incorrect and there is also a false comparison.

In the first sentence they gloss over how credit card payment systems confirm and approve transactions in a matter of seconds.6 Instead they focus on settlement finality: when the actual cash is delivered to the merchant… which can take up to 30+ days depending on the system and jurisdiction.

The second half they glowingly say how much faster bitcoin is… but all they do is describe the “seen” activity with a cryptocurrency: the “six block” confirmations everyone is advised to wait before transferring coins again. This part does not mention that there is no settlement finality in Bitcoin, at most you get probabilistic finality (because there is always chance there may be a fork / reorg).

In addition, with cryptocurrencies like Bitcoin you are only transferring the coins. The cash leg on either side of the transaction still must transfer through the same intermediated system they describe above. We will discuss this further below when discussing remittances.

On p. 20 they write:

It does so in a way that makes it virtually impossible for anyone to change the historical record once it has been accepted.

For proof-of-work chains this is untrue in theory and empirically. In the next edition this should be modified to “resource intensive” or “economically expensive.”

On p. 20 they write:

The result is something remarkable: a record-keeping method that brings us to a commonly accepted version of the truth that’s more reliable than any truth we’ve ever seen. We’re calling the blockchain a Truth Machine, and its applications go far beyond just money.

It is not a “truth machine” because garbage in, garbage out.

In addition, while they do discuss some historical stone tablets, they don’t really provide a metric for how quantitatively more (or less) precise a blockchain is versus other methods of recording and witnessing information. Might be worth adding a comparison table in the next edition.

On p. 21 they write:

A lion of Wall Street, the firm was revealed to be little more than a debt-ravaged shell kept alive only by shady accounting – in other words, the bank was manipulating its ledgers. Sometimes, that manipulation involved moving debt off the books come reporting season. Other times, it involved assigning arbitrarily high values to “hard-to-value” assets – when the great selloff came, the shocking reality hit home: the assets had no value.

The crash of 2008 revealed most of what we know about Wall Street’s confidence game at that time. It entailed a vast manipulation of ledgers.

This was going well until that last sentence. Blockchains do not solve the garbage in, garbage out problem. If the CFO or accountant or book keeper or internal counsel puts numbers into blocks that do not accurately reflect or represent what the “real value” actually is, blockchains do not fix that. Bitcoin does not fix that.

Inappropriate oversight, rubber stamp valuations, inaccurate risk models… these are off-chain issues that afflicted Lehman and other banks. Note: they continue making this connection on pages 24, 28, and elsewhere but again, they do not detail how a blockchain of some kind would have explicitly prevented the collapse of Lehman other other investment banks.

See also: Systemically important cryptocurrency networks

On p. 22 they write:

The real problem was never really about liquidity, or a breakdown of the market. It was a failure of trust. When that trust was broken, the impact on society – including on our political culture – was devastating.

How about all of the above? Pinning it on just one thing seems a little dismissive of the multitude of other interconnecting problems / culprits.

On p. 22 they write:

By various measures, the U.S. economy has recovered – at the time of writing, unemployment was near record lows and the Dow Jones Industrial Average was at record highs. But those gains are not evenly distributed; wage growth at the top is six times what it is for those in the middle, and even more compared to those at the bottom.

If the goal of the authors is to rectify wealth inequalities then there are probably better comparisons than using cryptocurrencies.

Why? Because – while it is hard to full quantify, it appears that on cursory examination most (if not all) cryptocurrencies including Bitcoin have Gini coefficients that trends towards 1 (perfectly unequal).

On p. 23 they write about disinformation in the US and elsewhere.  And discuss how trust is a “vital social resource” and then mention hyperinflation in Venezuela. These are all worthy topics to discuss, but it is not really clear how any of these real or perceived problems are somehow solved because of a blockchain, especially when Venezuela is used as the example. The next edition should make this more clear.

On p. 29 they write:

On October 31, 2008, whil the world was drowning in the financial crisis, a little-noticed “white paper” was released by somebody using the pen name “Satoshi Nakamoto,” and describing something called “Bitcoin,” an electronic version of cash that didn’t need state backing. At the heart of Nakamoto’s electronic cash was a public ledger that could be viewed by anybody but was virtually impossible to alter.

One pedantic note: it wasn’t broadly marketed beyond a niche mailing list on purpose… a future edition might want to change ” a little-noticed” because it doesn’t seem like the goal by Nakamoto was to get Techcrunch or Slashdot to cover it (even though eventually they both did).

Also, it is not virtually impossible to alter.7 As shown by links above, proof-of-work networks can and do get forked which may include a block reorganization. There is nothing that technically prevents this from happening.

See also: Interview with Ray Dillinger

On p. 31 they write:

Szabo, Grigg, and others pioneered an approach with the potential to create a record of history that cannot be changed – a record that someone like Madoff, or Lehman’s bankers, could not have meddled with.

I still think that the authors are being a little too liberal with what a blockchain can do. What Madoff did and Lehman did were different from one another too.

Either way, a blockchain would not have prevented data – representing fraudulent claims – from being inserted into blocks. Theoretically a blockchain may have allowed auditors to detect tampering of blocks, but if the information in the blocks are “garbage” then it is kind of besides the point.

On p. 32 they write:

Consider that Bitcoin is now the most powerful computing network in the world, one whose combined “hashing” rate as of August 2017 enabled all its computers to collectively pore through 7 million trillion different number guesses per second.

[…]

Let the record show that period of time is 36,264 trillion trillion times longer than the current best-estimate age of the universe. Bitcoin’s cryptography is pretty secure.

This should be scrapped for several reasons.

The authors conflate the cryptography used by digital signatures with generating proofs-of-work.8 There are not the same thing. Digital signatures are considered “immutable” for the reasons they describe in the second part, not because of the hashes that are generated in the first.9

Another problem is that the activity in the first part — the hash generation process — is not an apples-to-apples comparison with other general computing efforts. Bitcoin mining is a narrowly specific activity and consequently ASICs have been built and deployed to generate these hashes. The single-use machines used to generate these hashes cannot even verify transactions or construct blocks. In contrast, CPUs and GPUs can process a much wider selection of general purpose applications… including serialize transactions and produce blocks.

For example: it would be like comparing a Falcon 9 rocket launch vehicle with a Toyota Prius. Sure they are nominally both “modes of transportation” but built for entirely different purposes and uses.

An additional point is that again, proof-of-work chains can and have been forked over the years. Bitcoin is not special or unique or impervious to forks either (here’s a history of the times Bitcoin has forked). And there are other ways to create forks, beyond the singular Maginot Line attack that the authors describe on this page.10

On p. 33 they write:

Whether the solution requires these extreme privacy measures or not, the broad model of a new ledger system that we laid out above – distributed, cryptographically secure, public yet private – may be just what’s needed to restore people’s confidence in society’s record-keeping systems. And to encourage people to re-engage in economic exchange and risk-taking.

This comes across as speculation and projecting. We will see later that the authors have a dim view of anything that is not a public blockchain. Why is this specific layout the best?

Either way, future versions should include a citation for how people’s confidence level increase because of the use of some kind of blockchain. At this time, I am unaware of any such survey.

On p. 34 they quote Tomicah Tilleman from the Global Blockchain Business Council, a lobbying organization:

Blockchain has the potential to push back against that erosion and it has the potential to create a new dynamic in which everyone can come to agree on a core set of facts but also ensure the privacy of facts that should not be in the public domain.

This seems like a non sequitur. How does a blockchain itself push back on anything directly? Just replace the word “blockchain” with “database” and see if it makes sense.

Furthermore, as we have empirically observed, there are fractures and special interest groups within each of these little coin ecosystems. Each has their own desired roadmap and in some cases, they cannot agree with one another about facts such as the impact larger block sizes may have on node operators.

On p. 35 they write:

If it can foster consensus in the way it has been shown to with Bitcon, it’s best understood as a Truth Machine.

This is a non sequitur. Just because Nakamoto consensus exists does not mean it that blockchains are machines of truth. They can replicate falsehoods if the blocks are filled with the incorrect information.

Chapter 2

On p. 38 they write:

Consider how Facebook’s secret algorithm choose the news to suit your ideological bent, creating echo chambers of like-minded angry or delighted readers who are ripe to consume and share dubious information that confirms their pre-existing political biases.

There are some really valid points in this first part of the chapter. As it relates to cryptocurrencies, a second edition should also include the astroturfing and censoring of alternative views that take place on cryptocurency-related subreddits which in turn prevent people from learning about alternative implementations.

We saw this front-and-center in 2015 with the block size debate in which moderators of /r/bitcoin (specifically, theymos and BashCo) banned any discussion from one camp, those that wanted to discuss ways of increasing the block size via a hardfork (e.g., Bitcoin XT, Bitcoin Classic).

This wasn’t the first or last time that cryptocurrency-related topics on social media have resulted in the creation of echo chambers.

On p. 43 they write:

The potential power of this concept starts with the example of Bitcoin. Even though that particular blockchain may not provide the ultimate solution in this use case, it’s worth recalling that without any of the classic, centrally deployed cybersecurity tools such as firewalls, and with a tempting “bounty” of more than $160 billion in market cap value at the time we went to print, Bitcoin’s core ledger has thus far proven to be unhackable.

There is a lot to unpack here but I think a future edition should explain in more detail how Bitcoin is a type of cybersecurity tool. Do they mean that because the information is replicated to thousands of nodes around the world, it is more resilient or redundant?

Either way, saying that “Bitcoin’s core ledger” is “unhackable” is a trope that should be removed from the next edition as well.

Why? Because when speaking about BTC or BCH or any variant of Bitcoin, there is only one “ledger” per chain… the word ‘core’ is superfluous. And as described above, the word “unhackable” should be changed to “resource intensive to fork” or something along those lines. “Unhackable” is anarchronistic because what the authors are probably trying to describe is malicious network partitions… and not something from a ’90s film like The Net.

Continuing on p. 43 they write:

Based on the ledger’s own standards for integrity, Bitcoin’s nine-year experience of survival provides pretty solid proof of the resiliency of its core mechanism for providing decentralized trust between users. It suggest that one of the most important non-currency applications of Bitcoin’s blockchain could be security itself.

This last sentence makes no sense and they do not expand on it in the book. What is the security they are talking about? And how is that particularly helpful to “non-currency applications of Bitcoin’s blockchain”? Do they mean piggy-backing like colored coins try to do?

On p. 44 they write:

The public ledger contains no identifying information about the system’s users. Even more important, no one owns or controls that ledger.

Well technically speaking, miners via mining pools control the chain. They can and do upgrade / downgrade / sidegrade the software. And they can (and do) fork and reorg a chain. Is that defined as “control”? Unclear but we’ll probably see some court cases if real large loses take place due to forks.

On p. 44 they write:

As such there is no central vector of attack.

In theory, yes. In practice though, many chains are highly centralized: both in terms of block creation and in terms of development. Thus in theory it is possible to compromise and successfully “attack” a blockchain under the right circumstances. Could be worth rephrasing this in the next edition.

On p. 44 they write:

As we’ll discuss further in the book, there are varying degrees of security in different blockchain designs, including those known as “private” or “permissioned” blockchains, which rely on central authorities to approve participants. In contrast, Bitcoin is based on a decentralized model that eschews approvals and instead banks on the participants caring enough about their money in the system to protect it.

This is a bit of a strawman because there are different types of “permissioned” blockchains designed for different purposes… they’re not all alike. In general, the main commonality is that the validators are known via a legal identity. How these networks are setup or run does not necessarily need to rely on a centralized authority, that would be a single point of trust (and failure). But we’ll discuss this later below.

On p. 44 they write:

On stage at the time, Adam Ludwin, the CEO of blockchain / distributed ledger services company Chain Inc., took advantage of the results to call out Wall Street firms for failing to see how this technology offers a different paradigm. Ludwin, whose clients include household names like Visa and Nasdaq, said he could understand why people saw a continued market for cybersecurity services, since his audience was full of people paid to worry about data breaches constantly. But their answers suggested they didn’t understand that the blockchain offered a solution. Unlike other system-design software, for which cybersecurity is an add-on, this technology “incorporates security by design,” he said.

It is unclear from the comments above exactly how a blockchain solves problems in the world of cybersecurity. Maybe it does. If so, then it should be explored in more detail than what is provided in this area of the book.

As an aside, I’m not sure how credible Ludwin’s comments on this matter are because of the multiple pivots that his companies have done over the past five years.11

On p. 45 they write:

A more radical solution is to embrace open, “permissionless” blockchains like Bitcoin and Ethereum, where there’s no central authority keeping track of who’s using the network.

This is very much a prescriptive pitch and not a descriptive analysis. Recommend changing some of the language in the next edition. Also, they should define what “open” means because there basically every mining pool doxxes themselves.

Furthermore, some exchanges that attempt to enforce their terms-of-service around KYC / AML / CTF do try to keep track of who is doing what on the network via tools from Chainalysis, Blockseer, Elliptic and others. Violating the ToS may result in account closures. Thus, ironically, the largest “permissioned” platforms are actually those on the edges of all cryptocurrencies.

See: What is Permissioned-on-Permissionless

On p. 45 they write:

It’s not about building a firewall up around a centralized pool of valuable data controlled by a trusted third party; rather the focus is on pushing control over information out to the edges of the network, to the people themselves, and on limiting the amount of identifying information that’s communicated publicly. Importantly, it’s also about making it prohibitively expensive for someone to try to steal valuable information.

This sounds all well and good, definitely noble goals. However in the cryptocurrency world, many exchanges and custodial wallets have been compromised and the victims have had very little recourse. Despite the fact that everyone is continually told not to store their private keys (coins) with an intermediary, Chainalysis found that in 2017 more than 80% of all transactions involved a third-party service.

On p. 45 they write:

Bitcoin’s core ledger has never been successfully attacked.

They should define what they mean by “attacked” because it has forked a number of times in its history. And a huge civil war took place resulting in multiple groups waging off-chain social media campaigns to promote their positions, resulting in one discrete group divorcing and another discrete group trying to prevent them from divorcing. Since there is only de facto and not de jure governance, who attacked who? Who were the victims?

On p. 45 they write:

Now, it will undoubtedly be a major challenge to get the institutions that until now have been entrusted with securing our data systems to let go and defer security to some decentralized network in which there is no identifiable authority to sue if something goes wrong. But doing so might just be the most important step they can take to improve data security. It will require them to think about security not as a function of superior encryption and other external protections, but in terms of economics, of making attacks so expensive that they’re not worth the effort.

This seems a bit repetitive with the previous couple of page, recommend slimming this down in the next edition. Also, there are several class action lawsuits underway (e.g., Ripple, Tezos) which do in fact attempt to identify specific individuals and corporations as being “authorities.” The Nano lawsuit also attempted to sue “core developers.”

On p. 46 they write:

A hacker could go after each device, try to steal the private key that’s used to initiate transactions on the decentralized network, and, if they’re lucky, get away with a few thousand dollars in bitcoin. But it’s far less lucrative and far more time-consuming than going after the rich target of a central server.

The ironic part of this is that generally speaking, the private keys controlling millions of bitcoins are being housed in trusted third parties / intermediaries right now. In some cases these are stored on a centralized server. In other cases, the cold wallet managed by hosting providers such as Xapo (which is rumored to secure $10 billion of bitcoin) does geographically split the keys apart into bunkers. Yet at some point those handling the mutli-sig do come together in order to move the coins to a hot wallet.12

On p. 47 they write:

It seems clear to us that the digital economy would benefit greatly from embracing the distributed trust architecture allowed by blockchains – whether it’s simply the data backups that a distributed system offers, or the more radical of an open system that’s protected by a high cost-to-payout ratio.

What does this mean? Are they saying to add proof-of-work to all types of distributed systems? It is only useful in the Bitcoin context in order to make it expensive to Sybil attack the network… because participants were originally unknown. Does that same problem exist in other environments that they are thinking of? More clarity should be added in the next edition.

On p. 48 they write:

The idea, one that’s also being pursued in different forms by startups such as Gem of Los Angeles and Blockchain Health of San Francisco, is that the patient has control over who sees their records.

This is one of the difficulties in writing a long-form book on this general topic right now: projects and companies frequently pivot.

For instance, a couple months after the book was published, Gem announced its “Universal Token Wallet,” a product which currently dominates its front page and social media accounts of the company. There have been no health care-related announcements from the company in over a year.

Similarly, Blockchain Health no longer exists. Its CEO left and joined Chia as a co-founder and the COO has joined the Neighborly team.

On p. 50 they write:

It was a jury-rigged solution that meant that the banking system, the centralized ledger-keeping solution with which society had solved the double-spend problem for five hundred years, would be awkwardly bolted onto the ostensibly decentralized Internet as its core trust infrastructure.

I think there are some legitimate complaints to made towards how online commerce evolved and currently exists but this seems a tad petty. As backwards as financial institutions are (rightly and wrongly) portrayed, it’s not like their decision makers sat around in the early ’90s trying to figure out how to make integrating the Web an awkward process.

On p. 50 they write:

Under this model, the banks charged merchants an interchange fee of around 3 percent to cover their anti-fraud costs, adding a hidden tax to the digital economy we all pay in the form of higher prices.

Again, like their statement above: there are some very legitimate gripes to be had regarding the existing oligopolistic payment systems, but this specific gripe is kind of petty.

Fraud exists and as a result someone has to pay for it. In the cryptocurrency world, there is no recourse because it is caveat emptor. In the world of courts and legal recourse, fees are levied to cover customer service including fraud and insurance. It may be possible to build a payment system in which there is legal recourse and simultaneously no oligopolistic rent seeking but this is not explored in the book. Also, for some reason the fee to miners is not brought up in this section, yet it is a real fee users must pay… yet they do not receive customer service as part of it.

Lastly, the Federal Reserve (and other central banks) monitor historical interchange fees. Not all users are charged the ~3% as mentioned in the book.

For instance (see below): Average Debit Card Interchange Fee by Payment Card Network

Source: Statista

On pages 52 and 53 they write uncritically about Marc Andresseen and VCs who have invested in Bitcoin and cryptocurrencies.

a16z, the venture firm co-founded by Andresseen, arguably has a few areas that may be conflicts-of-interest with the various coin-related projects it has invested in and/or promoted the past several years (e.g., investing in coins which are listed on an exchange they also are an investor and board member of such as 0x). Those ties are not scrutinized in a chapter that attempts to create a black and white narrative: that the legacy players are centralized rent-seekers and the VCs are not. When we know empirically that some VCs, including a16z, have invested in what they believe will become monopolies of some kind.

On page 54 and 55 they write about “Code is not law,” a topic that I have likewise publicly presented on.

Specifically they state:

One risk is that regulators, confused by all these outside-the-box concepts, will overreact to some bad news – potentially triggered by large-scale investors losses if and when the ICO bubble bursts and exposes a host of scams. The fear is that a new set of draconian catchall measures would suck the life out of innovation in this space or drive it offshore or underground. To be sure, institutions like the Washington-based Coin Center and the Digital Chamber of Commerce are doing their best to keep officials aware of the importance of keeping their respective jurisdictions competitive in what is now a global race to lead the world in financial technology.

This is word for word what coin lobbyists have been pitching to policy makers around the world for years. Both Coin Center and Digital Chamber of Commerce lobby on behalf of their sponsors and donors to prevent certain oversight on the cryptocurrency market.13 An entire book could probably be written about how specific people within coin lobbying organizations have attempted to white wash and spin the narrative around illicit usage, using carefully worded talking points. And they have been effective because these authors do not question the motivations and agenda these special interest groups have.

Either way, Bitcoin and many other cryptocurrencies were born in the “underground” and even “offshore.” It is unclear what the authors are trying to excuse because if anything, regulators and law enforcement have arguably been very light handed in the US and most regions abroad.

If anything, once a foreign registered ICO or coin is created, often the parent company and/or foundation opens an office to recruit developers in San Francisco, New York, and other US cities. I know this because all the multiple “blockchain” events I have attended overseas the past two years in which organizers explain their strategy. The next edition of this book could explore this phenomenon.

On p. 57 they write:

By The DAO founders’ own terms, the attacker had done nothing wrong, in other words. He or she had simply exploited one of its features.

Excellent point that should be explored in further detail in the next edition. For instance, in Bitcoin there have been multiple CVEs which if exploited (at least one was) could have resulted in changes in the money supply. Is that a feature or a bug?

And the most recent one, found in pre-0.16.3, was partially downplayed and hidden to prevent others from knowing the extent of potential damage that could have been done.

On p. 59 they write:

The dependence on a trusted middleman, some cryptocurrency purists would argue, overly compromises a blockchain’s security function, rending it unreliable. For that reason, some of them say, a blockchain is inappropriate for many non-currency applications. We, however, view it as a trade-off and believe there’s still plenty of value in recording ownership rights and transfers to digitally represented real-world assets in blockchains.

I think this whole section should be reworded to describe:

  1. what types of blockchains they had in mind?
  2. how the legal hooks into certain blockchains behave versus anarchic chains?
  3. being more precise with the term purist… do they mean maximalists or do they mean someone who points out that most proposed use-cases are chainwashing?

On pages 59 and 60 they write:

Permissioned blockchains – those which require some authorized entity to approve the computers that validate the blockchain – by definition more prone to gatekeeping controls, and therefore to the emergence monopoly or oligopoly powers, than the persmissionless ideal that Bitcoin represents. (We say “ideal” because, as we’ll discuss in the next chapter, there are also concerns that aspects of Bitcoin’s software program have encouraged an unwelcome concentration of ownership – flaws that developers are working to overcome.)

It would be beneficial in the next edition to at least walk through two different “permissioned blockchains” so the reader can get an idea of how validators become validators in these chains. By not including them, each platform is painted in the same light.

And because they are still comparing it with Bitcoin (which was designed for a completely different type of use-case than ‘permissioned chains’ are), keep in mind that the way mining (block making) is done in 2018 is very different than when it was first proposed in the 2008 paper. Back then, mining included a machine that did two things: validated blocks and also generate proofs-of-work. Today, those two functions are completely separate and because of the relatively fierce competition at generating hashes, there are real exit and entry costs to the market.

In many cases, this means that both the mining pool operators and hash generators end up connecting their real world government-issued identities with their on-chain activity (e.g., block validation). It may be a stretch to say that there is an outright monopoly in mining today, but there is a definite trend towards oligopoly in manufacturing, block producing, and hash generation the past several years. This is not explored beyond a superficial level in the book.

On p. 60 they write:

Until law changes, banks would face insurmountable legal and regulatory opposition, for example, to using a system like Bitcoin that relies on an algorithm randomly assigning responsibility at different stages of the bookkeeping process to different, unidentifiable computers around the world.

This is another asinine comment because they don’t explicitly say which laws they would like changed. The authors make it sound like the PFMIs are holding the world back when the opposite is completely true. These principals and best practices arose over time because of the systemic impact important financial market infrastructures could have on society as a whole.

Proof-of-work chains, the ones that are continually promoted in this book, have no ability to prevent forks, by design. Anarchic chains like Bitcoin and Ethereum can only provide probabilistic finality. Yet commercial best practices and courts around the world demands definitive settlement finality. Why should commerce be captured by pseudonymous, unaccountable validators maintained in jurisdictions in which legal recourse is difficult if not impossible?

On p. 60 they continue:

But that doesn’t mean that other companies don’t have a clear interest in reviewing how these permissioned networks are set up. Would a distributed ledger system that’s controlled by a consortium of the world’s biggest banking institutions be incentivized to act in the interest of the general public it serves? One can imagine the dangers of a “too-big-to-fail blockchain” massive institutions could once again hold us hostage to bailouts because of failures in the combined accounting system.

This has been one of Michael Casey’s talking points for the past three years. I was even on a panel with him in January 2016 in which he called R3 a “cartelchain,” months before Corda even existed. His justified disdain towards traditional financial institutions — and those involved with technology being developed in the “permissioned” world — pops up throughout this book. I do think there are some valid critiques of consortia and permissioned chains and even Corda, but those aren’t presented in this edition of the book.

He does make two valid observations here as well: regulated commerce should have oversight. That is one of the reasons why many of the organizations developing “permissioned blockchains” have plans to or already have created separate legal entities to be regulated as some type of FMI.

The other point is that we should attempt to move away from recreating TBTF and SIFI scenarios. Unfortunately in some cases, “permissioned chains” are being pitched as re-enabler of that very scenario. In contrast, dFMI is a model that attempts to move away from these highly intermediated infrastructures. See also my new article on SICNs.

On p. 60 they write:

Either way, it’s incumbent upon us to ensure that the control over the blockchains of the future is sufficiently representative of broad-based interests and needs so that they don’t just become vehicles for collusion and oligpolistic power by the old guard of finance.

The ironic part of this statement is — while well-intended — because of economies of scale there is an oligopoly or even monopoly in most PoW-mined coins. It is unclear how or why that would change in the future. In addition, with the entrance of Bakkt, ErisX, Fidelity and other large traditional financial organizations (e.g., the old guard) into the cryptocurrency world, it is hard to see how “permissionless ecosystems” can prevent them from participating.

On p. 61 they write:

As we stated in The Age of Cryptocurrency, Bitcoin was merely the first crack at using a distributed computing and decentralized ledger-keeping system to resolve the age-old problem of trust and achieve this open, low-cost architecture for intermediary-free global transactions.

But as the authors have stated elsewhere: proof-of-work chains are inherently costly. If they were cheap to maintain then they would be cheap to fork and reorg. You cannot simultaneously have a cheap (“efficient”) and secure PoW network… that’s a contradiction.

See:

Chapter 3

On pages 64 and 65 they provide a definition of a blockchain. I think this could be more helpful more earlier on in the book for newer audiences.

A few other citations readers may be interested in:

On p. 66 they write:

That way, no authorizing entity could block, retract, or decide what gest entered into the ledger, making it censorship resistant.

Could be worth referencing Eligius, a pool run by Luke-Jr. that would not allow Satoshi Dice transactions because its owners religious views.14

On p. 67 they write:

These computers are known as “miners,” because in seeking to win the ten-minute payout, they engage in a kind of computational treasure hunt for digital gold.

I understand the need to make simple analogies but the digital gold one isn’t quite right because gold does not have an inflexible supply whereas bitcoin does. I’ve pointed this out in other book reviews and it bears repeating because of how the narrative of e-cash to HODLing has changed over the last few years.1516

Readers may be interested of a few real life examples of perfectly inelastic supplies.

On p. 67 they write:

Proof of work is expensive, because it chews up both electricity and processing power. That means that if a miner wants to seize majority control of the consensus system by adding more computing power, they would have to spend a lot of money doing so.

This is correct. Yet six pages earlier they say it is a “low-cost” infrastructure. Needs to be a little more consistent in this book. Either PoW is resource intensive or it is not, it cannot be both.

On p. 68 they write:

Over time, bitcoin mining has evolved into an industrial undertaking, with gigantic mining “farms” now dominating the network. Might those big players collude and undermine the ledger by combining resources? Perhaps, but there are also overwhelming disincentives for doing so. Among other considerations, a successful attack would significantly undermine the value of all the bitcoins the attacking miner owns. Either way, no one has managed to attack Bitcoin’s ledger in nine years. That unbroken record continues to reinforce belief in Bitcoin’s cost-and-incentive security system.

It’s worth pointing out that there are ways to fork Bitcoin beyond the singular Maginot Line attack. As mentioned above, Bitcoin and many other coins have forked; see this history. Hundreds of coins have died due to lack of interest by miners and developers.

It could also be argued that between 2015-2017, Bitcoin underwent a social, off-chain attack by multiple different groups attempting to exert their own influence and ideology onto the ecosystem. The end result was a permanent fracture, a divorce which the principal participants still lob social media bombs at one another. There isn’t enough room to discuss it here, but the astroturfing actions by specific people and companies in order to influence others is worth looking into as well. And it worked.

On p. 71 they write:

The caveat, of course, is that if bad actors do control more than 50 percent of the computing power they can produce the longest chain and so incorporate fraudulent transactions, which other miners will unwittingly treat as legitimate. Still, as we’ve explained, achieving that level of computing power is prohibitively expensive. It’s this combination of math and money that keeps Bitcoin secure.

I probably would change some of the wording because with proof-of-work chains (and basically any cryptocurrency), there are no terms of service or end user license agreement or SLA. At most there is only de facto governance and certainly not de jure.

What does that mean? It means that we really can’t say who the “bad actors” are since there is no service agreement. Barring an administrator, who is the legitimate authority in the anarchic world of cryptocurrencies? The original pitch was: if miners want to choose to build on another tree or fork, it’s their decision to do so… they don’t need anyone’s permission to validate blocks and attempt to update the chain as they want to. The next edition should explicitly say who or what is an attacker or what a fraudulent transaction is… these are points I’ve raised in other posts and book reviews.

Also, the authors mention that computational resources involved in PoW are “prohibitively expensive” here. So again, to be consistent they likely should remove “low-cost” in other places.

On p. 71 and 72 they write:

In solving the double-spend problem, Bitcoin did something else important: it magically created the concept of a “digital asset.” Previously, anything digital was too easily replicated to be regarded as a distinct piece of property, which is why digital products such as music and movies are typically sold with licensing and access rights rather than ownership. By making it impossible to replicate something of value – in this case bitcoins – Bitcoin broke this conventional wisdom. It created digital scarcity.

No it did not. This whole passage is wrong. As we have seen with forks and clones, there really is no such thing as this DRM-for-money narrative. This should be removed in the next edition.

Scarcity effectively means rivalrous, yet anyone can copy and clone any of these anarchic chains. PoW might make it relatively expensive to do a block reorg on one specific chain, but it does not really prevent someone from doing what they want with an identically cloned chain.

For instance, here is a list of 44 Bitcoin forked tokens that arose between August 2017 and May 2018. In light of the Bitcoin and Bitcoin Cash divorce, lobbying exchanges to recognize ticker symbols is also worth looking into in a future edition.

On p. 73 they write:

Many startups that were trying to build a business on top of Bitcoin, such as wallet providers and exchanges, were frustrated by an inability to process their customers’ transactions in a timely manner. “I’ve become a trusted third party,” complained Wences Casares, CEO of bitcoin wallet and custodial service Xapo. Casares was referring to the fact that too many of his firms’ transactions with its customers had to be processed “off-chain” on faith that Xapo would later settle the transaction on the Bitcoin blockchain.

This is one of the most honest statements in the book. The entire cryptocurrency ecosystem is now dominated by intermediaries.

Interestingly, Xapo moved its main office from Palo Alto to Switzerland days after Ripple was fined by FinCEN for violating the BSA. Was this just a coincidence?

On p. 73 they wrote:

Making blocks bigger would require more memory, which would make it even more expensive to operate a miner, critics pointed out. That could drive other prospective miners away, and leave Bitcoin mining even more concentrated among a few centralized players, raising the existential threat of collusion to undermine the ledger.

This wasn’t really the argument being made by the “small blockers.” Rather, it was disk space (not memory) that was — at the time — perceived as a limitation for retail (home) users in the long run. Yet it has been a moot point for both Bitcoin and Bitcoin Cash as the price per gigabyte for a hard drive continues to decline over time… and because in the past year, on-chain transactions on both chains have fallen from their peak in December 2017.

In practice, the “miners” that that authors refer to are the roughly 15 to 20 or so mining pools that in a given day, create the blocks that others build on. Nearly all of them maintain these nodes at a cloud provider. So there is already a lot of trust that takes place (e.g., AWS and Alibaba are trusted third parties). Because of economies of scale, spinning up a node (computer) in AWS is relatively inexpensive.

It really isn’t discussed much in the book, but the main argument throughout the 2nd half of 2017 was about UASF — a populist message which basically said miners (mining pools) didn’t really matter. Followers of this philosophy emphasized the need to run a node at home. For instance, if a UASF supporter based in rural Florida is attempting to run a node from his home, there could be a stark difference between the uptime and bandwidth capacity he has at home versus what AWS provides.

On p. 74 they write:

Without a tally of who’s who and who owns what, there was no way to gauge what the majority of the Bitcoin community, composed of users, businesses, investors, developers, and miners, wanted. And so, it all devolved into shouting matches on social media.

I wrote about this phenomenon in Appendix A in a paper published in November 2015. And what eventually happened was a series of off-chain Sybil attacks by several different tribes, but especially by promoters of UASF who spun up hundreds — thousands of nodes — and acted as if those mattered.

Future editions should also include a discussion on what took place at the Hong Kong roundtable, New York agreement, and other multilateral governance-related talks prior to the Bitcoin Cash fork.

On p. 74 they write:

A hard-fork-based software change thus poses a do-or-die decision for users on whether to upgrade or not. That’s bad enough for, say, word processing software, but for a currency it’s downright problematic. A bitcoin based on the old version could not be transferred to someone running software that support the new version. Two Bitcoins. Two versions of the truth.

The authors actually accidentally proved my earlier point: that public chains, specifically, proof-of-work chains, cannot prevent duplication or forks. Proof-of-work only makes it resource intensive to do double-spend on one specific chain.

This is one of the reasons why regulated financial organizations likely will continue to not issue long lifecycle instruments directly onto an anarchic chain like Bitcoin: because by design, PoW chains are forkable.

Also, future editions may want to modify this language because there are some counterarguments from folks like Vitalik Buterin that state: because hard forks are opt-in and thus lead to cleaner long-term outcomes (e.g., less technical debt).

On p. 75 they write a lot about Lightning Network, stating:

So, there are no miners’ fees to pay and no limit on how many transaction can be done at any time. The smart contracts prevent users from defrauding each other while the Bitcoin blockchain is used solely as a settlement layer, recording new balance transactions whenever a channel is opened or closed. It persists as the ultimate source of proof, a guarantee that all the “off-chain” Lightning transactions are legitimate.

What is not discussed in this edition is that:

  1. Lightning has been massively hyped with still relatively subdued traction
  2. Lightning is a separate network – it is not Bitcoin – and thus must be protected and secured through other non-mining means
  3. Lightning arguably distorts the potential transition to a fee-based Bitcoin network in much the same way that intermediaries like Coinbase do. That is to say, users are paying intermediaries the fees instead of miners thus prolonging the time that miners rely on block rewards (as a subsidy) instead of user fees.

Also, it bears mentioning that Bitcoin cannot in its current form act as a legal “settlement layer” as it cannot provide definitive settlement finality as outlined in the PFMIs (principle #8).

On p. 75 they write:

The SegWit/Lightning combination was in their minds the responsible way to make changes. They had a duty, they believed, to avoid big, disruptive codebase alterations and instead wanted to encourage innovators to develop applications that would augment the powers of the limited foundational code. It’s a classic, security-minded approach to protocol development: keep the core system at the bottom layer of the system simple, robust, and hard to change – some of the words “deliberately dumb” – and thus force innovation “up the stack” to the “application layer.” When it works you get the best of both worlds: security and innovation.

The authors should revise this because this is just repeating the talking points of specific Core developers, especially the last line.

Empirically it is possible to create a secure and “innovative” platform… and do so with multiple implementations of a specification. We see that in other cryptocurrencies and blockchain-related development efforts including Ethereum. The Bitcoin Core participants do not have a monopoly on what is or is not “security minded” and several of them are vocally opposed to supporting multiple implementations, in part, because of the politics around who controls the BIP process.

In fact, it could be argued that by insisting on the SegWit/Lightning approach, they caused a disruption because in point of fact, the amount of code that needed to be changed to increase the block size is arguably less than what was needed to build, verify, and release SegWit.

It’s not worth wading deep into these waters in this review, but the next edition of this book should be more even handed towards this schism.

On p. 76 they write:

But a group of miners with real clout was having none of it. Led by a Chinese company that both mined bitcoin and produced some of the most widely used mining equipment, this group was adamantly opposed to SegWit and Lightning. It’s not entirely clear what upset Jihan Wu, CEO of Bitmain, but after lining up with early Bitcoin investor and prominent libertarian Roger Ver, he launched a series of lobbying efforts to promote bigger blocks. One theory was that Bitmain worried that an “off-chain” Lightning solution would siphon away transaction fees that should be rightly going to miners; another was that because such payment channel transactions weren’t traceable as on-chain transactions, Chinese miners were worried that their government might shut them down. Bitmain’s reputation suffered a blow when revelations emerged that its popular Ant-miner mining rigs were being shipped to third-party miners with a “backdoor” that allowed the manufacturer-cum-miner to shut its opponents’ equipment down. Conspiracy theories abounded: Bitmain was planning to subvert SegWit. The company denied this and vowed to disable the feature. But trust was destroyed.

There is a lot of revisionism here.

But to start with, in the process of writing this review I reached out and contacted both Roger Ver and separately an advisor at Bitmain. Both told me that neither of the authors of this book had reached out to them for any comment. Why would the authors freely quote Bitcoin Core / SegWit developers to get their side of this debate but not reach out to speak with two prominent individuals from the other side to get their specific views? The next edition should either include these views and/or heavily revise this section of the book.

There are a few other problems with this passage.

Multiple different groups were actively lobbying and petitioning various influential figures (such as exchange operators) during this time period, not just Jihan and Roger. For instance, as mentioned above, the Hong Kong roundtable and New York agreement were two such examples. Conversely, SegWit and UASF was heavily promoted and lobbied by executives and affiliates at Blockstream and a handful of other organizations.

Regarding this “backdoor,” let’s rewind the clock and look at the overt / covert tempest in a teapot.

Last April Bitmain was alleged by Greg Maxwell (and the Antbleed campaign) of having maybe kinda sorta engaged in something called covert mining via Asicboost. Jimmy Song and others looked into it and said that there was no evidence covert was happening. At the time, some of the vocal self-identified “small block” supporters backing UASF, used this as evidence that Bitmain was a malicious Byzantine actor that must be purged from Bitcoinland. At the time, Greg proposed changing the PoW function in Bitcoin in order to prevent covert Asicboost from working.

