Bitcoin Was Not The First Cryptocurrency

The first time a cryptographer designed a working digital payment system that did not require a bank, Ronald Reagan was president and the World Wide Web did not exist yet. The first time a digital currency processed two billion dollars in a year was 2006, two years before the Bitcoin whitepaper was published. The popular story of Bitcoin treats Satoshi Nakamoto as a singular inventor who arrived from nowhere with a complete design. The historical record tells a different story. Bitcoin was not the first attempt at decentralized digital cash. It was the integration of more than two decades of prior attempts.

The thesis is straightforward. Bitcoin was the first decentralized financial network to actually work at scale, and that is a real achievement. It was not the first attempt or the peak of decentralized technology. It was the moment twenty-seven years of prior work clicked into place. The lineage is the argument for why the next move is not "more Bitcoin" but the integration that comes after.

The story starts in a place that has nothing to do with money.

The Decentralized Network Was The Point Before Currency Was Even The Question

In the early 1960s, an engineer named Paul Baran at the RAND Corporation was given an unusual problem. The Air Force wanted to know whether a communications network could be designed to survive a nuclear attack. The existing telephone system was hierarchical: central switching offices that, if destroyed, would take down the whole network. Baran proposed something different. In reports published between 1960 and 1964, he described what he called a "distributed network," in which messages would be broken into small pieces, each piece routed independently across a mesh of nodes, and reassembled at the destination. No single node was critical. He called the routing technique "hot-potato routing." It would later be renamed packet switching.

The military mostly ignored Baran. His 1964 work was classified and shelved. But the idea did not die. It was rediscovered at the Advanced Research Projects Agency, where Donald Davies in the United Kingdom had independently arrived at the same conclusion. The two strands fed into a project called ARPANET. In late 1969, a UCLA team led by Leonard Kleinrock sent the first packet-switched message. Four nodes in the first year. Thirty-five by January 1973. The internet grew out of a deliberate architectural decision: do not put anything important in the center, because the center is what fails.

This is the inheritance everything else in this entry shares. The cypherpunks who later built digital cash were applying a principle the internet had already proven, to a domain the internet had not yet touched.

Two Decades Of Digital Money That Almost Worked

The first person to seriously propose that digital money could be a cryptographic primitive was David Chaum, then a graduate student at the University of California, Berkeley. His February 1981 paper in Communications of the ACM, titled "Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms," introduced the cryptographic scaffolding that all later digital currencies would use: pseudonymous identities tied to cryptographic key pairs. His 1982 Berkeley dissertation is now recognized as the first known proposal for a blockchain protocol, containing nearly every element Bitcoin would later combine, with one exception that would not be solved for another twenty-six years.

Chaum's 1983 paper "Blind Signatures for Untraceable Payments" was the first design for actual digital cash. In 1989, he founded DigiCash in Amsterdam to commercialize it. The product was called eCash, and it worked. The first electronic payment was sent in 1994. Mark Twain Bank integrated it. Deutsche Bank and Credit Suisse adopted it in Europe. Users could withdraw blinded digital coins from a bank and spend them anonymously at merchants, and the bank could verify the transaction without being able to link the withdrawal to the deposit. Mark Twain processed about twenty-nine thousand transactions before shutdown.

What killed DigiCash was a series of business failures that had nothing to do with the cryptography. Bill Gates approached Chaum about integrating eCash into every copy of Windows 95. Microsoft reportedly offered between $75 million and $100 million. Chaum refused, holding out for a per-copy licensing fee. Similar deals with Netscape and ING Bank collapsed under Chaum's terms. DigiCash filed for bankruptcy in 1998. Chaum left in 1999. The cryptography worked. The company did not.

In June 1996, three NSA researchers - Laurie Law, Susan Sabett, and Jerry Solinas - published a working paper titled "How To Make A Mint: The Cryptography of Anonymous Electronic Cash". The paper laid out the complete technical requirements for an anonymous digital cash system, twelve years before the Bitcoin whitepaper. The government had already mapped the design space. Deployment was left to private individuals.

Five months later, in November 1996, an oncologist named Douglas Jackson and an attorney named Barry Downey launched e-gold. Users opened accounts denominated in grams of physical gold and transferred ownership between accounts instantly. The gold sat in vaults. The transfers were digital. The system grew from one million accounts in 2003 to five million by 2009. At its peak in 2006, e-gold processed over two billion dollars per year, backed by approximately $85 million in physical gold, about 3.8 tonnes. By transaction volume, it was the first cryptocurrency to achieve real scale. It was also centralized. Gold and Silver Reserve Inc. was a single point of legal failure. In 2007, the Department of Justice indicted Jackson and Downey for money laundering. By 2009 the system had been shut down. The same year Bitcoin's first block was mined.

