<p>The solution would actually be simple. A specific transaction could be added to the BTC1 protocol that means "transfer these coins to the BTC2 chain". Those mining BTC2 would also need to follow the BTC1 hash chain and permit transactions that import Bitcoins from the BTC1 chain, provided they're signed with the key the Bitcoins were exported to.</p>

<p>The technical issues are fairly minor and all have fairly simple solutions. A BTC2 block that imported coins illegally would be invalid and rejected by other miners. A large number of confirmations in the BTC1 chain should be required to protect against double-spend attacks on the BTC1 chain causing coins to be duplicated into both chains.</p>

<p>The only real requirement is that at least the majority of miners of the BTC2 chain would have to track the BTC1 chain as well to validate 'import' transactions.</p>

<p>All that would be required in the BTC1 system is the existence of a transaction that makes coins unspendable inside the BTC1 chain and has room to encode a key that can claim the coins in the BTC2 chain.</p>

<p>Whether or not this is a good idea is another story.</p>

CC BY-SA 3.0
2011-09-13T13:53:30.523Z
More or less the same answer as mine, but written in a much better English :-) And I was too lazy to talk about the “confirmations” issues, so +1 because you did.
Stéphane Gimenez
CC BY-SA 3.0
2011-09-13T00:59:02.253Z
2011-09-13T00:59:02.253Z
David Schwartz
<p>It's possible to send your BTC1 to any unknown or invalid BTC1 address. (Not with the standard bitcoin client though.) With scripting enabled, there would be even more possibilities to send your bitcoins to nowhere.
This would allow the BTC2 protocol to accept BTC1 non-spendable transaction-outputs as base for BTC2 transactions. To be certain that the outputs are not spendable any more from BTC1, it is sufficient to enforce some special script format or address encoding that is incompatible with BTC1 spending.</p>

<p>The real problem with that is that the full BTC1 logic has to be part of the BTC2 protocol. Also, the BTC1 block broadcasts have to be accessible to BTC2 miners (or whatever they are called), so they can check validity of BTC1 transactions. This does not seems to be a good idea at all…</p>

<p>My personal thoughts on the subject lead to this question <a href="https://bitcoin.stackexchange.com/q/293">Decentralized transactions between two decentralized currencies</a>, which may describe a much smoother approach to currency “upgrades” (and not only that). But still waiting for answers there!</p>

CC BY-SA 3.0
2011-09-13T14:08:29.297Z
You've got it a little too complicated there.  All BTC2 has to understand and import is the BTC1 block chain and the private keys from BTC1.  When it imports the private keys and also sees that those keys have sent bitcoins to the designated black hole, it credits the private keys in the new system.  It's not really that hard to implement.
eMansipater
CC BY-SA 3.0
2011-09-13T17:17:55.490Z
Sorry, I thought that insertion of BTC2 data into BTC1 block chain was the obvious way to go. But according to you, inserting BTC1 data into BTC2 block chain would be better?
Stéphane Gimenez
CC BY-SA 3.0
2011-09-13T18:55:47.717Z
BTC2 are the ones who are so concerned with bridging the two currencies, right?
eMansipater
CC BY-SA 3.0
2011-09-14T11:38:09.273Z
They are also concerned about keeping their protocols and internals as clean as possible. What's the point of an upgrade if you end up with all the flaws and curses of the previous system?
Stéphane Gimenez
CC BY-SA 3.0
2011-09-14T14:08:16.297Z
Kinda getting off-topic and deep into a theoretical situation here.
eMansipater
CC BY-SA 3.0
2011-09-13T00:17:27.837Z
2011-09-13T00:17:27.837Z
2017-04-13T12:47:33.283Z
Stéphane Gimenez
<p>It is highly improbable there will every be a genuine need to make "Bitcoin 2.0".  The Bitcoin network can be modified over time to incorporate new features, and improvements.  This evolving software model makes the need for a "clean break" unlikely. In a similar fashion that while the internet evolved far beyond its original concept, we never turned off the "old internet" and started a "new internet".</p>

<p>To answer the question I will assume a new block chain is needed.  There is a method to make a clean switch with minimal legacy entanglements.</p>

<p>1) The bitcoin community should determine the new Bitcoin protocol (BTC2) and at the same time reach a consensus or at least super majority on when the current Bitcoin should end (BTC1).  It would be possible to modify current Bitcoin protocol to allow stakeholders to vote based on the number of Bitcoins they hold at the time of the proposal.  Any proposal to make to new block chain should have widespread support to avoid a scenario where it fragments the Bitcoin economy.</p>