In its defense, Bitmain stated that while Asicboost had been integrated into the mining equipment, it was never activated… partly because of the uncertain international IP / patent claims surrounding Asicboost. Recently, they announced a firmware upgrade that miners could activate overt Asicboost… a few days after another organization did (called “braiins”).

So why revisit this?

Two months ago Sia released code which specifically blocked mining equipment from Bitmain and Innosilicon. How and why this action is perceived as being fair or non-political is very confusing… they are definitely picking favorites (their own hardware). Certainly can’t claim to be sufficiently decentralized, right?

Yet in this section of the book, they don’t really touch on how key participants within the tribes and factions, represented at the time. Peruse both lists and look at all of the individuals at the roundtable that claim to represent “Bitcoin Core” in the governance process versus (the non-existent) reps from other implementations.

Even though the divorce is considered over, the tribes still fling mud at one another.

For example, one of the signatories of the HK roundtable, Adam Back, is still heckling Bitmain for supposedly not being involved in the BIP process. Wasn’t participation supposed to be “voluntary” and “permissionless”? Adam is also now fine with “overt” Asicboost today but wasn’t okay with it 18 months ago. What changed? Why was it supposedly bad for Bitmain to potentially use it back then but now it’s kosher because “braiins” (Slush) is doing it? That seems like favoritism.

Either way, the book passage above needs to be rewritten to include views from other camps and also to remove the still unproven conspiracy theories.

On p. 76 they write:

Meanwhile, original bitcoin went on a tear, rallying by more than 50 percent to a new high above $4,400 over a two-week period. The comparative performance of the pair suggested that small-block BTC and the SegWit reformers had won.

The next edition should change the wording because this comes across one-sided.

While an imperfect comparison, a more likely explanation is that of a Keynesian beauty contest. Most unsophisticated retail investors had heard of Bitcoin and hadn’t heard of Bitcoin Cash. Bitcoin (BTC) has brand recognition while Bitcoin Cash and the dozens of other Bitcoin-named forks and clones, did not.

Based on anecdotes, most coin speculators do not seem to care about the technical specifications of the coins they buy and typically keep the coins stored on an intermediary (such as an exchange) with the view that they can sell the coins later to someone else (e.g., “a greater fool“).

On p. 77 they write:

Bitcoin had gone through a ridiculous circus, one that many outsiders naturally assumed would hurt its reputation and undermine its support. Who wants such an ungovernable currency? Yet here was the original bitcoin surging to new heights and registering a staggering 650 percent gain in less than twelve months.

The problem with cherry picking price action dates is that, as seen in the passage above, it may not age well.17

For example, during the write-up of this review, the price of bitcoin declined from where it was a year ago (from over $10,000 then down to around $4,000). What does that mean? We can all guess what happened during this most recent bubble, but to act like non-tech savvy retail buyers bought bitcoin (BTC) because of SegWit is a non sequitur. No one but the tribalists in the civil war really cared.

On p. 77 they write:

Why? Well, for one, Bitcoin had proven itself resilient. Despite its civil war, its blockchain ledger remained intact. And, while it’s hard to see how the acrimony and bitterness was an advantage, the fact that it had proven so difficult to alter the code, to introduce a change to its monetary system, was seen by many as an important test of Bitcoin’s immutability.

There are a few issues here.

What do the authors mean by the “blockchain ledger remained intact”? I don’t think it was ever a question over whether or not copies of the Bitcoin blockchain (and/or forks thereof) would somehow be deleted. Might want to reword this in the future.

Segwit2x / Bitcoin Cash proponents were not trying to introduce a change to Bitcoin’s monetary system. The supply schedule of bitcoins would have stayed the same. The main issue was: a permanent block size increase from 1 MB to at least 2 MB. That proposal, if enacted, would not have changed the money supply.

What do the authors mean by “Bitcoin’s immutability”? The digital signatures are not being reversed or changed and that is what provides transactions the characteristic of “immutability.”

It is likely that the authors believe that a “hard fork” means that Bitcoin is not immutable. That seems to conflate “immutability” of a digital signature with finality (meaning irreversibility). By design, no proof-of-work coin can guarantee finality or irreversibility.

Also, Bitcoin had more than a dozen forks prior to the block size civil war.

On p. 77 and 78 they write:

Solid censorship resistance was, after all, a defining selling point for Bitcoin, the reason why some see the digital currency becoming a world reserve asset to replace the outdated, mutable, fiat-currency systems that still run the world. In fact, it could be argued that this failure to compromise and move forward, seen by outsiders as Bitcoin’s biggest flaw, might actually be its biggest feature. Like the simple, unchanging codebase of TCP/IP, the gridlocked politics of the Bitcoin protocol were imposing secure rigidity on the system and forcing innovation up the stack.

This is not what “censorship resistance” means in the context of Bitcoin. Censorship resistance is narrow and specific to what operators of miners could do. Specifically, the game theory behind Nakamoto Consensus is that it would be costly (resource intensive) for a malicious (Byzantine) actor to try and attempt to permanently censor transactions due to the amount of hashrate (proof-of-work) a Byzantine actor would need to control (e.g., more than 50%).

In contrast, what the authors described in this book was off-chain censorship, such as lobbying by various special interest groups at events, flamewars on Twitter, removing alternative views and voices on reddit, and via several other forms.

The “world reserve asset” is a loaded phrase that should be clarified in the next edition because the passage above comes across a bit like an Occupy Wall Street speech. It needs more of an explanation beyond the colorful one sentence it was given. Furthermore, as I predicted last year, cryptocurrencies continue to rely on the unit-of-account of “fiat systems” and shows no signs of letting up in this new era of “stablecoins.”

The authors definitely need to remove the part that says “unchanging codebase of TCP/IP” because this is not true. TCP/IP is a suite of protocol standards and its constituent implementations continue to evolve over time. There is no single monolithic codebase that lies unchanged since 1974 which is basically the takeaway from the passage above.18

In fact, several governing bodies such as IFTF and IAB continue to issue RFCs in order to help improve the quality-of-service of what we call the internet. It is also worth pointing out that their analogy is flawed for other reasons discussed in: Intranets and the Internet. In addition, the next version of HTTP won’t be using TCP.

As far as whether innovation will move “up the stack” remains to be seen but this seems to be an argument that the ends justify the means. If that is the case, that appears to open up a can of worms beyond the space for this review.

On p. 78 there is a typo: “BTH” instead of “BCH”

On p. 78 they write:

That’s what BTC, the original Bitcoin, promises with its depth of talent at Core and elsewhere. BTH can’t access such rich inventiveness because the community of money-focused bitcoin miners can’t attract the same kinds of passionate developers.

Strongly recommend removing this passage because it comes across as a one-sided marketing message rather than a balanced or neutral explanation using metrics. For instance, how active are the various code repositories for Bitcoin Core, Unlimited, and others? The next edition should attempt to measure how to measure “depth.”

For example, Bitmain has invested $50 million into a new fund focused on Bitcoin Cash called “Permissionless Ventures.” 2-3 years from now, what are the outcomes of that portfolio?

On p. 78 they write about permissioned blockchains:

Under these arrangements, some authority, such as a consortium of banks, choose which entities get to participate in the validation process. It is, in many respects, a step backward from Nakamoto’s achievement, since it makes the users of that permissioned system dependent once again, on the say-so of some trusted third party.

This is a common refrain throughout the book: that the true innovation was Bitcoin.

But it’s an apples-to-oranges comparison. Both worlds can and will co-exist because they were designed for different operating environments. Bitcoin cannot provide the same finality guarantees that “permissioned chains” attempt to do… because it was designed to be forkable. That’s not necessarily a flaw because Satoshi wasn’t trying to create a solution to a problem banks had. It’s okay to be different.

On p. 79 they write:

Most importantly, permissioned blockchains are more scalable than Bitcoin’s, at least for now, since their governance doesn’t depend upon the agreement of thousands of unidentified actors around the world; their members can simply agree to increase computing power whenever processing needs rise.

This doesn’t make sense at all. “Permissioned chains” in the broadest sense, do not use proof-of-work. As a result, there is no computational arms race. Not once have I been in a governance-related meeting involving banks in which they thought the solution to a governance-related issue was increasing or decreasing computational power. It is a non sequitur and should be removed in the next edition.

Also, there are plenty of governance issues involving “permissioned chains” — but those are typically tangential to the technical challenges and limitations around scaling a blockchain.

On p. 79 they write:

To us, permissionless systems pose the greatest opportunity. While there may well be great value in developing permissioned blockchains as an interim step toward a more open system, we believe permissionlessness and open access are ideals that we should strive for – notwithstanding the challenges exposed by Bitcoin’s “civil war.”

The authors repeat this statement in a couple other areas in the book and it doesn’t really make sense. Why? Because it is possible for both operating environments to co-exist. It doesn’t have to be us versus them. This is a false dichotomy.

Also, if any of these “permissioned chains” are actually put into production, it could be the case that end users could have “open access” to the platform, with the exception of participating in the validation of blocks. That’s pretty much how most coin users experience a cryptocurrency network today (e.g., via permissioned endpoints on Coinbase).19

On p. 80 they write:

The problem was that Bitcoin’s single-purpose currency design wasn’t ideally suited for these non-currency applications.

A side note maybe worth mentioning in a footnote is that Satoshi did attempt to build a marketplace early on but gave up.

On p. 81 they mention Nick Szabo with respect to smart contracts. Could be worth exploring the work of Martín Abadi which predates Szabo (the idea of distributed programs that perform authorizations predates Szabo’s “smart contracts”).  Mark S Miller has also done work in this area.

On p. 82 they write about Ethereum:

“Android for decentralized apps.” It would be an open platform much like Google’s smartphone operating system, on which people could design any new application they wanted and run it, not on a single company-owned server but in a decentralized manner across Ethereum’s ownerless network of computers.

This is probably not the best analogy because there is a difference between Google Android and Android Open Source Project. One of them includes proprietary tech. Also, Google can and does add and remove applications from the Play store on a regular basis based on its terms and conditions.

Lastly, someone does in fact own each of the computers that constitute the Ethereum blockchain… mining farms are owned by someone, mining pools are owned by someone, validating nodes are owned by someone. And so forth.

On p. 82 they write about Vitalik Buterin:

Now he was building a universally accessible, decentralized global supercomputer.

The next edition should drop the “supercomputer” verbiage because the Ethereum chain is only as powerful as the least powerful mining pool node… which in practice is typically a common computer located in a cloud provider such as AWS. This isn’t something like Summit over at Oak Ridge.

On p. 82 they write:

Now, with more than six hundred decentralized applications, or Dapps, running on Ethereum, he is looking vindicated. In just the first eleven months of 2017, the system’s internal currency, ether, rose from just over $8 to more than $400. By then the entire market cap for ether stood at $39 billion, a quarter that of Bitcoin’s. The success has made the wunderkind Buterin an instant multi-millionaire and turned him into a cultlike figure for the holders of ether and related tokens who’ve become rich.

The next version of the book should explicitly spell out what are the metrics for success. If it is solely price of a coin going up, what happens when the price of the coins goes down like it has in the past year?

For instance, ether (ETH), peaked in mid-January at around $1,400 and has been hovering near $100 the past several weeks. Does that mean Vitalik is no longer vindicated? Also, what is he vindicated from?

Lastly, it would be worth exploring in the next edition what Dapps are currently being used on a regular basis. As of this writing, the most popular Dapps are gambling apps (like proof-of-weak-hands / FOMO3D) and a few “decentralized exchanges” (DEX).

On p. 82 they write:

Ethereum co-founder Joseph Lubin only added to the complexity when he setup ConsenSys, a Brooklyn-based think tank-like business development unit tasked with developing new use cases and applications of the technology.

ConsenSys markets itself as a “venture studio” — a bit like YCombinator which incubates projects and provides some seed financing to get it off the ground. These projects are typically referred to as “spokes” (like a hub-and-spoke model).  As of this writing there are over 1,100 employees spread across several dozen spokes.  There is more to it than that and it would be interesting to see it explored in the next edition.

On p. 83 they write:

For example, the Parity Wallet, which was designed by Ethereum co-founder and lead architect Gavin Wood as a way to seamlessly engage, via a browser, with Ethereum smart contracts, lost $30 million in a hack.

Actually, Parity had a couple issues in 2017 and it is likely that the book may have been sent to publication around the same time the bigger problem occurred on November 13, 2017. The second one involved a Parity-developed multisig wallet… and $150 million in ether that is now locked away and cannot be accessed (barring a hardfork). Most developers — including those at Parity — characterize this instance as a “bug” that was accidentally exploited by a developer.

On p. 84 they write:

These kinds of dynamics, with large amounts of money at stake, can foster concerns that founders’ interests are misaligned with other users. Ethereum’s answer was the not-for-profit Ethereum Foundation, which was tasked with managing the pool of ether and other assets from the pre-mine and pre-sale- a model since used by many of the ICO token sales.

It would be interesting to explore how this foundation was created and how it evolved and who manages it today. For instance, at one point in 2014 there were conversations around creating a commercial, for-profit entity led in part by Charles Hoskinson who later left and founded Cardano.

On p. 85 they write about The DAO:

After a few modest coding changes failed, they settled on a drastic fix: Ethereum’s core developers “hard-forked” the Ethereum blockchain, implementing a backward-incompatible software update that invalidated all of the attacker’s transactions from a certain date forward. It was a radical move. To many in the cryptocurrency community, it threw into question Ethereum’s all-important claim to immutability. If a group of developers can force a change in the ledger to override the actions of a user, however unsavory those actions are, how can you trust that ledger won’t be tampered with or manipulated again in the interest of one group over another? Does that not destroy the whole value proposition?

This passage should probably be revised because of the usage of the word immutable.

Also, it could be argued that Bitcoin Core and other “core” groups act as gate keepers to the BIP process (or its equivalent) could lobby on behalf of special interest groups to push specific code changes and/or favor certain outcomes on behalf of specific stakeholders.

In either case, it is the miners that ultimately install and use the code. While some developers (like Bitcoin Core) are highly influential, without miners installing and running software, the rules on the network cannot be changed.

See Sufficiently Decentralized Howeycoins.

On p. 85 they write:

Well, in many respects, the Ethereum team operated as policymakers do during real-world crises. They made hard decisions that hurt some but were ultimately taken in the interests of the greater good — determined, hopefully, through as democratic a process as possible. The organizers went to great lengths to explain and gain support for the hard fork.

The next edition should strive to be more specific here: what exactly made the decision making around the hard fork democratic. Who participated, who didn’t participate. And so forth.

Continuing on p. 85:

And, much like the Segwit2x and other Bitcoin reform pro-miners didn’t accept it. For all intents and purposes, the fix was democratic – arguably, much more so than non-participatory democratic models through which crisis policymaking is enacted by national governments. And since Ethereum is more of a community of software engineers than of cryptocurrency investors, it was less contentious than Bitcoin’s struggle over hard-fork proposals.

This makes very little sense as it is written because the authors don’t define or specify what exactly made any of the decision making democratic. Who was enfranchised? Who got to vote and make decision? Also, how do the authors know that Ethereum is “more of a community of software engineers than of cryptocurrency investors.” Is there any hard numbers to back that assertion up?

And lastly how do we measure the level of contentiousness? Is there an objective measure out there?

On p. 85 they write about Ethereum Classic:

This created much confusion and some interesting arbitrage opportunities – as well as some lessons for bitcoin traders when their own currency split two years later – but it can also be viewed as the actions of a dissenting group non-violently exercising their right to secede. More than a year later, Ethereum Classic is still around, though it trades at a small fraction of Ethereum’s value, which means The DAO attacker’s funds – whose movements on the public Ethereum blockchain have been closely watched – are of lower value than if they’d been preserved in ETH.

I don’t think we can really say for sure how much the The DAO fund (and child DAO fundss) would be worth since that is an alternative timeline.

Also, there are some vocal maximalists that have created various Ethereum-branded tribes which are okay with The DAO attacker having access to those funds. Will be interesting to see if there are any sociological studies to reference in a new edition.

On p. 86 they write:

These hacks, and the scrambles to fix them, seem nuts, right? But let’s put them in perspective. First, is this monetary chaos anything less unsettling than the financial crisis of 2008? Or the audacity of the subsequent Wall Street trading scandals?

This is a whataboutism. Also, strangely the authors are saying the bar for judgement is as low as the financial engineering and socialized loses of the GFC. Isn’t the narrative that cryptocurrencies are supposed to be held to a higher standard because the coin creators seek to architect a world that doesn’t have arbitrary decision making?

On p. 87 and 88 they write:

When the FBI auctioned the 144,000 bitcoins (worth $1.4 billion as of late November 2017) that it seized from Ross Ulbricht, the convicted mastermind of the Silk Road illicit goods marketplace, those coins fetched a significantly higher price than others in the market. The notion was that hey had now been “whitewashed” by the U.S. government. In comparison, other bitcoins with a potentially shady past should be worth less because of the risk of future seizure. That’s hardly fair: imagine if the dollar notes in your wallet were hit with a 10 percent tax because the merchant knew that five years ago, unbeknownst to you, they had been handled by a drug dealer. To avoid these distortions and create a cryptocurrency that works more like fungible cash, Wilcox’s Zcash uses sophisticated “zero-knowledge proofs” to allow miners to prove that holders of the currency aren’t’ double-spending without being able to trace the addresses.

What the authors likely mean by “whitewashed” is probably “cleansed.” In the US there have been discussions on how this could take place via the existing Uniform Commercial Code (see Section 3.3). To date, there hasn’t been a specific update to the UCC regarding this issue (yet) but it has been discussed in multiple places such as Bitcoin’s lien problem.

As far as the “fairness” claim goes, it could be worth revising the passage to include a discussion around nemo dat quod non habet and bona fide purchasers. Legal tender is explicitly exempt because of the very scenario the authors describe. But cryptocurrencies aren’t legal tender, so that exemption doesn’t exist (yet).

Lastly, only “shielded” transactions in Zcash provide the functionality described in the passage above… not all transactions on Zcash utilize and opt-in to this mode.

On p. 89 they describe EOS. Worth updating this section because to-date, they have not achieved the 50,000 transactions per second on mainnet that is stated in the book. There has also been a bit of churn in the organizations as Ian Grigg (named in the book) is no longer at the organization, nor are employees 2 through 5.

On p. 90 they write about proof-of-stake:

One criticism of the model has been that without the electricity consumption costs of proof of work, attackers in a proof-of-stake system would simply mine multiple blocks to boost their chances of inserting a fraudulent one into the ledger.

This “nothing at stake” scenario is a valid criticism of some early attempts at building a proof-of-stake mechanism but isn’t valid for some other proposals (such as, theoretically, “Slasher“).

Chapter 4

On p. 91 they write:

It was clear that investors bought into Brave’s promise of a token that could fundamentally change the broken online advertising industry.

How do we know this was clear to investors? Anecdotally it appears that at least some investors participated as speculators, with the view that the token price would increase. A future edition should probably change the wording unless there is a reference that breaks down the motivation of the investors.

What about Civil?

On p. 96 they write about StorJ

Other models include that of the decentralized computer storage platform Storj, which allows hard-drive-starved users to access other’s excess space in exchange for storj tokens.

Could be worth pointing out that Storj had two public ICOs and it is still unclear if that will result in legal or regulatory issues. Putting that aside, currently Storj has just under 3,000 users. This stat is worth looking at again in future versions, especially in light of less-than-favorable reviews.

On p. 98 they talk about BAT:

The point is that it’s all on the community – the society of BATs users – not on external investors, to bear the risk of that happening

[…]

Once the 1 billion tokens had sold out in twenty-four seconds, it was revelead that only 130 accounts got them and that the biggest twenty holdings covered more than two-thirds of the total. Those distortions left many investors angry.

There is currently a debate around whether these types of ICOs in 2017 (and earlier) were investment contracts (e.g., securities). In the US, this has led to more than a hundred subpoenas with some quiet (and not so quiet) enforcement action.

The language used in this chapter (and elsewhere in the book) suggests that the participants involved in the ICO were investing with the expectation of profit in a common enterprise managed by the Brave team. Worth revisiting in a future edition.

On p. 102 they write about ERC20 tokens:

But because of the ERC-20 solution, they didn’t need to develop their own blockchain with all the independent computing power that would require. Instead, Ethereum’s existing computing network would do the validation for them.

This piggybacking may be initially helpful to token issuers but:

  1. it is a form of centralization which could have legal and regulatory consequences with respect to being viewed as not sufficiently decentralized
  2. in the long run this could create a top-heavy issue as miners are not being compensated in proportion to the amount of value they are trying to secure (see Section 2.1)

On p. 102 they write:

This low-cost solution to the double-spending challenge launched a factory of ICOs as issuers found an easy way to tap a global investing community. No painful negotiations with venture capitalists over dilution and control of the board. No wining and dining of Wall Street investment banks to get them to put their clients on the order book. No wait for SEC approval. Just straight to the general public: here are more tokens; they’re cool, buy them. It was a simple, low-cost formula and it lowered the barrier to entry for some brilliant innovators to bring potentially world-changing ideas to market. Unfortunately, it was also a magnet for scammers.

Could be worth updating this section to include more details on the scams and fraud that took place throughout 2017. Many of the tokens that raised capital from outside investors during this time not only have not delivered a working product, but in most cases, the token underperformed both ether and bitcoin.

Also bears mentioning that beginning in late 2017 through the time of this writing, there was a clear divergence between public sale ICOs and private sale of tokens… the latter of which basically involves a private placement to accredited investors, including the same type of funds that the passage above eschewed.

On p. 104 they write about Gnosis:

With the other 95 percent controlled by the founders, those prices meant that the implied valuation of the entire enterprise stood at $300 million – a figure that soon rose above $1 billion as the Gnosis token promptly quadrupled in price in the secondary market. By Silicon Valley standards, it meant we had the first ICO “unicorn.”

Actually, Ethereum did an ICO back in 2014 — and as the price of ether (measured in USD) increased, it is likely that ETH could be seen as the first ICO “unicorn.” But that’s not really an apples-to-apples comparison though because ETH (or Gnosis) holders do not have say, voting rights, which equity holders of a traditional company would.  Plus, “marketcap” is a poorly defined metric in the coin world (see Section 6).

On p. 104 and 105 they write:

One day, Paul received a call from a businessman who’d read one of his stories in The Wall Street Journal and wanted more information about how to get started and where to get legal advice. The man said he’d tried to reach the lawyer Marco Santori, a partner at the law firm Cooley who’d been quoted in the story, but couldn’t get through. Santori later told us that he was getting so many calls about ICOs, he simply couldn’t answer them all.

In January 2018, the SEC Chairman gave a public speech in which he singled out the “gatekeepers” (legal professionals) regarding the advice they gave clients. Could be worth revisiting who the main ICO-focused lawyers and lawfirms were during this time period and where they are now and if there were any enforcement actions undertaken.

On p. 105 they write:

“Most of these will fail,” said Olaf Carlson-Wee, the CEO of Polychain Capital, citing poorly conceived ideas and a lack of coding development. “Most of these are bad ideas from the beginning.” That said, Polychain is an investment firm that Carlson-Wee founded expressly to invest in these new projects. In fact, most of the people investing seemed to be taking a very VC-like approach to it. They understood that most of the projects would fail. They just hoped to have a few chips down on the one winner.

Carlson-Wee’s comments seem accurate insofar as the inability of many projects to execute and deliver based on the narratives each pitched investors. However, it could be worth digging into Polychain itself, which among other drama, may have “flipped” tokens due to a lack of lock-up periods.20 21

On p. 108 and 109 they compare Blue Apron and block.one (EOS). Even though it’s not an apples-to-apples comparison could be worth revisiting this in the future because of the churn and drama with both organizations.

Pages 110 and 111 aged quickly as most of the ICO rating websites and newsletters have fallen to the wayside due to payola scandals and inability to trust the motivations behind the ratings.

Similarly, the authors describe accredited investors and SAFTs. There is a typo here as the authors likely mean that an individual needs to have an income of $200,000 not $200 million. The SAFT model has fallen out of favor for several reasons that could be explored in a future version.22

On p. 112 they write about ASICs:

But developers of Vertcoin have shown that it’s also possible to create a permanent commitment to ASIC-resistance by introducing something from the real, non-digital world of social organizations: a pact. If the platform’s governing principles include a re-existing commitment from all users of the coin to accept a fork – a change to the code – that would add new, ASIC-resistant elements as soon as someone develops such a chip, the coin’s community can protect the distributed, democratic structure of a GPU-led mining network.

Putting aside the fanciful ASIC-resistance utopia that is peddled by some coin issuers, the passage above raises a couple flags.

Who gets to decide what the governing principles are? Do these principles get to change overtime? If the answer is yes to either, who are those decision makers and how are they chosen? So far, there has not really been any “democratic” way of participating in that decision making process for any cryptocurrency. How can that change in the future?

Why is a GPU-led mining network considered more democratic? In practice, most of these farms are located in basically the same type of structure and geography as ASIC-based equipment… in some cases they are swapped out over time. In light of the Sia coin fork… which clearly shows favoritism at play, a future edition of the book could include a chart or spectrum explaining how the mining of one coin more or less democratic versus another.

On p. 113 there is more discussion of ICOs and token sales as it relates to “open protocols” but in practice it has largely been reinventing the same intermediated system we have to do, but with fewer check and balances or even recourse for retail investors.

On p. 114 they speculate that:

This speaks to our broader notion that tokens, by incentivizing the preservation of public goods, might help humanity solve the Tragedy of the Commons, a centuries-in-the-making shift in economic reality.

That’s a big claim that requires evidence to back it. Let’s revisit next time.

On p. 115 they write:

Much like Wall Street bond traders, these will “make markets” to bring financial liquidity to every countervailing pair of tokens – buying some here and selling other there – so that if anyone wants to trade 100 BATs for a third of a Jackson Pollock, they can be assured of a reasonable market price.

But how does a blockchain actually do this? They mention Lykke as an startup that could help match tokens at a fair price… but to-date there is nothing listed on Lykke that really stands out as different than what you could fine at other cryptocurrency exchanges. Perhaps a future version of the book could walk the reader step-by-step through how a blockchain can enable this type of “fairness” whereas previous technology could not.

On p. 116 they discuss several projects they label as “interoperability” initiatives including Interledger, Cosmos, sidechains, and Lightning. It may be helpful for the reader to see a definition for what “interoperability” means because each of these projects — and its supporters — may be using the term in a different way. Perhaps a comparison chart showing the similarities and differences?

On p. 117 they write:

In an age where U.S. presidents peddle “alternative facts” and pundits talk openly about our “post-truth society,” using the truth machine to put a value on honesty sounds appealing.

On the face of it, that end goal seems like more than a stretch because it’s unclear how a blockchain (today) controls off-chain behavior. The example they go on to use is Augur. But Augur is a futures market and there are many of those already in existence. How would Augur or a futures market “with a blockchain” prevent politicians from lying? Walking through this process could be helpful to the reader.

On p. 118 they mention Erick Miller’s investment fund called CoinCircle… and a couple of “special value tokens” called Ocean Health Coin and Climate Coin.

Maybe worth following up in the next edition because neither has launched and each of the pitches sounds very handwavy, lacking in substance. Also, one of the ICOs CoinCircle advised – Unikrn – is part of a class action lawsuit.

Most of p. 119 and 120 come across as more political discourse, which is fine… but unclear how a blockchain in some form or fashion could directly impact the various issues raised. Perhaps the next edition could include a chart with a roadmap in how they see various projects achieving different milestones?

Chapter 5

If the reader is unfamiliar with IoT then the first 1/3 of chapter five is pretty helpful and informative.

Then there are some speedbumps.

On p. 130 they write about authenticating and verifying transactions involving self-driving cars:

The question, though, is: would this transaction be easily processed if it were based on a private blockchain? What are the chances, in a country of more than 230 million cars, that both vehicles would belong to the same closed network run by a group of permissioned validating computers? If they weren’t part of the same network, the payment couldn’t go through as the respective software would not be interoperable.

This is a red herring. Both “permissioned” and “permissionless” blockchains have similar (though not identical) scaling challenges. And interoperability is a separate issue which has been a known hurdle for years.

In fact, recently the Hyperledger Fabric team announced that it now supports the EVM. This comes a couple weeks after Hyperledger joined EEA as a member and vice-versa. Maybe none of these immediate efforts and experiments amount to many tangible outputs in the short-run but it does show that several ecosystems are attempting to be less tribal and more collaborative.

Also, the issue of payments is also separate from a blockchain-related infrastructure. Payments is a broad term and can include, for instance, a proposed central bank digital currency (e.g., “cash on ledger”)… or it can involve plugging into existing external payment systems (like Visa or ACH). It would be helpful if the next edition was more specific.

Continuing on p. 130 they write:

Other car manufacturers might not want to use a permissioned verification system for which, say GM, or Ford, is the gatekeeper. And if they instead formed a consortium of carmakers to run the system, would their collective control over this all-important data network create a barrier to entry for newer, startup carmakers? Would it effectively become a competition-killing oligopoly?

These are possible scenarios and good questions but this is kind of an unfair characterization of consortia. Let’s flip it around: why shouldn’t carmakers be allowed to build their own blockchains or collaborate with others who do? Do they need someones permission to do so? Depending on local regulations, maybe they do need permission or oversight in a specific jurisdiction. That could be worth exploring in another version.

On this topic they conclude that:

A truly decentralized, permissionless system could be a way around this “walled-garden” problem of siloed technology. A decentralized, permissionless system means any device can participate in the network yet still give everyone confidence in the integrity of the data, of the devices, and of the value being transacted. A permissionless system would create a much more fluid, expansive Internet of Things that’s not beholden to the say-so and fees of powerful gatekeepers.

That sounds well and good and a bit repetitive from earlier passages which said something similar. The passage aboves seems to be redefining what make something “permissioned” and “permissionless.” What does it mean for every device participate on a ‘decentralized, permissionless system’? Does that mean that each device is capable of building and/or creating a new block? If so, how do they choose which chain to build on?

And why is it so hard to imagine a world in which open-sourced platforms are also permissioned (e.g., validation is run by known, identifiable participants)… and these platforms are interoperable. Could be worth exploring because that scenario may be just as likely as the ones presented in this chapter.

Lastly, how does a “permissionless system” create a more fluid IoT world? These claims should be explored in more detail next time.

On p. 131 and 132 they write about IOTA, a specific project that markets itself as a purpose-built blockchain for IoT devices. But that project is beset by all kinds of drama that is beyond the scope of this review. Suffice to say that the February software build of IOTA cannot be run on most resource constrained IoT devices.

On p. 138 they mention in passing:

Exergy is a vital concept for measuring energy efficiency and containing wasteful practices; it doesn’t just measure the amount of energy generated but also the amount of useful work produced per each given amount of energy produced.

Fun fact: back in May 2014 I wrote an in-depth paper on Bitcoin mining that utilized the concept of “exergy.”

On pages 139-145 they talk about a number of vendors, use-cases, and platforms typically centered around the supply chain management world. Would be interesting to see which of these gained traction.

On p. 147 they write:

Blockchain-proven digital tokens point to what blockchain consultant and entrepreneurs Pindar Wong calls the “packetization of risk.” This radical idea introduces a negotiable structure to different phases of the chain. Intermediate goods that would otherwise be encumbered by a pre-established chain of unsettled commitments can instead be put out to bid to see if other buyers want to take on the rights and obligations associated with them.

It would be useful in this explanation to have a diagram or two to explain what Pindar proposes because it is a bit hard to follow.

On p. 147 they write:

This is why many people believe that the concept of a “circular economy” – where there is as much recycling as possible of the energy sources and materials in production – will hinge on the transparency and information flows that blockchain systems allow.

Does this mean that other “non-blockchain” systems do not allow transparency and information flows?

On p. 147 they write:

The principal challenge remains scaling. Open-to-all, permissionless blockcahins such as Bitcoin’s and Ethereum’s simply aren’t ready for the prime time of global trade. If all of the world’s supply chains were to pass their transactions through a permissionless blockchain, there would need to be a gargantuan increase in scalability, either off-chain or on-chain. Solutions may come from innovations such as the Lightning Network, discussed in chapter three, but they are far from ready at this stage.

Can we propose a moratorium on additional usages of “Lightning” in the next edition unless there is significant adoption and usage of it? Also, it is unclear why the worlds supply chains should for some reason be connected onto an anarchic chain: what is the benefit of putting this information onto a chain whose operators are unaccountable if a fork occurs?

On p. 148 they write:

Instead, companies are looking at permissioned blockchains, which we’ll discuss in more detail in chapter six. That makes sense because many big manufacturers think of their supply chains as static concepts, with defined members who have been certified to supply this or that component to a finished product. But in the rapidly changing world of the Fourth Industrial Revolution, this might not be the most competitive option. Emerging technologies such as additive manufacturing, where production can be called up anywhere and delivered by anyone with access to the right software files and a sufficiently configured 3D printer, are pointing to a much more fluid, dynamic supply-chain world, where suppliers come and go more easily. In that environment, a permissionless system would seem necessary. Once scaling challenges are resolved, and with robust encryption and reliable monitoring systems for proving the quality of suppliers work, permissionless blockchain-based supply chains could end up being a big leveler of the playing field for global manufacturing.

There are way too many assumptions in this paragraph to not have somewhere written that there are many assumptions.

Is a blockchain really needed in this environment? If so, a future edition should explain how a 3D printer would be more useful connected to a blockchain than some other network. Also, this seems to be a misuse of the term “permissionless” — why does the network need to be anarchic? How would the supply chain benefit from validators who are unknown?

On p. 148 they write:

It will be difficult to marry that old-world body of law, and the human-led institutions that manage it, with the digital, dematerailized, automated, and de-nationalized nature of blockchains and smart contracts.

How are blockchains “de-nationalized”? As of this writing there are probably a couple dozen publicly announced state-sponsored blockchain platforms of some kind (including various cryptocurrency-related initiatives). This phrase should probably be removed.

On p. 150 they write about the Belt and Road Blockchain Consortium:

Hence the opportunity for blockchain technologies to function as an international governance system. Hong Kong’s role will be important: the territory’s British legal traditions and reputation for respecting property rights have made it a respected safehouse for managing intellectual property and other contractual obligations within international trade. If the blockchain is to be inserted into global trade flows, the region’s bridging function may offer the fastest and most impactful route. For Hong Kong residents who want the territory to retain its British legal traditions, that role could be a vital protection against Beijing undermining them.

From publicly available information it is unclear if the Belt and Road Blockchain Consortium has seen much traction. In contrast, the Ping An-led HKMA trade finance group has turned on its “blockchain” platform.

Chapter 6

On p. 151 they wrote about a public event held on August 5, 2015:

As far as bankers were concerned, Bitcoin had no role to play in the existing financial system. Banking institutions thrive on a system of opacity in which our inability to trust each other leaves us dependent on their intermediation of our transactions. Bankers might give lip service to reforming the inner workings of their system, but the thought of turning it over to something as uncontrollable as Bitcoin was beyond heresy. It wasn’t even conceivable.

This is a bit of a red herring. I’ve been in dozens of meetings with banks and financial institutions over the past four years and in general there is consensus that Bitcoin – the network – is not fit for purpose as financial market infrastructure to handle regulated financial instruments. Why should banks process, say payments, on a network in which the validators are neither accountable if a problem occurs nor directly reachable in case users want to change or upgrade the software? Satoshi wasn’t trying to solve interbank-related issues between known participants so this description shouldn’t be seen as a slight against Bitcoin.

Now, bitcoin, the coin, may become more widespread in its usage and/or ownership at banks. In fact, as of this writing, nearly every large commercial bank owns at least a handful of cryptocurrencies in order to pay off ransomware issues. But the passage above seems to conflate the two.

See also: Systemically important cryptocurrency networks

On p. 151 they write:

At the same time, committed Bitcoin fans weren’t much interested in Wall Street, either. Bitcoin, after all, was designed as an alternative to the existing banking system. An improvement.

This is a bit revisionist. For instance, the original whitepaper uses the term “payment” twelve times. It doesn’t discuss banking or specific product lines at banks. Banks do a lot more than just handle payments too. Satoshi attempted to create an alternative payment system… the “be your own bank” narrative is something that other Bitcoin promoters later added.

On p. 152 they discuss the August 2015 event:

In essence, Symbiont was promising “blockchain without bitcoin” – it would maintain the fast, secure, and cheap distributed network model, and a truth machine at its center that validated transactions, but it was not leaderless, permissionless, and open to all. It was a blockchain that Wall Street could control.

This has some hyperbole in it (does “Wall Street” really control it?) but there is a kernel that the authors could expand on in the next version: vendor-dependence and implementation monopoly. In the example above, the authors could have pointed out that the same market structure still exists, so what benefit does a blockchain provide that couldn’t already be used? In addition to, what do the authors mean by “cheap distributed network model” when they have (rightly) mentioned that proof-of-work is resource intensive? As of this writing, Symbiont uses BFT-SMaRt and doesn’t use PoW.

Also, the authors seem to conflate “open to all” with blockchains that they prefer. Yet nearly all of the blockchains they seem to favor (like Bitcoin) involve relatively centralized gatekeeping (BIP process) and permissioned edges via exchanges.

Again, when I wrote the paper that created this distinction in 2015, the “permissionless’ness” is solely an attribute of mining not on sending or receiving coins.

On p. 153 they write:

But these permissioned systems are less open to experiments by computer engineers, and access rights to the data and software are subject to the whim of the official gatekeeper. That inherently constrains innovation. A private blockchain, some say, is an oxymoron. The whole point of this technology is to build a system that is open, accessible, and public. Many describe them with the generic phrase “distributed ledger technology” instead of “blockchain.”

