6.1 The Discovery of Digital Scarcity
With Bitcoin, a new kind of commodity has been discovered… a kind of digital commodity, generated by computers and partly made for computers. Mankind has a history of significant inventions. In history books written in the future, Bitcoin will be listed as one of these.
Prof. Dr. Philipp Sander
6.1.0 Scarcity in Economics
Within the sphere of economics, it is well understood that scarcity is a key principle that drives value. Goods and services that experience significant demand become more valuable if supply is limited to the extent that demand cannot be met easily. Furthermore, scarcity fuels increased competition and is a driver of price discovery in the market. In a market of free, fair and open competition, prices should settle at the point where supply and demand are met.
Resources that experience significant demand can be considered more valuable if they are finite or more challenging to acquire. This can spur increased demand for that resource as market participants compete to secure access to it. This dynamic can be observed with natural resources such as precious metals, oil or so-called ‘soft commodities’ such as food stuffs. Scarcity, therefore, underpins economic decision-making, resource allocation and opportunity cost. In a world of unlimited resources, everything would be equally accessible and of very low value. By contrast, scarcity instils value and promotes trade, investment and innovation as it compels societies to manage limited resources effectively.
6.1.1 The Digital Scarcity Challenge
The challenge around digital scarcity lies in the ease with which digital information can be copied and distributed. Digital information is inherently more difficult to secure than physical information because, unlike physical goods - some of
which naturally possess scarcity due to material constraints - digital items such as music files, documents or images can be duplicated infinitely at virtually no cost.
Traditionally, the replicability of digital data has meant that these assets could not hold a similar economic value to physical ones because they lacked any form of enforceable scarcity. For digital money, this is particularly problematic and is characterised as the ‘double-spend’ problem, where a single digital unit (e.g. a token or currency) could be copied and spent multiple times, thereby devaluing it. If double-spending a currency is possible, it devalues it by making it indistinguishable from counterfeit or fraudulent funds.
Traditionally, centralised financial institutions like banks mitigate this risk by maintaining a ledger that verifies each transaction and deducts balances accordingly, ensuring that once money is spent, it cannot be reused by the same account holder. However, this approach requires a trusted central authority or ‘oracle’ to manage and verify transactions, which imposes dependency and a single point of control. Having a centralised oracle of information leaves digital assets vulnerable to manipulation and censorship.
For a decentralised, trust-minimised system like Bitcoin, where no central authority exists to oversee transactions, preventing double-spending is a monumental challenge. Without a mechanism to ensure the uniqueness of each transaction, Bitcoin would be open to exploitation, making it impractical as a store of value and a reliable medium of exchange. Bitcoin solves the double-spend problem through a decentralised ledger, where transactions are confirmed by thousands of network participants simultaneously. This mechanism allows Bitcoin to maintain an immutable record of every transaction, ensuring that each coin can be spent only once.
This solution generates digital scarcity without relying on central control. Bitcoin introduces the first successful solution to digital scarcity, paving the way for a trust-minimised, scarce digital asset ecosystem in a way previously thought impossible.
6.1.2 Enforcing Digital Scarcity with Bitcoin
We propose a solution to the double-spending problem using a peer-to-peer distributed timestamp server to generate computational proof of the chronological order of transactions. The system is secure as long as honest nodes collectively control more CPU power than any cooperating group of attacker nodes.
Satoshi Nakamoto
Satoshi Nakamoto created Bitcoin as an engineering solution to the problems associated with fiat money. However, that solution required Satoshi to discover a way to enforce absolute digital scarcity. To achieve this, Satoshi developed an open-source communication protocol that runs on a decentralised network of computers or nodes. Each of these nodes holds a locally-verifiable copy of an immutable ledger, the so-called blockchain or timechain. The Bitcoin protocol defines the rules and the decentralised network independently verifies transactions, adhering to the same rules without requiring a central authority.
Bitcoin’s scarcity contributes to its role as a store of value. Much like gold, Bitcoin is valuable not only because of its limited supply but also because of the effort required to ‘mine’ or produce new coins. Bitcoin mining (the process which maintains the ledger and issues new coins) is a costly, energy-intensive process that mirrors the physical act of extracting minerals from the earth. This digital ‘proof-of-work’ enforces a production constraint that aligns Bitcoin with tangible commodities, giving it properties of durability and verifiability that traditional digital goods lack. The built-in difficulty and decreasing rate of new coin issuance through periodic ‘halvings’ create an economic structure where Bitcoin’s supply becomes increasingly scarce over time, increasing its appeal as a long-term store of value.