<p>2) A omega block (last block) would be announced after debate and voting.  Any bitcoins received after that block would not be able to migrate to the new block chain.  Users should take care to not accept Bitcoins after the omega block.  To avoid chaos and disruptions this should be announced well in advance, possible issuing new clients which warn users and even reporting post-omega transactions as bad (no value). </p>

<p>3) After the omega block is signed it will be reduced.  The only data relevent at to the new chain is the current location of every single bitcoin.  This means saving all active public addresses and their current value from the existing block chain.  This will result in a significant reduction in size of block chain as the history of coins is no longer relevent, only their final location is.  Likewise any public address with a value of 0 BTC doesn't need to be saved. </p>

<p>4) Either include the reduced block chain or a cryptographic hash in the genesis block.  This provides a bridge between the old network and new. </p>

<p>5) The new block chain now has all the required information to migrate coins as needed by their owners.  Since the BTC2 network won't "know" of transactions after the Omega block anyone coins transfered after that will have no value in the new network and thus no value in old network.  It won't be possible to force BTC1 to stop as it is a P2P network but it is unlikely there will be much demand for unofficial post omega "orphaned" BTC1 transactions.</p>

<p>6) To avoid complicating the BTC2 protocol there will be a single transaction possible w/ BTC1 addresses/coins called "TRANSFER".  The TRANSFER transaction will take a BTC1 public address and BTC2 public address and the transaction will be signed by the BTC1 private key.  Thus the "owner" of any coin at the time of omega block will be the only one who can transfer it to the new network.</p>

<p>7) Once coins are transfered to BTC2 network via the TRANSFER transaction the BTC1 public/private key and wallet have no value or use and can be deleted by the owenr.</p>

<p>8) During the transistion it will be necessary for wallets to have a copy of reduced BTC1 omega block chain so they are "aware" of BTC1 and TRANSFER protocol.  However once transfered a user will never need a "migration" wallet so eventually versions which drop all legacy support (TRANSFER protocol &amp; omega block chain) will be released.</p>

<p>9) Nodes could choose at anytime to be "legacy free" and will ignore TRANSFER transactions and likely as time passes many nodes will stop accepting these legacy transactions as the volume of coins transfered will continually decline.  As long as one node supports legacy addresses and TRANSFER transactions it will be possible to eventually have those transactions confirmed albeit with significantly increased confirmation times.</p>

CC BY-SA 3.0
2011-10-19T15:15:57.180Z
2011-10-19T21:09:43.687Z
2011-10-19T21:09:43.687Z
DeathAndTaxes
<p>Bitcoin or "btc1" already has a mechanism built in to prevent this; it is free open-source software.</p>

<p>It would make much more sense (for the majority of people) to improve upon Bitcoin than to make a new blockchain.</p>

<p>To answer your question, a mechanism like your talking about does not exist in the Bitcoin core code. Nor do I think it should exist at present.</p>

<p>The people making btc2 are typically doing so in a get-rich-quick-scheme that benefits themselves. Joining these alternatives instead of modifying the open source Bitcoin core just decreases the value of BTC. It doesn't make sense for the BTC community to migrate for these reasons...</p>

CC BY-SA 3.0
2011-09-12T23:42:29.880Z
2011-09-12T23:42:29.880Z
Alex Waters
<p>Search for "Proof of Burn". This article has a lot of good stuff: <a href="https://en.bitcoin.it/wiki/Proof_of_burn" rel="nofollow">https://en.bitcoin.it/wiki/Proof_of_burn</a></p>

CC BY-SA 3.0
2014-06-17T13:25:52.247Z
2014-06-17T13:25:52.247Z
Svante
<p>Sorry Alex, but you're wrong on the question being asked.  <strong>It's trivial to put bitcoins "beyond use" so that they can never be spent again.</strong>  All you would have to do is send the bitcoins to a made up address, which no one would have a key to.  This has already been done, since coins have been sent to addresses which are almost certainly unowned (like the lowest possible hash that is a valid address).</p>