This is why it would be important for the authors to explicitly mention what “blockchain” they are referring to. In many cases their point is valid: what is the point of using a blockchain if a single entity runs the network and/or monopolizes the implementation?

Yet their argument is diminished by insisting on using loaded phrases like “open” and “public.” What does it mean to be open or public here? For instance, in order to use Bitcoin today, you need to acquire it or mine it. There can be substantial entry and exit costs to mining so most individuals typically acquire bitcoins via a trusted, permissioned gateway (an exchange). How is that open?

Lastly, the euphemism of using the term “blockchain” instead of using the term “bitcoin” dates back to late 2015 with investors like Adam Draper explicitly stating that was his agenda. See: The great pivot?

On p. 156 they write:

Though Bitcoin fans frowned upon permissioned blockchains, Wall Street continued to build them. These tweaked versions of Bitcoin shared various elements of the cryptocurrency’s powerful cryptography and network rules. However, instead of its electricity-hungry “proof-of-work” consensus model, they drew upon older, pre-Bitcoin protocols that were more efficient but which couldn’t achieve the same level of security without putting a centralized entity in charge of identifying and authorizing participants.

There is a few issues with this:

  1. Which Bitcoin fans are the authors referring to, the maximalists?
  2. Proof-of-work is not an actual consensus model
  3. There are newer Byzantine fault tolerant protocols such as HoneybadgerBFT which are also being used by different platforms

Their last sentence uses a false dichotomy because there are different security assumptions based on the targeted operating environment that result in tradeoffs. To say that Bitcoin is more or less secure versus say, an instance of Fabric is a bit meaningless because the users have different expectations that the system is built around.

On p. 157 they write about R3:

The biggest winner in this hiring spree was the research and development company R3 CEV, which focused on the financial industry. It sought to build a distributed ledger that could, on the one hand, reap the benefits of real-time securities settlement and cross-industry harmonization but, on the other, would comply with a vast array of banking regulations and meet its members’ proprietary interest in keeping their books private.

This seems like a dated pitch from a couple use cases from mid-2015 because by the time I departed in September 2017, real-time securities settlement wasn’t the primary use (for Corda) being discussed externally.

Also, the “CEV” was formally removed from the name about two years ago. See: A brief history of R3 – the Distributed Ledger Group

By the spring of 2017, R3 CEV had grown its membership to more than one hundred. Each member firm paid annual dues of $250,000 in return for access to the insights being developed inside the R3 lab. Its founders also raised $107 million in venture funding in 2017, mostly from financial institutions.

I don’t think the full details are public but the description of the funding – and what was exchanged for it – is not quite correct. The original DLG members got equity stakes as part of their initial investment. Also, as far as the Series A that was announced in May 2017, all but one of the investors was a financial institution of some kind.

On p. 157 they write:

Some of that money went to hire people like Mike Hearn, a once prominent Bitcoin developer who dramatically turned his back on the cryptocurrency community with an “I quit” blog post complaining about the bitter in fighting. R3 also hired Ian Grigg – who later left to join EOS – another prominent onetime rebel from the cryptocurrency space.

To be clear on the timing: Mike Hearn began working at R3 in October 2015 (along with James Carlyle).23 Several months later he published a widely discussed post about Bitcoin itself. Based on his public talks since January 2016, he still seems to have some passing interest in cryptocurrencies; he did a reddit AMA on /r/btc this past spring.

Also, Ian Grigg has since left EOS and launched a new startup, Chamapesa.

On p. 157 they write about me:

Before their arrival, R3 had also signed on Tim Swanson as research director. Swanson was a distributed ledger/blockchain analyst who was briefly enthused by Bitcoin but who later became disillusioned with the cryptocurrency’s ideologues. He became a vocal, anti-Bitcoin gadfly who seemed to delight in mocking its travails.

This is also revisionist history.

Not to dive too much into the weeds here – and ignoring everything pre-2014 – a quick chronology that could be added if the authors are looking to be balanced is the following:

Over the course of under four months, after doing market research covering a few dozen projects, I published Great Chain of Numbers in March 2014… which was a brief report that quickly became outdated.

Some of the feedback I received – including from Bob, an expert at a data analytics startup – was that I was too charitable towards the claims of cryptocurrency promoters at payment processors and exchanges.24 That is to say, Bob thought that based on analytics, the actual usage of a payment processor was a lot lower than what the executives from that processor told me. In retrospect, Bob was absolutely correct.

A couple months later I ended up – by accident – doing an interview on Let’s Talk Bitcoin. The original guest did not show up and while we (the co-hosts) were waiting, I ended up getting into a small debate with another co-host about the adoption and usage of cryptocurrencies like Bitcoin. You can listen to it here and read the corresponding long-read that provides more citations and supporting links to back up the comments I made in the podcast.

From this moment forward (June 2014) – because I fact-checked the claims and did not blindly promote cryptocurrencies – I quickly became labeled as a pariah by several of the vocal cryptotwitter personalities. Or as the authors of this book unfairly label me: “anti-Bitcoin gadfly.” To call this order of events “disillusionment” is also unfair.

Lastly, a quick fix to the passage in the book: I technically became a formal advisor to R3 at the end of 2014 (after their second roundtable in Palo Alto)… and then later in August 2015 came on full-time as director of market research (although I subsequently wore several different hats).

On p. 158 they write:

Of a similar breed was Preston Byrne, the general counsel of Eris Ltd., later called Monax which designed private blockchains for banks and a variety of other companies. When Byrne’s Twitter feed wasn’t conveying his eclectic mix of political positions – pro-Trump, anti-Brexit, pro-Second Amendment, pro-encryption, anti-software utopianism – or constant references to marmots (the Eris brand’s mascot), it poured scorn on Bitcoin’s fanatic followers. For guys like Swanson and Byrne, Bitcoin’s dysfunctional governance was a godsend.

Again, chronologically I met Preston online in early 2014. He helped edit and contributed to Great Chain of Numbers. Note: he left Eris last year and recently joined a US law firm.

This is an unfair description: “For guys like Swanson and Byrne, Bitcoin’s dysfunctional governance was a godsend.”

This is unfair for several reasons:

  • We were hardly the first people to spend time writing about the governance problems and frictions involved in cryptocurrencies. For instance this includes: Ray Dillinger, Ben Laurie, and likely dozens of others. Nor were we the only ones discussing it in 2014 and 2015.
  • Preston and I have also – separately – written and discussed issues with other cryptocurrencies and blockchains during that time frame… not just Bitcoin.

Thus to single us out and simultaneously not mention others who had similar views, paints us as some type of cartoonish villains in this narrative. Plus, the authors could have reached out to us for comment. Either way, the next version should attempt to fix the word choices and chronology.

I reached out to Preston Byrne and he provided a response that he asked to have included in a footnote.25

On p. 159 they write more about R3:

On the one hand, regulators were comfortable with the familiar membership of R3’s consortium: they were more accustomed to working with bankers than with T-shirt-and-jeans-wearing crypto-investors. But on the other, the idea of a consortium of the world’s biggest banks having say-so over who and what gets included within the financial system’s single and only distributed ledger conjured up fears of excessive banking power and of the politically unpopular bailouts that happened after the crisis. Might Wall Street be building a “too-big-to-fail” blockchain?

This is some strange criticism because many of the developers of Corda (and other pieces of software) wore casual and business casual attire while working in the offices.

Corda is not the “single and only distributed ledger” being used by enterprises. Nearly all of the banks that invested in R3 also invested in other competing entities and organizations including Axoni and Digital Asset. Thus the statement in the middle should be updated to reflect that R3 does not have some kind of exclusivity over banking or enterprise relationships.

Michael Casey has said multiple times in public (even prior to the existence of Corda) that R3 was a “cartel coin” or “cartel chain” — including on at least one panel I was on with him in January 2016.  This is during a time in which R3 did not have or sell any type of product, it was strictly a services-focused company.  Maybe the organization evolves in the future – there may even be some valid criticism of a mono-implementation or a centrally run notary – but even as of this writing there is no Corda Enterprise network up and running.26

Lastly, all of these banks are members of many different types of consortia and multilateral bodies. Simply belonging to or participating in organizations such as IOSCO does not mean something nefarious is afoot.

On p. 160 they write:

The settlement time is also a factor in a financial crisis, and it contributed to the global panic of 2008.

This is a good point and it would be great to go into further details and examples in the next edition.

On p. 160 they write:

This systemic risk problem is what drew Blythe Masters, one of the key figures behind blockchain innovation on Wall Street, into digital ledger technology; she joined Digital Asset Holdings, a blockchain service provider for the financial system’s back-office processing tasks, as CEO in 2014.

Two small quibbles:

  1. Pretty sure the authors meant to say “distributed” not “digital”
  2. Blythe Masters joined as CEO in March 2015, not in 2014

On p. 162 they write:

It’s just that to address such breakdowns, this new wave of distributed ledger system designers have cherry-picked the features of Nakamoto’s invention that are least threatening to the players in the banking system, such as its cryptographic integrity, and left aside its more radical, and arguably more powerful, features, especially the decentralized, permissionless consensus system.

This is revisionist history. Satoshi bundled together existing ideas and libraries to create a blockchain. He or she did not invent cryptography from the ground up. For more details, readers are encouraged to read “Bitcoin is worse is better” from Gwern Branwen. IT systems at financial institutions were (and are) already using various bits of cryptography, encryption, permissioning, data lakes, and distributed storage methods.

Furthermore, because the participants in the financial system are known, there is no reason to use proof-of-work, which is used in Bitcoin because the participants (miners) are unknown.

Lastly, the authors touch on it and do have a valid point about market structure being changed (or unchanged) and should try to expand that in the next edition.

On p. 162 they write:

The DTCC, which settles and clears the vast majority of US stock and bond trades, handles 10,000 transactions per second; Bitcoin, at the time of this writing, could process just seven. And as strong as Bitcoin’s value – and incentive-based security model has proven to be, it’s not at all clear that a few hundred million dollars in bitcoin mining costs would deter rogue traders in New York or London when government bond markets offer billion dollar fraud opportunities.

Firstly, at the time of this writing, on-chain capacity for Bitcoin (even with Segwit activated) is still less than seven transaction per second.

Second, it is not clear how “rogue traders” in New York or London would be able to directly subvert the mining process of Bitcoin. Are the authors thinking about the potential security delta caused by watermarked tokens and colored coins?27

On p. 162 they write:

Either way, for the firms that R3 and Digital Asset serve – managers of the world’s retirement funds, corporate payrolls, government bond issuances, and so forth -these are not security risks they can afford. For now – at least until solutions as Lightning provide large-scale transaction abilities – Bitcoin isn’t anywhere near ready to service Wall Street’s back-office needs.

But Bitcoin is not fit for purpose for regulated financial institutions. Satoshi wasn’t trying to solve back-office problems that enterprises had, why are the authors intent on fitting a round peg in a square hole?

Also, Lightning isn’t being designed with institutions in mind either. Even if one or more of its implementations becomes widely adopted and used by Bitcoin users, it still doesn’t (currently) meet the functional and non-functional requirements that regulated institutions have. Why market it as if it does?

On p. 162 they write:

There are also legal concerns. R3’s Swanson has argued that the mere possibility of a 51 percent attack – that scenario in which a minder gains majority control of a cryptocurrency network’s computing power and fraudulently changes transactions – means that there can never be “settlement finality” in a cryptocurrency transaction. That of perpetual limbo is a scenario that Wall Street lawyers can’t live with, he said. We might retort that the bailouts and various other deals which banks reversed their losses during the crisis make a mockery of “finality,” and that Bitcoin’s track record of irreversibility is many magnitudes better than Wall Street’s. Nonetheless, Swanson’s catchy critique caught on among bankers. After all, he was preaching to the choir.

So there are a few issues with this statement.

I did not invent the concept of “settlement finality” nor did ‘Wall Street lawyers.’  The term dates back decades if not centuries and in its most recent incarnation is the product of international regulatory bodies such as BIS and IOSCO. Regulated financial institutions – starting with financial market infrastructures – are tasked with reducing risk by making sure the payment systems, for instance, are irreversible. Readers should peruse the PFMIs published in 2012.

The next issue is, they make it sound like I lobbied banks using some ‘gotcha’ loophole to scare banks from using Bitcoin. Nowhere in my presentations or speeches have I justified or handwaved away the (criminally?) negligent behavior of individuals at banks that may have benefited from bailouts. This is another unfair characterization that they have painted me as.

To that point, they need to be more specific about what banks got specific transactions reversed. Name and shame the organizations and explain how it would not be possible in a blockchain-based world. Comparing Bitcoin with ‘Wall Street’ doesn’t make much sense because Bitcoin just handles transfers of bitcoin, nothing else. ‘Wall Street’ encompasses many different product lines and processes many other types of transactions beyond payments.

All in all, painting me as a villain is weak criticism and they should remove it in their next edition.

On p. 163 they write about permissioned ledgers:

They’re not racing each other to win currency rewards, which also means they’re not constantly building a wasteful computing infrastructure a la Bitcoin.

They say that as if it is a good thing. Encourage readers to look through the energy costs of maintaining several different proof-of-work networks that handle almost no commerce.

On p. 163 they write:

That’s why we argue that individuals, businesses, and governments really need to support the various hard-core technical solutions that developers are pursuing to help permissionless ledgers like Bitcoin and Ethereum overcome their scaling, security, and political challenges.

This agenda has been pretty clear throughout the book, though it may be more transparent to the reader if it comes earlier in chapter 1 or 2.

From a historical perspective this argument doesn’t make much sense. If Karl Benz had said the same thing in the 19th century about getting engineers to build around his car and not others. Or the Wright Brothers had been ‘more successful’ at suing aerospace competitors. Why not let the market – and its participants – chose to work on platforms they find of interest?

On p. 165 they write about the MIT Digital Currency Inititative but do not disclose that they solicit financial support from organizations such as central banks, some of whom pay up to $1 million a year to collaborate on research projects. Ironically, the details of this program are not public.

On p. 167 they write:

A broad corporate consortium dedicated to a mostly open-source collaborative approach, Hyperledger is seeking to develop nothing less than a common blockchain / distributed ledger infrastructure for the global economy, one that’s targeted not only at finance and banking but also at the Internet of Things, supply chains, and manufacturing.

The next edition should update that passage. All of the projects incubated by the Hyperledger Project are open sourced, there is no “mostly.” And not all of these projects involve a blockchain, some involve identity-related efforts.28

On p. 169 and again on p. 172 the authors quote Joi Ito who compares TCP/IP with “walled gardens” such as AOL and Prodigy.

That is comparing apples-and-oranges. TCP/IP is a suite of protocols, not a business. AOL and Prodigy are businesses, not protocols. AOL used a proprietary protocol and you could use TCP/IP via a gateway. Today, there are thousands of ‘walled gardens’ called ISPs that allow packets to jump across boundaries via handshake agreements. There is no singular ‘Internet’ but instead there are thousands of intranets tied together using common standards.

Readers may be interested in: Intranets and the Internet

On p. 173 they write:

Permissionless systems like those of Bitcoin and Ethereum inherently facilitate more creativity and innovation, because it’s just understood that no authorizing company or group of companies can ever say this or that thing cannot be built.

How are they measuring this? Also, while each platform has its own terms of service, it cannot be said that you need explicit permission to build an application on top of a specific permissioned platform. The permissioning has to do with how validation is handled.

On p. 173 they write:

It’s the guarantee of open access that fosters enthusiasm and passion for “permissionlessness” networks That’s already evident in the caliber and rapid expansion in the number of developers working on public blockchain applications. Permissioned systems will have their place, if nothing else because they can be more easily programmed at this early stage of the technology’s life to handle heavier transaction loads. But the overarching objective for all of us should be to encourage the evolution of an open, interoperable permissionless network.

This is just word salad that lacks supporting evidence. For the next edition the authors should tabulate or provide a source for how many developers are working on public blockchain applications.

The passage above also continues to repeat a false dichotomy of “us versus them.” Why can’t both of these types of ‘platforms’ live in co-existence? Why does it have to be just one since neither platform can fulfill the requirements of the other?

It’s like saying only helicopters provide the freedom to navigate and that folks working on airplanes are only doing so because they are less restricted with distances. Specialization is a real.

On p. 173 they conclude with:

There’s a reason we want a world of open, public blockchains and distributed trust models that gives everybody a seat at the table. Let’s keep our eyes on that ball.

This whole chapter and this specific statement alone comes across as preachy and a bit paternalistic. If the message is ‘permissionlessness’ then we should be allowed to pursue our own goals and paths on this topic.

Also, there are real entry and exit costs to be a miner on these public chains so from an infrastructure point of view, it is not really accurate to say everybody gets a seat at the table.

Chapter 7

This is probably their strongest chapter. They do a good job story telling here. Though there were few areas that were not clear.

On p. 179 they write:

But as Bitcoin and the blockchain have shown, the peer-to-peer system of digital exchange, which avoids the cumbersome, expensive, and inherently exclusionary banking system, may offer a better way.

The authors have said 5-6 times already that proof-of-work networks like Bitcoin can be very costly and wasteful to maintain. It would be helpful to the reader for the authors to expand on what areas the banking system is expensive.

And if a bank or group of banks used a permissioned blockchain, would that reduce their expenses?

On p. 181 they write about time stamps:

The stamp, though, is incredibly powerful. And that, essentially, is the service that blockchains provide to people. This public, recognizable open ledger, which can be checked by any time by anybody, acts in much the same way as the notary stamp: it codified that certain action took place at a certain time, with certain particulars attached to it, and it does this in a way that the record of that transaction cannot be altered by private parties, whether they be individuals or governments.

In the next edition the authors should differentiate time stamps and all the functions a notary does. Time stamps may empower notaries but simply stamping something doesn’t necessarily make it notarized. We see this with electronic signatures from Hello Sign and Docusign.

Also, these blockchains have to be funded or subsidized in some manner otherwise they could join the graveyard of hundreds of dead coins.

On p. 181 they write about Factom and Stampery. It would be good to get an update on these types of companies because the founder of Stampery who they single out – Luis Ivan Cuende – has moved on to join and found Aragon.

On p. 183 they discuss data anchoring: taking a hash of data (hash of a document) and placing that into a blockchain so that it can be witnessed. This goes back to the proof-of-existence discussion earlier on. Its function has probably been overstated and is discussed in Anchor’s Aweigh.

On p. 184 they discuss Chromaway. This section should be updated because they have come out with their own private blockchain, Chromapolis funded via a SAFT.

On p. 185 they write:

The easier thing to do, then, for a reform-minded government, is to hire a startup that’s willing to go through the process of converting all of an existing registry, if one exists, into a digital format that can be recorded in a blockchain.

Why? Why does this information have to be put onto a blockchain? And why is a startup the right entity to do this?

On p. 186 they mention several companies such as Bitfury, BitLand, and Ubiquity. It would be good to update these in the next edition to see if any traction occurred.

On p. 187 they write:

They key reason for that is the “garbage-in/garbage-out” conundrum: when beginning records are unreliable, there’s a risk of creating an indisputable permanence to information that enshrines some abuse of a person’s property rights.

This GIGO conundrum doesn’t stop and isn’t limited to just the beginning of record keeping. It is an ongoing challenge, potentially in every country.

On p. 188-192 they describe several other use cases and projects but it is unclear why they can’t just use a database.

On p. 193 they write:

Part of the problem is that cryptocurrencies continue to sustain a reptutation among the general public for criminality. This was intensified by the massive “WannaCry” ransomware attacks of 2017 in which attackers broke into hospitals’ and other institutions’ databases, encrypted their vital files and then extorted payments in bitcoin to have the data decrypted. (In response to the calls to ban bitcoin that inevitably arose in the wake of this episode, we like to point that far more illegal activity and money laundering occurs in dollar notes, which are much harder to trace than bitcoin transactions. Still, when it comes to perception, that’s beside the point – none of these incidents help Bitcoin’s reputation.)

This is a whataboutism. Both actions can be unethical and criminal, there is no need to downplay one versus the other. And the reason why bitcoin and other cryptocurrencies are used by ransomware authors is because they are genuinely useful in their operating environment. Data kidnapping is a good use case for anarchic networks… and cryptocurrencies, by design, continue to enable this activity. The authors can attempt to downplay the criminal element, but it hasn’t gone away and in fact, has been aided by additional liquidity to coins that provide additional privacy and confidentiality (like Monero).

On p. 193 they write about volatility:

This is a massive barrier to Bitcoin achieving its great promise as a tool to achieve financial inclusion. A Jamaican immigrant in Miami might find the near-zero fees on a bitcoin transaction more appealing than the 9 percent it costs to use a Western Union agent to send money home to his mother.

This financial inclusion narrative is something that Bitcoin promoters created after Satoshi disappeared. The goal of Bitcoin — according to the whitepaper and announcement threads – wasn’t to be a new rail for remittance corridors. Maybe it becomes used that way, but the wording in the passage above as a “great promise” is misleading.

Also, the remittance costs above should be fact-checked at the very handy Save On Send site.

On p. 194 they write about BitPesa. Until we see real numbers in Companies House filings, it means their revenue is tiny. Yet the authors make it sound like they have “succeeded”:

The approach is paying dividends as evident in the recent success of BitPesa, which was established in 2013 and was profiled in The Age of Cryptocurrency. The company, which offers cross-border payments and foreign-exchange transactions in and out of Kenya, Nigeria, Tanzania, and Uganda, reported 25 percent month-on-month growth, taking its transaction volume midway through 2017, up from $1 million in 2016.

They also cited some remittance figures from South Korea to the Philippines which were never independently verified and are old.

On p. 194 they dive into Abra a company they described as a remittance company but earlier this year they pivoted into the investment app category as a Robinhood-wannabe, with a coin index.

On p. 196 they discuss the “Somalia dilemma” in which the entire country is effectively unable to access external financial systems and somehow a blockhain would solve their KYC woes. The authors then describe young companies such as Chainalysis and Elliptic which work with law enforcement to identify suspicious transactions. Yet they do not close the loop on the narrative as to how the companies would help the average person in Somalia.

On p. 198 they discuss a startup called WeTrust and mention that one of the authors – Michael – is an advisor. But don’t disclose if he received any compensation for being an advisor. WeTrust did an ICO last year. This is important because the SEC just announced it has fined and settled with Floyd Mayweather and DJ Khaled for violating anti-touting regulations.

Chapter 8

Chapter 8 dives into self-sovereign identity which is genuinely an interesting topic. It is probably the shortest chapter and perhaps in the next edition can be updated to reflect any adoption that took place.

On p. 209 they write about physical identification cards:

Already, in the age of powerful big data and network analytics – now enhanced with blockchain-based distributed trust systems to assure data integrity – our digital records are more reliable indicators of the behavior that defines who we are than are the error-prone attestations that go into easily forged passports and laminated cards.

How common and how easily forged are passports? Would be interesting to see that reference and specifically how a blockchain would actually stop that from happening.

On p. 212 they write about single-sign ons:

A group of banks including BBVA, CIBC, ING, Societe Generale, and UBS has already developed such a proof of concept in conjunction with blockchain research outfit R3 CEV.

Earlier they described R3 differently. Would be good to see more consistency and also an update on this project (did it go anywhere?).

On p. 213 they describe ConsenSys as a “think tank” but it is actually a ‘venture studio’ similar to an incubator (like 500 Startups). Later on p. 233 they describe ConsenSys as an “Ethereum-based lab”.

On p. 216 they write about Andreas Antonopoulos:

What we should be doing, instead of acting as judge and executioner and making assumptions “that past behavior will give me some insight into future behavior,” Antonpolous argues, is building systems that better manage default risk within lenders’ portfolios. Bitcoin, he sustains, has the tolls to do so. There’s a lot of power in this technology to protect against risk: smart contracts, multi-signature controls that ensure that neither of the two parties can run off with the funds without the other also signing a transaction, automated escrow arrangements, and more broadly, the superior transparency and granularity of information on the public ledger.

There are at least two issues with this:

Nowhere in this section do the authors – or Antonopolous – provide specific details for how someone could build a system that manages default risk on top of Bitcoin. It would be helpful if this was added in the next edition.
And recently, Antonopoulos claims to have been simply educating people about “blockchain technology” and not promoting financial products.

If you have followed his affinity marketing over the past 4-5 years he has clearly promoted Bitcoin usage as a type of ‘self-sovereign bank‘ — and you can’t use Bitcoin without bitcoins.29 He seems to be trying to have his cake and eat it too and as a result got called out by both Nouriel and Buttcoin.

On p. 219 they write:

If an attestation of identifying information is locked into an immutable blockchain environment, it can’t be revoked, not without both parties agreeing ot the reversal of the transaction. That’s how we get to self-sovereignty. It’s why, for example, the folks at Learning Machine are developing a product to prove people’s educational bona fides on Blockcerts, an MIT Media Lab-initiated open-source code for notarizing university transcripts that hashes those documents to the bitcoin blockchain. Note the deliberate choice of the most secure, permissionless blockchain, Bitcoin’s. A permissioned blockchain would fall short of the ideal because there, too, the central authority controlling the network could always override the private keys of the individual and could revoke their educational certificates. A permissionless blockchain is the only way to give real control/ownership of the document to the graduate, so that he/she can disclose this particularly important attribute at will to anyone who demands it.

This disdain for ‘permissioned blockchains’ is a red herring and another example of the “us versus them” language that is used throughout the book. If a blockchain has a central authority that can do what the authors describe, it would be rightly described as a single point of failure and trust. And this is why it is important to ask what ‘permissioned’ chain they had in mind, because they are not all the same.

They also need to explain how they measure ‘most secure’ because Bitcoin – as described throughout this review – has several areas of centralization include mining and those who control the BIP process.

On p. 219 they quote Chris Allen. Could be worth updating this because he left Blockstream last year.

Chapter 9

This chapter seemed light on details and a bit polemical.

For instance, on p. 223 they write:

Many of our politicians seem to have no ideas this is coming. In the United States, Donald Trump pushes a “Buy America First” campaign (complete with that slogan’s echoes of past fascism), backed by threats to raise tariffs, tear up trade deals, boot undocumented immigrants out of the country, and “do good deals for America.” None of this addresses the looming juggernaut of decentralized software systems. IoT systems and 3D printing, all connected via blockchains and smart-contract-triggered, on-demand service agreements, will render each presidential attempt to strong-arm a company into retaining a few hundred jobs in this or that factory town even more meaningless.

Putting the politics aside for a moment, this book does not provide a detailed blue print for how any of the technology listed will prevent a US president from strong-arming a company to do any specific task. How does a 3D printer connected to a blockchain prevent a president from executing on their agenda?

On p. 224 they write about universal basic income:

This idea, first floated by Thomas Paine in the eighteenth century, has enjoyed a resurgence on the left as people have contemplated how robotics, artificial intelligence, and other technologies would hit working-class jobs such as truck driving. But it may gain wider traction as decentralizing force based on blockchain models start destroying middle-class jobs.

This speculation seems like a non sequitur. Nowhere in the chapter do they detail how a “blockchain-based model” will destroy middle class jobs. What is an example?

On p. 227 they write:

In case you’re a little snobbish about such lowbrow art, we should also point out that a similar mind-set of collaborative creation now drives the world of science and innovation. Most prominently, this occurs within the world of open-source software development; Bitcoin and Ethereum are the most important examples of that.

If readers were unfamiliar with the long history of the free open source software movement, they might believe that. But this ignores the contributions of BSD, Linux, Apache, and many other projects that are regularly used each and every day by enterprises of all shapes and sizes.

Also, during the writing of this review, an open source library was compromised — potentially impacting the Copay wallet from Bitpay — and no one noticed (at first). Eric Diehl, a security expert at Sony, has a succinct post up on the topic:

In other words, this is an example of a software supply chain attack. One element in the supply chain (here a library) has been compromised. Such an attack is not a surprise. Nevertheless, it raises a question about the security of open source components.

Many years ago, the motto was “Open source is more secure than proprietary solutions.” The primary rationale was that many eyes reviewed the code and we all know that code review is key for secure software. In the early days of open source, this motto may have been mostly true, under some specific trust models ( see https://eric-diehl.com/is-open-source-more-secure/, Chapter 12 of Securing Digital Video…). Is it still true in our days?

How often do these types of compromises take place in open-source software?

On p. 232 they write:

Undaunted, an unofficial alliance of technologists, entrepreneurs, artists, musicians, lawyers, and disruption-wary music executives is now exploring a blockchain-led approach to the entire enterprise of human expression.

What does that even mean?

On p. 232 they write about taking a hash of their first book and inserting it into a block on the Bitcoin blockchain. They then quote Dan Ardle from the Digital Currency Council who says:

“This hash is unique to the book, and therefore could not have been generated before the book existed. By embedding this hash in a bitcoin transaction, the existence of the book on that transaction date is logged in the most secure and irrefutable recordkeeping system humanity has ever devised.”

These plattitudes are everywhere in the book and should be toned down in the next edition especially since Ardle – at least in the quote – doesn’t explain how he measures secure or irrefutable. Especially in light of hundreds of dead coins that were not sustainable.

On p. 233 they write:

The hope now is that blockchains could fulfill the same function that photographers carry out when they put a limited number of tags and signatures on reproduced photo prints: it turns an otherwise replicable piece of content into a unique asset, in this case a digital asset.

This seems to be solutionism because blockchains are not some new form of DRM.

Continuing on this topic, they write:

Copying a digital file of text, music, or vidoe has always been trivial. Now, with blockchain-based models, Koonce says, “we are seeing systems develop that can unequivocally ensure that a particular digital ‘edition’ of a creative work is the only one that can be legitimately transferred or sold.” Recall that the blockchain, as we explained in chapter three, made the concept of a digital asset possible for the first time.

This is empirically untrue. It is still trivially possible to download and clone a blockchain, nothing currently prevents that from happening. It’s why there are more than 2,000 cryptocurrencies at the time of this writing and why there are dozens of forks of Bitcoin: blockchains did not make the concept of a digital asset possible. Digital assets existed prior to the creation of Bitcoin and attempting to build a DRM system to prevent unauthorized copies does not necessarily require a blockchain to do.

On p. 238 they write:

Yet, given the amssive, multitudinous, and hetergeneous state of the world’s content, with hundreds of millions of would-be creators spread all over the world and no way to organize themselves as a common interest, there’s likely a need for a permissionless, decentralized system in which the data can’t be restricted and manipulated by a centralized institution such as a recording studio.

Maybe, but who maintains the decentralized system? They don’t run themselves and are often quite expensive (as even the authors have mentioned multiple times). How does a decentralized system fix this issue? And don’t some artists already coordinate via different interest groups like the RIAA and MPAA?

On p. 240 they discuss Mediachain’s acquisition by Spotify:

On the other hand, this could result in a private company taking a technology that could have been used publicly, broadly for the general good, and hiding it, along with its innovative ideas for tokens and other solutions, behind a for-profit wall. Let’s hope it’s not the latter.

This chapter would have been a bit more interesting if the authors weren’t as heavy handed and opinionated about how economic activities (like M&A) should or should not occur. To improve their argument, they could include links or citations for why this type of acquisition has historically harmed the general public.

Chapter 10

On p. 243 they write:

Bitcoin, with its new model of decentralized governance for the digital economy, did not spring out of nowhere, either. Some of the elements – cryptography, for instance – are thousands of years old. Others, like the idea of electronic money, are decades old. And, as should be evident in Bitcoin’s block-size debate, Bitcoin is still very much a work in progress.

This statement is strange because it is inconsistent with what they wrote on p. 162 regarding permissioned chains: “… cherry-picked the features of Nakamoto’s invention that are least threatening to the players in the banking system, such as its cryptographic integrity…”

In this section they are saying that the ideas are old, but in the passage above in chapter 6, they make it sound like it was all from Nakamoto. The authors should edit it to be one way or the other.

Also, Bitcoin’s governance now basically consists of off-chain shouting matches on social media. Massive influence and lobbying campaigns on reddit and Twitter is effectively how the UASF / no2x movement took control of the direction of the BIP process last year.

On p. 245 they write:

That can be found in the individual freedom principles that guide the best elements of Europe’s new General Data Protection Regulation, or GDPR.

All blockchains that involve cross-jurisdictional movement of data will likely face challenges regarding compliance with data privacy laws such as GDPR. Michele Finck published a relevant paper on this topic a year ago.

See also: Clouds and Chains

On p. 247 they write about if you need to use a blockchain:

Since a community must spend significant resources to prove transactions on a blockchain, that type of record-keeping system is most valuable when a high degree of mutual mistrust means that managing agreements comes at a prohibitively high price. (That price can be measured in various ways: in fees paid to middlemen, for instance, in the time it takes to reconcile and settle transactions, or in the fact that it’s impossible to conduct certain business processes, such as sharing information across a supply chain.) When a bank won’t issue a mortgage to a perfectly legitimate and creditworthy homeowner, except at some usurious rate, because it doesn’t trust the registry of deeds and liens, we can argue that the price of trust is too high and that a blockchain might be a good solution.

Not all blockchains utilize proof-of-work as an anti-Sybil attack mechanism, so it cannot be said that “a community must spend significant resources”.

In the next edition it would be interesting to see a cost / benefit analysis for when someone should use a blockchain as it relates the mortgage use case they describe above.

On p. 248 they talk about voting:

Every centralized system should be open for evaluation – even those of government and the political process. Already, startups such as Procivis are working on e-voting systems that would hand the business of vote-counting to a blockchain-based backend. And some adventurous governments are open to the idea. By piloting a shareholder voting program on top of Nasdaq’s Linq blockchain service, Estonia is leading the way. The idea is that the blockchain, by ensuring that no vote can be double-counted – just as no bitcoin can be double-spent – could for the first time enable reliable mobile voting via smartphones. Arguably it would both reduce discrimination against those who can’t make it to the ballot box on time and create a more transparent, accountable electoral system that can be independently audited and which engenders the public’s trust.

A month ago Alex Tapscott made a similar argument.

He managed to temporarily unite some of the warring blockchain tribes because he penned a NYT op-ed about how the future is online voting… powered by blockchains. Below is a short selection of some Twitter threads:

  • Arvind Narayanan, a CS professor at Princeton said this is a bad idea
  • Angela Walch, a law professor at St. Mary’s said this is a bad idea
  • Philip Daian, a grad student at Cornell said this is a bad idea.
  • Luis Saiz, a security researcher at BBVA said this is a bad idea
  • Joseph Hall, the Chief Technologist at the Center for Democracy & Technology said this a bad idea
  • Preston Byrne, a transatlantic attorney and father of marmotology said this is a bad idea
  • Matt Blaze, a CS professor at UPenn, said this is a bad idea

NBC News covered the reaction to Tapscott’s op-ed.  Suffice to say, the next edition should either remove this proposal or provide more citations and references detailing why this is a good idea.

Throughout this chapter projects like BitNation and the Economic Space Agency are used as examples of projects that are “doing something” — but none of these have gotten much traction likely because it’s doing-something-theater.

On p. 252 – 255 they uncritically mention various special interest groups that are attempting to influence decision makers via lobbying. It would be good to see some balance added to this section because many of the vocal promoters at lobbying organizations do not disclose their vested interests (e.g., coin positions).

On p. 255 they talk about “Crypto Valley” in Switzerland:

One reason they’ve done so is because Swiss law makes it easier to set up the foundations needed to launch coin offerings and issue digital tokens.

MME – the Swiss law firm that arguably popularized the approach described in this section – set up more than a dozen of these foundations (Stiftung) before stopping. And its creator, Luke Mueller, now says that:

“The Swiss foundation actually is a very old, inflexible, stupid model,” he said. “The foundation is not designed for operations.”

Could be worth updating this section to reflect what happened over the past year with lawsuits as well.

On p. 255 they write:

The next question is: what will it take for U.S. policymakers to worry that America’s financial and IT hubs are losing out to these foreign competitors in this vital new field.

This is FOMO. The authors should tabulate all of the companies that have left the US – or claim to leave – and look at how many jobs they actually set up overseas because of these laws. Based on many anecdotes it appears what happens in practice is that a company will register or hold an ICO overseas in say, Singapore or Panama, but then open up a development arm in San Francisco and New York. They effectively practice regulatory arbitrage whereby they bypass securities laws in one country (e.g., the US) and then turn around and remit the proceeds to the same country (the US).

On p. 263 they conclude the chapter with:

No state or corporation can put bricks around the Bitcoin blockchain or whitewash its record. They can’t shut down the truth machine, which is exactly why it’s a valuable place to record the voices of human experience, whether it’s our love poems or our cries for help. This, at its core, is why the blockchain matters.

Their description basically anthropromorphizes a data structure. It also comes across as polemical as well as favoritism towards one specific chain, Bitcoin. Furthermore, as discussed throughout this review, there are clear special interest groups – including VC-backed Bitcoin companies — that have successfully pushes Bitcoin and other cyrptocurrencies – into roadmaps that benefit their organizations.

Conclusion

Like their previous book (AoC), The Truth Machine touches on many topics but only superficially.  It makes a lot of broad sweeping claims but curious readers – even after looking at the references – are left wanting specifics: how to get from point A to point B.

There also seems to be an anti-private enterprise streak within the book wherein the authors condescendingly talk down efforts to build chains that are not anarchic. That becomes tiring because – as discussed on this blog many times – it is not a “us versus them” proposition.  Both types of blockchains can and do exist because they are built around different expectations, requirements, and operating environments.

In terms of one-sided narratives: they also did not reach out to several of the people they villify, such as both myself and Preston Byrne as well as coin proponents such as Roger Ver and Jihan Wu.  The next edition should rectify this by either dropping the passages cited above, or in which the authors reach out to get an on-the-record comment from.