How is digital scarcity enforced?
Bitcoin’s solution to the double-spend problem lies in its use of a decentralised and publicly-viewable ledger. The Bitcoin ledger can be thought of as an immutable database that records every transaction in a sequential chain of timestamped batches, called blocks. Each block is strictly chronological and contains transactions that have been verified and accepted by the network’s participants. Each block is connected to the previous one, creating a permanent record that is distributed across thousands of nodes worldwide. By storing and sharing this ledger across a decentralised network, Bitcoin eliminates the need for a central authority to confirm transactions. When a Bitcoin transaction occurs, nodes across the network validate it independently, ensuring that each is only spent once. This shared ledger also makes it extremely difficult for attackers to hack the network or alter past transactions, as any change would require approval from the majority of network participants.
Bitcoin's Proof-of-Work (PoW) mechanism further strengthens its double-spend protection by requiring miners to solve a cryptographic problem to have permission to validate new transactions and create a new block. This process, known as mining, demands computational power and adds a level of difficulty and cost to altering the ledger. Each block added to the ledger must contain a cryptographic link to the previous block, which solidifies the chain’s integrity and prevents tampering.
A node’s role is to store the most current copy of the ledger, which contains a full history of transactions. Nodes keep the miners ‘honest’ since they verify that no double-spend has occurred and, importantly, that all coins have been created in accordance with Bitcoin’s emission schedule. Any Bitcoin user can run a node and verify their ownership of coins without the need to trust a third-party. There is no need for authorities to resolve disputes in Bitcoin because any transaction included in a block is objectively valid.
How could an attacker control the Bitcoin network?
If an attacker wanted to alter a past transaction to succeed in a double-spend attack, they would need to redo the Proof-of-Work for that block and every subsequent block, competing against the combined computational power of the entire network. This security mechanism ensures that, if someone attempted a double-spend, they would need to control over 50% of the network’s mining power to succeed. This is known as a 51% attack.
In Bitcoin’s early years, when it was possible for single participants to create or mine new blocks using generally-available computing hardware, it was at least theoretically possible to deploy enough computing power to succeed in a 51% attack. Today, the combined computing power of the Proof-of-Work network exceeds 700 ExaHash/s. This means that, in aggregate, mining computers are calculating more than 700 quintillion hashes (cryptographic computations) every second. We have reached a point where the immense cost and coordination required to rewrite the ledger and succeed in a 51% attack make double-spending infeasible in practice.
Confirmations and Reorganisations
Another layer of protection (which is sometimes overlooked) comes from Bitcoin’s transaction confirmation process. When a transaction is first broadcast, it is considered unconfirmed and collected in the ‘mempool’ while it awaits inclusion in a block and validation by miners. Once a transaction is added to a block it is considered ‘confirmed’. Each block added after that is counted as a further confirmation for the transaction. While a transaction is considered official once it has a single confirmation, it is not considered final until further confirmations are added.
For full security, Bitcoin users often wait for multiple confirmations (typically six), as each additional block added to the blockchain further secures the transaction, dramatically reducing the likelihood of a successful double-spend attempt. This confirmation process establishes a window of time during which transactions are finalised.
Why wait for six confirmations?
Bitcoin users wait for further confirmations because it is possible that the most recent block of transactions could be removed from the chain of blocks, if it is no longer part of the longest chain. It is important to note that mining is a competition between very large pools of computing power. Therefore, it is possible that two competing miners find a valid cryptographic solution and separate blocks are added to the chain at almost the same time. If that happens, the chain is essentially split. Miners will continue to attempt to add blocks to each branch in the chain. However, once the next block is mined, the longest chain1 (defined as the chain that has the greatest proof-of-work invested in it) is the one that prevails and the block on the shorter chain is ‘orphaned’ and is invalid. All transactions in the orphaned block are returned to the mempool for inclusion in a later valid block. This process is called a reorganisation or simply, a ‘reorg’.
A bad actor, attempting a double-spend, must gain control of the network for long enough to ‘reorg’ the chain. As we have seen above, gaining overall control requires an enormous amount of computing power, but what if a large mining operation - that hypothetically controls just over a third of all the computing power on the network - attempts a double-spend of coins?