<p>So specifically in your situation, <strong>the BTC2 people could use a public method of creating an address that no one owns the private keys to, then design their system to credit people who send BTC1 bitcoins to that address.</strong>  One reason someone might want to do this despite the open-source nature of Bitcoin would be to create a new, incompatible protocol that grabs some of the user base of BTC1 without forcing anyone to leave, allowing the two to coexist and compete quite fairly.</p>

CC BY-SA 3.0
2013-04-23T23:14:01.337Z
@eMansipater [1111111111111111111114oLvT2](https://blockexplorer.com/address/1111111111111111111114oLvT2)'s hash160 is zero (see [What is the Bitcoin equivalent of /dev/null?](http://bitcoin.stackexchange.com/questions/3777/what-is-the-bitcoin-equivalent-of-dev-null)).
7anner
CC BY-SA 3.0
2011-09-13T19:37:41.317Z
Just as a side note, does anyone have a link to the transaction I was talking about (lowest possible hash)?  I thought I could find it with some blockexplorer-fu but came up empty in the 10 min I had to spend on it.  It would be good to have a link.
eMansipater
CC BY-SA 3.0
2011-09-13T00:01:12.813Z
2011-09-13T14:04:31.867Z
2011-09-13T14:04:31.867Z
eMansipater
<p>Its the hypothetical future and BTC2 is being designed. Everyone loves BTC2 and no-one wants the old BTC1 any more.</p>

<p>People who have BTC1 would be annoyed that their assets are suddently worth a lot less because there's no demand for their BTC1 any more, so the designers of BTC2 want to include a simple way to convert their BTC1 into BTC2.</p>

<p>For this to work, the BTC1 world would need a way for coins to be put beyond use within the BTC1 world, in a way that everyone can be reasonably sure that no-one can use the evaporated BTC1 assets any more.</p>

<p>Does such a mechanism exist? If not, could/should one be added?</p>

CC BY-SA 3.0
2014-03-06T17:24:19.080Z
the title is not nec correlating with the question contents. there could be many ways that bitcoins might be "destroyed" & the question contents only sketches out one of them (ie new protocol version/sequel built/released), biasing answers etc... although the general question may be too broad.
vzn
CC BY-SA 3.0
2011-09-22T21:42:14.833Z
Good question... Not only double-spending, it also brings up the spectre of identity: in order to claim funds across these boundaries, you would need to prove that you are the owner of the BTC1 account in order to be credited on the new currency.
Andrew Vit
CC BY-SA 3.0
2011-10-19T15:17:45.993Z
Proving is a simple as signing w/ private key.  The new network just needs to be aware of BTC public keys.  To reduce the number of transfer transaction it could be designed to be irreversable and one way.  Once value is transfered from BTC1 to BTC2 it can't ever be undone and the BTC1 public/private key no longer has any value.
DeathAndTaxes
CC BY-SA 3.0
2011-10-20T12:02:40.733Z
For anybody who wants to destroy some Bitcoins, I suggest sending them to the following address: [1BitcoinEaterAddressDontSendf59kuE](http://blockexplorer.com/address/1BitcoinEaterAddressDontSendf59kuE) (firstbits: 1Bitcoin)
Noah
<development><protocol><economic-theory><future-proof><destroy-bitcoins>
Can a bitcoin be destroyed?
billpg
# Can a bitcoin be destroyed?

(Asked by: username_0 on 2011-09-12)

Its the hypothetical future and BTC2 is being designed. Everyone loves BTC2 and no-one wants the old BTC1 any more.

People who have BTC1 would be annoyed that their assets are suddently worth a lot less because there's no demand for their BTC1 any more, so the designers of BTC2 want to include a simple way to convert their BTC1 into BTC2.

For this to work, the BTC1 world would need a way for coins to be put beyond use within the BTC1 world, in a way that everyone can be reasonably sure that no-one can use the evaporated BTC1 assets any more.

Does such a mechanism exist? If not, could/should one be added?

**Tags:** development, protocol, economic-theory, future-proof, destroy-bitcoins

> **Comments:**
> **username_2**: Good question... Not only double-spending, it also brings up the spectre of identity: in order to claim funds across these boundaries, you would need to prove that you are the owner of the BTC1 account in order to be credited on the new currency.  
> **username_3**: Proving is a simple as signing w/ private key.  The new network just needs to be aware of BTC public keys.  To reduce the number of transfer transaction it could be designed to be irreversable and one way.  Once value is transfered from BTC1 to BTC2 it can't ever be undone and the BTC1 public/private key no longer has any value.  
> **username_4**: For anybody who wants to destroy some Bitcoins, I suggest sending them to the following address: [1BitcoinEaterAddressDontSendf59kuE](http://blockexplorer.com/address/1BitcoinEaterAddressDontSendf59kuE) (firstbits: 1Bitcoin)  
> **username_1**: the title is not nec correlating with the question contents. there could be many ways that bitcoins might be "destroyed" & the question contents only sketches out one of them (ie new protocol version/sequel built/released), biasing answers etc... although the general question may be too broad.  