Lastly, while some churn is expect, many of the phrases throughout the book did not age well because it relied on price bubbles and legal interpretations that went a different direction (e.g., SAFTs are no longer popular).  If you are still looking for other books to read on the topic, here are several other reviews.

Endnotes

  1. See A brief history of R3 — the Distributed Ledger Group []
  2. Developers of various coins will include “check points” which do make it virtually impossible to roll back to a specific state. Both Bitcoin and Bitcoin Cash have done this. []
  3. See Why the payment card system works the way it does – and why Bitcoin isn’t going to replace it any time soon by Richard Brown []
  4. See Learning from the past to build an improved future of fintech and Distributed Oversight: Custodians and Intermediaries []
  5. Unsurprisingly users want to be able to hold someone accountable for their lack of care and/or difficulty in safely and securely backing up their keys. []
  6. Ibid []
  7. Technically every orphaned block alters the blockchain, because you thought one thing and now you are asked to think another. []
  8. Readers may be interested in The Path of the Blockchain Lexicon by Angela Walch []
  9. Recall that generating hashes is a means to an end: to make Sybil attacks costly on a network with no “real” identities. []
  10. For instance, Selfish Mining []
  11. Albumatic -> Koala -> Chain.com the Bitcoin API company -> Chain.com the enterprise company, etc. []
  12. This is slightly reminiscent of Dr. Strangelove in which General Turgidson says, “I admit the human element seems to have failed us here.” []
  13. See The Revolving Door Comes to Cryptocurrency by Lee Reiners and Is Bitcoin Secretly Messing with the Midterms? from Politico []
  14. See also his role in attacks on CoiledCoin and BBQcoin []
  15. David Andolfatto, from the St. Louis Fed, also pointed this out back in May 2015, skip to the 28 min mark []
  16. See the “no” side of the debate: Can Bitcoin Become a Dominant Currency? []
  17. Ironically in his most recent op-ed published today, he asks people to “quit this ugly obsession with price.”  There are at least 3-4 instances of the co-authors using price as a metric for “strength” in this book. []
  18. See also this related thread from Don Bailey []
  19. Some exchanges, such as Gemini, want proof of mining activity. See also: What is Permissioned-on-Permissionless []
  20. See also the Polly Pocket Investor Day []
  21. Ryan Zurrer, second-in-command at Polychain, was recently fired from Polychain amid weak performance this year. []
  22. The whole public sale thing is problematic from a MSB perspective. The colorability of the position taken by Cooley in that section was questionable at the time and possibly indefensible now. []
  23. Mike wrote the first line of code for Corda over three years ago. []
  24. The initial conversation with Bob took place in San Francisco during Coin Summit. Bob later became a key person at Chainalysis. []
  25. According to Preston:

    Eris, now Monax, was the first company to look at the combination of cryptographic primitives that make up Bitcoin and attempt to use them to make business processes more efficient. In shorthand, the company invented “blockchains without coins” or “permissioned blockchains.”

    Bitcoin’s dysfunctional governance wasn’t a “godsend” for our business, as we weren’t competing with Bitcoin. Rather we were trying to dramatically expand the usecases for database software that had peer to peer networking and elliptic curve cryptography at its core, in recognition of the fact that business counterparties reconcile shared data extremely inefficiently and their information security could benefit from a little more cryptography.

    In exchange for our efforts, Bitcoiners of all shapes and sizes heaped scorn on the idea that any successor technology could utilize their technology’s components more efficiently. We responded with pictures of marmots to defuse some of the really quite vitriolic attacks on our company and because I like marmots; these little critters became the company’s mascot through that process.

    Subsequent developments vindicated my approach. Cryptographically-secure digital cash being trialled by Circle, Gemini, and Paxos utilizes permissioning, a concept that Circle’s Jeremy Allaire said was impossible in 2015 – “they’re not possible separately” – and I predict that as those USD coins seek to add throughput capacity and functionality they will migrate off of the Ethereum chain and onto their own public, permissioned chains which are direct conceptual descendants of Eris’ work.

    They will compete with Bitcoin in some respects, much as a AAA-rated bond or USD compete with Bitcoin now, but they will not compete with Bitcoin in others, as they will cater to different users who don’t use Bitcoin today and are unlikely to use it in the future.

    Ultimately, whether Eris’ original vision was right is a question of how many permissioned chains there are, operating as secure open financial services APIs as Circle and Gemini are using them now. I predict there will be rather a lot of those in production sooner rather than later. []

  26. Oddly the authors of the book do not name “Corda” in this book… they use the phrase: “R3’s distributed ledger” instead. []
  27. Readers may also be interested in reading the 2016 whitepaper from the DTCC []
  28. At the time of this writing there are: 5 incubated “Frameworks” and 6 incubated “Tools.” []
  29. Antonopolous recently gave a talk in Seattle where he promoted the usage of cryptocurrencies to exit the banking system.  Again, a user cannot use a cryptocurrency without absorbing the exposure and risks attached to the underlying coins of those anarchic networks. []

Interview with Ray Dillinger

[Note: the 10th anniversary of the Bitcoin whitepaper is this month.  Below is a detailed interview with one of the first individuals to have interacted with Satoshi both in public and private: Ray Dillinger.

All of the written responses are directly from Ray with no contributions from others.]

Logo from 2010: Source

Q1: Tell us about yourself, what is your background?

A1: I am originally from Kansas.  At about the same time I entered high school I became interested in computers as a hobbyist, although hobby computers were still mostly useless at that time.  I got involved in early BBS systems when DOS hadn’t been released yet, modems were acoustically coupled and ran at 300 bits per second or slower, and software was stored mostly either on notebook paper or cassette tapes.

The early interest in computers is part of my lifelong tendency to become deeply involved in technology and ideas that are sufficiently interesting. This has led me to develop interests, obsessions, and expertise in a huge variety of things most of which the public does not discover reasons to care about until much later.

I graduated from KU with a degree in Computer Science in December of 1995 after spending far too long alternating between semesters of attending classes and semesters of working to pay for classes.

After graduation I moved to the San Francisco Bay area.  I worked for several AI startups in the next seven years and hold a couple of patents in natural-language applications from that work.  After that, I worked the night shift for FedEx for some years while doing occasional security consulting gigs during daytime hours.  I am currently doing AI algorithm research and implementation (and some cryptographic protocol/document design) at a FinTech startup.  I work on General AI projects on my own time.

I am somewhat pessimistic by nature and tend to assume until given reason to believe otherwise that anyone trying to sell me something or convince me of something is a scammer.  I know that’s irrational, but knowing doesn’t make the belief stop.  I have an abiding hatred of scammers and find them viscerally disgusting.

I consider making noise to be rude, avoid crowds and public appearances, and distrust anyone speaking faster than they can think.  Although I write a great deal, I rarely speak and strongly dislike talking on the phone.

In spite of my peculiar interests and asocial tendencies, I somehow managed to get married to a wonderful woman who tolerates an unbelievable degree of geekdom in an unbelievable variety of subjects, ranging from mild interest to full-on mad scientist levels in scope. I am tremendously thankful to have her in my life, and to whatever degree
I might be considered social, she deserves most of the credit.

I became marginally involved with Bitcoin in its early development because cryptocurrency, and the application of block chains to cryptocurrency in particular, are interesting.  I ceased to be involved in Bitcoin when the next steps would necessarily involve salesmanship, frequent talking, and social interaction, because those things are not interesting.

Q2: Perry Metzger created the now infamous Cryptography mailing list years ago.  When did you join and what made you interested in cryptography?

A2: I joined so many years ago it’s hard to remember.  It was pretty much as soon as I became aware of the list, but I’m sure it was more than fifteen years ago. It may have been late 2001 or early 2002.

I think I may even have been one of the first twenty or thirty posters on that list – it was still very young.

I remember being vaguely annoyed that it hadn’t been available when I was actually still in college and doing a crypto project in a grad-level networking course – I’d been a member of the even-earlier ‘cypherpunks’ list back when I was in school, but its strident political ideologues (including a guy named Hal Finney, whom you’ve probably heard of)
annoyed me, even back then.

‘cypherpunks’ was where I became aware of and started corresponding with Hal.  Although, way back then, I think we were both mostly annoying to each other.  And possibly to others as well.  Hal had been stridently political all the way from those days (and probably before) to the day he died, and in retrospect, I think I really needed some ‘remedial human-being lessons’ and some wider education at the time.  I’ve learned a lot since then – and perspective outside the narrow specialties we studied in school really does matter.

Q3: There were a lot of other non-cryptocurrency related discussions taking place simultaneously in November 2008 and many of the frequent posters didn’t comment on Bitcoin when it was first announced.  What interested you in it?  How involved would you say you were with providing coding suggestions prior to the genesis block that following January?

A3: I was interested in it for several reasons.  First, Bitcoin was a digital cash protocol, and digital cash protocols have some significant challenges to overcome, and I’d been interested in them for a long time already.  I’d even designed a couple by then.  The first I designed was unsound. The second, which is the only one worth talking about, which I’ll talk more about below.

Second, Bitcoin used a central proof chain (which we now call a block chain) as means of securing the history of each note, and I had known for a long time that any successful digital cash protocol had to use proof chains in some form or it couldn’t circulate (couldn’t be spent onward by someone who’d been paid in it).  And I was very, very much interested in proof chains, especially for a digital cash protocol.  I had already used proof chains (very differently) for a digital cash protocol when I extended Chaum’s e-cash protocol in 1995.

(see Digression #1 below to understand the differences between my protocol and Satoshi’s, and their effect on protocol design.)

Third, Satoshi eventually convinced me that he wasn’t a scammer.  I’m sort of a natural pessimist at heart, and digital cash protocols have a long history of scammers, so at first I had assumed the worst.  I think a lot of others also assumed the worst, which would be why few of them responded.  I made my first couple of replies without even having read it yet, to see how he responded before I wasted mental effort on something that would probably turn out to be a scam.

When I finally bothered to actually read the white paper, and spent the mental effort to understand it, I realized that (A) it wasn’t the usual incompetent bullshit we’d seen in far too many earlier digital-cash proposals, and (B) Its structure really and truly contained no Trusted Roles – meaning the opportunity to scam people was NOT built into the structure of it the way it had been with e-gold, e-cash, etc.

Fourth, and absolutely the clincher for me; it was very very INTERESTING!  It was an entirely new paradigm for a digital cash protocol, and had no Trusted Roles!  Nobody had EVER come up with a digital cash protocol having no Trusted Roles before!

Of course it wasn’t a “serious” proposal, I thought. It wouldn’t work for any kind of widespread adoption (I thought at the time) because of course people would conclude that spent hashes which absolutely couldn’t be redeemed for the electricity or computer power that had been used to create them were valueless.  And it would never scale beyond small communities or specialized applications of course because of its completely stupid bandwidth requirements.

But it was INTERESTING!

I could never have come up with Bitcoin because of the tremendous bandwidth.  Without Satoshi’s proposal, the idea of transmitting every transaction to every user would just have bounced off my mind as inconceivable.  Hell, I didn’t even understand it the first couple of times through the white paper because I was looking for ANY WAY AT ALL to parse those sentences and ‘transmitting every transaction to every user wasn’t even a POSSIBLE parse for me until Satoshi explicitly told me yes, that really was what he meant.

When I finally understood, I started doing math to prove to him that it was impossible, tried to relate bandwidth to rate of adoption and got a largest possible answer that’s only about one-eighth of today’s number of nodes.   I was assuming transaction volume proportional to userbase, which would be at least three times the transactions that today’s blocksize-limited block chain handles, and looking at a version of the protocol which doubled it by transmitting every transaction twice.  So,GIGO, I was wrong – but for good reasons and in the correct order of magnitude anyway.

But that was a couple orders of magnitude larger than the highest answer I had expected to get!  And that meant Satoshi’s idea actually seemed…. surprisingly plausible, if people really didn’t care about bandwidth.

The fact that bandwidth seemed to be available enough for the proposal to be technically plausible was sort of mind-boggling.  So was the idea that so many people did not care, at all, about bandwidth costs.

(See digression #2 to understand why it was hard for me to accept that
people now consider bandwidth to be valueless.)

Anyway, problems aside, it was INTERESTING! If the proof-of-concept actually sort-of worked at least on scales like for a campus or community merchandise token or something it would extend our understanding of protocol design!

What I had done back in 1995 had been INTERESTING for a different reason. At that time nobody had ever come up with a digital cash protocol that allowed people who’d been paid digital coins to respend them if they wanted instead of taking them right back to the issuer.  Of course it wouldn’t work for general adoption because of its own problems, but it had extended our understanding of protocol design back then, so back then that had been INTERESTING!

And before that, Chaum had demonstrated a digital cash protocol that worked at all, and at the time that was INTERESTING!

And in between a whole bunch of people had demonstrated ways to cooperate with bankers etc to have different kinds of access to your checking account or whatever.  Some of those had had privacy features v. the other users, which were also INTERESTING!

And so on.  I was very much looking at things that improved our understanding of digital cash protocols, and had no idea that Bitcoin was intended for widespread release.

Anyway, Satoshi and I talked offlist about the problems, and possible solutions, and use of proof chains for digital cash, and my old protocol, and several previous types of digital cash, and finally he sent me the proof chain code for review.

And the proof chain code was solid, but I freaked out when I saw that it used a Floating Point type rather than an Integer type for any kind of accounting. Accounting requirements vs. floating point types have a long and horrible history.

So that prompted some more discussion. He was designing specifically so that it would be possible to implement compatible clients in languages (*cough* Javascript *cough*) in which no other numeric type is available, so he wanted to squish rounding-error bugs in advance to ensure compatibility.  If anybody gets different answers from doing the same calculation the chain forks, so it’s sort of important for everybody to get the same answer.  Because Javascript clients were going to use double float, and he wanted them to get the same answer, he was going to make sure he got correct answers using double floats.

He was trying to avoid rounding errors as a way of future-proofing: making it completely consistent so clients with higher-precision representations wouldn’t reject the blocks of the old chain – but on the ground he wanted to be damn sure that the answers from Javascript clients, which *would* by necessity use double float, could be compatible with checking the block chain.

The worst that could happen from a rounding error, as long as everybody gets the *SAME* rounding error, is that the miner (whose output is unspecified in the block and defined as “the rest of the TxIn values input”) gets a few satoshis more or less than if the rounding error hadn’t happened, and no satoshis would be created or destroyed.

But if people on different clients get *DIFFERENT* rounding errors, because of different representation or differently implemented operations, the chain forks. And That Would Be Bad.

I would have said *screw* Javascript, I want rounding errors to be impossible, and used integers.  If the Javascripters want to write a float client, they’d better accept accurate answers, even if they have to allow for answers different than their code generates.  And if they make transactions containing rounding errors, let everybody in the universe reject them and not allow them into blocks.  But that’s me.

It was when we started talking about floating-point types in accounting code that I learned Hal was involved in the effort. Hal was reviewing the transaction scripting language, and both the code he had, and the code I had, interacted with the accounting code. So Satoshi brought him in for the discussion on floating point, and both of us reviewed the accounting code. Hal had a lot of experience doing exact math in floating point formats – some of his crypto code in PGP even used float types for binary operations. So he wasn’t as freaked-out about long doubles for money as I was. We talked a lot about how much divisibility Bitcoins ought to have; whether to make ‘Satoshis’ an order of magnitude bigger just to have three more bits of cushion against rounding errors, or keep them near the limit of precision at 10e-8 bitcoins in order to assure that rounding errors would always fail. Failing, immediately, detectably, and hard, at the slightest error, is key to writing reliable software.

So I went over the accounting code with a fine-toothed comb looking for possible rounding errors.  And I didn’t find any.

Which is more than a little bit astonishing.  Numeric-methods errors are so ubiquitous nobody even notices them.  Inevitably someone multiplies and divides in the wrong order, or combines floats at different magnitudes causing rounding, or divides by something too small, or makes equality comparisons on real numbers that are only equal 65535 times out of 65536, or does too many operations between sequence points so that they can be optimized differently in different builds, or uses a compiler setting that allows it to do operations in a different sequence, or checks for an overflow/rounding in a way that the compiler ignores because it can prove algebraically that it’s “dead code” because it will never be activated except in case of undefined behavior (like eg, the roundoff or overflow that someone is checking for)!  Or SOMETHING.  I mean, in most environments you absolutely have to FIGHT both your language semantics and your compiler to make code without rounding errors.

Clearly I hadn’t been the first pessimistic screaming hair-triggered paranoid aware of those issues to go over that accounting code; I could not find a single methods error.  The ‘satoshi’ unit which is the smallest unit of accounting, is selected right above the bit precision that can be handled with NO rounding in the double float format, and every last operation as far as I could find was implemented in ways that admit no rounding of any bits that would affect a unit as large as a satoshi.

To cause rounding of satoshis in the Bitcoin code, someone would have to be adding or subtracting more than 21 million Bitcoins (I think it’s actually 26 million, in fact…).  So, the Bitcoin chain is, I believe, rounding-free and will continue to check regardless of whether clients use any higher floating point precision.

For comparison Doge, which has so many coins in circulation that amounts larger than 26 million Doge are actually transacted, has rounding errors recorded in its block chain.  If a new client ever uses a higher-precision float format, their old chain won’t check on that client.  Which would be seen as a bug in the new client, and “corrected” there (by deliberately crippling its accuracy when checking old blocks). In fact it’s a bug in the Doge coin design which will never be fixed because they’ve already committed too much to it.

Integers.  Even with code that is meticulously maintained and tested for consistency, even where methods errors have been boiled out by somebody’s maniacal obsessive dedication, Integers would have been so much cleaner and easier to check.

Digression #1:
Why I was VERY interested in proof chains and digital cash protocols.

When I extended Chaum’s protocol in 1995, I had used proof chains attached to each ‘coin’, which grew longer by one ‘link’ (nowadays we say ‘block’) every time the coin changed hands. That allowed coins to circulate offline because all the information you needed to make another transaction was in the chains attached to the individual coins.  In order to make it possible to catch double spenders, the ‘links’ contained secret splits which, if two or more contradictory links were combined, would reveal the identity of the spender.

So, it could circulate offline and make transfers between users who weren’t even connected to the Internet. It didn’t have the ferocious bandwidth expense and even more ferocious proof-of-work expense of Bitcoin. Double spenders couldn’t be caught until the differently-spent copies of a coin were compared, potentially after going through several more hands which meant you had to have some kind of resolution process. And a resolution process meant you absolutely had to have a Trusted Certificate Authority with a database that could link UserIDs to RealWorld IDs in order to figure out who the RealWorld crook was.

Buyer and seller had to have valid UserIDs issued by the Trusted CA, which were known to each other even if to no one else.  And although not even The Trusted CA could link UserIDs and transactions except in case of a double spend, the parties to each transaction definitely could. Either party could later show and cryptographically prove the details of the transaction including the counterparty’s UserID, so your transactions were “Private”, not “Secret”. Finally, the ‘coins’ were non-divisible meaning you had to have exact change.

It was, at best, clunky compared to Bitcoin, and not being able to identify double spends until unspecified-time-later would probably be a deal-killer for acceptance. But it also had some advantages: It didn’t create a central permanent ledger that everybody can datamine later the way Bitcoin does, so Trusted CA or not it might actually have been better privacy in practice.  It was completely scalable because no transaction needed bandwidth between anybody except buyer and seller. And it had no proof-of-work expense.  But it needed a God-Damned Trusted Certificate Authority built directly into the design, so that CA’s database was open to various kinds of abuse.

Digression #2:

I had no comprehension of modern attitudes toward bandwidth costs.

I mean, I knew it had gotten cheap, but it was still taking me hours, for example, to download a complete Linux distribution. I figured other people noticed big delays like that too, and wide adoption of Bitcoin would mean slowing down EVERYTHING else they (full nodes anyway) did.  I just hadn’t understood that – and still have trouble with – the idea that by 2008, nobody even cared about bandwidth any more.

I got my first computer, because at that time privately owned computers were INTERESTING!  So I had to, even though they were also mostly useless.  (See a pattern here?)

But at that time, computers were not communications devices.  At All. If you hadn’t invested in something called a “LAN”, which anyway could only work inside one building, probably cost more than the building itself, and was useless unless you’d also invested in multiple computers, you moved data back and forth between your machines and your friends’ machines using cassette tapes.  Or, if and your friend were both rich enough to buy drives, or had been lucky enough dumpster diving to get drives you could repair, and had access to the very expensive media through some kind of industrial or business supply place, you might have done it using floppy disks.  Which held eighty kilobytes.

I got my first modem a few years later, and modems at the time were flaky hardware only BARELY supported by single-tasking systems that had never been designed to handle any signal arriving anywhere at a time they did not choose.  If your computer didn’t respond fast enough to interrupts, a modem could crash it.  If you were running anything that didn’t suspend and resume its business correctly (and most things didn’t because they’d never had to before) or anything that was coded to use the same interrupt, the modem would crash it.  If the software on your end ever started taking too long to execute per input character, the modem would fill up the short hardware buffer faster than your software could empty it, and crash it.  If you transmitted characters faster than the software running on the remote system could handle them, you’d crash the remote system.  There were no error correcting protocols because none of us had the compute power to run them fast enough to avoid a crash at the speeds the modems ran.

And that modem couldn’t transmit or receive characters even as fast as I could type. Sometimes you could crash the remote system just by accidentally typing too fast for a minute or two.

Computer security wasn’t a thing. Pretty much anybody you allowed to connect could at least crash your system and probably steal anything on your computer or delete everything on your computer if they really wanted to.   The host programs weren’t *intended* to allow that, but something as simple as transmitting an unexpected EOT signal could often crash them – sometimes crashing the whole machine, sometimes leaving the caller at the all-powerful command-line prompt. Stuff like that happened all the time, just by accident!  So people were understandably reluctant to let strangers connect to their systems.

There was one place in my whole state that I could call with it where I found people who’d leave a modem running on their machine despite the risk of crashes, and would allow a stranger on their system.  That sysop, in an act of sheer grace that he didn’t have to extend and which nobody was paying him for, allowed me to connect to it.  There were no such things as commercial providers; they could not exist until at least some system security actually worked.

There was barely even any commercial software: Every machine came with its own BIOS and Operating System, and the ONLY way to distribute a program that would run on more than a tiny fraction of systems was to distribute it as source code which people could tweak and fix and adapt in order to get it running, and commercial vendors didn’t want to distribute any source code.

So our software was all shared.  It came from fellow hobbyists, and unless we were physically in the same room to exchange media (and had the ability to read and write media compatible with the other’s systems), we could not share it without using bandwidth.

Long distance calls were over a dollar a minute, modems ran at 160 or 300 bits per second, and I could have burned through my entire monthly paper route income in under three hours.

Finally, every second I was connected to that remote system, that phone line was busy and everybody else couldn’t use it. And the other users needed it for reasons FAR more important than I did. They were military veterans, some of them profoundly not okay after Viet Nam, using it as sort of a hobby-mediated support group, and I was a fifteen-year-old kid hobbyist with a paper route.  Hobby in common or not, I had no illusions about the relative value of our access.   So I tried to be a good guest; I took my turns as fast as possible, at times least likely to conflict as possible, using as many pre-recorded scripts (played off a cassette tape deck!) as possible to waste absolutely no time, and got off.  I didn’t want to keep anybody out of something which was that important to them.

That’s the way things were when I started learning about the value of bandwidth.

No matter how much bandwidth I’ve got now, no matter how cheap it becomes, I’m still aware of it and it’s still important to me to not waste it.  I’ve sweated every byte every time I’ve designed a protocol.

And that’s why – to me anyway – universal distribution of a globally writable block chain is still amazing.  Just the fact that it’s now POSSIBLE seems incredible.

Q4: When Satoshi released the white paper, you had many public exchanges with her on that mailing list.  For instance, you asked her about inflation and Satoshi seemed to think that there could be some price stability if the number of people using it increased at the same level as the supply of bitcoins increased.  But, relative to the USD, there has never really been much price stability in its history to date.  Is there a way to re-engineer Bitcoin and/or future cryptocurrencies to do so without having to rely on  external price feeds or trusted third parties?

A4: Whoof…  that’s a hard question.  “Is not Gross Matter Interchangeable with Light?”  was considered impossible until Einstein figured it out. And the people who’d been asking that question didn’t even recognize or care about Einstein’s answer because his answer wasn’t about bodies and souls and the afterlife.  If the answer is ‘yes’ but the re-engineering involved changes the fundamental qualities that make you (or anybody) value cryptocurrencies, then is the answer really yes?

Satoshi tried to do it by anticipating the adoption curve.  We know how that turned out.

I think it’s fundamentally impossible to plot an adoption curve before launch.  I mean, I was the pessimist who assumed that there’d be a small group, formed early, that wasn’t going to be growing at all as these additional millions of coins pumped into that campus or that community economy.  So I figured, some initial value and rapid inflation thereafter.

Satoshi was far less pessimistic in figuring a widespread and fairly gradual adoption, and had picked the logarithmic plot to put coins into the economy at about the rate envisioned for adoption, assuming Bitcoin would follow a logarithmic adoption curve. It wasn’t a bad guess, as it’s a decent approximation to the Bass Diffusion Model, but the
parameters of the curve were completely unknown, and the Bass curve often appears after something’s been around a long time – not just when it’s launched.

Most importantly, nobody anticipated Bitcoin’s primary use as being a vehicle of financial speculation. The Bass Diffusion Model isn’t applicable to speculative commodities, because price changes in speculative commodities are responsive to PREVIOUS price changes in the speculative commodity.  That makes them nonlinear and chaotic.

And that, I think, is what it comes down to.  If people will be using something as a vehicle of speculation, then its price point is chaotic and defies all attempts to stabilize it by predicting and compensating for it.  So I think we need to abandon that notion.

You’ve already ruled out the idea of external price feeds and trusted third parties, because those would change the fundamental qualities that make you value cryptocurrencies.

That leaves internal price feeds:  If a cryptocurrency is used as a medium of exchange in other fungible assets, and those exchanges are recorded in its own block chain, then exchanges of crypto for dollars and exchanges of crypto for, eg, gold bars are visible in the block chain and could at least in theory be used to detect economic conditions and adjust the rate of issue of cryptocoins.

But the fly in that ointment is, again, the fact that the crypto is being used as a speculative asset.  People can read the block chain before the changes are made, anticipate what changes the code is about to make, and will front-run them.  Or, operating as “Sybil and her Sisters”, make a thousand completely bogus transactions in order to fool the software into doing something crazy.  Either way reintroducing positive feedback via market manipulation.

Most schemes aimed at stabilizing the value of a coin via any automatic means assume that the price can be changed by changing the rate of issue.  But the more coins are in circulation, the less possible it becomes for changes in the rate of issue to shift the price, meaning it devolves back to the first case of nonlinear and chaotic feedback.  IOW, the new coins being added represent a much smaller fraction of the available supply, and withholding them will affect almost no one except miners.

Honestly I’m very surprised Tethercoin isn’t dead yet.  What they propose, economically speaking, simply will not work.  They got themselves somehow declared to be the only way to get money OUT of a major wallet, which props up their transaction volume, but if the people haven’t already walked away with most of the money they’re supposedly holding but won’t say where, then I’m very surprised.

Q5: About a year ago you wrote a highly-commented upon, passionate retrospection published on LinkedIn.  You called out a lot of the nonsense going on then, is there anything that has been on your mind since then that you wanted to expand upon?

A5: Um.  Artificial Intelligence, Financial Markets, Human Brains and how they are organized, the nature, origins and mechanisms of consciousness and emotion, a generalization of neuroevolution algorithms intended to scale to recurrent networks of much greater complexity than now possible, scope of political corruption and the politics of divisiveness, gene migration and expression, the way cells control and regulate mutation in different kinds of tissues, directed apoptosis via a multiplicity of P53 genes as a preventive for cancer (happens naturally in elephants; easy to do with CRISPR; engineered humans would probably be radiation-resistant enough for lifetimes in space, or just plain longer-lived, or both), history of the Balkans, history of the Roman Empire, ancient religions, writing a science fiction novel ….

You know, things that are INTERESTING!  I actually _can’t_ turn my brain off.  It’s a problem sometimes.

I have had a few thoughts about cryptocurrencies, however, which is probably what you intended to ask about.

The first:

I have figured out how to redesign the cryptographically secured history database built by cryptocurrencies so that you don’t need any full nodes.  There are other ways to organize the blocks that give the proof property you need; They don’t have to form something that’s only a chain, and you don’t have to have specialized nodes for the purpose of holding them because everybody can hold just the blocks they need to show the validity of their own txOuts.

In order to verify the validity of any txOut, you need three things:  to see the block where it was created, to be sure that block is part of the same database as that proposed for the transaction, and to be sure that no block exists between those two in which that txOut was spent in another transaction.

Call it a “Block Hyperchain”, by reference to the N-dimensional hypercube it’s based on and the block chain it replaces.

I should be clear and say there are things it does and things it doesn’t do.  If your goal is to check all transactions, you’ll download a scattering of blocks for each transaction that soon add up to most of the block database, so someone who wants to check every transaction will rapidly accumulate the whole database.

But most users should be happy with just the few blocks they need to demonstrate the validity of the txOuts they hold, and it’s damn nice to be able to download a client, open it up, and just use it with minimal delay because someone offered to pay you bitcoins one minute ago and you want to be able to make sure the transaction he’s offering is valid RIGHT NOW, instead of waiting to accumulate the whole chain to check anything.

Suppose we pick a base, for convenience, of 10.  This helps make things easy to explain because we work with base-10 numbers, but we could have picked 16 and used hexadecimal for our explanations.

In a base-10 Block Hyperchain, every block that’s published has its own set of transactions, and the hashes of the blocks  10^N blocks ago for every integer value of N from N=0 to N <= log10 of block height.

Every block would record its own transactions, and also one list of destroyed txOuts per integer value N over the same range.

Each destroyed-txOut list would be all txOuts created in blocks whose block numbers match (modulo 10^N) the current block number, that have been destroyed in the last 10^N blocks.

Example:
If someone shows me a transaction seeking to spend a txOut, I want to check and see if it’s valid.  Ie, I want to see the block where it was created, and see evidence that it hasn’t been spent since.

So I can look at that txOut’s ID and know it was created in block 124. If the current block is 7365,  I get block 7365 and 7364 to make sure it hasn’t been spent in those, the same way we can do with a block chain.

Then I have a block whose last digit matches the last digit of the block where the txOut was created.  So I start checking the 10-block txOut-destroyed lists.  I check the list in block 7364 to make sure it wasn’t spent in blocks 7354 to 7363.

Then, jumping back by 10-block increments (relying on the second recorded hash in the header), I can check to make sure it hasn’t been spent in the previous ten blocks to each of blocks 7354, 7344, and 7334.  Then I get block 7324.

Now I’m at a block whose last 2 digits match the block where the txOut was created, so I can start checking the previous hundred blocks using the second txOut-destroyed list, and jumping back by hundred-block increments using the third recorded hash.  So I get blocks 7224 and 7124.

Finally, I’m at a block whose last 3 digits match the block where the txOut was created, so I can start jumping back by thousand-block increments, checking the thousand-block txOut-destroyed lists.  So I get blocks 6124, 5124, 4124, 3124, 2124, 1124, and finally 124.

So finally, I have a txOut created over 7200 blocks previous to the current block, and I have downloaded a total of 15 blocks to make sure that it was created in the same Hyperchain and hasn’t been spent since.

The number of blocks downloaded is proportional to the log base 10 of the number of blocks in the chain.

The blocks I’ve downloaded are larger because of the spent-txOut lists, but the spent-txOut lists have an average length that is the same regardless of the span of blocks they cover.  Lists that report transactions from a set 10x as long, only need to report individual transactions from that set 1/10 as often.

With more efficient access to the history database, it is possible to substantially raise transaction bandwidth.  People who make transactions during the next 7 blocks or so would need to see that block;  Later on, people who accept txOuts created during that block will need to see that block. And there’ll be about 49 blocks worth of txOuts,  scattered through the earlier history, that someone eventually has to traverse this block to verify.

All this means you have drastically smaller bandwidth requirements (remember I obsess on bandwidth costs?) for the same transaction volume but larger data-at-rest requirements (for any weirdo who for whatever reason feels like they need to collect the WHOLE database in one place, and why would anybody do that?) by a factor of seven.

And I keep thinking I’m going to do it, because it’s INTERESTING! And I ought to do it, because it’s VALUABLE!  But then I think about the current state of the cryptocurrency world and the quality of the people it would bring me into contact with and the ways people would try to scam with it and the number of people who’d find reasons to lie to me or about me, and then I get a sour stomach and go on to do something ELSE!

And feel vaguely guilty for not doing it, because it actually would be valuable.

It’s really hard for me to be motivated or enthusiastic about a cryptocurrency project, until the whole field is more full of people I’d be happy to interact and exchange ideas with and less full of ….  um.

The words that come to mind really shouldn’t be printed.  [This is fine meme]  I don’t mind if people know I’m sort of upset with the conditions and business ethics out there, or even that being so upset is literally preventing me from doing something useful.  But I’d rather not have it expressed in terms that are an incitement to violence.

Anyway, moving on;  In order to mine, someone would have to be able to see seven of the previous blocks; a different set of seven every time. But if I thought bandwidth was going to waste, that doesn’t even START to address the costs of hashing!  Deploying something that saves bandwidth without also figuring out a way to save hashing would fail to address a critical point.

So, I’ve had a bunch of thoughts about mining.  Most of which aren’t as interesting or valuable as the thought about how to organize the history database.  In favor of mining, it’s good that someone is able to join the network permissionlessly, help secure it, get paid, and initially get coin into circulation going from “none” to “some”.

My thoughts for securing a chain without proof-of-work are something I suppose I ought to call “Proof-of-Total-Stake.”

Congratulations!  This conversation with you got me to name it!  I had been calling it “proof-of-activity” but I see that name has acquired a much more specific meaning than it had when I started calling this by it, and no longer fits.

I still need to figure out what to call my revised structure for the block history database though.

Proof-of-Total-Stake  means measuring the priority of a fork by the total value of TxOuts that existed BEFORE the fork that have been spent AFTER the fork.  In other words, the total stake: how much of EVERYBODY’s money the blocks formed after the fork represent.  That is a well-founded mechanism for security that doesn’t involve trusted parties nor burning hashes.  It’s the only one I’ve come up with.  In the long run, unless somebody comes up with another fundamentally new idea, or accepts the idea at least of trusted block signers, that’s what I think a proper cryptocurrency would have to wind up with.

But there’s a problem with it.

Proof-of-Total-Stake, by itself, doesn’t provide an obvious way to determine who gets to form the next block – which can be a CRUCIALLY important security concern.

And Proof-of-Stake, including Proof-of-Total-stake, doesn’t handle the initial, permissionless, distribution of coins.  They can’t go from “none” to “some.”  They can only go from “some” to “some more.”

So I think it could only be deployed along with some kind of mining.

Q6: We first started interacting some four years ago when I was doing some research on dead cryptocurrencies, most of which were just direct clones or copies of Bitcoin.  At the time you were doing the heavy lifting categorizing how they died in a BitcoinTalk thread.  Today sites like Deadcoins.com have tried to do something similar.  Even though loud advocates at events like to claim blockchains ” live immutably forever” empirically there are probably just as many dead blockchains than living blockchains.  What do you think the top reason for why so many blockchains lose support to the point of death and do you think those reasons will change much in the future?

A6: By far the vast majority of those people were not doing anything INTERESTING!  A lot of the honest ones discovered that it was a lot of work and had other commitments in life.  A lot of the dishonest ones made their money and walked away leaving the  suckers behind.  A lot of people discovered that maintaining a codebase needed more programming chops than they actually possessed, and quietly withdrew from the field. A fair number ran into scammers and crooks whose utterly disgusting behavior left them convinced they wanted to do something else rather than meeting any more of those guys.

But the most important point? Hardly any of those coins was ever used in any transaction for an actual thing – not even an initial experiment like Laszlo’s Pizza.

Most of them were only ever mined by people who intended absolutely nothing beyond immediately converting them into Bitcoin, and only ever held by people who daily watched their value trying to guess the right time to sell them for Bitcoin.

It’s not so much that most of them *failed* – it’s more the case that the vast majority never even remotely began to *succeed*. There was no economic activity, meaning sales of merchandise or payment for work, that they facilitated.  Put bluntly, they just didn’t do anything beyond providing a temporary and completely discardable medium for speculation and scamming.  And, as surely as atomic decay, they got used, for that purpose only, and discarded.

Q7: Based on the original white paper, the intent of Bitcoin was to be an e-cash  payment system which could be utilized without needing to disclose a real identity to an administrator.  It seems that over time several different tribes have popped up, including those who market Bitcoin as a form of “e-gold.”  What do you think of the visible fracture that has occurred between the various Bitcoin tribes?  Does proof-of-work really act as a type of DRM for coin supply or do all the forks we have seen turn the advertised “digital scarcity” and “digital gold” into an oxymoron?

A7: That endless fight, starting with the block size fight, with everybody yelling and nobody listening, pretty much convinced me that the “community” which had grown around Bitcoin was in deep trouble.

The differences between the various proposed technical changes to the block chain, are far less important to the futures of those forks, than the integrity of the people who support and do business using them.

But the technical merits were never discussed by most. Instead, repetitive sound bites and slogans about them containing absolutely no new information were shouted.  Integrity was seldom displayed either. Instead, the fight was carried forward almost exclusively by partisans who had already decided what was the only possible solution that they would accept, and in many cases using tactics that inspire an absolute refusal to support their interests, or even participate in the communities where they are found.

