<p>The most secure way to destroy bitcoins is to send them to a script that can never return true, and which includes the reference code that confirms the goal of destroying these coins. I don't know of readily available software tools that can do that, and I'm not sure the network will accept these transactions.</p>

<p>Here's a simple method everyone can try at home: Take the reference code, apply RIPEMD-160 and encode it as an address. Do a transaction which sends a satoshi to this address, and the the coins-to-destroy to 1BitcoinEaterAddressDontSendf59kuE.</p>

<p>To demonstrate my point, here is me destroying 1 mBTC - <a href="http://blockchain.info/tx/f374fb91ea29b02d295d535da537c7770caa71c4937095c51467b4d8b1b60c1b" rel="nofollow noreferrer">http://blockchain.info/tx/f374fb91ea29b02d295d535da537c7770caa71c4937095c51467b4d8b1b60c1b</a>. Address is hash of <a href="https://bitcoin.stackexchange.com/a/7443/575">https://bitcoin.stackexchange.com/a/7443/575</a>.</p>

<p>Signing a message with the address used to send can also be employed as extra verification.</p>

CC BY-SA 3.0
2013-02-03T19:07:52.840Z
Removed remark that the hash can be used as a recipient of the coins, it's too easy to game.
Meni Rosenfeld
CC BY-SA 3.0
2013-02-03T23:09:37.337Z
Perhaps not the most elegant approach, but it is 1) very simple, and 2) works with a lot of existing tools. +1 for that.
Nick ODell
CC BY-SA 3.0
2013-03-10T17:37:04.093Z
You could also use [1111111111111111111114oLvT2](http://bitcoin.stackexchange.com/a/3778/2306), which has an internal hash of 0000000000000000000000000000000000000000.
Nick ODell
CC BY-SA 3.0
2013-02-03T11:01:45.420Z
2013-02-03T19:07:02.280Z
2017-04-13T12:47:36.647Z
Meni Rosenfeld
<p>Why destroy the coins? </p>

<p><a href="https://bitcointalk.org/index.php?topic=75933.0" rel="nofollow">This post at bitcointalk.org</a> discusses using Bitcoin for email micropostage, in a similar way to <a href="http://www.hashcash.org/" rel="nofollow">Hashcash</a>.</p>

CC BY-SA 3.0
2013-02-03T16:57:59.253Z
1) A legitimate email provider only needs to destroy the coins once, whereas a spam sender will need to do it every time his server is blocked. 2)  [This page](http://email.about.com/od/emailtrivia/f/emails_per_day.htm) estimates that there are 280,000 legitimate email messages sent per day. Imagine if all those required a bitcoin transaction. Sure, some can be batched up/not sent, but what about the other ones?
Nick ODell
CC BY-SA 3.0
2013-02-03T14:06:33.860Z
2013-02-03T14:06:33.860Z
organofcorti
<p>I'm not aware of any tool that does this specifically.</p>

<p>One easy way to burn coins would be to send them to a junk bitcoin public address.</p>

<p>To convince people the public address is indeed junk 
Generate it with a public formula relying on crypto hash function :
truncateToCompressedPublicAdressLength( sha512( "anything : for example the cause for which you are burning the coin" ) )</p>

<p>Generating the key from its compressed representation should give a 'valid' (representing a point on the elliptic curve) public address, with a probability > 0.5, so you just have to twiddle a few bits if the key is not valid.</p>

<p>The address would be considered junk by design, provided you trust sha512 and bitcoin.</p>

<p>You can even let them choose freely the last few bytes of the public key (after the hash was applied), to convince them even more you can't know the associated private key.</p>

<p>Blog article about people hiding data into the blogchain:
<a href="http://www.righto.com/2014/02/ascii-bernanke-wikileaks-photographs.html" rel="nofollow">http://www.righto.com/2014/02/ascii-bernanke-wikileaks-photographs.html</a></p>

<p>You may find information relative to proof of burning: <a href="https://en.bitcoin.it/wiki/Proof_of_burn" rel="nofollow">https://en.bitcoin.it/wiki/Proof_of_burn</a></p>

CC BY-SA 3.0
2014-10-29T17:57:25.143Z
similar answer : http://bitcoin.stackexchange.com/questions/1851/how-to-generate-a-valid-bitcoin-address-for-destroying-bitcoins
darkblue
CC BY-SA 3.0
2014-10-29T17:35:29.357Z
2014-10-29T17:35:29.357Z
darkblue
<p>Several interesting applications of bitcoins involve a scenario where they are <a href="https://bitcoin.stackexchange.com/questions/3228/why-destroy-bitcoins">intentionally "destroyed"</a>.  Is there an open source tool that can be used to destroy bitcoins?</p>