The Cypherpunks Assembled The Missing Pieces

While e-gold was scaling toward shutdown, a parallel conversation was happening on a mailing list. The cypherpunk movement, organized in the late 1980s around the principle that strong cryptography was a tool for individual liberty, had been working on the unsolved problem Chaum's dissertation identified twenty-six years earlier: how to maintain a shared, trustworthy ledger of who owns what, without a trusted central party.

In May 1997, a British cryptographer named Adam Back posted to the cypherpunk mailing list a proposal for an anti-spam system called Hashcash. To send an email, a sender would have to perform a small amount of computational work, producing a hash that satisfied a specific mathematical condition. Cheap for legitimate senders, expensive for spammers. The underlying concept had been described five years earlier by Cynthia Dwork and Moni Naor in a 1992 paper. Back's implementation was the one that took root. He would later become the CEO of Blockstream.

In November 1998, a computer engineer named Wei Dai posted to the same cypherpunk mailing list a proposal called b-money. It was the closest pre-Bitcoin design to what Bitcoin would actually become. Dai described "an anonymous, distributed electronic cash system" in which participants maintained a shared ledger, contracts were enforced through cryptographic signatures, and new money was created through computational work. Neither of the two protocols he proposed was implemented. Dai later said he had "grown somewhat disillusioned with crypto-anarchy" by the time he finished writing it. He went on to work for Microsoft. In 2008, Satoshi Nakamoto would cite b-money as the first reference in the Bitcoin whitepaper.

The same year, the cryptographer Nick Szabo designed a system he called Bit Gold. Szabo had already coined the term "smart contracts" in a 1994 paper. Bit Gold proposed using a chain of computational puzzles, where each puzzle's solution became the input to the next, producing a chain of unforgeable, time-stamped, scarce digital tokens. The structural similarity to Bitcoin's blockchain is so close that Szabo has been publicly speculated to be Satoshi Nakamoto, an attribution he has consistently denied. He published the full Bit Gold design in December 2005. It was never implemented.

The most direct predecessor to Bitcoin was built by Hal Finney, an early PGP contributor. On August 15, 2004, Finney posted to the cypherpunk mailing list announcing a working server called RPOW, Reusable Proofs of Work. It combined Hashcash with Szabo's idea of using proof-of-work tokens as digital scarcity. A user could submit a Hashcash token and receive in return a transferable RSA-signed RPOW token, which could be passed from person to person, with the server issuing a new token to replace each spent one. The system solved the double-spend problem by running on an IBM 4758 Cryptographic Coprocessor, a tamper-proof hardware module validated to FIPS-140 level four. Through remote attestation, anyone could verify what software was running on the chip. RPOW worked. The only thing it required users to trust was the IBM hardware.

That residual trust requirement was the one piece nobody had solved. Every previous design had ended with a trusted party of some kind, a bank, a custodian, or a hardware vendor. The remaining problem was how to maintain a consistent shared ledger across mutually suspicious parties without any trusted party at all.

On October 31, 2008, two weeks after the Emergency Economic Stabilization Act authorized a seven hundred billion dollar bailout of the United States banking system, an anonymous author using the pseudonym Satoshi Nakamoto posted to a small cryptography mailing list at metzdowd.com with the subject line "Bitcoin P2P e-cash paper." The attached whitepaper was nine pages. It cited Wei Dai's b-money as reference number one. It cited Hashcash, Merkle trees, and the Stornetta-Haber timestamping work from 1991. It did not cite Bit Gold, though the resemblance is unmistakable. The whitepaper synthesized every component developed across twenty-seven years of prior research, removed the last trusted-party requirement that had killed RPOW, and added an automatic difficulty adjustment that made the proof-of-work race self-regulating. Arvind Narayanan and Jeremy Clark, in their 2017 Communications of the ACM retrospective "Bitcoin's Academic Pedigree," put it precisely: "the concept of cryptocurrencies is built from forgotten ideas in research literature."

The genesis block was mined on January 3, 2009. The first transaction, ten bitcoin from Satoshi to Hal Finney, was sent on January 12, 2009 in block 170. Finney had spent twenty years preparing the conceptual ground for the thing he then helped launch. He died of ALS in 2014.

This is where the lineage that begins with Paul Baran in 1964 lands. A decentralized network, applied to the problem of money, by an integrator standing on twenty-seven years of prior work. Bitcoin was not the invention. Bitcoin was the moment it all clicked. The most important and least credited fact about its design is that proof-of-work, the consensus mechanism that secures Bitcoin, has well-documented limitations that the next generation of decentralized networks would spend the following fifteen years trying to solve. Ethereum and Solana are not failed Bitcoins. They are continued integrations. That is the next chapter.