If someone hires a troll army to attack a community by astroturfing fake support for something, can you respect that person?  If someone drives people who disagree away with personal abuse, is that a reasonable method for coming to an agreement about a protocol?  Is it a valid form of technical reasoning to launch a sabotage against a block chain based consensus mechanism?  What can you say about someone who buys existing accounts of users whom others trust in order to fake trusted support for their agenda? How about when it happens after those users whom others trust have been driven away or left in disgust?  Is it a respectful negotiator interested in the insights of others in solving a problem, whose negotiating skills include locking the damn doors and refusing to let someone leave the room until they get his signature on an “agreement” that they wrote without his knowledge before he even got there?

Is someone who would participate in a fight, on those terms, someone whose agenda or business interests you really want to support?  Hint: You already know that people who fake support for their agenda, or tell lies about other in order to discredit them, or who deliberately deceive others about the merits of their own proposal or others’ proposals, are doing business by means of fraud.  Do you want to carry on until the fraud is financial and the victim is you?

These factions had no interest whatsoever in reaching a consensus.  And nothing prevented each from implementing their idea and launching, with no hard feelings from anybody and no fight.  The only thing they were really fighting over was the name “Bitcoin,”  which was absolutely unrelated to the technical merit of any proposal.  And, to a first approximation, the other merits of having the name is a thing that none of them even mentioned during the fight.

Technically speaking, there is not much wrong with any of these forks. They address certain problems in different ways slightly favoring the interests of different groups, but not seriously to anyone’s disadvantage.  None of them was entirely without technical merit.

On the other hand none of them make more than a tiny amount of difference.  None helped with the bandwidth or transaction volume by anything more than a small constant factor, so the problem they were supposedly about solving was not in fact solved, nor even very much affected.

So while none of the proposed changes were objectionable in themselves, there was really no *very* compelling reason for any of them to be implemented.  Each of those ideas is merely a stopgap that pushes the rock down the road another foot or two without moving it out of the way. If you want to move that rock out of the road, you will need a much more powerful idea.

Q8: You’ve mentioned that limited supplies simply incentivizes hoarding which leads to low economic activity.  You have proposed a type of “proof-of-activity” replacement.  Can you expand more on either of these views?

A8: Suppose you have an economy that’s growing (more value is being created) but has a constant supply of coins.

In that case your coins represent, let’s say, one-millionth or so of the money that’s in circulation.

And, as the economy continues to grow, your coins will continue to represent one-millionth or so of the money that’s in circulation.  But that will be one-millionth or so of a lot more actual wealth.  In fact, your money, just sitting there in your wallet, is GUARANTEED to rise in value by the same fraction that the economy is growing by.  In our terms, this would be exactly the market average, as though you were holding stocks invested in ALL the businesses in your economy in proportion according to their  capitalization.  This is what index funds and IRAs make, mostly, but it’s making it with no risk.

Now, if you offer any investor a risk-free investment that’s guaranteed to make the same return as the market average, that investor would be mad to pass it up.  No investor is confident that she’ll beat the market average in any given year.  That’s why they call it “AVERAGE!”  And volatility – variance in return – is an unqualified bad thing because it will always take an 11% gain to make up for a 10% loss.  That money sitting right there in her wallet is the best investment she could possibly make.  There might be things that would make as much or more money, but all of them involve risk out of proportion to their marginal return.  Let other investors do that; they’re suckers and she’ll make the same money they do.

The problem with that is that the other investors are looking at the same question.  And reaching the same conclusion.  Why invest in companies doing anything productive, and expose yourself to risk, when you can make the same money just by holding your investment in your wallet?

And then who invests in the businesses that, if they were working, would actually create the value these people all intend to have some share in?

… (sound of crickets chirping) …  Suckers.

Suckers who lose more often than they win, because it takes an 11% gain to recover a 10% loss.  And the money the lose? Eventually trickles into the hands of the people who are hoarding it.

With no reason for investors to invest in business, the businesses eventually starve and the economy shrinks.  And all those coins that represent one-millionth of the economy’s wealth start representing one-millionth of less and less actual value.

This is what happened to ancient Rome.  They used metals (gold and silver and bronze) as currency, and their economy collapsed WHILE people had plenty enough money to keep it going!  Everybody stashed all their coins expecting to benefit later from prospering businesses, and the businesses, for want of capital, did not prosper.

Then the death spiral started: everybody stashed their coins waiting for the economy to come back so the coins would be worth their “real” value, and the economy never came back.  The coins were never worth their “real” value, until the people who remembered where the coins were buried had also been buried.

It’s a millennium-and-a-half later and we are STILL finding stashes of Roman coins!  The people who could have gotten their economy moving again, if they had EVER supported a business, instead buried their money in sacks.

The government tried to get it moving again, or pretend for a while that it hadn’t collapsed, making coins with increasingly ridiculous adulterated alloys.  But that didn’t change the underlying dynamic.

The Gold bugs of course have all told each other a different version of this story, where the adulterated coins were the cause of the collapse rather than the increasingly desperate attempt to recover from it.  And it’s pointless to try to convince them otherwise; they believe they already know the only possible truth. But for those actually motivated to investigate, the chronology of the events is reasonably clear.

===============================================================

The next thing is about “Proof-of-Total-Stake”, which I guess is what I’m going to call this idea for securing the chain.

The fundamental idea behind Proof-of-Total-Stake is that the priority of any branch of a fork is the total amount of EVERYBODY’s money which that fork represents.  That means, coins generated in that fork and pre-existing coins brought into the fork by transactions.

Coins generated in a fork are the coinbase transactions; Coins moved into the fork from earlier parts of the chain are TxOuts from earlier in the block chain that have been spent during the fork.

But we have to know which BRANCH of the fork they were spent into. ie, someone trying to create a fork should not be able to stick transactions from the valid branch of the chain into it, or they can match the txOut spending from earlier in the chain.  This is the basic problem with most implementations of proof-of-stake, which some writers have called “nothing at stake.”   Whatever resource you are using to secure the chain is meaningless when it can be used to secure *BOTH* forks of the chain.

In order to prevent the replay attack, each transaction would have to “stake” a recent block, making a commitment to supporting only forks which include that block.  This adds a field to each transaction.

The new field would give the (hash) ID of a block, indicating that this particular transaction is not valid in any branch of the chain which does not include the staked block.

So, let’s say that two transactions “coffee” and “eggs” are made at the same time,  after the chain forks at block 50.  “Coffee” stakes block 48 and “eggs” stakes block 51A.

When “coffee” appears in block 51B, the total stake of fork B is increased by that amount; its weight counts toward that resolution of the fork.

Then “eggs” is added to block 52A, and can’t be placed in chain B because it staked a block doesn’t exist in chain B.  Now “eggs” counts as stake in favor of the A branch and “coffee” counts as stake in favor of the B branch.

But then “coffee” appears in branch 53A, where it is also valid because the same block 48 is behind both branches.  This cancels out its support for branch B, just by being equal – revealing that stake which can be used in favor of both chains counts for nothing.

Security happens because some finite resource (coins created before the branch point and spent in transactions that are staked after the branch point) is committed detectably and irrevocably to the support of one branch (by staking after the branch point), and cannot be used to support any other.

This is exactly what Bitcoin does with hashes:  Hashes per second and number of seconds spent hashing are finite.  Hashes are irrevocably used in support of one branch (because the hash preimage can never be made to match a different block).  And the fact that they are used to support a particular branch is detectable.

Well, strictly speaking there’s only one “detectable” hash in each block. All we know about the others is, on average, how rare that one “detectable” one was and therefore, on average, how many they must have been.

But it’s still the same basic criteria.  Some finite resource, committed detectably and irrevocably to the support of one branch, which cannot be used to support conflicting branches.  And proof-of-total stake says that resource is the amount of EVERYBODY’s coins that branch represents.

With transactions supporting the basic security of the chain, and the idea behind coinbases being that they are payment for providing chain security, we want our “coinbases” to reward the people who make transactions that stake recent blocks.

PoTS is strong in the long run, or when the chain is seeing a high volume of legitimate transactions, but has its own problems.

Transactions in most cryptocurrencies are a very bursty use of something with long latent periods.  Absent heavy transaction volume, you can’t really expect PoTS to definitively reject a branch in such a way that a crook couldn’t resurrect it with a very large spend.  If the crook has more coins than the difference in total-stake between the two forks, the crook could resurrect the “dead” fork.

This is why the “interest” payments (actually per-transaction coinbases of a particular sort) when a transaction staking a recent block are made. To encourage a fairly constant stream of transactions that support one particular version of the chain up to a very recent block.

But the peril with that is that you want to structure it in such a way that you don’t incentivize people to overwhelm your bandwidth by transferring every coin they own from their left pocket to their right every block either.  So the actual design would come down to some compromise between transaction fees, and interest payments on transactions staked in very recent blocks, where the breakevens represent the transaction volume you want.

And there are a couple of final things to address together.  First, PoTS, while it has a workable rule for figuring out which branch of forks is preferred, is pretty silent about who gets to form blocks and how.  Second, Interest on coins spent has the “nothing to something” problem where if you don’t have anything in the system to start with, you won’t have anything ever.  These are both classic problem with PoTS coins.  The final design has to include some additional kind of coin creation that doesn’t depend on previous holdings (even if it gets de-emphasized after a while) and some way to determine who forms the next block.

Q9: ICOs have been around in some form or fashion for about five years now.  What’s your view on these fundraising schemes?

A9: The SEC is bouncing on them pretty hard, and as far as I can see it’s pretty much deserved.  Everybody wants something they can freely trade on secondary markets, and sell on the basis of its future value, but they also want to lie about it by saying it isn’t a security.

It is a security.  If a security is sold by a company to raise money, but does not represent a bond (a promise to buy it back) nor a stock (a share in future earnings) then an investor is getting nothing for her money – except maybe a receipt for having made a donation.

Another investor (a “real” investor who knows and understands a broad market, not a speculator who made a lot of money by a couple of strokes of sheer luck) will not buy it from them, at any price.  Such a thing has only speculative value.

If something’s continued value depends on a company, but the company’s continued existence doesn’t depend on that thing having value, it would be an excellent thing to not buy.

And all of that, we can say without ever touching on ethics and business practices of the people who run them.  But when we do touch on the people who run them, the story gets worse.  Much worse.  Much, much worse.  In this most are following the path trod by Altcoins.  And racking up a very similar ratio of efforts that fail, or which never even start to succeed.

Q10: You have alluded to tokenized securities in the LinkedIn article as well as our correspondence, what is your take on this topic?  What are the advantages versus say, simply doing what Carta (formerly eShares) does?

A10: I would have to answer that admitting to some degree of ignorance about Carta.  As I remember eShares, it was very much a top-down stock and option management tool, in that a private company with (non-traded) shares typically uses it to keep track of who owns what – actually issuing assets or recording changes in their status, making info about them available for the holders but mostly just to view online.

What it does not do, as I understand it, is directly enable the shareholders to trade those shares or options with each other.  Nor does it handle securities involved with or created by more than one company at a time.  It is a management interface, not a market.

I envision a block chain – sigh, now I have to come up with a name again.  Phooey.  I never care about naming anything, and then someone wants me to talk about one of my ideas and I have to come up with a name for it on the spot.  Let’s go for the pun and call it the Stock Trading and Options CryptoAsset Keeper.  I could come up with  something even dumber, but for the sake of exposition, call it STOCK.

The idea is that STOCK would act both as a Transfer Agent (which Carta does) AND a market (which AFAIK Carta does not).   A company could issue securities such as stocks and bonds directly on the STOCK block chain (“cryptoassets”) and the block chain could record trades in those issues against its native cryptocurrency.  The benefit here is the clear record and history to keep track of all trades and the current disposition of all the different cryptoassets – the stocks, the bonds, and the “cash” used to trade in them, would all be on the chain.

As long as no off-chain assets like bushels of wheat or truckloads of sneakers need to be delivered, and dividends/prices/etc accruing to these instruments are paid out (or in) in the cryptocurrency, the block chain could then function directly as market, transfer agent, means of delivery, and payment channel.  The task of converting the cryptocurrency to and from actual fiat, and the heavily regulated business of delivering the fiat currency, could be left to already-established cryptocurrency markets.

Trading in stocks/bonds/etc is highly regulated, and debts (NEGATIVE amounts) can crop up unexpectedly when companies go south or options traders go bust. Stuff gets into the RealWorld quickly when someone has to be found for debt payments, served process, and/or prosecuted for fraud, etc.  So STOCK couldn’t be an  “anonymous/permissionless” chain, at least not for regulated trades.  Each person or entity authorized to actually make securities trades would have to have a vetted, verified ID as specified by KYC laws, and would have to sign each such transaction with a public/private key pair proving Identity.

From the point of view of investors, STOCK would be a very sluggish market – submit your trade, have a completely random execution window averaging ten minutes (or whatever) during which the price might change, then a whole block of transactions all fly past at once and everybody’s waiting for the next completely randomly-timed block.  On the other hand, you don’t need an agent, or a broker, or a company transfer agent, or a registrar, or a clearance period, or ANY of those people who normally collect fees on every trade.  You could actually have a market where the buyer and seller get the exact same price with no ‘float’ whatsoever.  And you don’t have to worry about what time it is.  NASDAQ closes at 5PM new york time, and then a whole bunch of “off-market,” “private,” and “over the counter”  trades that nobody but the insiders can participate in or see happen. But STOCK would go on making blocks twenty-four hours a day seven days a week.  Why should it ever stop?

The SEC would be all over it of course; they’d be sticking a microscope up the butts of everybody involved to make sure that there was absolutely no scamming the investors.  Which is, after all, their job. And they’d require KYC compliance, and a whole lot of other regulatory compliance.  But, y’know, that’s kind of how starting any _legitimate_ business in financial services works.  No need to feel special or particularly victimized about that.

And the regulators would need some privileged keys that could be used to “seize” assets when a court orders them to, as part of a settlement for fraud or theft or something.  And everything else.  There’s a great irony that they’re interested in nobody having the opportunity to scam the investors, but they structurally require, just to be able to do their fundamental mission, builtins to the protocol that if misused would allow somebody to scam the investors.

But once satisfied and functioning within the law, I think they’d welcome STOCK as something that puts down a visible, provable, inalterable, unfakeable history of all trades.

Q11: Is there any cryptocurrency you think could become widely used outside of geeks, cypherpunks, and ideologues?  If not, what would need to change and how?  Has any popular coin ossified to such an extent that it can’t meaningfully evolve?

A11: Homer Husband and Harriet Housewife want convenience and familiarity. Which is mostly about form factor and compatibility.  They do not want to deal with key management in any form.

To do that, you have to make a hardware wallet small enough to fit into a wallet or a purse.  It doesn’t have to be literally credit card sized, but couldn’t be much bigger.  It should be the size of a stack of five credit cards, at most.  Or maybe it gets stuck back-to-back onto their cell phone.  It has to have an end that acts like a chip card, or an edge that acts like a mag stripe, or both, so that it can interact with the grocery stores, auto shops, restaurants, etc that Homer and Harriet already do business with.

That’s very very important, because Homer and Harriet aren’t evangelists.  The mechanic they’ve been going to for fifteen years has never heard of cryptocurrency and is never going to deal with the inconvenience of getting set up to accept it.  He wants people to pay cash or pay with a card, and Homer and Harriet would NEVER consider arguing with him about it, don’t want to go to the effort of explaining it to him, and probably couldn’t explain it very well anyway.  If they have to do any of those things, that’s a deal-breaker.

After that you have to get your cryptocurrency onto the Plus or Cirrus network, using the same interface as a foreign fiat currency.  That would allow Homer and Harriet to automate the sale and exchange to whatever local people think is money, or the purchase and exchange to crypto, when they want to spend or accept stuff from that “card.”  This will mean that they get hit with some extra fees when they use it, but
those fees are both unavoidable if you want to be on those networks, and relatively familiar to them.

Finally, there’s that key management thing.  You could handle most of it by making the wallet do it.  But sooner or later, that hardware wallet is going to fall and bounce of the curb, and go crunch under the tires of a bus.  Or, you know, get dropped into the ocean accidentally, or just get lost.

Homer and Harriet are NOT willing to accept that this is not something they can recover.  The only thing that they accept not being able to recover, when they lose their wallet, is familiar, folding fiat currency.  And that’s why they don’t keep very much of folding fiat actually in their regular wallets.

If you do convince them that losing the wallet makes the funds unrecoverable, they will never want to have more than fifteen dollars on it, which will mean it isn’t useful.  So, your hardware wallet has to interact with SOMETHING that keeps enough information about what’s on it, to enable a new wallet to recover everything that got lost.

Q12: Mining farms, mining pools, and ASICs. Many accounts are that Satoshi did not anticipate the full industrial scale these would reach.  Do you agree with this?  What are your views on mining pools and ASICs as we know them know today (specifically as described by Eric Budish’s paper)?

A12: My first problem with ASICs is that they can be used for exactly two things:  Mining cryptocurrencies, and carrying out attacks on cryptocurrencies.

Every day of every year, people who own those enormous ASIC farms are deciding which is the most profitable use of them, on that day.

And the rewards for mining cryptocurrencies ratchet downward every couple of years.

That seems problematic.  I keep watching to see what emerges each time the reward ratchets down, but I haven’t seen evidence yet that any of the big ASIC farms have turned around on any large scale.

My second problem with ASICs is that they are sucking up ridiculous amounts of energy that can never be recovered or used for anything else. I don’t so much mind this when converting the energy into heat is actually useful – replacing electric heaters in the basement of a building with a bank of Antminers that use the same amount of power is
energy-neutral and helps secure the chain.

But that’s not what happens in huge ASIC farms.  All that heat is just waste. Nobody’s home is made more comfortable, no furnace’s power bill is alleviated, no greenhouses are enabled to grow food in the winter, nobody’s oven gets to bake bread with that heat, and all that energy is just plain gone.

The Bitcoin chain issues the same number of coins per day regardless of how much energy is spent; I’d like to think that spending a whole lot less of it, at least in ways where the heat produced isn’t useful, would be better.

But then we get back to the first problem;  If honest miners start spending a whole lot less on the energy costs of hashing, then there’s a whole lot of ASICs not being used, and the owners of those are going to be looking around making their daily decision about what’s more profitable….

So the logic finally does work out the same. Security requires the vast majority of those ASIC boxes to be in use mining.  It just seems such a colossal expenditure of power, and it might be that a different design could have achieved chain security without that global cost.

My third problem with ASICs is that they have become a way for their owners to steal money from the taxpayers in many nations.  Countries that mean to do a good thing for everybody, create “development zones” with subsidized electricity, paid for by the taxpayers of that country. And then people move in with ASIC farms to suck up that electricity which the public paid for, and convert it into bitcoins in their private possession.  These are business that employ very few people, drive the development of no other resources, and otherwise do pretty much nothing for the development of the local economy.  IOW, the taxpayers who paid for that electricity are definitely not getting their money’s worth in economic development.

My fourth problem with ASICs is that there really is no way to monitor centralization of hashing power.  People keep pretending that they’re tracking whether a 51% attack is underway, but I think most of them probably suspect, as I do, that what they’re really tracking is probably nothing more than whether or not the cabal of ASIC farm owners
remembered to configure that new warehouse full of machinery to use a different identifier.

In all fairness, this last thing results directly from anonymous, permissionless mining, which is something that was a very specific and very much desired part of Satoshi’s vision; he wanted anybody to be able to connect and participate, without any interference of a gatekeeper. But there can never be security from a Sybil attack when you don’t have any way of tracking RealWorld identities, and a “majority” can never be
relied on to be more than the front for some cabal or business interest, as long as a Sybil attack is possible.

And that was what Proof-of-work was supposed to prevent.  In those early days everyone was thinking of hashing power as a side effect of computing infrastructure that was likely to be there, or be useful, for other purposes when it wasn’t hashing.  And EVERYBODY has a use for warehouses full of computers, so it was easy to think that hashing power would remain at least somewhat distributed.  The idea that someone would amass enormous numbers of special-purpose machines which made every other kind of computer in the world utterly useless for mining and which are themselves utterly useless for any other job (except attacking the network), was not, I think, really considered.

Satoshi definitely understood, and planned, that there would probably be server farms devoted to mining and that economies of scale and infrastructure would eventually drive individuals with ordinary desktop machines out of the mining business by being more efficient and making it unprofitable for the less efficient machines.

But I’m pretty sure he didn’t think of miners in places with artificially low subsidized rates for electricity outcompeting all other miners because of that advantage, driving the concentration of the vast majority of hashing power into just one country where it’s subject to the orders and whims of just one government and a few businessmen who
pal around with each other.

So he probably figured, yes, there’d be a few dozen large-ish server farms and a couple hundred small-ish server farms, but I’m pretty sure he envisioned them being scattered around the planet, wherever people find it worthwhile to install server farms for other reasons.

I’m fairly sure Satoshi’s notion of the eventual centralization of hashing power didn’t really encompass todays nearly-complete centralization in a single country, owned by a set of people who are subject to the whims and commands of a single government, who very clearly know each other and work together whenever it’s convenient.

And I find it worrisome.

Those enormous mining farms, and the way economics drove them together, are a structural problem with converting electricity into security.

I am not comfortable with the implication that, for any Proof-of-Work block chain including Bitcoin, economics will eventually devolve to the point where, when Beijing says ‘jump’ the mining and security of that block chain says ‘how high?’

And that is one of the greatest reasons why I look around for a different means of securing block chains.

El Fin

Chainwashing

I was recently talking with a friend who spent the past decade in an operations role at a large enterprise in the telecommunication sector.  He has a matter-of-fact personality that likes to cut through the smoke and mirrors to find the fire.

I explained to him my role of having to filter through the dozens of entities that my market research team at R3 speaks with each month. And the formal process that our small team uses to look and find organizations that would be a good fit for R3’s Lab project pipeline.

For instance, because we typically act as the first part of the funnel for our organization, we end up listening to a great deal of startup pitches. And we are continually bombarded by endless “blockchain” and DLT noise.  The first year alone we looked at and spoke to more than 300 entities, a number that has now reached about 400.

This is not to say that there are only 400 companies/vendors/organizations/projects billing themselves as “blockchain” related entities… unfortunately that nebulous term has ballooned to encompass everything from cryptocurrencies to big data to IoT and now probably numbers in the thousands.

If you’re working in capital markets, how to tell the pretenders from the real deal?

Should you seek advice from people who never interface with enterprises or institutions and get all their wisdom from social media?  Or listen to columnists whose only interaction with banks is the ATM or a cryptocurrency meetup?  Or to media outlets that do not disclose their (coin) holdings?  Before answering these, let’s look at a new phrase below.

Thirteen months ago I gave a short presentation talking about the “blockchain” hype cycle.

The month before that – in December 2015 – I mentioned how much of the enthusiasm surrounding “blockchains” seemed a bit similar to the exuberance around “gluten free” food: how most people at fintech conferences talking about “blockchains” really couldn’t explain why blockchains were great in much the same way that many people asking for “gluten-free” food couldn’t tell you why gluten is or is not good for you.

I explained this to my friend and he said that the euphoria surrounding blockchains – and its vertical rise on the Gartner hype cycle – is similar to what he observed and experienced in “the cloud” space earlier this decade.  And more specifically, to the phenomenon called “cloudwashing”:

Cloud washing (also spelled cloudwashing) is the purposeful and sometimes deceptive attempt by a vendor to rebrand an old product or service by associating the buzzword “cloud” with it. (Source)

So with that, I’d like to coin a new phrase: “chainwashing.”

I have personally seen dozens of decks from vendors along the entire spectrum of sizes during the current hype cycle.  And watched the evolution of “blockchain creep” — how over time the word “blockchain” would appear more frequently not just on each slide, but in scope and vertical.

For instance, there are couple dozen different startups that claim to have somehow built an enterprise-grade blockchain system without having to go through the arduous process of gathering the functional and non-functional requirements from the enterprises they intended to integrate with.  Magic!

While startup founders should shoulder the blame for these marketing gimmicks – as should the reporters that often own but do not disclose their (coin) holdings – investors are also to blame for not just talking their book, but also obfuscating their portfolio companies by pressuring them to rebrand retail-focused cryptocurrency products as bonafide “enterprise blockchain” platforms.  They are not the same thing.

So what are some evaluation criteria to help identity the signal from the noise?

If your job is to help filter vendors for financial institutions, governments, investment funds, or other large enterprises, then some of these questions may be helpful in determining whether or not your firm should engage with the vendor:

  • Why is the vendor using a blockchain?
  • What is the vendor’s definition of a blockchain?
  • Who has a problem that needs a blockchain in order to solve it: the vendor or the vendor’s customer?
  • What is it about a blockchain that solves a problem that couldn’t be solved with existing technoloogy?
  • If a blockchain-related infrastructure provides a solution to for the vendor, can it use any other existing technology to solve its needs?
  • Do the founders and management team have experience managing, building, and/or deploying enterprise-grade systems or critical infrastructure?
  • Does the vendor as a whole have the appropriate contacts and connections with institutions and regulators?
  • Does the vendor have enough run way to build through a long sales cycle?

By asking these types of questions our team has helped filter the 400 or so companies/projects into a much more manageable dozen.

We think the number of companies with legs will continue to increase over time but chainwashing will continue to be a noise pollution problem for the next few years in the enterprise world even after production systems have been integrated into institutions.

As a consequence, it is probably safe to assume vendors are trying to pull a fast one on you, especially if it involves needing your company to acquire a cryptocurrency or “permissioning off” an existing cryptocurrency.

Remember: cryptocurrencies in the vein of Bitcoin were intentionally not designed to integrate with and fulfill the requirements of regulated institutions (like settlement finality) any more than a helicopter was designed to handle long distance cargo hauling.  Chainwashing is the opposite of being fit-for-purpose and we see it with marketing gimmicks like “Layer 2,” the topic of the next post.

Update: see also Evolving Language: Decentralized Financial Market Infrastructure

Watermarked tokens and pseudonymity on public blockchains

As mentioned a couple weeks ago I have published a new research paper entitled: “Watermarked tokens and pseudonymity on public blockchains

In a nutshell: despite recent efforts to modify public blockchains such as Bitcoin to secure off-chain registered assets via colored coins and metacoins, due how they are designed, public blockchains are unable to provide secure legal settlement finality of off-chain assets for regulated institutions trading in global financial markets.

The initial idea behind this topic started about 18 months ago with conversations from Robert Sams, Jonathan Levin and several others that culminated into an article.

The issue surrounding top-heaviness (as described in the original article) is of particular importance today as watermarked token platforms — if widely adopted — may create new systemic risks due to a distortion of block reorg / double-spending incentives.  And because of how increasingly popular watermarked projects have recently become it seemed useful to revisit the topic in depth.

What is the takeaway for organizations looking to use watermarked tokens?

The security specifications and transaction validation process on networks such as the Bitcoin blockchain, via proof-of-work, were devised to protect unknown and untrusted participants that trade and interact in a specific environment.

Banks and other institutions trading financial products do so with known and trusted entities and operate within the existing settlement framework of global financial markets, with highly complex and rigorous regulations and obligations.  This environment has different security assumptions, goals and tradeoffs that are in some cases opposite to the designs assumptions of public blockchains.

Due to their probabilistic nature, platforms built on top of public blockchains cannot provide definitive settlement finality of off-chain assets. By design they are not able to control products other than the endogenous cryptocurrencies they were designed to support.  There may be other types of solutions, such as newer shared ledger technology that could provide legal settlement finality, but that is a topic for another paper.

This is a very important issue that has been seemingly glossed over despite millions of VC funding into companies attempting to (re)leverage public blockchains.  Hopefully this paper will help spur additional research into the security of watermarking-related initiatives.

I would like to thank Christian Decker, at ETH Zurich, for providing helpful feedback — I believe he is the only academic to actually mention that there may be challenges related to colored coins in a peer-reviewed paper.  I would like to thank Ernie Teo, at SKBI, for creating the game theory model related to the hold-up problem.  I would like to thank Arthur Breitman and his wife Kathleen for providing clarity to this topic.  Many thanks to Ayoub Naciri, Antony Lewis, Vitalik Buterin, Mike Hearn, Ian Grigg and Dave Hudson for also taking the time to discuss some of the top-heavy challenges that watermarking creates.  Thanks to the attorneys that looked over portions of the paper including (but not limited to) Jacob Farber, Ryan Straus, Amor Sexton and Peter Jensen-Haxel; as well as additional legal advice from Juan Llanos and Jared Marx.  Lastly, many thanks for the team at R3 including Jo Lang, Todd McDonald, Raja Ramachandran and Richard Brown for providing constructive feedback.

Watermarked Tokens and Pseudonymity on Public Blockchains

Integrating, Mining and Attacking: Analyzing the Colored Coin “Game”

[Note: Below is a guest post from Ernie Teo, a post-doctorate researcher at SKBI (where I am currently a visiting research fellow).  It is referenced in a new paper covering the distorted incentives for securing public blockchains.]

Integrating, Mining and Attacking: Analyzing the Colored Coin “Game”

By Ernie G. S. Teo, Sim Kee Boon Institute for Financial Economics,
Singapore Management University

The research in this post came about when Tim Swanson invited me to look at colored coin providers and their incentives from a game theory perspective. The results are based on a number of phone conversations with Tim; I would like to take the opportunity to thank Tim for his insights on the matter. For an introduction to what colored coins are, refer to Chapter 3 in Great Chain of Numbers.

The initial question Tim wanted to know was if colored coins can be identified will miners charge excessively high fees to include these transactions. The led to a discussion of the possibilities of the colored coin issuer becoming a miner; and of an attack on the network to take control of the colored assets.

The problem proved to be very interesting as there could be many implications on the success of the system given the potential costs and benefits. Entities or players within the “game” could strategically choose to sabotage themselves if the incentives were right. In this post, I will attempt to explain this using a “sequential game” format. I will explain the various stages where choices can be made and the players involved in each stage. This will be followed by an analysis of the various outcomes and the strategic choices of each party given the incentives involved.

Before we start, I would like to disclaim that the model that follows is a simplified version of the problem and helps us to think about the potential issues that could arise. They are based on various assumptions and in no way should the results be taken at face value.

Stage 1: Before the colored coin issuer (CCI) starts operations, we assume that they will consider if they will choose to become a miner (Assuming that they can include their own transactions into blocks if no one else would). The decision maker (or player) here is the CCI, the choices available are to integrate or to not integrate.

Stage 2a: When the CCI starts issuing colored coins, it would have to decide on the fees it would pay for the transaction. We assume that the CCI is a rational entity and will choose the optimal fees. However as there are two possibilities in stage 1, there will be 2 possible fees quoted; one for a CCI whom is also a miner (integrated) and another for a CCI whom is not a miner (non-integrated). The decision maker here is the CCI and the choice is the fee quoted.

Stage 2b: This is immediately followed by the miners deciding to include the transaction in the block or not. For simplicity’s sake, we assume that there is only one miner in this game (this can be the CCI). The decision maker here is the miner and the choice is to mine the transaction or not.

If the decision in Stage 2b is not to mine, the game ends (End 1).

Stage 3: We next assume that the miner can choose to fraudulently attack the system and transfers the colored coin to itself. The decision maker here is still the miner and the choice is to attack or not.

This gives us 2 alternative endings (End 2 and End 3). The game can be described by Figure 1.

Colored Coin Teo

Figure 1: The stages of the “game”

If we consider the game, there are only 2 decision makers or players: The CCI and the miner. Next, we consider what are the possible outcomes or payoffs for each possible ending described above. This is described in Figure 2 below, there are actually 6 possibilities as there are 2 types of CCIs, integrated and non-integrated. When there is integration, there is really only one player.

Colored Coin Teo 2

Figure 2: Payoffs of the game

Having setup the game and determined the payoffs, we analyze the possibilities of each outcome. This is subject to the comparative magnitude of each payoff. Let’s start with the non-integrated outcomes, there are 3 possibilities:

  1. Not Integrated. Mined. Attacked.
  2. Not Integrated. Mined. Not Attacked.
  3. Not Integrated. Not Mined.

An attack happens if M3>M2 (this will happen if the net benefit of the attack is positive).

If M3>M2, the transaction will be mined if M3>M1. This is because the miner expects the attack to take place, the miner will thus only mine the transaction if it the payoff from mining and attacking is better than not mining. Since we assumed that M1=0, M3 will be always larger than M1. Thus When M3>M2, mining always takes place and an attack happens.

If M2>M3, the attack will not happen (this would indicate that the net benefits of the attack is negative). The transaction will be mined if M2>M1 or if the transaction fees are positive.

The transaction will not be mined if M1≥M2. Since M2 (the transaction fee) has to be at least zero, if M2=0, the transaction will not be mined.

To summarize, there are 3 scenarios:

  1. M3>M2≥M1: The transaction is mined and an attack takes place. The CCI gets CC3NI.
  2. M2>M3 and M2>M1: The transaction is mined and an attack will not take place. Note that the inequality between M1 and M3 does not matter for this outcome. The CCI gets CC2NI.
  3. M1≥M2>M3: The transaction is not mined. The CCI gets CC1NI.

In stage 1, the CCI is making the decision to integrate. To analyze this, we need to compare the non-integrated outcomes with the integrated ones. We thus have to look at the integrated outcomes first before we discuss stage 1. The outcomes are:

  1. Mined. Attacked.
  2. Mined. Not Attacked.
  3. Not Mined.

An attack happens if CC3I>CC2I. (This again will happen if the net benefit of the attack is positive).

If CC3I>CC2I, mining will occur if CC3I>CC1I. Similar to the non-integrated case, CC3I is always larger than CC1I . In fact this case is stronger as CC1I is at most zero and is likely to be negative as it is a cost. Thus if the CCI is willing to launch an attack against itself, it will definitely mine the transaction.

If CC2I>CC3I, no attack happens. For mining to occur, CC2I≥CC1I (the CCI will prefer to mine if they are indifferent). CC2I will always be larger than CC1I unless mining fees are zero (in which case it is equal), mining will always occur if CC2I>CC3I.

For mining to not occur, CC1I>CC2I or CC1I>CC3I needs to hold. To summarize, there are 3 scenarios:

  1. CC3I>CC2I and CC3I>CC1I: The transaction will be mined and an attack occurs. CC3I is the final payoff.
  2. CC2I>CC3I and CC2I>CC1I: The transaction is mined and no attack happens. CC2I is the final payoff.
  3. CC1I>CC3I (we had determined that CC1I>CC2I could not be possible): No mining occurs. CC1I is the final payoff.

Note that we have determined that mining will always occur if the CCI chooses to integrate. Thus there are only 2 relevant scenarios instead of the 3 found in the non-integrated case. The main assumption is that the CCI miner will be able to get its transaction included on the blockchain; this could be either because it is the only miner or it has invested in sufficient computing resources to ensure it.

There are a total of 9 combinations of events detailed in Figure 3. Figure 3 also shows the conditions required for integration to occur under each scenario.

Colored Coin Teo 3

Figure 3: Analyzing the Integration Choice.

Colored Coin Teo 2

Figure 2: Payoffs of the game

Referring back to figure 2, we can make the following assumptions:

CC1NI is always larger than CC1I

CC2NI is always larger than CC2I

CC2NI is always larger than CC1I

Thus the 3 inequalities highlighted in red in Figure 4 are never possible, no integration will occur in scenario B+E, B+F and C+F.

In the other 6 scenarios, integration could occur given the right conditions. We can make some predictions on what is likely to occur.

  1. In all scenarios with event A (A+D, A+E and A+F) where the non-integrated miner attacks, it is likely that the CCI prefers to integrate.
  2. In scenario B+D, there are two possibilities. If the cost of attack is large, the CCI will not integrate. Otherwise, it will integrate and reap the benefits of launching an attack on itself.
  3. When event C occurs and no integration takes place, the transaction will not be mined and the CCI gets nothing. Integration will thus occur as long as the cost of integration is small enough. This will be relevant for scenario C+D and C+E as we has ruled out C+F earlier.

One may ask if the CCI would want to attack itself. Well, if the benefit of attacking is large, a colored coin issuer may want to attack the network to derive a onetime benefit even though the company will never be trusted afterwards. However, this is unlikely as the cost of integration has to be extremely large for the CCI to be able to successfully attack the network.

Finally to answer our initial question, let us consider the issue of whether a non-integrated miner (in the event that a colored coin transaction can be identified) will force the CCI to quote high fees in order to get the transaction included. This is only relevant in the scenarios where the CCI initially chooses not to integrate. However, if colored transactions can be identified, miners can choose not to include these transactions unless the transaction fees are high enough. The fee can only be so high that it does not force the CCI to choose integration instead. In general, we can say that this fee cannot be higher than the cost of integration (this would refer to the per transaction cost of integration on average).

Based on this “game”, will colored coins be able to exist on a network such as Bitcoin? If colored transactions can be identified, there could be 2 issues. 1. The colored assets are so valuable that the non-integrated miner would want to attack the system, 2. The fees do not incentivized non-integrated miners to include the transactions. To overcome these issues the CCI could chose to integrate (or become a miner with sufficient computing power to be able to ensure that its transactions gets recorded). However, if the cost of doing so is too high to be justifiable, the CCI is better off not operating at all.

Book review: The Age of Cryptocurrency

On my trip to Singapore two weeks ago I read through a new book The Age of Cryptocurrency, written by Michael Casey and Paul Vigna — two journalists with The Wall Street Journal.

Let’s start with the good.  I think Chapter 2 is probably the best chapter in the book and the information mid-chapter is some of the best historical look on the topic of previous electronic currency initiatives.  I also think their writing style is quite good.  Sentences and ideas flow without any sharp disconnects.  They also have a number of endnotes in the back for in-depth reading on certain sub-topics.

In this review I look at each chapter and provide some counterpoints to a number of the claims made.