Let’s step through an example:
Let’s say, for example, the total mining power of the Bitcoin network is 550 ExaHash/s. Rogue Inc, which controls 200 ExaHash/s, makes a large real estate purchase and intends to pay in Bitcoin. However, Rogue also plans to attempt a double-spend of the same coins. The seller tells Rogue that it will wait for six confirmations before handing over title deeds. To pull off a double-spend attack, Rogue must build an alternative branch in the chain in secret, mining a longer chain containing the double-spend transaction. Once the seller has seen six confirmations containing their transaction and handed over the asset, Rogue must then upload all the blocks it mined in a new branch making that the longest chain. How possible is this?
At any moment, the probability that Rogue mines the next block is 200/550 = 0.36. Even if Rogue is the largest mining pool, the probability that honest miners find the next block is 1 - 0.36 = 0.64. Blocks should be mined much faster on the honest chain. But let’s say Rogue gets lucky, mines a block and keeps it secret. It then attempts to mine another on this secret branch. However, the honest chain then mines a block and gets ahead by mining another, before Rogue mines its second block.
Rogue then gives up. Why?
| Catch up blocks | 1% | 10% | 36% (Rogue) | 51% |
|---|---|---|---|---|
| 1 | 0.010101 | 0.111111 | 0.562500 | 1.0 |
| 2 | 0.010102 | 0.012346 | 0.316406 | 1.0 |
| 3 | 1.0e-06 | 0.001372 | 0.177919 | 1.0 |
| 4 | 1.0e-08 | 0.000152 | 0.100113 | 1.0 |
| 5 | 1.0e-10 | 0.000017 | 0.056314 | 1.0 |
| 6 | 1.0e-12 | 1.9e-06 | 0.031676 | 1.0 |
Source: Based on a table in Grokking Bitcoin by Kalle Rosenbaum
Rogue realises it doesn't have enough hash rate to achieve the double spend, despite controlling 36% of the hash rate of the Bitcoin. To be successful it must mine four further blocks to get ahead of the honest chain. Despite its vast computing power and controlling 36% of the network, Rogue’s chances of success are just 0.100113.
Game Theory Kicks In
Rogue’s odds of success are terrible, but it gets worse. For every minute it keeps trying, Rogue is consuming an enormous amount of electricity. This will have all been in vain. Furthermore, for each block it fails to mine honestly, Rogue forfeits the block reward, currently 3.125 coins per block, valued in excess of $300k currently.
The key reason for Rogue’s failure was that the seller of the real estate demanded six confirmations. The more confirmations needed, the harder it is for dishonest miners to build alternative chains of blocks. Indeed, for a very large transaction, a seller may demand more confirmations. For instance, ten confirmations (which should take around 100 minutes) would lower Rouge’s chances of success to just 0.003.
In this way, the game theory around mining ensures that all are incentivised to act honestly and not waste computing resources or to forfeit block rewards. Moreover, it is in all miners' interests that the Bitcoin network is secure and reliable. This ensures their enormous investment in computing power is protected. If the network is successfully attacked, the market value of coins will fall dramatically as confidence in the network will be diminished.
6.1.3 Is Mining Centralisation a Threat?
As seen in the table above, mining centralisation can pose a potential threat to Bitcoin’s double-spend protection, as it increases the likelihood of a 51% attack - a scenario in which a single miner or group of miners controls over half of the network’s computational power. If this were to occur, the controlling entity could theoretically alter recent transactions or attempt a double-spend by rewriting the ledger, allowing it to spend the same coins more than once.
Such a situation undermines the integrity of the Bitcoin network by granting disproportionate influence over transaction validation to a few actors. However, while theoretically possible, executing a 51% attack would still be highly complex and costly, requiring immense computational resources, electricity, and coordination, which would likely outweigh the potential benefits of attempting a double-spend.
There are safeguards that help limit the risks of mining centralisation. Mining pools, for example, enable smaller miners to combine resources and share block rewards, reducing the dominance of any single entity. While this is a useful way for small miners to participate in the network, there is a risk that the entity controlling the pool may misbehave and attempt to attack the network. However, the transparency of Bitcoin’s ledger also means that any concentration of mining power is visible, alerting the community to potential risks and enabling countermeasures. Miners are very aware that any attack on the Bitcoin network risks seriously damaging its value proposition, hence it is very straightforward for small miners to switch to a new pool to avoid their mining power being used in a nefarious manner. While the risk is not zero, the open and distributed nature of Bitcoin’s ecosystem, combined with the high cost of an attack, makes mining centralisation more of a theoretical threat than an imminent one, since maintaining such control for extended periods would be financially unviable for any attacker.
