<p>Ecash, created by David Chaum, and introduced in 1993, was a cryptographic bearer certificate, though the underlying instrument was national currency (e.g. dollars). It required a central party to keep track of spends to avoid double spends, unlike Bitcoin's distributed peer to peer ledger. It existed until the bankruptcy of its issuer, Digicash, in 1998.</p>

<p>Many of the themes that surround discussion about Bitcoin were forwarded by Chaum at the time, e.g.</p>

<p><em>"The choice between keeping information in the hands of individuals or of organizations is being made each time any government or business decides to automate another set of transactions. In one direction lies unprecedented scrutiny and control of people's lives, in the other, secure parity between individuals and organizations. The shape of society in the next century may depend on which approach predominates."</em> <a href="http://waste.informatik.hu-berlin.de/grassmuck/Texts/ecash.e.html">source</a></p>

<p>Bitcoin is the first cryptocurrency, in that it is itself a currency, not a cryptographic derivative of a non-cryptographic currency.</p>

CC BY-SA 3.0
2011-09-09T07:35:10.197Z
2011-09-10T03:56:45.717Z
2011-09-10T03:56:45.717Z
Amin
<p>Satoshi Nakamoto mentioned Wei Dai's "b-money" and Nick Szabo's "Bit gold", in addition to David Chaum's "digicash" in early discussions of Bitcoin. The latter was centralized, but had strong privacy properties and was very widely cited, researched, and discussed at the time.</p>

CC BY-SA 3.0
2014-09-03T11:43:43.007Z
Where did he mentioned Bit gold? Reference please.
Luca Matteis
CC BY-SA 3.0
2014-10-23T21:19:10.457Z
According to the [emails between Dai and Nakamoto](http://www.gwern.net/docs/2008-nakamoto), Nakamoto was not aware of Szabo's work.
Murch
CC BY-SA 3.0
2011-09-19T03:10:56.950Z
2011-09-19T03:10:56.950Z
Zooko
<p>Hal Finney created RPOWs. This is probably the closest predecessor to Bitcoin, because it was actually developed and usable (not just a proposal). RPOWs are "reusable proofs of work". Created by solving hard hashcash puzzles, they are then traded by interacting with a database running inside an IBM cryptocard. It has the ability to prove what it is executing to remote users. Instead of trusting a data structure created by a p2p network, you trusted the secure hardware.</p>

CC BY-SA 3.0
2011-09-18T12:29:21.940Z
2011-09-18T12:29:21.940Z
Mike Hearn
<p>I think the major new idea is using "proof-of-work" to get rid of the need for a trusted central "timestamping" authority that would otherwise be necessary to prevent double-spending.</p>

<p><a href="http://www.links.org/?p=1175" rel="nofollow">The question is</a> if that actually works and/or is worth the enormous energy cost. A similar idea was floated once to prevent email spam, but unfortunately email spammers are exactly the people who have lots of cheap (for them) computing resources in the form of bot-nets they can put to "work".</p>

CC BY-SA 3.0
2011-09-10T00:00:16.903Z
Do you have a proposal for a way to do it "more cheaply"?
lemonginger
CC BY-SA 3.0
2011-09-11T07:17:08.157Z
@lemonginger Thilo doesn't have to provide a better alternative in order to point out the weakness with a current proposal. If you can have proof-of-work systems that do some useful work apart from simply verifying transactions is asked [here](http://bitcoin.stackexchange.com/q/331/46)
Artem Kaznatcheev
CC BY-SA 3.0
2011-09-13T00:16:05.530Z
@lemonginger: if one could agree to a quorum of trusted miners, say ten or a hundred, then they could sign off on the blocks by majority, no need for proof-of-work. Of course, you'd need to trust the miners (they could do what someone now can do who was control of the majority of hash-power), but their potential for abuse would still be limited by what miners can do (in particular they cannot increase the coin supply, or spend other people's money). Trust in them could be decided (and revoked) by every participant in the system. You'd just need to find at least one you trust.
Thilo
CC BY-SA 3.0
2012-02-17T19:36:29.640Z
It says "In God we trust" on our money, because there is no man (or woman) you can trust.
shoeless joe
CC BY-SA 3.0
2011-09-09T07:07:16.290Z
2011-09-09T07:07:16.290Z
Thilo
<p>The closest predecessor to Bitcoin is generally agreed to be Wei Dei's <a href="http://www.weidai.com/bmoney.txt">b-money</a> proposal.</p>

<p>The proposal had a lot of holes. For example, it assumed that money could be created simply by solving hard computational problems. But it contained no mechanism to control currency inflation, so currency would inflate as computing power increased.</p>

<p>He actually offered a way around this, auctioning off the currency. But this still creates huge problems without a centralized authority -- who confirms the bids were paid and issues the currency? On what authority?</p>

<p>It also hand-waves over major issues. It requires servers to be partially trusted and argued that to be a server, you could be required to deposit some money in a fund that would be debited in the event misconduct was discovered. But who would debit the account? And who would get credited? And by what authority would they do this?</p>

<p>But this got the ball rolling on the idea of a completely decentralized crypto-currency. The amazing thing about Bitcoin is that it solved all the remaining problems at once.</p>

CC BY-SA 3.0
2011-09-09T08:29:21.170Z
2011-09-09T08:29:21.170Z
David Schwartz
<p>Although Bitcoin is certainly making strides as the first <a href="http://en.wikipedia.org/wiki/Cryptocurrency">cryptocurrency</a> to enter (comparatively) widespread use, cryptocurrency has long been a topic of discussion in <a href="http://en.wikipedia.org/wiki/Cryptonomicon">fiction</a> and <a href="http://unenumerated.blogspot.com/2005/12/bit-gold.html">academia</a>.  What cryptocurrency systems were in existence prior to Bitcoin, and in what specific respects do they differ from it?</p>

<currencies><history><academic-research>
What cryptocurrency systems predate Bitcoin, and how do they differ from it?
eMansipater
# What cryptocurrency systems predate Bitcoin, and how do they differ from it?