Note: I manually typed the quotes from the book, all transcription errors are my own and should not reflect on the book itself.  See my other book reviews.

age of cryptocurrencyIntroduction

The book starts by discussing a company now called bitLanders which pays content creators in bitcoin.  The authors introduce us to Francesco Rulli who pays his bloggers in bitcoin and tries to forbid them from cashing out in fiat, so that they create a circular flow of income.1 One blogger they focus on is Parisa Ahmadi, a young Afghani woman who lacks access to the payment channels and platforms that we take for granted.  It is a nice feel good story that hits all the high notes.

Unfortunately the experience that individuals like Ahmadi, are not fully reflective of what takes place in practice (and this is not the fault of bitLanders).

For instance, the authors state on p. 2 that:

“Bitcoins are stored in digital bank accounts or “wallets” that can be set up at home by anyone with Internet access.  There is no trip to the bank to set up an account, no need for documentation or proof that you’re a man.”

This is untrue in practice.  Nearly all venture capital (VC) funded hosted “wallets” and exchanges now require not only Know-Your-Customer (KYC) but in order for any type of fiat conversion, bank accounts.  Thus there is a paradox: how can unbanked individuals connect a bank account they do not have to a platform that requires it?  This question is never answered in the book yet it represents the single most difficult aspect to the on-boarding experience today.

Starting on page 3, the authors use the term “digital currency” to refer to bitcoins, a practice done throughout the remainder of the book.  This contrasts with the term “virtual currency” which they only use 12 times — 11 of which are quotes from regulators.  The sole time “virtual currency” is not used by a regulator to describe bitcoins is from David Larimer from Invictus (Bitshares).  It is unclear if this was an oversight.

Is there a difference between a “digital currency” and “virtual currency”?  Yes.  And I have made the same mistake before.

Cryptocurrencies such as bitcoin are not digital currencies.  Digital currencies are legal tender, as of this writing, bitcoins are not.  This may seem like splitting hairs but the reason regulators use the term “virtual currency” still in 2015 is because no jurisdiction recognizes bitcoins as legal tender.

In contrast, there are already dozens of digital currencies — nearly every dollar that is spent on any given day in the US is electronic and digital and has been for over a decade.  This issue also runs into the discussion on nemo dat described a couple weeks ago.

On page 4 the authors very briefly describe the origination of currency exchange which dates back to the Medici family during the Florentine Renaissance.  Yet not once in the book is the term “bearer asset” mentioned.  Cryptocurrencies such as bitcoin are virtual bearer instruments and as shown in practice, a mega pain to safely secure.

500 years ago bearer assets were also just as difficult to secure and consequently individuals outsourced the security of it to what we now call banks.  And this same behavior has once again occurred as large quantities — perhaps the majority — of bitcoins now are stored in trusted third party depositories such as Coinbase and Xapo.

Why is this important?

Again recall that the term “trusted third party” was used 11 times (in the body, 13 times altogether) in the original Nakamoto whitepaper; whoever created Bitcoin was laser focused on building a mechanism to route around trusted third parties due to the additional “mediation and transaction costs” (section 1) these create.  Note: that later on page 29 they briefly mentioned legal tender laws and coins (as it related to the Roman Empire).

On page 8 the authors describe the current world as “tyranny of centralized trust” and on page 10 that “Bitcoin promises to take at least some of that power away from governments and hand it to the people.”

While that may be a popular narrative on social media, not everyone involved with Bitcoin (or the umbrella “blockchain” world) holds the same view.  Nor do the authors describe some kind of blue print for how this is done.  Recall that in order to obtain bitcoins in the first place a user can do one of three things:

  1. mine bitcoins
  2. purchase bitcoins from some kind of exchange
  3. receive them for payments (e.g., merchant activity)

In practice mining is out of the hands of “the people” due to economies of scale which have trended towards warehouse mining – it is unlikely that embedded ASICs such as from 21 inc, will change that dynamic much, if any.  Why?  Because for every device added to the network a corresponding amount of difficulty is also added, diluting the revenue to below dust levels.

Remember how Tom Sawyer convinced kids to whitewash a fence and they did so eagerly without question?  What if he asked you to mine bitcoins for him for free?  A trojan botnet?  While none of the products have been announced and changes could occur, from the press release that seems to be the underlying assumption of the 21.co business model.

In terms of the second point, nearly all VC funded exchanges require KYC and bank accounts.  The ironic aspect is that “unbanked” and “underbanked” individuals often lack the necessary “valid” credentials that can be used by cheaper automated KYC technology (from Jumio) and thus expensive manual processing is done, costs that must be borne by someone.  These same credential-less individuals typically lack a bank account (hence the name “unbanked”).

Lastly with the third point, while there are any number of merchants that now accept bitcoin, in practice very few actually do receive bitcoins on any given day.  Several weeks ago I broke down the numbers that BitPay reported and the verdict is payment processing is stagnant for now.

Why is this last point important to what the authors refer to as “the people”?

Ten days after Ripple Labs was fined by FinCEN for not appropriately enforcing AML/KYC regulations, Xapo  — a VC funded hosted wallet startup — moved off-shore, uprooting itself from Palo Alto to Switzerland.  While the stated reason is “privacy” concerns, it is likely due to regulatory concerns of a different nature.

In his interview with CoinDesk last week, Wences Casares, the CEO and founder of Xapo noted that:

Still, Casares indicated that Xapo’s customers are most often using its accounts primarily for storage and security. He noted that many of its clientele have “never made a bitcoin payment”, meaning its holdings are primarily long-term bets of high net-worth customers and family offices.

“Ninety-six percent of the coins that we hold in custody are in the hands of people who are keeping those coins as an investment,” Casares continued.

96% of the coins held in custody by Xapo are inert.  According to a dated presentation, the same phenomenon takes place with Coinbase users too.

Perhaps this behavior will change in the future, though, if not it seems unclear how this particular “to the people” narrative can take place when few large holders of a static money supply are willing to part with their virtual collectibles.  But this dovetails into differences of opinion on rebasing money supplies and that is a topic for a different post.

On page 11 the authors describe five stages of psychologically accepting Bitcoin.  In stage one they note that:

Stage One: Disdain.  Not even denial, but disdain.  Here’s this thing, it’s supposed to be money, but it doesn’t have any of the characteristics of money with which we’re familiar.

I think this is unnecessarily biased.  While I cannot speak for other “skeptics,” I actually started out very enthusiastic — I even mined for over a year — and never went through this strange five step process.  Replace the word “Bitcoin” with any particular exciting technology or philosophy from the past 200 years and the five stage process seems half-baked at best.

On page 13 they state:

“Public anxiety over such risks could prompt an excessive response from regulators, strangling the project in its infancy.”

Similarly on page 118 regarding the proposed New York BitLicense:

“It seemed farm more draconian than expected and prompted an immediate backlash from a suddenly well-organized bitcoin community.”

This is a fairly alarmist statement.  It could be argued that due to its anarchic code-as-law coupled with its intended decentralized topology, that it could not be strangled.  If a certain amount of block creating processors (miners) was co-opted by organizations like a government, then a fork would likely occur and participants with differing politics would likely diverge.

A KYC chain versus an anarchic chain (which is what we see in practice with altchains such as Monero and Dash).  Similarly, since there are no real self-regulating organizations (SRO) or efforts to expunge the numerous bad actors in the ecosystem, what did the enthusiasts and authors expect would occur when regulators are faced with complaints?

With that said — and I am likely in a small minority here — I do not think the responses thus far from US regulators (among many others) has been anywhere near “excessive,” but that’s my subjective view.  Excessive to me would be explicitly outlawing usage, ownership and mining of cryptocurrencies.  Instead what has occurred is numerous fact finding missions, hearings and even appearances by regulators at events.

On page 13 the authors state that:

“Cryptocurrency’s rapid development is in some ways a quirk of history: launched in the throes of the 2008 financial crisis, bitcoin offered an alternative to a system — the existing financial system — that was blowing itself up and threatening to take a few billion people down with it.”

This is retcon.  Satoshi Nakamoto, if he is to be believed, stated that he began coding the project in mid-2007.  It is more of a coincidence than anything else that this project was completed around the same time that global stock indices were at their lowest in decades.

Chapter 1

On page 21 the authors state that:

“Bitcoin seeks to address this challenge by offering users a system of trust based not on human being but on the inviolable laws of mathematics.”

While the first part is true, it is a bit cliche to throw in the “maths” reason.  There are numerous projects in the financial world alone that are run by programs that use math.  In fact, all computer programs and networks use some type of math at their foundation, yet no one claims that the NYSE, pace-makers, traffic intersections or airplanes are run by “math-based logic” (or on page 66, “”inviolable-algorithm-based system”).

A more accurate description is that Bitcoin’s monetary system is rule-based, using a static perfectly inelastic supply in contrast to either the dynamic or discretionary world humans live in.  Whether this is desirable or not is a different topic.

On page 26 they describe the Chartalist school of thought, the view that money is political, that:

“looks past the thing of currency and focuses instead on the credit and trust relationships between the individual and society at large that currency embodies” […] “currency is merely the token or symbol around which this complex system is arranged.”

This is in contrast to the ‘metallist’ mindset of some others in the Bitcoin community, such as Wences Casares and Jon Matonis (perhaps there is a distinct third group for “barterists”?).

I thought this section was well-written and balanced (e.g., appropriate citation of David Graeber on page 28; and description of what “seigniorage” is on page 30 and again on page 133).

On page 27 the authors write:

Yet many other cryptocurrency believers, including a cross section of techies and businessmen who see a chance to disrupt the bank centric payments system are de facto charatalists.  They describe bitcoin not as a currency but as a payments protocol.

Perhaps this is true.  Yet from the original Nakamoto whitepaper, perhaps he too was a chartalist?

Stating in section 1:

Commerce on the Internet has come to rely almost exclusively on financial institutions serving as trusted third parties to process electronic payments. While the system works well enough for most transactions, it still suffers from the inherent weaknesses of the trust based model. Completely non-reversible transactions are not really possible, since financial institutions cannot avoid mediating disputes. The cost of mediation increases transaction costs, limiting the minimum practical transaction size and cutting off the possibility for small casual transactions, and there is a broader cost in the loss of ability to make non-reversible payments for non-reversible services. With the possibility of reversal, the need for trust spreads. Merchants must be wary of their customers, hassling them for more information than they would otherwise need. A certain percentage of fraud is accepted as unavoidable. These costs and payment uncertainties can be avoided in person by using physical currency, but no mechanism exists to make payments over a communications channel without a trusted party.

A payments rail, a currency, perhaps both?

Fun fact: the word “payment” appears 12 times in the whole white paper, just one time less than the word “trust” appears.

On page 29 they cite the Code of Hammurabi.  I too think this is a good reference, having made a similar reference to the Code in Chapter 2 of my book last year.

On page 31 they write:

“Today, China grapples with competition to its sovereign currency, the yuan, due both to its citizens’ demand for foreign national currencies such as the dollar and to a fledgling but potentially important threat from private, digital currencies such as bitcoin.”

That is a bit of a stretch.  While Chinese policy makers do likely sweat over the creative ways residents breach and maneuver around capital controls, it is highly unlikely that bitcoin is even on the radar as a high level “threat.”  There is no bitcoin merchant economy in China.

The vast majority of activity continues to be related to mining and trading on exchanges, most of which is inflated by internal market making bots (e.g., the top three exchanges each run bots that dramatically inflate the volume via tape painting).  And due to how WeChat and other social media apps in China frictionlessly connect residents with their mainland bank accounts, it is unlikely that bitcoin will make inroads in the near future.

On page 36 they write:

“By 1973, once every country had taken its currency off the dollar peg, the pact was dead, a radical change.”

In point of fact, there are 23 countries that still peg their currency to the US dollar.  Post-1973 saw a number of flexible and managed exchange rate regimes as well as notable events such as the Plaza Accord and Asian Financial Crisis (that impacted the local pegs).

On page 39 they write:

“By that score, bitcoin has something to offer: a remarkable capacity to facilitate low-cost, near-instant transfer of value anywhere in the world.”

The point of contention here is the “low-cost” — something that the authors never really discuss the logistics of.  They are aware of “seigniorage” and inflationary “block rewards” yet they do not describe the actual costs of maintaining the network which in the long run, the marginal costs equal the marginal value (MC=MV).

This is an issue that I tried to bring up with them at the Google Author Talk last month (I asked them both questions during the Q&A):

The problem for Vigna’s view, (starting around 59m) is that if the value of a bitcoin fell to $30, not only would the network collectively “be cheaper” to maintain, but also to attack.

On paper, the cost to successfully attack the network today by obtaining more than 50% of the hashrate at this $30 price point would be $2,250 per hour (roughly 0.5 x MC) or roughly an order of magnitude less than it does at today’s market price (although in practice it is a lot less due to centralization).

Recall that the security of bitcoin was purposefully designed around proportionalism, that in the long run it costs a bitcoin to secure a bitcoin.  We will talk about fees later at the end of next chapter.

Chapter 2

On page 43, in the note at the bottom related to Ray Dillinger’s characterization that bitcoin is “highly inflationary” — Dillinger is correct in the short run.  The money supply will increase by 11% alone this year.  And while in the long run the network is deflationary (via block reward halving), the fact that the credentials to the bearer assets (bitcoins) are lost and destroyed each year results in a non-negligible amount of deflation.

For instance, in chapter 12 I noted some research: in terms of losing bitcoins, the chart below illustrates what the money supply looks like with an annual loss of 5% (blue), 1% (red) and 0.1% (green) of all mined bitcoins.

lost coins

Source: Kay Hamacher and Stefan Katzenbeisser

In December 2011, German researchers Kay Hamacher and Stefan Katzenbeisser presented research about the impact of losing the private key to a bitcoin. The chart above shows the asymptote of the money supply (Y-axis) over time (X-axis).

According to Hamacher:

So to get rid of inflation, they designed the protocol that over time, there is this creation of new bitcoins – that this goes up and saturates at some level which is 21 million bitcoins in the end.

But that is rather a naïve picture. Probably you have as bad luck I have, I have had several hard drive crashes in my lifetime, and what happens when your wallet where your bitcoins are stored and your private key vanish? Then your bitcoins are probably still in the system so to speak, so they are somewhat identifiable in all the transactions but they are not accessible so they are of no economic value anymore. You cannot exchange them because you cannot access them. Or think more in the future, someone dies but his family doesn’t know the password – no economic value in those bitcoins anymore. They cannot be used for any exchange anymore. And that is the amount of bitcoins when just a fraction per year vanish for different fractions. So the blue curve is 5% of all the bitcoins per year vanish by whatever means there could be other mechanisms.

It is unclear exactly how many bitcoins can be categorized in such a manner today or what the decay rate is.

On page 45 the authors write:

Some immediately homed in on a criticism of bitcoin that would become common: the energy it would take to harvest “bitbux” would cost more than they were worth, not to mention be environmentally disastrous.

While I am unaware of anyone who states that it would cost more than what they’re worth, as stated in Appendix B and in Chapter 3 (among many other places), the network was intentionally designed to be expensive, otherwise it would be “cheap to attack.”  And those costs scale in proportion to the token value.

As noted a few weeks ago:

For instance, last year O’Dwyer and Malone found that Bitcoin mining consumes roughly the same amount of energy as Ireland does annually.  It is likely that their estimate was too high and based on Dave Hudson’s calculations closer to 10% of Ireland’s energy consumption.23 Furthermore, it has likely declined since their study because, as previously explored in Appendix B, this scales in proportion with the value of the token which has declined over the past year.

The previous post looked at bitcoin payments processed by BitPay and found that as an aggregate the above-board activity on the Bitcoin network was likely around $350 million a year.  Ireland’s nominal GDP is expected to reach around $252 billion this year.  Thus, once Hudson’s estimates are integrated into it, above-board commercial bitcoin activity appears to be about two orders of magnitude less than what Ireland produces for the same amount of energy.

Or in other words, the original responses to Nakamoto six and a half years ago empirically was correct.  It is expensive and resource intensive to maintain and it was designed to be so, otherwise it would be easy to attack, censor and modify the history of votes.

Starting on page 56 they describe Mondex, Secure Electronic Transaction (SET), Electronic Monetary System, Citi’s e-cash model and a variety of other digital dollar systems that were developed during the 1990s.  Very interesting from a historical perspective and it would be curious to know what more of these developers now think of cryptocurrency systems.  My own view, is that the middle half of Chapter 2 is the best part of the book: very well researched and well distilled.

On page 64 they write:

[T]hat Nakamoto launched his project with a reminder that his new currency would require no government, no banks and no financial intermediaries, “no trusted third party.”

In theory this may be true, but in practice, the Bitcoin network does not natively provide any of the services banks do beyond a lock box.  There is a difference between money and the cornucopia of financial instruments that now exist and are natively unavailable to Bitcoin users without the use of intermediaries (such as lending).

On page 66 they write:

He knew that the ever-thinning supply of bitcoins would eventually require an alternative carrot to keep miners engaged, so he incorporated a system of modest transaction fees to compensate them for the resources they contributed.  These fees would kick in as time went on and as the payoff for miners decreased.

That’s the theory and the popular narrative.

However, what does it look like in practice?

Above is a chart visualizing fees to miners denominated in USD from January 2009 to May 17, 2015.  Perhaps the fees will indeed increase to replace block rewards, or conversely, maybe as VC funding declines in the coming years, the companies that are willing and able to pay fees for each transaction declines.

On page 67, the authors introduce us to Laszlo Hanyecz, a computer programmer in Florida who according to the brief history of Bitcoin lore, purchased two Papa John’s pizzas for 10,000 bitcoins on May 22, 2010 (almost five years ago to the day).

He is said to have sold 40,000 bitcoins in this manner and generated all of the bitcoins through mining.  He claims to be the first person to do GPU mining, ramping up to “over 800 times” of a CPU; and during this time “he was getting about half of all the bitcoins mined.”  According to him, he originally used a Nvidia 9800 GTX+ and later switched to 2 AMD Radeon 5970s.  It is unclear how long he mined or when he stopped.

In looking at the index of his server, there are indeed relevant OpenCL software files.  If this is true, then he beat ArtForz to GPU mining by at least two months.

solar pizza

Source: Laszlo Hanyecz personal server

On page 77 they write:

Anybody can go on the Web, download the code for no cost, and start running it as a miner.

While technically this is true, that you can indeed download the Satoshi Bitcoin core client for free, restated in 2015 it is not viable for hoi polloi.  In practice you will not generate any bitcoins solo-mining on a desktop machine unless you do pooled mining circa 2011.

Today, even pooled mining with the best Xeon processors will be unprofitable.  Instead, the only way to generate enough funds to cover both the capital expenditures and operating expenditures is through the purchase of single-use hardware known as an ASIC miner, which is a depreciating capital good.

Mining has been beyond the breakeven reach of most non-savvy home users for two years now, not to mention those who live in developing countries with poor electrical infrastructure or uncompetitive energy rates.  It is unlikely that embedded mining devices will change that equation due to the fact that every additional device increases the difficultly level whilst the device hashrate remains static.

This ties in with what the authors also wrote on page 77:

You don’t buy bitcoin’s software as you would other products, which means you’re not just a customer.  What’s more, there’s no owner of the software — unlike, say, PayPal, which is part of eBay.

This is a bit misleading.  In order to use the Bitcoin network, users must obtain bitcoins somehow.  And in practice that usually occurs through trusted third parties such as Coinbase or Xapo which need to identify you via KYC/AML processes.

So while in 2009 their quote could have been true, in practice today that is largely untrue for most new participants — someone probably owns the software and your personal data.  In fact, a germane quote on reddit last week stated, “Why don’t you try using Bitcoin instead of Coinbase.”

Furthermore, the lack of “ownership” of Bitcoin is dual-edged as there are a number of public goods problems with maintaining development that will be discussed later.

On page 87 they describe Blockchain.info as a “high-profile wallet and analytics firm.”

I will come back to “wallets” later.  Note: most of these “wallets” are likely throwaway, temp wallets used to move funds to obfuscate provenance through the use of Shared Coin (one of the ways Blockchain.info generates revenue is by operating a mixer).

Overall Chapter 3 was also fairly informative.  The one additional quibble I have is that Austin and Beccy Craig (the story at the end) were really only able to travel the globe and live off bitcoins for 101 days because they had a big cushion: they had held a fundraiser that raised $72,995 of additional capital.  That is enough money to feed and house a family in a big city for a whole year, let alone go globe trotting for a few months.

Chapter 4

On page 99 they describe seven different entities that have access to credit card information when you pay for a coffee at Starbucks manually.  Yet they do not describe the various entities that end up with the personal information when signing up for services such as Coinbase, ChangeTip, Circle and Xapo or what these depository institutions ultimately do with the data (see also Richard Brown’s description of the payment card system).

When describing cash back rewards that card issuers provide to customers, on page 100 they write:

Still it’s an illusion to think you are not paying for any of this.  The costs are folded into various bank charges: card issuance fees, ATM fees, checking fees, and, of course, the interest charged on the millions of customers who don’t pay their balances in full each month.

Again, to be even handed they should also point out all the fees that Coinbase charges, Bitcoin ATMs charge and so forth.  Do any of these companies provide interest-bearing accounts or cash-back rewards?

On page 100 they also stated that:

Add in the cost of fraud, and you can see how this “sand in the cogs” of the global payment system represents a hindrance to growth, efficiency, and progress.

That seems a bit biased here.  And my statement is not defending incumbents: global payment systems are decentralized yet many provide fraud protection and insurance — the very same services that Bitcoin companies are now trying to provide (such as FDIC insurance on fiat deposits) which are also not free.

On page 100 they also write:

We need these middlemen because the world economy still depends on a system in which it is impossible to digitally send money from one person to another without turning to an independent third party to verify the identity of the customer and confirm his or her right to call on the funds in the account.

Again, in practice, this is now true for Bitcoin too because of how most adoption continues to take place on the edges in trusted third parties such as Coinbase and Circle.

On page 101 they write:

In letting the existing system develop, we’ve allowed Visa and MasterCard to form a de facto duopoly, which gives them and their banking partners power to manipulate the market, says Gil Luria, an analyst covering payment systems at Wedbush Securities.  Those card-network firms “not only get to extract very significant fees for themselves but have also created a marketplace in which banks can charge their own excessive fees,” he says.

Why is it wrong to charge fees for a service?  What is excessive?  I am certainly not defending incumbents or regulatory favoritism but it is unclear how Bitcoin institutions in practice — not theory — actually are any different.

And, the cost per transaction for Bitcoin is actually quite high (see chart below) relative to these other systems due to the fact that Bitcoin also tries to be a seigniorage system, something that neither Visa or MasterCard do.

cost per transaction

Source: Markos05

On page 102 when talking about MasterCard they state:

But as we’ve seen, that cumbersome system, as it is currently designed, is tightly interwoven into the traditional banking system, which always demands a cut.

The whole page actually is a series of apples-and-oranges comparisons.  Aside from settlement, the Bitcoin network does not provide any of the services that they are comparing it to.  There is nothing in the current network that provides credit/lending services whereas the existing “cumbersome” system was not intentionally designed to be cumbersome, but rather is intertwined and evolved over decades so that customers can have access to a variety of otherwise siloed services.

Again, this is not to say the situation cannot be improved but as it currently exists, Bitcoin does not provide a solution to this “cumbersome” system because it doesn’t provide similar services.

On page 102 and 103 they write about payment processors such as BitPay and Coinbase:

These firms touted a new model to break the paradigm of merchants’ dependence on the bank-centric payment system described above.  These services charged monthly fees that amounted to significantly lower transaction costs for merchants than those charged in credit-card transactions and delivered swift, efficient payments online or on-site.

Except this is not really true.  The only reason that both BitPay and Coinbase are charging less than other payment processors is that VC funding is subsidizing it.  These companies still have to pay for customer service support and fraud protection because customer behavior in aggregate is the same.  And as we have seen with BitPay numbers, it is likely that BitPay’s business model is a losing proposition and unsustainable.

On page 103 they mention some adoption metrics:

The good news is found in the steady expansion in the adoption of digital wallets, the software needed to send and receive bitcoins, with Blockchain and Coinbase, the two biggest providers of those, on track to top 2 million unique users each at the time of the writing.

This is at least the third time they talk about wallets this way and is important because it is misleading, I will discuss in-depth later.

Continuing they write that:

Blockchain cofounder Peter Smith says that a surprisingly large majority of its accounts — “many more than you would think,” he says cryptically — are characterized as “active.”

This is just untrue and should have been pressed by the authors.  Spokesman from Blockchain.info continue to publish highly inflated numbers.  For instance in late February 2015, Blockchain.info claimed that “over $270 million in bitcoin transactions occurred via its wallets over the past seven days.”

This is factually untrue.  As I mentioned three months ago:

Organ of Corti pointed out that the 7 day average was indeed ~720,000 bitcoins in total output volume (thus making) the weekly volume would be about “5e06 btc for the network.”

Is it valid to multiply the total output volume by USD (or euros or yen)?  No.

Why not?  Because most of this activity is probably a combination of wallet shuffling, laundering and mixing of coins (e.g., use of SharedSend and burner wallets) or any number of superfluous activity.  It was not $270 million of economic trade.

Blockchain.info’s press release seems to be implying that economic trade is taking place, in which all transactions are (probably) transactions to new individuals when in reality it could simply be a lot of “change” address movement.  And more to the point, the actual internal volume looks roughly the same as has been the past few months (why issue a press release now?).

Continuing on page 103 they write:

“For the first eight months months of 2014, around $50 million per day was passing thought the bitcoin network (some of which was just “change” that bitcoin transactions create as an accounting measure)…”

There is a small typo above (in bold) but the important part is the estimate of volume.  There is no public research showing a detailed break down of average volume of economic activity.  Based on a working paper I published four months ago, it is fairly clear that this figure is probably in the low millions USD at most.  Perhaps this will change in the future.

On page 106 they write about Circle and Xapo:

For now, these firms make no charge to cover costs of insurance and security, betting that enough customers will be drawn to them and pay fees elsewhere — for buying and selling bitcoins, for example — or that their growing popularity will allow them to develop profitable merchant-payment services as well.  But over all, these undertaking must add costs back into the bitcoin economy, not to mention a certain dependence on “trusted third parties.”  It’s one of many areas of bitcoin development — another is regulation — where some businessmen are advocating a pragmatic approach to bolstering public confidence, one that would necessitate compromises on some of the philosophical principles behind a model of decentralization.  Naturally, this doesn’t sit well with bitcoin purists.

While Paul Vigna may not have written this, he did say something very similar at the Google Author Talk event (above in the video).

The problem with this view is that it is a red herring: this has nothing to do with purism or non-purism.

The problem is that Bitcoin’s designer attempted to create a ‘permissionless’ system to accommodate pseudonymous actors.  The entire cost structure and threat model are tied to this.  If actors are no longer pseudonymous, then there is no need to have this cost structure, or to use proof-of-work at all.  In fact, I would argue that if KYC/KYM (Know Your Miner) are required then a user might just as well use a database or permissioned system.  And that is okay, there are businesses that will be built around that.

This again has nothing to do with purism and everything to do with the costs of creating a reliable record of truth on a public network involving unknown, untrusted actors.  If any of those variables changes — such as adding real-world identity, then from a cost perspective it makes little sense to continue using the modified network due to the intentionally expensive proof-of-work.

On page 107 they talk about bitcoin price volatility discussing the movements of gasoline.  The problem with this analogy is that no one is trying to use gasoline as money.  In practice consumers prefer purchasing power stability and there is no mechanism within the Bitcoin network that can provide this.

For instance:

volatility 1volatility 2volatility 3The three slides above are from a recent presentation from Robert Sams.  Sams previously wrote a short paper on “Seigniorage Shares” — an endogenous way to rebase for purchasing power stability within a cryptocurrency.

Bitcoin’s money supply is perfectly inelastic therefore the only way to reflect changes in demand is through changes in price.  And anytime there are future expectations of increased or decreased utility, this is reflected in prices via volatility.

Oddly however, on page 110, they write:

A case can be made that bitcoin’s volatility is unavoidable for the time being.

Yet they do not provide any evidence — aside from feel good “Honey Badger” statements — for how bitcoin will somehow stabilize.  This is something the journalists should have drilled down on, talking to commodity traders or some experts on fuel hedging strategies (which is something airline companies spend a great deal of time and resources with).

Instead they cite Bobby Lee, CEO of BTC China and Gil Luria once again.  Lee states that “Once its prices has risen far enough and bitcoin has proven itself as a store of value, then people will start to use it as a currency.”

This is a collective action problem.  Because all participants each have different time preferences and horizons — and are decentralized — this type of activity is actually impossible to coordinate, just ask Josh Garza and the $20 Paycoin floor.  This also reminds me of one of my favorite comments on reddit: “Bitcoin will stabilize in price then go to the moon.”

The writers then note that, “Gil Luria, the Wedbush analyst, even argues that volatility is a good thing, on the grounds that it draws profit-seeking traders into the marketplace.”

But just because you have profit-seeking traders in the market place does not mean volatility disappears.

trading view

Credit: George Samman

For instance, in the chart above we can see how bitcoin trades relative to commodities over the past year:

  • Yellow is DBC
  • Red is OIL
  • Bars are DXY which is a dollar index
  • And candlesticks are BTCUSD
DBC is a commodities index and the top 10 Holdings (85.39% of Total Assets):
  • Brent Crude Futr May12 N/A 13.83
  • Gasoline Rbob Fut Dec12 N/A 13.71
  • Wti Crude Future Jul12 N/A 13.56
  • Heating Oil Futr Jun12 N/A 13.20
  • Gold 100 Oz Futr Dec 12 N/A 7.49
  • Sugar #11(World) Jul12 N/A 5.50
  • Corn Future Dec12 N/A 5.01
  • Lme Copper Future Mar13 N/A 4.55
  • Soybean Future Nov12 N/A 4.38
  • Lme Zinc Future Jul12

It bears mentioning that Ferdinando Ametrano has also described this issue in depth most recently in a presentation starting on slide 15.

Continuing on page 111, the writers note that:

Over time, the expansion of these desks, and the development of more and more sophisticated trading tools, delivered so much liquidity that exchange rates became relatively stable.  Luria is imagining a similar trajectory for bitcoin.  He says bitcoiners should be “embracing volatility,” since it will help “create the payment network infrastructure and monetary base” that bitcoin will need in the future.

There are two problems with Luria’s argument:

1) As noted above, this does not happen with any other commodity and historically nothing with a perfectly inelastic supply

2) Empirically, as described by Wences Casares above, nearly all the bitcoins held at Xapo (and likely other “hosted wallets”) are being held as investments.  This reduces liquidity which translates into volatility due to once again the inability to slowly adjust the supply relative to the shifts in demand.  This ties into a number of issues discussed in, What is the “real price” of bitcoin? that are worth revisiting.

Also on page 111, they write that “the exchange rate itself doesn’t matter.”

Actually it does.  It directly impacts two things:

1) outside perception on the health of Bitcoin and therefore investor interest (just talk to Buttercoin);

2) on a ten-minute basis it impacts the bottom line of miners.  If prices decline, so to is the incentive to generate proof-of-work.  Bankruptcy, as CoinTerra faces, is a real phenomenon and if prices decline very quickly then the security of the network can also be reduced due to less proof-of-work being generated

Continuing on page 111:

It’s expected that the mirror version of this will in time be set up for consumers to convert their dollars into bitcoins, which will then immediately be sent to the merchant.  Eventually, we could all be blind to these bitcoin conversions happening in the middle of all our transactions.

It’s unfortunate that they do not explain how this will be done without a trusted third party, or why this process is needed.  What is the advantage of going from USD-> paying a conversion fee -> BTC -> conversion fee -> back into USD?  Why not just spend USD and cut out the Bitcoin middleman?

Lastly on page 111:

Still, someone will have to absorb the exchange-rate risk, if not the payment processors, then the investors with which they trade.

The problem with this is that its generally not in the mandate or scope of most VC firms to purchase commodities or currencies directly.  In fact, they may even need some kind of license to do so depending on the jurisdiction (because it is a foreign exchange play).  Yet expecting the payment processors to shoulder the volatility is probably a losing proposition: in the event of a protracted bear market how many bitcoins at BitPay — underwater or not — will need to be liquidated to pay for operating costs?4

On page 112 they write:

‘Bitcoin has features from all of them, but none in entirety.  So, while it might seem unsatisfying, our best answer to the question of whether cryptocurrency can challenge the Visa and MasterCard duopoly is, “maybe, maybe not.”

On the face of it, it is a safe answer.  But upon deeper inspection we can probably say, maybe not.  Why?  Because for Bitcoin, once again, there is no native method for issuing credit (which is what Visa/MasterCard do with what are essentially micro-loans).

For example, in order to natively add some kind of lending facility within the Bitcoin network a new “identity” system would need to be built and integrated (to enable credit checks) — yet by including real-world “identity” it would remove the pseudonymity of Bitcoin while simultaneously maintaining the same costly proof-of-work Sybil protection.  This is again, an unnecessary cost structure entirely and positions Bitcoin as a jack-of-all-trades-but-master-of-none.  Why?  Again recall that the cost structure is built around Dynamic Membership Multi-Party Signature (DMMS); if the signing validators are static and known you might as well use a database or permissioned ledgers.

Or as Robert Sams recently explained, if censorship resistance is co-opted then the reason for proof-of-work falls to the wayside:

Now, I am sure that the advocates of putting property titles on the bitcoin blockchain will object at this point. They will say that through meta protocols and multi-key signatures, third party authentication of transaction parties can be built-in, and we can create a registered asset system on top of bitcoin. This is true. But what’s the point of doing it that way? In one fell swoop a setup like that completely nullifies the censorship resistance offered by the bitcoin protocol, which is the whole raison d’etre of proof-of-work in the first place! These designs create a centralised transaction censoring system that imports the enormous costs of a decentralised one built for censorship-resistance, the worst of both worlds.

If you are prepared to use trusted third parties for authentication of the counterparts to a transaction, I can see no compelling reason for not also requiring identity authentication of the transaction validators as well. By doing that, you can ditch the gross inefficiencies of proof-of-work and use a consensus algorithm of the one-node-one-vote variety instead that is not only thousands of times more efficient, but also places a governance structure over the validators that is far more resistant to attackers than proof-of-work can ever be.

On page 113, they write:

“the government might be able to take money out of your local bank account, but it couldn’t touch your bitcoin.  The Cyprus crisis sparked a stampede of money into bitcoin, which was now seen as a safe haven from the generalized threat of government confiscation everywhere.”

In theory this may be true, but in practice, it is likely that a significant minority — if not majority — of bitcoins are now held in custody at depository institutions such as Xapo, Coinbase and Circle.  And these are not off-limits to social engineering.  For instance, last week an international joint-task force confiscated $80,000 in bitcoins from dark web operators.  The largest known seizure in history were 144,000 bitcoins from Ross Ulbricht (Dread Pirate Roberts) laptop.

Similarly, while it probably is beyond the scope of their book, it would have been interesting to see a survey from Casey and Vigna covering the speculators during this early 2013 time frame.  Were the majority of people buying bitcoins during the “Cyprus event” actually worried about confiscation or is this just something that is assumed?  Fun fact: the largest transaction to BitPay of all time was on March 25, 2013 during the Cyprus event, amounting to 28,790 bitcoins.

On page 114, the writers for the first time (unless I missed it elsewhere), use the term “virtual currency.”  Actually, they quote FinCEN director Jennifer Calvery who says that FincCEN, “recognizes the innovation virtual currencies provide , and the benefits they might offer society.”

Again recall that most fiat currencies today are already digitized in some format — and they are legal tender.  In contrast, cryptocurrencies such as bitcoin are not legal tender and are thus more accurately classified as virtual currencies.  Perhaps that will change in the future.

On page 118 they note that, “More and more people opened wallets (more than 5 million as of this writing).”

I will get to this later.  Note that on p. 123 they say Coupa Cafe has a “digital wallet” a term used throughout the entire book.

Chapter 5

On page 124:

“Bitcoins exist only insofar as they assign value to a bitcoin address, a mini, one-off account with which people and firms send and receive the currency to and from other people’s firms’ addresses.”

This is actually a pretty concise description of best-practices.  In reality however, many individuals and organizations (such as exchanges and payment processors) reuse addresses.

Continuing on page 124:

“This is an important distinction because it means there’s no actual currency file or document that can be copied or lost.”

This is untrue.  In terms of security, the hardest and most expensive part in practice is securing the credentials — the private key that controls the UTXOs.  As Stefan Thomas, Jason Whelan (p. 139) and countless other people on /r/sorryforyourloss have discovered, this can be permanently lost.  Bearer assets are a pain to secure, hence the re-sprouting of trusted third parties in Bitcoinland.

One small nitpick in the note at the bottom of page 125, “Sometimes the structure of the bitcoin address network is such that the wallet often can’t send the right amount in one go…” — note that this ‘change‘ is intentional (and very inconvenient to the average user).

Another nitpick on page 128:

Each mining node or computer gathers this information and reduces it into an encrypted alphanumeric string of characters known as a hash.

There is actually no encryption used in Bitcoin, rather there are some cryptographic primitives that are used such as key signing but this is not technically called encryption (the two are different).

On page 130, I thought it was good that they explained where the term nonce was first used — from Lewis Carroll who created the word “frabjous” and described it as a nonce word.

On page 132, in describing proof-of-work:

While that seems like a mammoth task, these are high-powered computers; it’s not nearly as taxing as the nonce-creating game and can be done relatively quickly and easily.

They are correct in that something as simple as a Pi computer can and is used as the actual transaction validating machine.  Yet, at one point in 2009, this bifurcation did not exist: a full-node was both a miner and a hasher.  Today that is not the case and we technically have about a dozen or so actual miners on the network, the rest of the machines in “farms” just hash midstates.

On page 132, regarding payment processors accepting zero-confirmation transactions:

They do this because non-confirmations — or the double-spending actions that lead to them — are very rare.