6.1.4 The Wider Impact of Digital Scarcity
Bitcoin has transformed how we think about scarcity in the digital realm. Because digital goods - such as software, music files, e-books, and online content - possess characteristics that set them apart from physical goods, they can be reproduced at negligible cost and shared instantly. Unlike physical items, which are bound by material constraints like production costs and storage limitations, digital goods exist as data that can be duplicated infinitely with no degradation in quality. This means that while physical goods are inherently scarce due to these material constraints, digital goods have been traditionally abundant, lacking any built-in mechanisms to limit supply.
Importantly, digital goods are non-rivalrous. This means that one person’s consumption of a digital good does not diminish the availability of that good for others. For instance, when a song is downloaded, it can be copied and distributed an unlimited number of times without losing utility. Historically, this abundance poses a challenge for creating value, as the traditional economic model of supply and demand becomes distorted when the supply is, at least theoretically, unlimited. In response to this, digital rights management (DRM) and other artificial scarcity measures have tried to restrict access. However, these mechanisms can be bypassed and outsource trust to centralised authorities. Bitcoin’s innovation lies in how it tackles this problem natively, making it the first digital asset to embed scarcity through decentralised technology without relying on these traditional limitations.
Bitcoin plays a transformative role in establishing digital scarcity by introducing a protocol that enforces a finite supply. A limit of 21 million coins is hardcoded into the protocol and this limit cannot be changed without consensus of the network. ie. all the thousands of participants spread globally that run Bitcoin nodes. In this way, Bitcoin has created an asset that mimics the finite nature of physical commodities, such as gold, while existing entirely in the digital realm. The supply cap is fundamental to Bitcoin’s value proposition and is sustained by a combination of cryptography, consensus mechanisms, and transparent, open-source code. This ensures that all participants on the network adhere to the same rules as well as being driven by the key economic incentive to ensure that the supply of coins is absolutely and provably finite.
By solving the double-spend problem, Bitcoin prevents inflation or duplication of the asset, a challenge that has plagued previous digital money experiments. Within Bitcoin, no single authority controls the supply, making it immune to central manipulation of the kind seen within the fiat monetary system, such as arbitrary currency printing or debasement. This innovation allows Bitcoin to serve as a store of value and a hedge against inflation, enabling it to hold a unique position akin to ‘digital gold’ - a scarce digital resource with verifiable value.
6.1.5 Conclusion
In conclusion, it is becoming more widely understood that Bitcoin’s innovation of digital scarcity has redefined the concept of money. However, it is sometimes overlooked that Bitcoin also transformed the digital landscape by solving the long-standing problem of creating scarcity in an inherently abundant digital world. Bitcoin has effectively introduced a new category of digital asset that mirrors the qualities of physical commodities.
This breakthrough demonstrates that a decentralised system can establish scarcity, immutability and value independently of any central authority. Furthermore, it may have uses beyond money since it has inspired an entire field of research and development around this technology.
Looking ahead, Bitcoin’s model of digital scarcity is shaping the future of money and value storage. As inflation concerns and questions around the management of fiat currency become more widely recognised, Bitcoin’s fixed supply makes it increasingly attractive as a hedge against traditional financial instability.
Ultimately, Bitcoin’s discovery of digital scarcity may mark the beginning of a paradigm shift, where digital assets with recognised scarcity and verifiable trust gain recognition as valuable components of the modern economy, establishing a foundation for the future of decentralised finance and digital ownership. This has significant implications for the field of economics - Bitcoin has provided the model for how scarcity and value can exist in a digital form.
Beyond digital scarcity, Bitcoin is also the first example of absolute scarcity, the only liquid commodity (digital or physical) with a set fixed quantity that cannot conceivably be increased. Until the invention of Bitcoin, scarcity was always relative, never absolute.
Saifedean Ammous
Notes
- The longest chain is accepted by Bitcoin nodes as the most valid version of the ledger as is defined as the chain that took the most effort (or greatest proof-of-work) to build. More information here: https://learnmeabitcoin.com/technical/blockchain/longest-chain/