---

## 6 answers

### Answer by username_7 on 2011-09-13. Score: 10 | Accepted answer

Sorry username_8, but you're wrong on the question being asked. **It's trivial to put bitcoins "beyond use" so that they can never be spent again.** All you would have to do is send the bitcoins to a made up address, which no one would have a key to. This has already been done, since coins have been sent to addresses which are almost certainly unowned (like the lowest possible hash that is a valid address).

So specifically in your situation, **the BTC2 people could use a public method of creating an address that no one owns the private keys to, then design their system to credit people who send BTC1 bitcoins to that address.** One reason someone might want to do this despite the open-source nature of Bitcoin would be to create a new, incompatible protocol that grabs some of the user base of BTC1 without forcing anyone to leave, allowing the two to coexist and compete quite fairly.

> **Comments:**
> **username_7**: Just as a side note, does anyone have a link to the transaction I was talking about (lowest possible hash)?  I thought I could find it with some blockexplorer-fu but came up empty in the 10 min I had to spend on it.  It would be good to have a link.  
> **username_10**: @username_7 [1111111111111111111114oLvT2](https://blockexplorer.com/address/1111111111111111111114oLvT2)'s hash160 is zero (see [What is the Bitcoin equivalent of /dev/null?](http://bitcoin.stackexchange.com/questions/3777/what-is-the-bitcoin-equivalent-of-dev-null)).  

---

### Answer by username_5 on 2011-09-13. Score: 2

The solution would actually be simple. A specific transaction could be added to the BTC1 protocol that means "transfer these coins to the BTC2 chain". Those mining BTC2 would also need to follow the BTC1 hash chain and permit transactions that import Bitcoins from the BTC1 chain, provided they're signed with the key the Bitcoins were exported to.

The technical issues are fairly minor and all have fairly simple solutions. A BTC2 block that imported coins illegally would be invalid and rejected by other miners. A large number of confirmations in the BTC1 chain should be required to protect against double-spend attacks on the BTC1 chain causing coins to be duplicated into both chains.

The only real requirement is that at least the majority of miners of the BTC2 chain would have to track the BTC1 chain as well to validate 'import' transactions.

All that would be required in the BTC1 system is the existence of a transaction that makes coins unspendable inside the BTC1 chain and has room to encode a key that can claim the coins in the BTC2 chain.

Whether or not this is a good idea is another story.

> **Comments:**
> **username_6**: More or less the same answer as mine, but written in a much better English :-) And I was too lazy to talk about the “confirmations” issues, so +1 because you did.  

---

### Answer by username_6 on 2011-09-13. Score: 2

It's possible to send your BTC1 to any unknown or invalid BTC1 address. (Not with the standard bitcoin client though.) With scripting enabled, there would be even more possibilities to send your bitcoins to nowhere.
This would allow the BTC2 protocol to accept BTC1 non-spendable transaction-outputs as base for BTC2 transactions. To be certain that the outputs are not spendable any more from BTC1, it is sufficient to enforce some special script format or address encoding that is incompatible with BTC1 spending.

The real problem with that is that the full BTC1 logic has to be part of the BTC2 protocol. Also, the BTC1 block broadcasts have to be accessible to BTC2 miners (or whatever they are called), so they can check validity of BTC1 transactions. This does not seems to be a good idea at all…

My personal thoughts on the subject lead to this question [Decentralized transactions between two decentralized currencies](https://bitcoin.stackexchange.com/q/293), which may describe a much smoother approach to currency “upgrades” (and not only that). But still waiting for answers there!