True they are very rare today in part because there are very few incentives to actually try and double-spend.  Perhaps that will change in the future with new incentives to say, double-spend watermarked coins from NASDAQ.

And if payment processors are accepting zero confirmations, why bother using proof-of-work and confirmations at all?  Just because a UTXO is broadcast does not mean it will not be double-spent let alone confirmed and packaged into a block.  See also replace-by-fee proposal.

Small note on page 132:

“the bitcoin protocol won’t let it use those bitcoins in a payment until a total of ninety-nine additional blocks have been built on top its block.”

Sometimes it depends on the client and may be up to 120 blocks altogether, not just 100.

On page 133 they write:

“Anyone can become a miner and is free to use whatever computing equipment he or she can come up with to participate.”

This may have been the case in 2009 but not true today.  In order to reduce payout variance, the means of production as it were, have gravitated towards large pools of capital in the form of hashing farms.  See also: The Gambler’s Guide to Bitcoin Mining.

On page 135 they write:

“Some cryptocurrency designers have created nonprofit foundations and charged them with distributing the coins based on certain criteria — to eligible charities, for example. But that requires the involvement of an identifiable and trusted founder to create the foundation.”

The FinCEN enforcement action and fine on Ripple Labs could put a kibosh on this in the future.  Why?  If organizations that hand out or sell coins are deemed under the purview of the Bank Secrecy Act (BSA) it is clear that most, if not all, crowdfunding or initial coin offerings (ICO) are violating this by not implementing KYC/AML requirements on participants or filing SARs.

On page 136 they write:

“Both seigniorage and transaction fees represent a transfer of value to those running the network. Still, in the grand scheme of things, these costs are far lower than anything found in the old system.”

This is untrue and an inaccurate comparison.  We know that at the current bitcoin price of $240 it costs roughly $315 million to operate the network for the entire year.  If bitcoin-based consumer spending patterns hold up and reflect last years trends seen by BitPay, then roughly $350 million will be spent through payment processors, nearly half of which includes mining payouts.

Or in other words, for roughly every dollar spent on commerce another dollar is spent securing it.  This is massive oversecurity relative to the commerce involve.  Neither Saudi Arabia or even North Korea spend half of, let alone 100% of their GDP on military expenditures (yet).

Chapter 6

Small nitpick on page 140, Butterfly Labs is based in Leawood, Kansas not Missouri (Leawood is on the west side of the dividing line).

I think the story of Jason Whelan is illuminating and could help serve as a warning guide to anyone wanting to splurge on mining hardware.

For instance on page 141:

“And right from the start Whelan face the mathematical reality that his static hashrate was shrinking as a proportion of the ever-expanding network, whose computing power was by then almost doubling every month.”

Not only was this well-written but it does summarize the problem most new miners have when they plan out their capital expenditures.  It is impossible to know what the network difficulty will be in 3 months yet what is known is that even if you are willing to tweak the hardware and risk burning out some part of your board, your hashrate could be diluted by faster more efficient machines.  And Whelan found out the hard way that he might as well bought and held onto bitcoins than mine.  In fact, Whelan did just about everything the wrong way, including buying hashing contracts with cloud miners from “PBCMining.com” (a non-functioning url).

On page 144 the authors discussed the mining farms managed by now-defunct CoinTerra:

With three in-built high-powered fans running at top speed to cool the rig while its internal chi races through calculations, each unit consumes two kilowatts per hour, enough power to run an ordinary laptop for a month. That makes for 20 kWh per tower, about ten times the electricity used for the same space by the neighboring server of more orthodox e-commerce firms.

As noted in Chapter 2 above, this electricity has to be “wasted.”  Bitcoin was designed to be “inefficient” otherwise it would be easy to attack and censor.  And in the future, it cannot become more “efficient” — there is no free lunch when it comes to protecting it.  It also bears mentioning that CoinTerra was sued by its utility company in part for the $12,000 a day in electrical costs that were not being paid for.

On page 145 they wrote that as of June 2014:

“By that time, the network, which was then producing 88,000 trillion hashes every second, had a computing power six thousand times the combined power of the world’s top five hundred supercomputers.”

This is not a fair comparison.  ASIC miners can do one sole function, they are unable to do anything aside from reorganize a few fields (such as date and nonce) with the aim of generating a new number below a target number.  They cannot run MS Office, Mozilla Firefox and more sobering: they cannot even run a Bitcoin client (the Pi computer run by the pool runs the client).

In contrast, in order to be recognized as a Top 500 computer, only general purpose machines capable of running LINXPACK are considered eligible.  The entire comparison is apples-to-oranges.

On page 147 the authors described a study from Guy Lane who used inaccurate energy consumption data from Blockchain.info.

And then they noted that:

“So although the total consumption is significantly higher than the seven-thousand-home estimate, we’re a long way from bitcoin’s adding an entire country’s worth of power consumption to the world.”

This is not quite true.  As noted above in the notes of Chapter 2 above, based on Dave Hudson’s calculations the current Bitcoin network consumes the equivalent of about 10% of Ireland’s annual energy usage yet produces two orders of magnitude less economic activity.  If the price of bitcoin increases so to does the amount of energy miners are willing to expend to chase after the seigniorage.  See also Appendix B.

On page 148 they write that:

For one, power consumption must be measured against the value of validating transactions in a payment system, a social service that gold mining has never provided.  Second, the costs must be weighed against the high energy costs of the alternative, traditional payment system, with its bank branches, armored cars, and security systems. And finally, there’s the overriding incentive for efficiency that the profit motive delivers to innovators, which is why we’ve seen such giant reductions in power consumption for the new mining machines. If power costs make mining unprofitable, it will stop.

First of all, validation is cheap and easy, as noted above it is typically done with something like a Pi computer.  Second, they could have looked into how much real commerce is taking place on the chain relative to the costs of securing it so the “social service” argument probably falls flat at this time.

Thirdly, the above “armored cars and security systems” is not an apples-to-apples comparison.  Bitcoin does not provide any banking service beyond a lock box, it does not provide for home mortgages, small business loans or mezzanine financing.  The costs for maintaining those services in the traditional world do not equate to MC=MV as described at the end of Chapter 1 notes.

Fourthly, they ignore the Red Queen effect.  If a new hashing machine is invented and consumes half as much energy as before then the farm owner will just double the amount of machines and the net effect is the same as before.  This happens in practice, not just in theory, hence the reason why electrical consumption has gone up in aggregate and not down.

On page 149 they write:

“But the genius of the consensus-building in the bitcoin system means such forks shouldn’t be allowed to go on for long. That’s because the mining community works on the assumption that the longest chain is the one that constitutes consensus.”

That’s not quite accurate.  Each miner has different incentives.  And, as shown empirically with other altcoins, forks can reoccur frequently without incentives that align.  For now, some incentives apparently do.  But that does not mean that in the future, if say watermarked coins become more common place, that there will not be more frequent forks as certain miners attempt to double-spend or censor such metacoins.

Ironically on page 151 the authors describe the fork situation of March 2013 and describe the fix in which a few core developers convince Mark Karpeles (who ran Mt. Gox) to unilaterally adopt one specific fork.  This is not trustless.

On page 151 they write:

“That’s come to be known as a 51 percent attack.  Nakamoto’s original paper stated that the bitcoin mining network could be guaranteed to treat everyone’s transactions fairly and honestly so long as no single miner or mining group owned more than 50 percent of the hashing power.”

And continuing on page 153:

“So, the open-source development community is now looking for added protections against selfish mining and 51 percent attacks.”

While they do a good job explaining the issue, they don’t really discuss how it is resolved.  And it cannot be without gatekeepers or trusted hardware.

For instance, three weeks ago there was a good reddit thread discussing one of the problems of Andreas Antonopolous’  slippery slope view that you could just kick the attackers off the network.  First, there is no quick method for doing so; second, by blacklisting them you introduce a new problem of having the ability to censor miners which would be self-defeating for such a network as it introduces a form of trust into an expensive cost structure of trust minimization.

On page 152 they cite a Coinometrics number:

“in the summer of 2014 the cost of the mining equipment and electricity required for a 51 percent attack stood at $913 million.”

This is a measurement of maximum costs based on hashrate brute force — a Maginot Line attack.  In practice it is cheaper to do via out of band attacks (e.g., rubber hose cryptanalysis).  There are many other, cheaper ways, to attack the P2P network itself (such as Eclipse attacks).

On page 154 when discussing wealth disparity in Bitcoin they write:

“First, some perspective.  As a wealth-gap measure, this is a lousy one.  For one, addresses are not wallets.  The total number of wallets cannot be known, but they are by definition considerably fewer than the address tally, even though many people hold more than one.”

Finally.  So the past several chapters I have mentioned I will discuss wallets at some length.  Again, the authors for some reason uncritically cite the “wallet numbers” from Blockchain.info, Coinbase and others as actual digital wallets.

Yet here they explain that these metrics are bupkis.  And they are.  It costs nothing to generate a wallet and there are scripts you can run to auto generate them.  In fact, Zipzap and many others used to give every new user a Blockchain.info wallet por gratis.

And this is problematic because press releases from Xapo and Blockchain.info continually cite a number that is wholly inaccurate and distorting.

For instance Wences Casares said in a presentation a couple months ago that there were 7 million users.  Where did that number come from?  Are these on-chain privkey holders?  Why are journalists not questioning these claims?  See also: A brief history of Bitcoin “wallet” growth.

On page 154 they write:

“These elites have an outsize impact on the bitcoin economy. They have a great interest in seeing the currency succeed and are both willing and able to make payments that others might not, simply to encourage adoption.”

Perhaps this is true, but until there is a systematic study of the conspicuous consumption that takes place, it could also be the case that some of these same individuals just have an interest in seeing the price of bitcoin rise and not necessarily be widely adopted.  The two are not mutually exclusive.

On page 155 and 156 they describe the bitsat project, to launch a full node into space which is aimed “at making the mining network less concentrated.”

Unfortunately these types of full nodes are not block makers.  Thus they do not actually make the network less concentrated, but only add more propagating nodes.  The two are not the same.

On page 156 they describe some of the altcoin projects:

“They claim to take the good aspects of bitcoin’s decentralized structure but to get ride of its negative elements, such as the hashing-power arms race, the excessive use of electricity, and the concentration of industrialized mining power.”

I am well aware of the dozens various coin projects out there due to work with a digital asset exchange over the past year.  Yet fundamentally all of the proof-of-work based coins end up along the same trend line, if they become popular and reach a certain level of “market cap” (an inaccurate term) specialized chips are designed to hash it.

And the term “excessive” energy related to proof-of-work is a bit of a non-starter.  Ignoring proof-of-stake systems, if it becomes less energy intensive to hash via POW, then it also becomes cheaper to attack.  Either miners will add more equipment or the price has dropped for the asset and it is therefore cheaper to attack.

On page 157 regarding Litecoin they write that:

“Miners still have an incentive to chase coin rewards, but the arms race and the electricity usage aren’t as intense.”

That’s untrue.  Scrypt (which is used instead of Hashcash) is just as energy intensive.  Miners will deploy and utilize energy in the same patterns, directly in proportion to the token price.  The difference is memory usage (Litecoin was designed to be more memory intensive) but that is unrelated to electrical consumption.

Continuing:

“Litecoin’s main weakness is the corollary of its strength: because it’s cheaper to mine litecoins and because scrypt-based rigs can be used to mine other scrypt-based altcoins such as dogecoin, miners are less heavily invested in permanently working its blockchain.”

This is untrue.  Again, Litecoin miners will in general only mine up to the point where it costs a litecoin to make a litecoin.  Obviously there are exceptions to it, but in percentage terms the energy usage is the same.

Continuing:

“Some also worry that scrypt-based mining is more insecure, with a less rigorous proof of work, in theory allowing false transactions to get through with incorrect confirmations.”

This is not true.  The two difference in security are the difficulty rating and block intervals.  The higher the difficulty rating, the more energy is being used to bury blocks and in theory, the more secure the blocks are from reversal.

The question is then, is 2.5 minutes of proof-of-work as secure as burying blocks every 10 minutes?  Jonathan Levin, among others, has written about this before.

cthuluSmall nitpick on page 157, fairly certain that nextcoin should be referred to as NXT.

On page 158 they write:

If bitcoin is to scale up, it must be upgraded sot hat nodes, currently limited to one megabyte of data per ten-minute block, are free to process a much larger set of information.  That’s not technically difficult; but it would require miners to hash much larger blocks of transactions without big improvements in their compensation.  Developers are currently exploring a transaction-fee model that would provide fairer compensation for miners if the amount of data becomes excessive.

This is not quite right.  There is a difference between block makers (pools) and hashers (mining farms).  The costs for larger blocks would impact block makers not hashers, as they would need to upgrade their network facilities and local hard drive.  This may seem trivial and unimportant, but Jonathan Levin’s research, as well as others suggest that block sizes does in fact impact orphan rates.5

It also impacts the amount of decentralization within the network as larger blocks become more expensive to propagate you will likely have fewer nodes.  This has been the topic of immense debate over the past several weeks on social media.

Also on page 158 they write:

The laboratory used by cryptocurrency developers, by contrast, is potentially as big as the world itself, the breadth of humanity that their projects seek to encompass. No company rulebook or top-down set of managerial instructions keeps people’s choice in line with a common corporate objective. Guiding people to optimal behavior in cryptocurrencies is entirely up to how the software is designed to affect human thinking, how effectively its incentive systems encourage that desired behavior

This is wishful thinking and probably unrealistic considering that Bitcoin development permanently suffers from the tragedy of the commons.  There is no CEO which is both good and bad.

For example, directions for where development goes is largely based on two things:

  1. how many upvotes your comment has on reddit (or how many retweets it gets on Twitter)
  2. your status is largely a function of how many times Satoshi Nakamoto responded to you in email or on the Bitcointalk forum creating a permanent clique of “early adopters” whose opinions are the only valid ones (see False narratives)

This is no way to build a financial product.  Yet this type of lobbying is effectively how the community believes it will usurp well-capitalized private entities in the payments space.

Several months ago a user, BitttBurger, made a similar observation:

I’ve said it before and I will say it again. There is a reason why Developers should not be in control of product development priorities, naming, feature lists, or planning for a product. That is the job of the sales, marketing, and product development teams who actually interface with the customer. They are the ones who do the research and know what’s needed for a product. They are the ones who are supposed to decide what things are called, what features come next, and how quickly shit gets out the door.

Bitcoin has none of that. You’ve got a Financial product, being created for a financial market, by a bunch of developers with no experience in finance, and (more importantly) absolutely no way for the market to have any input or control over what gets done, or what it’s called. That is crazy to me.

Luke is a perfect example of why you don’t give developers control over anything other than the structure of the code.

They are not supposed to be making product development decisions. They are not supposed to be naming anything. And they definitely are not supposed to be deciding “what comes next” or how quickly things get done. In any other company, this process would be considered suicide.

Yet for some reason this is considered to be a feature rather than a bug (e.g., “what is your Web of Trust (WoT) number?”).

On page 159 they write:

“The vital thing to remember is that the collective brainpower applied to all the challenges facing bitcoin and other cryptocurrencies is enormous.  Under the open-source, decentralized model, these technologies are not hindered by the same constraints that bureaucracies and stodgy corporations face.”

So, what is the Terms of Service for Bitcoin?  What is the customer support line?  There isn’t one.  Caveat emptor is pretty much the marketing slogan and that is perfectly fine for some participants yet expecting global adoption without a “stodgy” “bureaucracy” that helps coordinate customer service seems a bit of a stretch.

And just because there is some avid interest from a number of skilled programmers around the world does not mean public goods problems surrounding development will be resolved.

For reference: there were over 5000 co-authors on a recent physics paper but that doesn’t mean their collective brain power will quickly resolve all the open questions and unsolved problems in physics.

Chapter 7:

Small nitpick on page 160:

“Bitcoin was born out of a crypto-anarchist vision of a decentralized government-free society, a sort of encrypted, networked utopia.”

As noted above, there is actually no encryption used in Bitcoin.

On page 162 they write:

“Before we get too carried away, understand this is still early days.”

That may be the case.  Perhaps decentralized cryptocurrencies like Bitcoin are not actually the internet in the early 1990s like many investors claim but rather the internet in the 1980s when there were almost no real use-cases and it is difficult to use.  Or 1970s.  The problem is no one can actually know the answer ahead of time.

And when you try to get put some milestone down on the ground, the most ardent of enthusiasts move the goal posts — no comparisons with existing tech companies are allowed unless it is to the benefit of Bitcoin somehow.  I saw this a lot last summer when I discussed the traction that M-Pesa and Venmo had.

A more recent example is “rebittance” (a portmanteau of “bitcoin” and “remittance”).  A couple weeks ago Yakov Kofner, founder of Save On Send, published a really good piece comparing money transmitter operators with bitcoin-related companies noting that there currently is not much meat to the hype.  The reaction on reddit was unsurprisingly fist-shaking Bitcoin rules, everyone else drools.

yakov breakfast

With Yakov Kofner (CEO Save On Send)

When I was in NYC last week I had a chance to meet with him twice.  It turns out that he is actually quite interested in Bitcoin and even scoped out a project with a VC-funded Bitcoin company last year for a consumer remittances product.

But they decided not to build and release it for a few reasons:

  1.  in practice, many consumers are not sensitive enough to a few percentage savings because of brand trust/loyalty/habit;
  2.  lacking smartphones and reliable internet infrastructure, the cash-in, cash-out aspect is still the main friction facing most remittance corridors in developing countries, bitcoin does not solve that;
  3.  it boils down to an execution race and it will be hard to compete against incumbents let alone well-funded MTO startups (like TransferWise).

That’s not to say these rebittance products are not good and will not find success in niches.

For instance, I also spoke with Marwan Forzley (below), CEO of Align Commerce last week.  Based on our conversation, in terms of volume his B2B product appears to have more traction than BitPay and it’s less than a year old.

What is one of the reasons why?  Because the cryptocurrency aspect is fully abstracted away from customers.

marwan p2p

Raja Ramachandran (R3CEV), Dan O’Prey (Hyperledger), Daniel Feichtinger (Hyperledger), Marwan Forzley (Align Commerce)

In addition, both BitX and Coins.ph — based on my conversations in Singapore two weeks ago with their teams — seem to be gaining traction in a couple corridors in part because they are focusing on solving actual problems (automating the cash-in/cash-out process) and abstracting away the tech so that the average user is oblivious of what is going on behind the scenes.

singapore ron

Markus Gnirck (StartupBootCamp), Antony Lewis (itBit) and Ron Hose (Coins.ph) at the DBS Hackathon event

On page 162 and 163 the authors write about the Bay Area including 20Mission and Digital Tangible.

There is a joke in this space that every year in cryptoland is accelerated like dog years.  While 20Mission, the communal housing venue, still exists, the co-working space shut down late last year.  Similarly, Digital Tangible has rebranded as Serica and broadened from just precious metals and into securities.  In addition, Dan Held (page 164) left Blockchain.info and is now at ChangeTip.

On page 164 they write:

“But people attending would go on to become big names in the bitcoin world: Among them were Brian Armstrong and Fred Ehrsam, the founders of Coinbase, which is second only to Blockchain as a leader in digital-wallet services and one of the biggest processors of bitcoin payments for businesses.”

10 pages before this they said how useless digital wallet metrics are.  It would have been nice to press both Armstrong and Ehrsam to find out what their actual KYC’ed active users to see if the numbers are any different than the dated presentation.

On page 165 they write:

“It’s a very specific type of brain that’s obsessed with bitcoin,” says Adam Draper, the fourth-generation venture capitalist…”

I hear this often but what does that mean?  Is investing genetic?  If so, surely there are more studies on it?

For instance, later on page 176 they write:

“The youngest Draper, who tells visitors to his personal web site that his life’s ambition is to assist int he creation of an iron-man suit, has clearly inherited his family’s entrepreneurial drive.”

Perhaps Adam Draper is indeed both a bonafide investor and entrepreneur, but it does not seem to be the case that either can be or is necessarily inheritable.

On page 167:

“The only option was to “turn into a fractional-reserve bank,” he said jokingly, referring tot he bank model that allows banks to lend out deposits while holding a fraction of those funds in reserve.  “They call it a Ponzi scheme unless you have a banking license.”

Why is this statement not challenged?  I am not defending rehypothecation or the current banking model, but fractional reserve banking as it is employed in the US is not a Ponzi scheme.

Also on page 167 they write:

“First, he had trouble with his payments processor, Dwolla which he later sued for $2 million over what Tradehill claimed were undue chargebacks.”

A snarky thing would be to say he should have used bitcoin, no chargebacks.  But the issue here, one that the authors should have pressed is that Tradehill, like Coinbase and Xapo, are effectively behaving like banks.  It’s unclear why this irony is not discussed once in the book.

For instance, several pages later on page 170 they once again talk about wallets:

The word wallet is thrown around a lot in bitcoin circles, and it’s an evocative description, but it’s just a user application that allows you to send and receive bitcoins over the bitcoin network. You can download software to create your own wallet — if you really want to be your own bank — but most people go through a wallet provider such as Coinbase or Blockchain, which melded them into user-friendly Web sites and smart phone apps.

I am not sure if it is intentional but the authors clearly understand that holding a private key is the equivalent of being a bank.  But rather than say Coinbase is a bank (because they too control private keys), they call them a wallet provider.  I have no inside track into how regulators view this but the euphemism of “wallet provider” is thin gruel.

On the other hand Blockchain.info does not hold custody of keys but instead provide a user interface — at no point do they touch a privkey (though that does not mean they could not via a man-in-the-middle-attack or scripting errors like the one last December).

On page 171 they talk about Nathan Lands:

The thirty-year-old high school dropout is the cofounder of QuickCoin, the maker of a wallet that’s aimed directly at finding the fastest easiest route to mass adoption.  The idea, which he dreamed up with fellow bitcoiner Marshall Hayner one night over a dinner at Ramen Underground, is to give nontechnical bitcoin newcomers access to an easy-to-use mobile wallet viat familiar tools of social media.

Unfortunately this is not how it happened.  More in a moment.

Continuing the authors write:

“His successes allowed Lands to raise $10 million for one company, Gamestreamer.”

Actually it was Gamify he raised money for (part of the confusion may be due to how it is phrased on his LinkedIn profile).

Next the authors state:

“He started buying coins online, where her ran into his eventual business partner, Hayner (with whom he later had a falling-out, and whose stake he bought).”

One of the biggest problems I had with this book is that the authors take claims at face value.  To be fair, I probably did a bit too much myself with GCON.

On this point, I checked with Marshall Hayner who noted that this narrative was untrue:  “Nathan never bought my stake, nor was I notified of any such exchange.”

While the co-founder dispute deserves its own article or two, the rough timeline is that in late 2013 Hayner created QuickCoin and then several months later on brought Lands on to be the CEO.  After a soft launch in May 2014 (which my wife and I attended, see below) Lands maneuvered and got the other employees to first reduce the equity that Hayner had and then fired him so they could open up the cap table to other investors.

quickcoin

QuickCoin launch party with Marshall Hayner, Jackson Palmer (Dogecoin), and my wife

With Hayner out, QuickCoin quickly faded due to the fact that the team had no ties to the local cryptocurrency community.  Hayner went on to join Stellar and is now the co-founder of Trees.  QuickCoin folded by the end of the year and Lands started Blockai.

On page 174 they discuss VCs involved in funding Bitcoin-related startups:

Jerry Yang, who created the first successful search engine, Yahoo, put money from his AME Ventures into a $30 million funding round for processor BitPay and into one of two $20 million rounds raised by depository and wallet provider Xapo, which offers insurance to depositors and call itself a “bitcoin vault.”

While they likely couldn’t have put it in this section, I think it would have been good for the authors to discuss the debate surrounding what hosted wallets actually are because regulators and courts may not agree with the marketing-speak of these startups.6

On page 177 they write about Boost VC which is run by Adam Draper:

“He’d moved first and emerged as the leader in the filed, which meant his start-ups could draw in money from the bigger guys when it came time for larger funding rounds.”

It would be interesting to see the clusters of what VCs do and do not co-invest with others.  Perhaps in a few years we can look back and see that indeed, Boost VC did lead the pack.

However while there are numerous incubated startups that went on to close seed rounds (Blockcypher, Align Commerce, Hedgy, Bitpagos) as of this writing there is only one incubated company in Boost that has closed a Series A round and that is Mirror (Coinbase, which did receive funding from Adam Draper, was not in Boost).  Maybe this is not a good measure for success, perhaps this will change in the future and maybe more have done so privately.

On page 179-180 the discussion as to what Plug and Play Tech Center does and its history was well written.

On page 184 they write:

With every facet of our economy now dependent on the kinds of software developed and funded in the Bay Area, and with the Valley’s well-heeled communities becoming a vital fishing ground for political donations and patronage, we’re witnessing a migration of the political and economic power base away from Wall Street to this region.

I have heard variations of this for the past couple of years.  Most recently I heard a VC claim that Andreessen Horrowitz (a16z) was the White House of the West Coast and that bankers in New York do not understand this tech.  Perhaps it is and perhaps bankers do not understand what a blockchain is.

Either way we should be able to see the consequences to this empirically at some point.  Where is the evidence presented by the authors?

incumbents

Source: finviz

Fast forwarding several chapters, on page 287 they write:

“Visa, MasterCard, and Western Union combined – to name just three players whose businesses could be significantly reformed — had twenty-seven thousand employees in 2013.”

Perhaps these figures will dramatically change soon, however, the above image are the market caps over the past 5 years of four incumbents: JP Morgan (the largest bank in the US), MasterCard and Visa (the largest card payment providers) and Western Union, the world’s largest money transfer operator.

Will their labor force dramatically change because of cryptocurrencies?  That is an open question.  Although it is unclear why the labor force at these companies would necessarily shrink because of the existence of Bitcoin rather than expand in the event that these companies integrated parts of the tech (e.g., a distributed ledger) thereby reducing costs and increasing new types of services.

On page 185 they write:

“Those unimaginable possibilities exist with bitcoin, Dixon says, because “extensible software platforms that allow anyone to build on top of them are incredibly powerful and have all these unexpected uses. The stuff about fixing the existing payment system is interesting, but what’s superexciting is that you have this new platform on which you can move money and property and potentially build new areas of businesses.”

Maybe this is true.  It is unclear from these statements as to what Chris Dixon views as broken about the current payment system.  Perhaps it is “broken” in that not everyone on the planet has access to secure, near-instant methods of global value transer.  However it is worth noting that cryptocurrencies are not the only competitors in the payments space.

According to AngelList as of this writing:

Chapter 8

This chapter discussed “The Unbanked” and how Bitcoin supposedly can be a solution to banking these individuals.

On page 188 they discuss a startup called 37coins:

“It uses people in the region lucky enough to afford Android smartphones as “gateways” to transmit the messages.  In return, these gateways receive a small fee, which provides the corollary benefit of giving locals the opportunity to create a little business for themselves moving traffic.”

This is a pretty neat idea, both HelloBit and Abra are doing something a little similar.  The question however is, why bitcoin?  Why do users need to go out of fiat, into bitcoin and back out to fiat?  If the end goal is to provide users in developing countries a method to transmit value, why is this extra friction part of the game plan?

Last month I heard of another supposed cryptocurrency “killer app”: smart metering prepaid via bitcoin and how it is supposed to be amazing for the unbanked.  The unbanked, they are going to pay for smart metering with money they don’t have for cars they don’t own.

There seems to be a disconnect when it comes to financial inclusion as it is sometimes superficially treated in the cryptocurrency world.  Many Bitleaders and enthusiasts seem to want to pat themselves on the back for a job that has not been accomplished.  How can the cryptocurrency community bring the potential back down to real world situations without overinflating, overhyping or over promising?

If Mercedes or Yamaha held a press conference to talk about the “under-cared” or “under-motorcycled” they would likely face a backlash on social media.  Bitcoin the bearer instrument, is treated like a luxury good and expecting under-electrified, under-plumbed, under-interneted people living in subsistence to buy and use it today without the ability to secure the privkey without a trusted third party, seems far fetched (“the under bitcoined!”).  Is there a blue print to help all individuals globally move up Maslow’s Hierarchy of Financial Wants & Needs?

On page 189 they write:

“But in the developing world, where the costs of an ineffectual financial system and the burdens of transferring funds are all too clear, cryptocurrencies have a much more compelling pitch to make.”

The problem is actually at the institutional level, institutions which do not disappear because of the Bitcoin blockchain.  Nor does Bitcoin solve the identity issue: users still need real-world identity for credit ratings so they can take out loans and obtain investment to build companies.

For instance on page 190 the authors mention the costs of transferring funds to and from Argentina, the Philippines, India and Pakistan.  One of the reasons for the high costs is due to institutional problems which is not solved by Bitcoin.

In fact, the authors write:

“Banks won’t service these people for various reasons. It’s partly because the poor don’t offer as fat profits as the rich, and it’s partly because they live in places where there isn’t the infrastructure and security needed for banks to build physical branches. But mostly it’s because of weak legal institutions and underdeveloped titling laws.”

This is true, but Bitcoin does not solve this.  If local courts or governments do not recognize the land titles that are hashed on the blockchain it does the local residents no good to use Proof of Existence or BlockSign.

They do not clarify this problem through the rest of the chapter.  In fact the opposite takes place, as they double down on the reddit narrative:

“Bitcoin, as we know, doesn’t care who you are. It doesn’t care how much money you are willing to save, send, or spend. You, your identity and your credit history are irrelevant. […] If you are living on $50 a week, the $5 you will save will matter a great deal.”

This helps nobody. The people labeled as “unbanked” want to have access to capital markets and need a credit history so they can borrow money to create a companies and build homes.  Bitcoin as it currently exists, does not solve those problems.

Furthermore, how do these people get bitcoins in the first place?  That challenge is not discussed in the chapter.  Nor is the volatility issue, one swift movement that can wipe out the savings of someone living in subsistence, broached.  Again, what part of the network does lending on-chain?

On page 192 they write:

“They lack access to banks not because they are uneducated, but because of the persistent structural and systemic obstacles confronting people of limited means there: undeveloped systems of documentation and property titling, excessive bureaucracy, cultural snobbery, and corruption. The banking system makes demands that poor people simply can’t meet.”

This is very true.  The Singapore conference I attended two weeks ago is just one of many conferences held throughout this year that talked about financial inclusion.  Yet Bitcoin does not solve any of these problems.  You do not need a proof-of-work blockchain to solve these issues.  Perhaps new database or permissioned ledgers can help, but these are social engineering challenges — wet code — that technology qua technology does not necessarily resolve.

Also on page 192 they write:

“People who have suffered waves of financial crises are used to volatility. People who have spent years trusting expensive middlemen and flipping back and forth between dollars and their home currency are probably more likely to understand bitcoin’s advantages and weather its flaws.”

This is probably wishful thinking too.  Residents of Argentina and Ukraine may be used to volatility but it does not mean it is something they want to adopt.  Why would they want to trade one volatile asset for another?  Perhaps they will but the authors do not provide any data for actual usage or adoption in these countries, or explain why the residents prefer bitcoin instead of something more global and stable such as the US dollar.

On page 193 they write that:

“In many cases, these countries virtually skip over legacy technology, going straight to high-tech fiber-optic cables.”

While there is indeed a number of legacy systems used on any given day in the US, it is not like Bitcoin itself is shiny new tech.  While the libraries and BIPS may be new, the components within the consensus critical tech almost all dates back to the 20th century.

For instance, according to Gwern Branwen, the key moving parts that Bitcoin uses:

  1. 2001: SHA-256 finalized
  2. 1999-present: Byzantine fault tolerance (PBFT etc.)
  3. 1999-present: P2P networks (excluding early networks like Usenet or FidoNet; MojoNation & BitTorrent, Napster, Gnutella, eDonkey, Freenet, etc.)
  4. 1998: Wei Dai, B-money5
  5. 19986: Nick Szabo, Bit Gold
  6. 1997: HashCash
  7. 1992-1993: Proof-of-work for spam7
  8. 1991: cryptographic timestamps
  9. 1980: public key cryptography8
  10. 1979: Hash tree

That’s not to say that Bitcoin is bad, old or that other systems are not old or bad but rather the term “legacy” is pretty relative and undefined in that passage.

On page 194 they discuss China and bitcoin:

“With bitcoin, the theory goes, people could bypass that unjust banking system and get their money out of China at low cost.”

This is bad legal advice, just look at the problems this caused Coinbase with regulators a couple months ago.  And while you could probably do it low-scale, it then competes with laundering via art sales and Macau junkets and thus expecting this to be the killer use-case for adoption in China is fairly naive.

On page 195 they write:

“Bitcoin in China is purely a speculator’s game, a way to gamble on its price, either through one of a number of mainland exchanges or by mining it. It is popular — Chinese trading volumes outstrip those seen anywhere else in the world.”

Two months ago Goldman Sachs published a widely circulated report which stated that “80% of bitcoin volume is now exchanged into and out of Chinese yuan.”

This is untrue though as it is solely based on self-reporting metrics from all of the exchanges (via Bitcoinity).  As mentioned in chapter 1 notes above, the top 3 exchanges in China run market-making bots which dramatically inflate trading volume by 50-70% each day.  While they likely still process a number of legitimate trades, it cannot be said that 80% of bitcoin volume is traded into and out of RMB.  The authors of both the report and the book should have investigated this in more depth.

On page 196 they write:

“This service, as well as e-marketplace Alibaba’s competing Alipay offering, is helping turn China into the world’s most dynamic e-commerce economy. How is bitcoin to compete with that?”

Great question and the answer is it probably won’t.  See Understanding value transfers to and from China.

Next on page 196 they write:

“But what about the potential to get around the controls the government puts on cross-border fund transfers?”

By-passing capital controls was discussed two pages before and will likely cause problems for any VC or PE-backed firm in China, the US and other jurisdictions.  I am not defending the current policies just being practical: if you are reading their book and plan to do this type of business, be sure to talk to a legal professional first.

On page 197 they discuss a scenario for bitcoin adoption in China: bank crisis.  The problem with this is that in the history of banking crisis’ thus far, savers typically flock to other assets, such as US dollars or euros.  The authors do not explain why this would change.

Now obviously it could or in the words of the authors, the Chinese “may warm to bitcoin.”  But this is just idle speculation — where are the surveys or research that clarify this position?  Why is it that many killer use-cases for bitcoin typically assumes an economy or two crashes first?

On page 198 they write:

“The West Indies even band together to form one international cricket team when they play England, Australia, and other members of the Commonwealth. What they don’t have, however, is a common currency that could improve interisland commerce.”

More idle speculation.  Bitcoin will probably not be used as a common currency because policy makers typically want to have discretion via elastic money supplies.  In addition, one of the problems that a “common currency” could have is what has plagued the eurozone: differing financial conditions in each country motivate policy makers in each country to lobby for specific monetary agendas (e.g., tightening, loosening).

Bitcoin in its current form, cannot be rebased to reflect the changes that policy makers could like to make.  While many Bitcoin enthusiasts like this, unless the authors of the book have evidence to the contrary, it is unlikely that the policy makers in the West Indies find this desirable.

On page 199 they write:

“A Caribbean dollar remains a pipe dream.”

It is unclear why having a unified global or regional currency is a goal for the authors?  Furthermore, there is continued regional integration to remove some frictions, for instance, the ECACH (Eastern Caribbean Automated Clearing House) has been launched and is now live in all 8 member countries.

On page 203 they spoke to Patrick Byrne from Overstock.com about ways Bitcoin supposedly saves merchants money.

They note that:

“A few weeks later, Byrne announced he would not only be paying bitcoin-accepting vendors one week early, but that he’d also pay his employee bonuses in bitcoin.”

Except so far this whole effort has been a flop for Overstock.com.  According to Overstock, in 2014 approximately 11,100 customers paid with bitcoin at both its US and international websites.  Altogether this represented roughly $3 million in sales which when coupled with low margin products (based on the top 10 list of things sold on Overstock) is an initiative that Stone Street Advisors labeled “distracting” (see slides 21, 32, 33, 37, 58).

This continues onto page 204:

“As a group of businesses in one region begins adopting the currency, it will become more appealing to others with whom they do business. Once such a network of intertwined businesses builds up, no one wants to be excluded from it. Or so the theory goes.”

Byrne then goes on to describe network effects and fax machines, suggesting that this is what will happen with bitcoin.

In other words, a circular flow of income.  The challenge however goes back to the fact that the time preferences of individuals is different and has not lended towards the theory of spending.  As a whole, very few people spend and suppliers typically cash out to reduce their exposure to volatility.  Perhaps this will change, but there is no evidence that it has so far.

On page 206 they talk to Rulli from Film Annex (who was introduced in the introduction):

With bitcoin, “you can clearly break down the value of every single stroke on the keyboard, he says.

And you cannot with fiat?

Continuing the authors talk about Rulli:

He wanted the exchange to be solely in bitcoin for other digital currencies, with no option to buy rupees or dollars: “The belief I have is that if you lock these people into this new economy, they will make that new economy as efficient as possible.”

What about volatility?  Why are marginalized people being expected to hold onto an asset that fluctuates in value by more than 10% each month?  Rulli has a desire to turn the Film Annex Web site “into its own self enclosed bitcoin economy.”  There is a term for this: autarky or closed economy.

Continuing Rulli states:

“If you start giving people opportunities to get out of the economy, they will just cut it down, whereas if the only way for you to enrich yourself is by trading bitcoins for litecoins and dogecoins, you are going to become an expert in that… you will become the best trader in Pakistan.”

This seems to be a questionable strategy: are these users on bitLanders supposed to be artisans or day traders?  Why are marginalized people expected to compete with world-class professional traders?

