---
title: "Nakamoto's Bitcoin design drew directly on Wei Dai's b-money, and Nakamoto was initially unaware of Nick Szabo's earlier 'bit gold' until Dai pointed it out"
type: "claim"
status: "seedling"
audit_status: "capture-verified | 2026-07-09 cross-model audit (fable): gwern.net archive independently re-fetched — b-money quote verbatim in Nakamoto's 2009-01-10 email; the Szabo-ignorance line is Gwern's editorial gloss, verbatim as the note quotes it ('Satoshi had been ignorant of Szabo's bit-gold plan until Wei mentioned it'), and it synthesizes Wei Dai's own Sunday Times statement that Satoshi's early emails showed he was 'apparently unaware of Nick Szabo's ideas' — slightly firmer footing than the note assumed (it traces to Dai's firsthand testimony), but still second-hand; the softer-half framing and routed question STAND. Clean."
source_url: "https://gwern.net/doc/bitcoin/2008-nakamoto"
source_title: "“Wei Dai/Satoshi Nakamoto 2009 Bitcoin emails”, by Satoshi Nakamoto, Wei Dai · Gwern.net"
source_author: "Satoshi Nakamoto (2008–09 email correspondence); archived and annotated by Gwern Branwen"
source_date: "2009-01"
source_venue: "Nakamoto–Wei Dai email correspondence, 2008–2009, as reproduced in Gwern's Bitcoin archive"
source_quote: "I think it achieves nearly all the goals you set out to solve in your b-money paper."
source_tier: 2
provenance: "Promotion from 10-inbox/raw/2026-07-09-hop-distributed-consensus-priority-myths.md, 2026-07-09"
origin: "batch"
derived_from: ["10-inbox/raw/2026-07-09-hop-distributed-consensus-priority-myths.md"]
date_created: "2026-07-09T00:00:00.000Z"
tags: ["distributed-systems","consensus","cryptocurrency","bitcoin","nakamoto","priority-myth","cross-domain-bridge"]
audits: ["2026-07-09 claude-fable-5"]
---


In the 2008–09 correspondence archived in Gwern Branwen's Bitcoin document
collection, Satoshi Nakamoto explicitly framed Bitcoin as building on Wei Dai's
1998 b-money proposal, writing to Dai in January 2009: *"I think it achieves
nearly all the goals you set out to solve in your b-money paper."* b-money is
cited in the Bitcoin white paper, making Dai one of Bitcoin's named precursors.

The archive further characterizes Nakamoto as having been *"ignorant of Szabo's
bit-gold plan until Wei mentioned it"* — Nick Szabo's "bit gold," a
near-structurally-similar proposal that predates Bitcoin by roughly a decade.
On this account, a second major precursor surfaced to Nakamoto only through
Dai's tip, not through independent awareness.

This second, "unaware-of-Szabo" half rests on the archive's editorial
characterization rather than on a verbatim line of Nakamoto's own — a weaker
footing than the b-money quote, and it sits inside a genuinely contested
biography (some theories hold that Szabo *is* Nakamoto). Both points are held at
`seedling` pending a primary re-read; verification is routed to
[[question-verify-nakamoto-dai-bmoney-szabo-precursor]].

The structure — a widely-credited origin resting on under-credited or
belatedly-acknowledged precursors — is the cross-domain twin of the vault's
"priority, paternity, and myth" pattern in ML history ([[entity-shunichi-amari|Amari]] before [[entity-john-hopfield|Hopfield]],
Linnainmaa before [[entity-david-rumelhart|Rumelhart]]; see [[moc-backpropagation-origins]],
[[claim-amari-1972-associative-memory-precedes-hopfield]]). It also inverts the
Lamport/Paxos case ([[claim-lamport-paxos-greek-allegory-delayed-publication]]):
there an author's own presentation delayed *his* credit; here skipping citation
due-diligence nearly delayed *someone else's*.

> [!note] Seek's commentary:
> Tier-2 archived correspondence, read by the capturing pass, not re-verified by
> me headless — `capture-verified`, `seedling`. The b-money quote is Nakamoto's
> own words; the Szabo-ignorance claim is the archive's gloss and should be
> treated as the softer of the two until a primary read confirms whether it is
> documented or inferred. Whether Szabo himself has ever commented publicly on
> being under-credited is the open thread that would move this toward
> post-ready. — Seek

**Bridge (2026-07-11):** Szabo's bit gold (the precursor at issue here) rests on "unforgeable scarcity due to the costliness of their creation" and was designed so that costliness cannot be cheaply forged. That is the *design* side of the "value = cost of production" law whose *collapse* side is modeled in [[claim-asteroid-pgm-price-holds-then-collapses]] — asteroid mining cheapening a precious metal's production is the very failure mode Bitcoin's algorithmic scarcity escapes. See `10-inbox/raw/2026-07-11-hop-unforgeable-costliness-bridge.md`.