Crypto 101 · Research papers
Bitcoin Tokenomics: A Fixed Supply Enforced by Proof of Work
Abstract
Bitcoin's monetary policy is not stored in a central bank; it is a consensus rule that every full node enforces. The block subsidy began at 50 coins, halves every 210,000 blocks and converges on a total just under 21 million. We diagram the block structure and the network, tabulate the issuance schedule, and discuss the open question the design postpones: how security is paid for once the subsidy has largely disappeared.
Keywords: Bitcoin, halving, 21 million, block subsidy, difficulty adjustment, proof of work
1. Design intent
Nakamoto described the steady addition of a constant amount of new coins as analogous to gold miners expending resources to add gold to circulation, and noted that once a predetermined number of coins have entered circulation the incentive can transition entirely to transaction fees and be completely inflation free [1]. Bitcoin therefore pairs a disinflationary issuance schedule with a security model paid for by proof of work, a cost-bearing puzzle in the tradition of Hashcash [2] and of earlier proposals for unforgeably costly bits [3].
2. Structure: blocks linked by hashes
Each block header contains, among other fields, the hash of the previous header, a nonce and a Merkle root summarising the block's transactions. A header is valid only if its double SHA-256 hash is below the current target [4]. Finding such a nonce is expensive; checking one is cheap. That asymmetry is what lets thousands of independent nodes agree on one history without trusting each other.
3. Structure: the network
In the protocol as described by Nakamoto, new transactions are broadcast to all nodes; each node collects them into a block and works on a proof of work; the finder broadcasts the block; nodes accept it only if its transactions are valid and not already spent, and express acceptance by building the next block on top of it [1]. Nodes treat the chain with the most accumulated work as the true one.
4. Issuance schedule
The consensus function that computes the subsidy starts from 50 coins and right-shifts it by one bit for every 210,000 blocks elapsed, returning zero after 64 halvings [5]. The difficulty target is retargeted every 2,016 blocks so that blocks continue to arrive about every ten minutes regardless of how much hardware is mining [6].
Table 1. Bitcoin issuance by epoch (approximate calendar years).
| Epoch | Approx. years | Subsidy (BTC) | Issued in epoch | Cumulative |
|---|---|---|---|---|
| 1 | 2009-2012 | 50 | 10,500,000 | 10,500,000 |
| 2 | 2012-2016 | 25 | 5,250,000 | 15,750,000 |
| 3 | 2016-2020 | 12.5 | 2,625,000 | 18,375,000 |
| 4 | 2020-2024 | 6.25 | 1,312,500 | 19,687,500 |
| 5 | 2024-2028 | 3.125 | 656,250 | 20,343,750 |
| 6 | 2028-2032 | 1.5625 | 328,125 | 20,671,875 |
The geometric series converges: the sum over all epochs is just under 21 million, and integer rounding in satoshis makes the exact figure 20,999,999.9769 BTC [7].
5. A supply-and-demand reading
The supply of new bitcoin is inelastic with respect to price: a higher price does not create more coins, it only changes how much mining hardware competes for the fixed subsidy. That makes the demand side carry all the adjustment. Predictability is the asset's main economic feature: anyone can compute how many coins will exist at a future block height using public code.
6. What the design postpones
The subsidy currently pays for most of the network's security. As it shrinks, security must be funded by transaction fees or the incentive weakens [1]. Whether a fee market can sustain the same security budget is an empirical question the protocol leaves to users and miners. It is one reason other proof-of-work networks made different issuance choices, examined in the pages on Litecoin, Dogecoin and Monero.
References
- Nakamoto, S. (2008). Bitcoin: A Peer-to-Peer Electronic Cash System. Whitepaper. https://bitcoin.org/bitcoin.pdf
- Back, A. (2002). Hashcash: A Denial of Service Counter-Measure. Technical report; the proof-of-work construction Bitcoin builds on. http://www.hashcash.org/papers/hashcash.pdf
- Szabo, N. (2005). Bit gold. Essay proposing unforgeably costly bits as a basis for digital scarcity. https://nakamotoinstitute.org/library/bit-gold/
- Bitcoin Wiki contributors (2010). Block hashing algorithm. Bitcoin Wiki: the block header is hashed with SHA-256 applied twice and compared with the target. https://en.bitcoin.it/wiki/Block_hashing_algorithm
- Bitcoin Core developers (2009). GetBlockSubsidy (src/validation.cpp). Bitcoin Core source code: the consensus rule for the block subsidy (50 coins, halved every nSubsidyHalvingInterval blocks). https://github.com/bitcoin/bitcoin/blob/master/src/validation.cpp
- Bitcoin Wiki contributors (2010). Difficulty. Bitcoin Wiki: the target is retargeted every 2,016 blocks to hold the average block interval near ten minutes. https://en.bitcoin.it/wiki/Difficulty
- Bitcoin Wiki contributors (2010). Controlled supply. Bitcoin Wiki: derivation of the 21 million cap from the halving schedule. https://en.bitcoin.it/wiki/Controlled_supply
Common questions
How many bitcoin will ever exist?
Just under 21 million. Because amounts are stored in whole satoshis, the exact limit is 20,999,999.9769 BTC according to the Bitcoin Wiki's derivation of the schedule.
What happens after the last halving?
The subsidy reaches zero and miners are paid only transaction fees. Nakamoto's paper anticipated this transition; whether fees alone will suffice for security is an open economic question.
General education, not financial, tax or legal advice. Figures are schematic. Protocol parameters are cited to primary sources and can change; verify against the linked source before relying on them.