On page 210 the second time the term “virtual currency” is mentioned, this time by the Argentinian central bank.

On page 213 they write:

“With bitcoin, it is possible to sen money via a mobile phone, directly between two parties, to bypass that entire cumbersome, expensive system for international transfers.”

What an updated version to the book should include is an actual study for the roundtrip costs of doing international payments and remittances.  This is not to defend the incumbents, but rebittance companies and enthusiasts on reddit grossly overstate the savings in many corridors.7 And it still does not do away with the required cash-in / cash-out steps that people in these countries still want and need.

On page 216 they write about the research of Hernando de Soto who discusses the impediments of economic development including the need to document ownership of property.  Unfortunately Bitcoin does not currently solve this because ultimately the recognition of a hash of a document on a blockchain comes down to recognition from the same institutions that some of these developing countries lack.

Continuing on page 217 they write that:

“Well, the blockchain, if taken to the extent that a new wave of bitcoin innovators believe possible, could replace many of those institutions with a decentralized authority for proving people’s legal obligations and status. In doing so, it could dramatically widen the net of inclusion.”

How?  How is this done?  Without recognized title transfers, hashing documents onto a chain does not help these people.  This is an institutional issue, not one of technology.  Human corruption does not disappear because of the existence of Bitcoin.

Chapter 9

On page 219 they write:

“Like everything else in the cryptocurrency world, the goal is to decentralize, to take power out of the hands of the middleman.”

By recreating the same middleman, depository institutions, yet without robust financial controls.

On page 220 and 221 they mention “basic encryption process” and “standard encryption models” — I believe that it is more accurately stated as cryptographic processes and cryptographic models.

On page 222 they define “Bitcoin 2.0” / “Blockchain 2.0” and put SatoshiDice into that bucket.  Ignoring the labels for a moment, I don’t think SatoshiDice or any of the other on-chain casino games are “2.0” — they use the network without coloring any asset.

One quibble with Mike Hearn’s explanation on page 223 is when he says, “But bitcoin has no intermediaries.”  This is only true if you control and secure the privkey by yourself.  In practice, many “users” do not.

On page 225 they write:

“Yet they are run by Wall Street banks and are written and litigated by high-powered lawyers pulling down six- or seven-figure retainers.”

Is it a crime to be able to charge what the market bears for a service?  Perhaps some of this technology will eventually reduce the need for certain legal services, but it is unclear what the pay rate of attorneys in NYC has in relation with Bitcoin.

Also on page 225 a small typo: “International Derivatives and Swaps Association (ISDA)” — need to flip Derivatives and Swaps.

On page 226, 227, 229 and 244: nextcoin should be called NXT.

On page 227 they write:

“Theses are tradable for bitcoins and other cryptocurrencies on special altcoin exchanges such as Cryptsy, where their value is expected to rise and fall according to the success or failure of the protocol to which they belong.”

There is a disconnect between the utility of a chain and the speculative activity around the token.  For instance, most day traders likely do not care about the actual decentralization of a network, for if they did, it would be reflected in prices of each chain.  There are technically more miners (block makers) on dozens of alternative proof-of-work chains than there in either bitcoin or litecoin yet market prices are (currently) not higher for more decentralized chains.

On page 228 they write that:

“Under their model, the underlying bitcoin transactions are usually of small value — as low as a “Satoshi” (BTC0.00000001).  That’s because the bitcoin value is essentially irrelevant versus the more important purpose of conveying the decentralized application’s critical metadata across the network, even though some value exchange is needed to make the communication of information happen.”

Actually in practice the limit for watermarked coins typically resides around 0.0001 BTC.  If it goes beneath 546 satoshi, then it is considered dust and not included into a block.  Watermarked coins also make the network top heavy and probably insecure.8

On page 209, the third time “virtual currency” is used and comes from Daniel Larimer, but without quotes.

On page 230 they discuss an idea from Daniel Larimer to do blockchain-based voting.  While it sounds neat in theory, in practice it still would require identity which again, Bitcoin doesn’t solve.  Also, it is unclear from the example in the book as to why it is any more effective/superior than an E2E system such as Helios.

On page 238 they write:

“It gets back to the seigniorage problem we discussed in chapter 5 and which Nakamoto chose to tackle through the competition for bitcoins.”

I am not sure I would classify it as a problem per se, it is by design one method for rewarding security and distributing tokens.  There may be other ways to do it in a decentralized manner but that is beyond the scope of this review.

On page 239 they discuss MaidSafe and describe the “ecological disaster” that awaits data-center-based storage.  This seems a bit alarmist because just in terms of physics, centralized warehouses of storage space and compute will be more efficient than a decentralized topology (and faster too).  This is discussed in Chapter 3 (under “Another facsimile”).

Continuing they quote the following statement from David Irvine, founder of MaidSafe: “Data centers, he says, are an enormous waste of electricity because they store vast amounts of underutilized computing power in huge warehouse that need air-condition and expensive maintenance.”

Or in other words: #bitcoin

On page 242 they mention Realcoin whose name has since been changed to Tether.  It is worth pointing out that Tether does not reduce counterparty risk, users are still reliant on the exchange (in this case Bitfinex) from not being hacked or shut down via social engineering.

On page 244, again to illustrate how fast this space moves, Swarm has now pivoted from offering cryptocurrency-denominated investment vehicles into voting applications and Open-Transactions has hit a bit of a rough patch, its CTO, Chris Odom stepped down in March and the project has not had any public announcements since then.

Chapter 10

If you missed it, the last few weeks on social media have involved a large debate around blockchain stability with respect to increasing block sizes.

During one specific exchange, several developers debated as to “who was in charge,” with Mike Hearn insisting that Satoshi left Gavin in charge and Greg Maxwell stating that this is incorrect.

gavin mike hearn

Source: Reddit

This ties in with the beginning of page 247, the authors write about Gavin Andresen:

“A week earlier he had cleared out his office at the home he shares with his wife, Michele – a geology professor at the University of Massachusetts — and two kids. He’d decided that a man essentially if not titularly in charge of running an $8 billion economy needed something more than a home office.”

Who is in charge of Bitcoin?  Enthusiasts on reddit and at conferences claim no one is.  The Bitcoin Foundation claims five people are (those with commit access).  Occasionally mainstream media sites claim the Bitcoin CEO or CFO is fired/jailed/dead/bankrupt.

The truth of the matter is that it is the miners who decide what code to update and use and for some reason they are pretty quiet during all of this hub bub.  Beyond that, there is a public goods problem and as shown in the image above, it devolves into various parties lobbying for one particular view over another.

The authors wrote about this on page 247:

“The foundation pays him to coordinate the input of the hundreds of far-flung techies who tinker away at the open-licensed software. Right now, the bitcoin community needed answers and in the absence of a CEO, a CTO, or any central authority to turn to, Andresen was their best hope.”

It is unclear how this will evolve but is a ripe topic of study.  Perhaps the second edition will include other thoughts on how this role has changed over time.

On page 251 they write:

“Probably ten thousand of the best developers in the world are working on this project,” says Chris Dixon, a partner at venture capital firm Andreessen Horowitz.

How does he know this?  There are not 10,000 users making changes to Bitcoin core libraries on github or 10,000 subscribers to the bitcoin development mailing list or IRC rooms.  I doubt that if you added up all of the employees of every venture-backed company in the overall Bitcoin world, that the amount would equate to 2,000 let alone 10,000 developers.  Perhaps it will by the end of this year but this number seems to be a bit of an exaggeration.

Continuing Dixon states:

“You read these criticisms that ‘bitcoin has this flaw and bitcoin has that flaw,’ and we’re like ‘Well, great. Bitcoin has ten thousand people working hard on that.”

This is not true.  There is a public goods problem and coordination problem.  Each developer and clique of developers has their own priorities and potential agenda for what to build and deploy.  It cannot be said that they’re all working towards one specific area.  How many are working on the Lightning Network?  Or on transaction malleability (which is still not “fixed”)?  How many are working on these CVE?

On page 254 they discuss Paul Baran’s paper “On Distributed Communications Networks,” the image of which has been used over the years and I actually used for my paper last month.

On page 255 the fourth usage of “virtual currency” appears regarding once more, FinCEN director Jennifer Shasky.  Followed by page 256 with another use of “virtual currency.”  On page 257 Benjamin Lawsky was quoted using “virtual currency.”  Page 259 the term “virtual currency” appears when the European Banking Authority is quoted.  Page 260 and 261 sees “virtual currency” being used in relation with NYDFS and Lawsky once more.  On page 264 another use of “virtual currency” is used and this time in relation with Canadian regulations from June 2014.

On page 265 they mention “After the People’s Bank of China’s antibitcoin directives…”

I am not sure the directives were necessarily anti-bitcoin per se.  Rather they prohibited financial institutions like banks and payment processors from directly handling cryptocurrencies such as bitcoins.  The regulatory framework is still quite nebulous but again, going back to “excessive” in the introduction above, it is unclear why this is deemed “anti-bitcoin” when mining and trading activity is still allowed to take place.  Inconsistent and unhelpful, yes.  Anti?  Maybe, maybe not.

Also on page 265 they mention Temasek Holdings, a sovereign wealth fund in Singapore that allegedly has bitcoins in its portfolio.  When I was visiting there, I spoke with a managing director from Temasek two weeks ago and he said they are not invested in any Bitcoin companies and the lunchroom experiment with bitcoins has ended.

On page 268 the authors discuss “wallets” once more this time in relation with Mt.Gox:

“All the bitcoins were controlled by the exchange in its own wallets” and “Reuters reported that only Karpeles knew the passwords to the Mt. Gox wallets and that he refused a 2012 request from employees to expand access in the event that he became incapacitated.”

Chapter 11

On page 275 the authors use a good nonce, “übercentralization.”

On page 277 they write:

“While no self-respecting bitcoiner would ever describe Google or Facebook as decentralized institutions, not with their corporate-controlled servers and vast databases of customers’ personal information, these giant Internet firms of our day got there by encouraging peer-to-peer and middleman-free activities.”

In the notes on the margin I wrote “huh?”  And I am still confused because each of these companies attempts to build a moat around their property.

Google has tried like 47 different ways to create a social network even going so far as to cutting off its nose (Google Reader, RIP) to spite its face all with the goal of keeping traffic, clicks and eyeballs on platforms it owns.  And this is understandable.  Similarly Coinbase and other “universal hosted wallets” are also trying to build a walled garden of apps with the aim of stickiness — finding something that will keep users on their platform.

On page 277 they also wrote that:

“Perhaps these trends can continue to coexist if the decentralizing movements remains limited to areas of the economy that don’t bleed into the larger sectors that Big Business dominates.”

What about Big Bitcoin?   The joke is that there are 300,027 advocacy groups in Bitcoinland: 300,000 privkey holders who invested in bitcoin and 27 actual organizations that actively promote Bitcoin.  There is probably only one quasi self-regulating organization (SRO), DATA.  And the advocacy groups are well funded by VC-backed companies and investors, just look at CoinCenter’s rolodex.

On page 280 they write:

“Embracing a cryptoccurency-like view of finance, it has started an investment program that allows people invest directly in the company, buying notes backed by specific hard assets, such as individual stores, trucks, even mattress pads. No investment bank is involved, no intermediary. Investors are simply lending U-Haul money, peer-to-peer, and in return getting a promissory note with fixed interested payments, underwritten by the company’s assets.”

This sounds a lot like a security as defined by the Howey test.  Again, before participating in such an activity be sure to talk with a legal professional.9

On page 281 they use the term “virtual currencies” for the 11th time, this time in reference to MasterCard’s lobbying efforts in DC for Congress.

On page 283 a small typo, “But here’s the rub: because they are tapped” — (should be trapped).

On page 283 they write:

“By comparison, bitcoin processors such as BitPay, Coinbase, and GoCoin say they’ve been profitable more or less from day one, given their low overheads and the comparatively tiny fees charged by miners on the blockchain.”

This is probably false.  I would challenge this view, and that none of them are currently breaking even on merchant processing fees alone.

In fact, they likely have the same user acquisition costs and compliance costs as all payment processors do.

For instance, in October 2014, Brian Armstrong and Fred Ehrsam, co-founders of Coinbase, did a reddit AMA.  At the 21:12 minute mark (video):

Q: Is Coinbase profitable or not, if not, when?

A: It’s happened to be profitable at times, at the moment it’s not; we’re not burning too much cash.  I think that the basic idea here is to grow and by us growing we help the entire ecosystem grow — without dying.  So not at the moment but not far.

It’s pretty clear from BitPay’s numbers that unless they’ve been operating a high volume exchange, they are likely unprofitable.

Why?  Because, in part of the high burn rate.  What does this mean?

Last week Moe Levin, former Director of European Business Development at BitPay, was interviewed by deBitcoin, below is one detailed exchange starting at 1:57m:

Q: There was a lot of stories in the press about BitPay laying off people, can you comment on that?

A: Yea, what happened was we had a high burn rate and the company necessarily needed to scale back a little bit on how many people we hired, how many people we had on board, how much we sponsored things.  I mean things were getting a little bit out of hand with sponsorships, football games and expansion — more care needed to be put on how and where we spent the money.

Q: Can you elaborate on the burn rate?  Tim Swanson wrote a piece on BitPay in April, published this piece about the economy, the BitPay economy. Posted this piece on the burn rate and actual figures, have you read that piece?  Can you comment on that?

A: Yes, it is especially hard for a company to build traction when they start off.  Any start up is difficult to build traction.  It’s doubly hard, the hardness is amplified when a company enters a market with competitors that have near unlimited resources because the other companies can either blow you out of the water or have better marketing strategies or they can do a ton of different things to make your startup more irrelevant.  Standard in any company but it is doubly difficult when you enter a market like that.  In the payments industry, forget about Bitcoin for a second, in the payments industry and the mobile commerce, ecommerce, company-to-company payments industry there are massive players with investments and venture backed companies in the billions.  Competing at that stage is tricky and it necessarily requires a burn rate that is much higher than the average startup because of how you need to compete in this space.  What is also important is that the regulation costs a lot of money for the startups in the Bitcoin economy.  It’s the perfect storm of how a startup will be hit with a ton of expenses early on and that can hurt the growth of a company.  Even though a lot of the money that went into it was growth capital it takes a while to get the balance right between spending and growing.

On page 284 they write:

“That leads us to one important question: What happens to banks as credit providers if that age arrives? Any threat to this role could be a negotiating chip for banks in their marketing battle with the new technology.”

This is a good question and it dovetails with the “Fedcoin” discussion over the past 6 months.10

On page 285 they write:

“With paper money they can purchase arms, launch wars, raise debt to finance those conflicts, and then demand tax payments in that same currency to repay those debts.”

This is a common misconception, one involving lots of passionate Youtube videos, that before central banks were established or fiat currencies were issued, that there was no war or “less war.”

On page 309 they quote Roger Ver at a Bitcoin conference saying:

“they’ll no longer be able to fund these giant war machines that are killing people around the world. So I see bitcoin as a lever that I can use to move the world in a more peaceful direction.”

Cryptocurrencies such as Bitcoin will not end wars for the same reason that precious metals did not prevent wars: the privkey has no control over the “wet code” on the edges.  Wars have occurred since time immemorial due to conflicts between humans and will likely continue to occur into the future (I am sure this statement will be misconstrued on reddit to say that I am in support of genocide and war).

On page 286 they write:

“Gil Luria, an analyst at Wedbush Securities who has done some of the most in-depth analysis of cryptocurrency’s potential, argues that 21 percent of U.S. GDP is based in “trust” industries, those that perform middlemen tasks that blockchain can digitize and automate.”

In looking at the endnote citation (pdf) it is clear that Luria and his team is incorrect in just about all of the analysis that month as they rely on unfounded assumptions to both adoption and the price of bitcoin.  That’s not to say some type of black swan events cannot or will not occur, but probably not for the reasons laid out by the Wedbush team.  The metrics and probabilities are entirely arbitrary.

For instance, the Wedbush analysts state:

“Our conversation with bitcoin traders (and  Wall Street traders trading bitcoin lead us to believe they see opportunity in a market that has frequent disruptive news flow  and large movements that reflect that news flow.”

Who are these traders?  Are they disinterested and objective parties?

For instance, a year ago (in February 2014), Founders Grid asked 50 Bitcoin “experts” what their bitcoin price predictions were over the next year.  The end result — all but a couple were completely, very wrong (see this spreadsheet for a line-by-line itemization).

Later, in May 2014, CoinTelegraph asked (video) more than 30 Bitcoin “experts” as to what their bitcoin predictions were for the end of 2014.  Once again, all but a couple were completely, very wrong.

Or in short, no one has a very good track record of predicting either prices or adoption.  Thus it is unclear from their statements why a cryptocurrency such as Bitcoin will automatically begin performing the tasks that comprise 21% of US economic output based on “trust.”

On page 288 they write:

“So expect a backlash once banks start shutting back-office administrative centers in midtown Manhattan or London’s Canary Wharf when their merchant customers start booking more customer sales via cryptocurrency systems to avoid the 3 percent transaction fees.”

I think there is a lot of conflation here.

  1.  back-offices could be reformed with the integration of distributed ledgers, but probably not cryptocurrency systems (why would a trusted network need proof-of-work?).
  2.  the empirical data thus far suggests that it doesn’t matter how many merchants adopt cryptocurrencies as payments, what matters is consumer adoption — and thus far the former out paces the latter by several an enormous margin.
  3.  that 3% is broken down and paid to a variety of other participants not just Visa or MasterCard.
  4.  the US economy (like that of Europe and many other regions) is consumer driven — supply does not necessarily create its own demand.

There is one more point, but first the authors quote Chris Dixon from Andreessen Horowitz, “On the one hand you have the bank person who loses their job, and everyone feels bad about that person, and on the other hand, everyone else saves three percent, which economically can have a huge impact because it means small businesses widen their profit margins.”

This myth of “3%” savings is probably just a myth.  At the end of the day Coinbase, BitPay and other payment processors will likely absorb the same cost structures as existing payment processors in terms of user acquisition, customer support, insurance, compliance and so forth.  While the overhead may be lean, non-negligible operating costs still exist.

There are two reasons for why it could be temporarily cheaper to use Coinbase:

1) VC funding and exchange activity subsidizes the “loss-leader” of payment processing;

2) because Coinbase outsources the actual transaction verification to a third party (miners), they are dependent on fees to miners staying low or non-existent.  At some point the fees will have to increase and those fees will then either need to be absorbed by Coinbase or passed on to customers.

On page 290 they quote Larry Summers:

“So it seems to me that the people who confidently reject all the innovation here [in blockchain-based payment and monetary systems] are on the wrong side of history.”

Who are these people?  Even Jeffrey Robinson finds parts of the overall tech of interest.  I see this claim often on social media but it seems like a strawman.  Skepticism about extraordinary claims that lack extraordinary proof does not seem unwarranted or unjustified.

On page 292 they write:

“But, to borrow an idea from an editor of ours, such utopian projects often end up like Ultimate Frisbee competitions, which by design have no referees — only “observers” who arbitrate calls — and where disputes over rule violations often devolve into shouting matches that are won by whichever player yells the loudest, takes the most uncompromising stance, and persuades the observer.”

This is the exact description of how Bitcoin development works via reddit, Twitter, Bitcoin Talk, the Bitcoin Dev mailing list, IRC and so forth.  This is not a rational way to build a financial product.  Increasing block sizes that impact a multi-billion dollar asset class should not be determined by how many Likes you get on Facebook or how often you get to sit on panels at conferences.

Final chapter (conclusion):

On page 292 they write:

“Nobody’s fully studied how much business merchants are doing with bitcoin and cryptocurrencies, but actual and anecdotal reports tend to peg it at a low number, about 1 percent of total sales for the few that accept them.”

My one quibble is that they as journalists were in a position to ask payment processors for these numbers.

Fortunately we have a transparent, public record that serves as Plan B: reused addresses on the Bitcoin blockchain.

Evolution Market v Bitpay BtcAs described in detail a couple weeks ago, the chart above is a log scale measuring the amount of bitcoins that both BitPay (in green) and Evolution (in red) received starting January 16, 2014.

The drop off at the end in March 2015 is related to the exit scam that Evolution underwent (and the drop off for BitPay is related to a limitation in WalletExplorer’s data).

As we can see here, based on the clusters labeled by WalletExplorer, on any given day BitPay processes about 1,200 bitcoins (the actual number is probably about 10% higher).

coinbase transactions

Source: Coinbase

The chart above are self-reported transaction numbers from Coinbase.  While it is unclear what each transaction can or do represent, in aggregate it appears to be relatively flat over the past year.11 Perhaps that will change in the future.

On page 295 they write:

“Volatility in bitcoin’s price will also eventually decline as more traders enter the market and exchanges become more sophisticated.”

As Christopher Hitchens once remarked, that which can be asserted without evidence, can be dismissed without evidence.  Those making a positive claim (that volatility will decline) are the party that needs to prove this and they do not in this book.  Perhaps volatility will somehow disappear, but not for the non-technical reasons they describe.

At the bottom of page 295 they write:

“Even so, we will go out on a limb here and argue that encryption-based, decentralized digital currencies do have a future.”

Again, there is no encryption in cryptocurrencies, only cryptographic primitives.  Also, as described in the introductory notes above, virtual currencies are not synonymous with digital currencies.

Also on page 295 they write:

“Far more important, it solves some big problems that are impossible to address within the underlying payment infrastructure.”

Yes, there are indeed problems with identity and fraud but it is unclear from this book what Bitcoin actually solves.  No one “double-spends” per se on the Visa network.  At the time of this writing no one has, publicly, hacked the Visa Network (which has 42 firewalls and a moat).  The vulnerabilities and hacks that take place are almost always at the edges, in retailers such as Home Depot and Target (which is unfortunately named).

This is not to say that payment rails and access to them cannot be improved or made more accessible, but that case is not made in this book.

On page 296 they write:

“Imagine how much wider the use of cyptocurrency would be if a major retailer such as Walmart switched to a blockchain-based payment network in order to cut tens of billions of dollars in transaction costs off the $350 billion it sends annually to tens of thousands of suppliers worldwide.”

Again this is conflating several things.  Walmart does not need a proof-of-work blockchain when it sends value to trusted third parties.  All the participants are doxxed and KCY’ed.  Nor does it need to convert fiat -> into a cryptocurrency -> into fiat to pay retailers.  Instead, Walmart in theory, could use some type of distributed ledger system like SKUChain to track the provenance of items, but again, proof-of-work used by Bitcoin are unneeded for this utility because parties are known.

Also, while the authors recognize that bitcoins currently represent a small fraction of payments processed by most retailers, one of the reasons for why they may not have seen a dramatic improvement in their bottom line because people — as shown with the Wence Casares citation above (assuming the 96% figure is accurate) — do not typically purchase bitcoins in order to spend them but rather invest and permanently hold them.  Perhaps that may change in the future.

On page 297 they write:

“But now bitcoin offers an alternative, one that is significantly more useful than gold.”

That’s an unfounded claim.  The two have different sets of utility and different trade-offs We know precious metals have some use-value beyond ornamentation, what are the industrial usages of bitcoin?

In terms of security vulnerabilities there are trade-offs of owning either one.  While gold can be confiscated and stolen, to some degree the same challenge holds true with cryptocurrencies due to its bearer nature (over a million bitcoins have been lost, stolen, seized and destroyed).12 One advantage that bitcoin seems to have is cheaper transportation costs but that is largely dependent on subsidized transaction fees (through block rewards) and the lack of incentives to attack high-value transactions thus far.

On page 300 they write:

“As you’ll know from having read this book, a bitcoin-dominant world would have far more sweeping implications: for one, both banks and governments would have less power.”

That was not proven in this book.  In fact, the typical scenarios involved the success of trusted third parties like Coinbase and Xapo, which are banks by any other name.  And it is unclear why governments would have less power.  Maybe they will but that was not fleshed out.

On page 301 they write:

“In that case, cryptocurrency protocols and blockchain-based systems for confirming transactions would replace the cumbersome payment system that’s currently run by banks, credit-card companies, payment processors and foreign-exchange traders.”

The authors use the word cumbersome too liberally.  To a consumer and even a merchant, the average swipeable (nonce!) credit card and debit card transaction is abstracted away and invisible.

In place of these institutions reviled by the authors are, in practice, the very same entities: banks (Coinbase, Xapo), credit-card companies (Snapcard, Freshpay), payment processors (BitPay, GoCoin) and foreign-exchange traders (a hundred different cryptocurrency exchanges).  Perhaps this will change in the future or maybe not.

On page 305 they write about a “Digital dollar.”  Stating:

“Central banks could, for example, set negative interest rates on bank deposits, since savers would no longer be able to flee into cash and avoid the penalty.”

This is an interesting thought experiment, one raised by Miles Kimball several months ago and one that intersects with what Richard Brown and Robert Sams have discussed in relation to a Fedcoin.

On page 306 they write about currency reserves:

“We doubt officials in Paris or Beijing are conceiving of such things  right now, but if cryptocurrency technology lives up to its potential, they may have to think about it.”

This is wishful thinking at best.  As described in Chapter 13, most proponents of a “Bitcoin reserve currency” are missing some fundamental understanding of what a reserve currency is or how a currency becomes one.

Because there is an enormous amount of confusion in the Bitcoin community as to what reserve currencies are and how they are used, it is recommended that readers peruse what Patrick Chovanec wrote several years ago – perhaps the most concise explanation – as it relates to China (RMB), the United Kingdom (the pound) and the United States (the dollar):

There are four main factors that set the Pound and the Dollar apart as viable and attractive reserve currencies. Each was necessary. They were liquid. They were available. And they were perceived as safe. I’m going to run through each of these conditions in turn. I will consider how they applied to the Pound and the Dollar, and to what extent they are satisfied by China’s Renminbi.

(1) Necessity. The fundamental purpose of a reserve currency is to settle external obligations. The greater quantity and variety of obligations a particular currency can settle, the more useful it is as a reserve currency. The currency of a country that produces little of note and lacks funds to lend or invest is not nearly as useful as one whose home economy produces many goods and services desired around the world, serves as an important source of capital, and has many commercial partners who also find its currency relevant to meeting their own obligations. This idea — that the dominant reserve currency derives its status from its connection with the dominant national economy in an interconnected world – is what underlies Roubini’s reasoning that the Renminbi may be next in line to replace the Dollar.

But this conclusion misses something important. A reserve currency must not only be capable of settling obligations in connection with a heavy-weight economy. It must be required to. Because if you can settle those obligations, as sizeable and important as they may be, using your own currency — or the currency of another leading economy — there is no reason to hold that country’s currency as a reserve. That is precisely the case today with China.

It is unclear how or why some Bitcoin advocates can suggest that bitcoins will ever be used as a reserve currency when there is no demand for the currency to meet external trading obligations let alone in the magnitude that these other currencies do (RMB, USD, GBP).

On page 307 they write:

Under this imagined Bretton Woods II, perhaps the IMF would create its own cryptocurrency, with nodes for managing the blockchain situated in proportionate numbers within all the member countries, where none could ever have veto power, to avoid a state-run 51 percent attack.

Proof-of-work mining on a trusted network is entirely unnecessary yet this type of scenario is propagated by a number of people in the Bitcoin space including Adam Ludwin (CEO of Chain.com) and Antonis Polemitis (investor at Ledra Capital).

Two months ago on a panel at the Stanford Blockchain event, Ludwin predicted that in the future governments would subsidize mining.  Again, the sole purpose of mining on a proof-of-work blockchain is because the actors cannot trust one another.  Yet on a government-run network, there are no unverified actors (Polemitis has proposed a similar proof-of-work solution for Fedcoin).

Again, there is no reason for the Fed, or any bank for that matter, to use a Bitcoin-like system because all parties are known.  Proof-of-work is only useful and necessary when actors are unknown and untrusted.  The incentive and cost structure for maintaining a proof-of-work network is entirely unnecessary for financial services institutions.

Furthermore, maintaining anonymous validators while simultaneously requiring KYC/AML on end users is a bit nonsensical (which is what the Bitcoin community has done actually).  Not only do you have the cost structures of both worlds but you have none of the benefits.  If validators are known, then they can be held legally responsible for say, double spending or censoring transactions.

Robert Sams recently noted the absurdity of this hydra, why permissionless systems are a poor method for managing off-chain assets:

The financial system and its regulators go to great lengths to ensure that something called settlement finality takes place. There is a point in time in which a trade brings about the transfer of ownership–definitively. At some point settlement instructions are irrevocable and transactions are irreversible. This is a core design principle of the financial system because ambiguity about settlement finality is a systemic risk. Imagine if the line items of financial institution’s balance sheet were only probabilistic. You own … of … with 97.5% probability. That is, effectively, what a proof-of-work based distributed ledger gives you. Except that you don’t know what the probabilities are because the attack vectors are based not on provable results from computers science but economic models. Do you want to build a settlement system on that edifice?

Though as shown by the NASDAQ annoucement, this will likely not stop people from trial by fire.

Concluding remarks

Bertha Benz, wife of Karl Benz, is perhaps best known for her August 1886 jaunt through present day Baden-Württemberg in which she became the first person to travel “cross-country” in an automobile — a distance of 106 kilometers.

It is unclear what will become of Bitcoin or cryptocurrencies, but if the enthusiasm of the 19th century German countryside echoed similar excitement as reddit sock puppets do about magic internet money, they must have been very disappointed by the long adoption process for horseless carriages to overtake horses as the primary mode of transportation.

For instance, despite depictions of a widely motorized Wehrmacht, during World War II the Teutonic Heer army depended largely on horses to move its divisions across the battlefields of Europe: 80% of its entire transportation was equestrian.  Or maybe as the popular narrative states: cryptocurrencies are like social networks and one or two will be adopted quickly, by everyone.

So is this book the equivalent to a premature The Age of Automobile?  Or The New Age of Trusted Third Parties?

Its strength is in simplicity and concision.  Yet it sacrifices some technical accuracy to achieve this. While it may appear that I hated the book or that each page was riddled with errors, it bears mentioning that there were many things they did a good job with in a fast-moving fluid industry.  They probably got more right than wrong and if someone is wholly unfamiliar with the topic this book would probably serve as a decent primer.

Furthermore, a number of the incredulous comments that are discussed above relate more towards the people they interviewed than the authors themselves and you cannot really blame them if the interviewees are speaking on topics they are not experts on (such as volatility).  It is also worth pointing out that this book appears to have been completed around sometime last August and the space has evolved a bit since then and of which we have the benefit of hindsight to utilize.

You cannot please everyone 

For me, I would have preferred more data.  VC funding is not necessarily a good metric for productive working capital (see the Cleantech boom and bust).  Furthermore, VCs can and often are wrong on their bets (hence the reason not all of them outperform the market).13 Notable venture-backed flops: Fab, Clinkle, DigiCash, Pets.com and Beenz.  I think we all miss the heady days of Cracked.com.

Only two charts related to Bitcoin were used: 1) historical prices, 2) historical network hashrate.  In terms of balance, they only cited one actual “skeptic” and that was Mark Williams’ testimony — not from him personally.  For comparison, it had a different look and feel than Robinson’s “BitCon” (here’s my mini review).

Both Michael and Paul were gracious to sign my book and answer my questions at Google and I think they genuinely mean well with their investigatory endeavor.  Furthermore, the decentralized/distributed ledger tent is big enough for a wide-array of views and disagreement.

While I am unaware of any future editions, I look forward to reading their articles that tackle some of the challenges I proposed above.  Or as is often unironically stated on reddit: you just strengthened (sic) my argument.

See my other book reviews.

Endnotes:

  1. Note: I contacted Rulli who mentioned that the project has been ongoing for about 10 years — they have been distributing value since 2005 and adopted bitcoin due to what he calls a “better payment solution.”  They have 500,000 registered users and all compete for the same pot of bitcoins each month. []
  2. See also Megawatts Of Mining by Dave Hudson []
  3. Additional calculations from Dave Hudson:
    – Current Bitcoin network capacity: approximately 320 PH/s (320 x 10^15)
    – Best case power efficiency (shipping today): approximately 0.5 J/GH (0.5 x 10^-9 J/H)
    Likely power efficiency: approximately 1.0 J/GH (1 x 10^-9 J/H) = 2 x best case
    – Best case power usage (sustained): 320 x 10^15 x 0.5 x 10^-9 = 160 x 10^6 W = 160 MW
    Likely power efficiency: 160 x 2 = 320 MW
    – Best case power usage per day: 160 x 24 = 3840 MWh = 3.84 GWh
    Likely power usage per day: 320 x 24 = 7680 MWh = 7.68 GWh
    – Best case power usage per year: 3.84 x 365 = 1401.6 GWh = 1.4 TWh
    Likely power usage per year: 7.68 x 365 = 2803.2 GWh = 2.8 TWh
    The best case example would represent the entire Bitcoin network using the best possible hardware and doesn’t account for any cooling or any other computers used in the Bitcoin network. As such it represents an impossible best version of a network of this size. The likely example is probably closer as there is older hardware still in use and most data centers need cooling of some sort.
    The US Energy Information Administration estimated the US power generation capacity for 2012 at 1051 GW so the 320 MW number would represent 0.03% of the total electricity supply for the US. Assuming that we take the 320 MW figure then that would put Bitcoin at about 10% of Ireland’s electricity supply. []
  4. See: How do Bitcoin payment processors work? []
  5. See What is the blockchain hard fork “missile crisis?” []
  6. See Distributed Oversight: Custodians and Intermediaries []
  7. See also: The Rise and Rise of Lipservice: Viral Western Union Ad Debunked []
  8. See Can Bitcoin’s internal economy securely grow relative to its outputs? and Will colored coin extensibility throw a wrench into the automated information security costs of Bitcoin? []
  9. See Mitigating the Legal Risks of Issuing Securities on a Cryptoledger []
  10. See Fedcoin by JP Koning, Fedcoin: On the Desirability of a Government Cryptocurrency by David Andolfatto, A Central Bank “cryptocurrency”? An interesting idea, but maybe not for the reason we think by Richard Brown and Which Fedcoin? by Robert Sams []
  11. See Slicing Data []
  12. Tabulating publicly reported bitcoins that were lost, stolen, seized, scammed and accidentally destroyed between August 2010 and March 2014 amounts to 966,531 bitcoins. See p. 196 in The Anatomy of a Money-like Informational Commodity by Tim Swanson. See also: Bitcoin Self-Defense, Part I: Wallet Protection by Vitalik Buterin []
  13. See Venture Capitalists Get Paid Well to Lose Money from Harvard Business Review and Ouch: Ten-year venture returns still lag the broader markets from Pando Daily []

Consensus-as-a-service: a brief report on the emergence of permissioned, distributed ledger systems

I have spent the past month compiling research that took place between August and the present day.  This was much more of a collaborative process than my previous publications as I had to talk with not just 8 geographically dispersed teams to find out what their approach was in this nascent field but also find out who is working on ideas that are closely related to these projects (as seen in Appendix A).

The culmination of this process can be found in this report: Permissioned distributed ledgers

Fortunately I had the help of not just astute practitioners in the industry who did the intellectual heavy lifting, but the resources and experience of the R3 CEV team where I am an advisor.

I think the three strongest areas are:

  • Richard Brown’s and Jo Lang’s description and visualization of smart contracts.  I loathe the term smart contracts (I prefer “banana” and Preston Byrne prefers “marmot”) and fortunately they distilled it to a level where many professionals can probably begin to understand it
  • Meher Roy’s excellent OSI-model for an “internet of money”
  • Robert Sams mental model of the core attributes of a permissioned distributed ledger

I think the weakest part is in the beginning of Section 8 regarding TCP/IP.  That is reflective of the fact that there is no perfect analogy because Bitcoin was designed to do many things that no other system does right now so there probably is no single apple’s to apple’s comparison.

While you do not need special internetcoins or fun buxx to use the internet (as it were), there is still a cost to someone to connect to the net.  So perhaps, the frictional differences between obtaining and securing an internet connection versus obtaining and securing a bitcoin at this time is probably something that should be highlighted more if the report is updated.

Wither Bitcoin?

For cryptocurrencies such as Bitcoin to do what it does best on its own terms, its competitive advantage lays with the native token and not representing real-world assets: its community needs to come to terms about what it is and is not good for.  Because of its inability to control off-chain assets its developers should stop promising that bitcoins — or metacoins and watermarked-coins that use Bitcoin as a transportation layer — as a panacea for managing off-chain assets, assets the network cannot control.  At most Bitcoin’s code base and node network operates as its own legal system for non-watermarked bitcoins.

Consequently, the advantage a cryptocurrency system has is endogenous enforcement of contractual terms — or as Taulant Ramabaja calls it: “fully blockchain endogenous state transition without any external dependencies.”  Or on-chain, dry code to dry code.

I wonder if someone in the future will call themselves a full “dry code” stack developer?

Consensus-as-a-service: a brief report on the emergence of permissioned, distributed ledger systems

Presentation covering Smart Contracts, Smart Property and Trustless Asset Management

Earlier tonight I gave a presentation at Hacker Dojo with the Ethereum project.  I would like to thank Chris Peel and Joel Dietz for organizing it.  Below is a video and accompanying slide deck.  In addition to the footnotes in the PPT, I recommend looking at the wiki on smart contracts and Nick Szabo’s writings (1 2 3).

Also, some quotes regarding synthetic assets in Szabos’ work:

Citation 1:  “Another area that might be considered in smart contract terms is synthetic assets[5]. These new securities are formed by combining securities (such as bonds) and derivatives (options and futures) in a wide variety of ways.”

Citation 2: “Creating synthetic assets or combinations that mimic the financial functionality of some other contract while avoiding its legal limitations”

Citation 3: “Reference to Perry H. Beaumont, Fixed Income Synthetic Assets”