(Asked by: username_0 on 2011-09-09)

Although Bitcoin is certainly making strides as the first [cryptocurrency](http://en.wikipedia.org/wiki/Cryptocurrency) to enter (comparatively) widespread use, cryptocurrency has long been a topic of discussion in [fiction](http://en.wikipedia.org/wiki/Cryptonomicon) and [academia](http://unenumerated.blogspot.com/2005/12/bit-gold.html). What cryptocurrency systems were in existence prior to Bitcoin, and in what specific respects do they differ from it?

**Tags:** currencies, history, academic-research


---

## 5 answers

### Answer by username_10 on 2011-09-09. Score: 14 | Accepted answer

The closest predecessor to Bitcoin is generally agreed to be Wei Dei's [b-money](http://www.weidai.com/bmoney.txt) proposal.

The proposal had a lot of holes. For example, it assumed that money could be created simply by solving hard computational problems. But it contained no mechanism to control currency inflation, so currency would inflate as computing power increased.

He actually offered a way around this, auctioning off the currency. But this still creates huge problems without a centralized authority -- who confirms the bids were paid and issues the currency? On what authority?

It also hand-waves over major issues. It requires servers to be partially trusted and argued that to be a server, you could be required to deposit some money in a fund that would be debited in the event misconduct was discovered. But who would debit the account? And who would get credited? And by what authority would they do this?

But this got the ball rolling on the idea of a completely decentralized crypto-currency. The amazing thing about Bitcoin is that it solved all the remaining problems at once.


---

### Answer by username_1 on 2011-09-09. Score: 10

Ecash, created by username_10 Chaum, and introduced in 1993, was a cryptographic bearer certificate, though the underlying instrument was national currency (e.g. dollars). It required a central party to keep track of spends to avoid double spends, unlike Bitcoin's distributed peer to peer ledger. It existed until the bankruptcy of its issuer, Digicash, in 1998.

Many of the themes that surround discussion about Bitcoin were forwarded by Chaum at the time, e.g.

*"The choice between keeping information in the hands of individuals or of organizations is being made each time any government or business decides to automate another set of transactions. In one direction lies unprecedented scrutiny and control of people's lives, in the other, secure parity between individuals and organizations. The shape of society in the next century may depend on which approach predominates."* [source](http://waste.informatik.hu-berlin.de/grassmuck/Texts/ecash.e.html)

Bitcoin is the first cryptocurrency, in that it is itself a currency, not a cryptographic derivative of a non-cryptographic currency.


---

### Answer by username_2 on 2011-09-19. Score: 4

Satoshi Nakamoto mentioned Wei Dai's "b-money" and Nick Szabo's "Bit gold", in addition to username_10 Chaum's "digicash" in early discussions of Bitcoin. The latter was centralized, but had strong privacy properties and was very widely cited, researched, and discussed at the time.

> **Comments:**
> **username_3**: Where did he mentioned Bit gold? Reference please.  
> **username_4**: According to the [emails between Dai and Nakamoto](http://www.gwern.net/docs/2008-nakamoto), Nakamoto was not aware of Szabo's work.  

---

### Answer by username_5 on 2011-09-18. Score: 4

Hal Finney created RPOWs. This is probably the closest predecessor to Bitcoin, because it was actually developed and usable (not just a proposal). RPOWs are "reusable proofs of work". Created by solving hard hashcash puzzles, they are then traded by interacting with a database running inside an IBM cryptocard. It has the ability to prove what it is executing to remote users. Instead of trusting a data structure created by a p2p network, you trusted the secure hardware.


---

### Answer by username_6 on 2011-09-09. Score: 1

I think the major new idea is using "proof-of-work" to get rid of the need for a trusted central "timestamping" authority that would otherwise be necessary to prevent double-spending.

[The question is](http://www.links.org/?p=1175) if that actually works and/or is worth the enormous energy cost. A similar idea was floated once to prevent email spam, but unfortunately email spammers are exactly the people who have lots of cheap (for them) computing resources in the form of bot-nets they can put to "work".

> **Comments:**
> **username_7**: Do you have a proposal for a way to do it "more cheaply"?  
> **username_8**: @username_7 username_6 doesn't have to provide a better alternative in order to point out the weakness with a current proposal. If you can have proof-of-work systems that do some useful work apart from simply verifying transactions is asked [here](http://bitcoin.stackexchange.com/q/331/46)  
> **username_6**: @username_7: if one could agree to a quorum of trusted miners, say ten or a hundred, then they could sign off on the blocks by majority, no need for proof-of-work. Of course, you'd need to trust the miners (they could do what someone now can do who was control of the majority of hash-power), but their potential for abuse would still be limited by what miners can do (in particular they cannot increase the coin supply, or spend other people's money). Trust in them could be decided (and revoked) by every participant in the system. You'd just need to find at least one you trust.  
> **username_9**: It says "In God we trust" on our money, because there is no man (or woman) you can trust.  

---