> **Comments:**
> **username_7**: You've got it a little too complicated there.  All BTC2 has to understand and import is the BTC1 block chain and the private keys from BTC1.  When it imports the private keys and also sees that those keys have sent bitcoins to the designated black hole, it credits the private keys in the new system.  It's not really that hard to implement.  
> **username_6**: Sorry, I thought that insertion of BTC2 data into BTC1 block chain was the obvious way to go. But according to you, inserting BTC1 data into BTC2 block chain would be better?  
> **username_7**: BTC2 are the ones who are so concerned with bridging the two currencies, right?  
> **username_6**: They are also concerned about keeping their protocols and internals as clean as possible. What's the point of an upgrade if you end up with all the flaws and curses of the previous system?  
> **username_7**: Kinda getting off-topic and deep into a theoretical situation here.  

---

### Answer by username_3 on 2011-10-19. Score: 2

It is highly improbable there will every be a genuine need to make "Bitcoin 2.0". The Bitcoin network can be modified over time to incorporate new features, and improvements. This evolving software model makes the need for a "clean break" unlikely. In a similar fashion that while the internet evolved far beyond its original concept, we never turned off the "old internet" and started a "new internet".

To answer the question I will assume a new block chain is needed. There is a method to make a clean switch with minimal legacy entanglements.

1) The bitcoin community should determine the new Bitcoin protocol (BTC2) and at the same time reach a consensus or at least super majority on when the current Bitcoin should end (BTC1). It would be possible to modify current Bitcoin protocol to allow stakeholders to vote based on the number of Bitcoins they hold at the time of the proposal. Any proposal to make to new block chain should have widespread support to avoid a scenario where it fragments the Bitcoin economy.

2) A omega block (last block) would be announced after debate and voting. Any bitcoins received after that block would not be able to migrate to the new block chain. Users should take care to not accept Bitcoins after the omega block. To avoid chaos and disruptions this should be announced well in advance, possible issuing new clients which warn users and even reporting post-omega transactions as bad (no value).

3) After the omega block is signed it will be reduced. The only data relevent at to the new chain is the current location of every single bitcoin. This means saving all active public addresses and their current value from the existing block chain. This will result in a significant reduction in size of block chain as the history of coins is no longer relevent, only their final location is. Likewise any public address with a value of 0 BTC doesn't need to be saved.

4) Either include the reduced block chain or a cryptographic hash in the genesis block. This provides a bridge between the old network and new.

5) The new block chain now has all the required information to migrate coins as needed by their owners. Since the BTC2 network won't "know" of transactions after the Omega block anyone coins transfered after that will have no value in the new network and thus no value in old network. It won't be possible to force BTC1 to stop as it is a P2P network but it is unlikely there will be much demand for unofficial post omega "orphaned" BTC1 transactions.

6) To avoid complicating the BTC2 protocol there will be a single transaction possible w/ BTC1 addresses/coins called "TRANSFER". The TRANSFER transaction will take a BTC1 public address and BTC2 public address and the transaction will be signed by the BTC1 private key. Thus the "owner" of any coin at the time of omega block will be the only one who can transfer it to the new network.

7) Once coins are transfered to BTC2 network via the TRANSFER transaction the BTC1 public/private key and wallet have no value or use and can be deleted by the owenr.

8) During the transistion it will be necessary for wallets to have a copy of reduced BTC1 omega block chain so they are "aware" of BTC1 and TRANSFER protocol. However once transfered a user will never need a "migration" wallet so eventually versions which drop all legacy support (TRANSFER protocol & omega block chain) will be released.

9) Nodes could choose at anytime to be "legacy free" and will ignore TRANSFER transactions and likely as time passes many nodes will stop accepting these legacy transactions as the volume of coins transfered will continually decline. As long as one node supports legacy addresses and TRANSFER transactions it will be possible to eventually have those transactions confirmed albeit with significantly increased confirmation times.


---

### Answer by username_8 on 2011-09-12. Score: 1

Bitcoin or "btc1" already has a mechanism built in to prevent this; it is free open-source software.

It would make much more sense (for the majority of people) to improve upon Bitcoin than to make a new blockchain.

To answer your question, a mechanism like your talking about does not exist in the Bitcoin core code. Nor do I think it should exist at present.

The people making btc2 are typically doing so in a get-rich-quick-scheme that benefits themselves. Joining these alternatives instead of modifying the open source Bitcoin core just decreases the value of BTC. It doesn't make sense for the BTC community to migrate for these reasons...


---

### Answer by username_9 on 2014-06-17. Score: 0

Search for "Proof of Burn". This article has a lot of good stuff: <https://en.bitcoin.it/wiki/Proof_of_burn>


---