<p>And if so, is it possible to programmatically verify (via the same tool or another) that the bitcoins have indeed been destroyed?</p>

CC BY-SA 3.0
2013-02-03T07:59:42.110Z
possible duplicate of [Can a bitcoin be destroyed?](http://bitcoin.stackexchange.com/questions/924/can-a-bitcoin-be-destroyed)
Stephen Gornick
CC BY-SA 3.0
2013-02-03T08:20:40.183Z
@StephenGornick That question asks whether it is theoretically possible. I think we can all agree that the answer to that is "Yes." What I'm asking is whether there's an existing solution for it before I go off and reinvent the wheel.
Nick ODell
CC BY-SA 3.0
2014-10-30T01:47:22.000Z
just send them to 12xpePzAGeJP68Fe6wfLrRgLwDmEWsYgHy, i'll take care of the dirty business discretely :)
Willem Hengeveld
CC BY-SA 3.0
2014-10-28T04:15:52.507Z
I don't think there's an existing solution because there isn't a big need for one. A) People don't usually want to destroy their bitcoins, and B) you can send some bitcoins to one of a few known unspendable addresses and verify the transaction on any block explorer.
morsecoder
<transactions><destroy-bitcoins>
Is there an open source tool to publicly destroy bitcoins?
Nick ODell
# Is there an open source tool to publicly destroy bitcoins?

(Asked by: username_0 on 2013-02-03)

Several interesting applications of bitcoins involve a scenario where they are [intentionally "destroyed"](https://bitcoin.stackexchange.com/questions/3228/why-destroy-bitcoins). Is there an open source tool that can be used to destroy bitcoins?

And if so, is it possible to programmatically verify (via the same tool or another) that the bitcoins have indeed been destroyed?

**Tags:** transactions, destroy-bitcoins

> **Comments:**
> **username_1**: possible duplicate of [Can a bitcoin be destroyed?](http://bitcoin.stackexchange.com/questions/924/can-a-bitcoin-be-destroyed)  
> **username_0**: @username_1 That question asks whether it is theoretically possible. I think we can all agree that the answer to that is "Yes." What I'm asking is whether there's an existing solution for it before I go off and reinvent the wheel.  
> **username_3**: I don't think there's an existing solution because there isn't a big need for one. A) People don't usually want to destroy their bitcoins, and B) you can send some bitcoins to one of a few known unspendable addresses and verify the transaction on any block explorer.  
> **username_2**: just send them to 12xpePzAGeJP68Fe6wfLrRgLwDmEWsYgHy, i'll take care of the dirty business discretely :)  

---

## 3 answers

### Answer by username_4 on 2013-02-03. Score: 10

The most secure way to destroy bitcoins is to send them to a script that can never return true, and which includes the reference code that confirms the goal of destroying these coins. I don't know of readily available software tools that can do that, and I'm not sure the network will accept these transactions.

Here's a simple method everyone can try at home: Take the reference code, apply RIPEMD-160 and encode it as an address. Do a transaction which sends a satoshi to this address, and the the coins-to-destroy to 1BitcoinEaterAddressDontSendf59kuE.

To demonstrate my point, here is me destroying 1 mBTC - <http://blockchain.info/tx/f374fb91ea29b02d295d535da537c7770caa71c4937095c51467b4d8b1b60c1b>. Address is hash of <https://bitcoin.stackexchange.com/a/7443/575>.

Signing a message with the address used to send can also be employed as extra verification.

> **Comments:**
> **username_4**: Removed remark that the hash can be used as a recipient of the coins, it's too easy to game.  
> **username_0**: Perhaps not the most elegant approach, but it is 1) very simple, and 2) works with a lot of existing tools. +1 for that.  
> **username_0**: You could also use [1111111111111111111114oLvT2](http://bitcoin.stackexchange.com/a/3778/2306), which has an internal hash of 0000000000000000000000000000000000000000.  

---

### Answer by username_5 on 2013-02-03. Score: 1

Why destroy the coins?

[This post at bitcointalk.org](https://bitcointalk.org/index.php?topic=75933.0) discusses using Bitcoin for email micropostage, in a similar way to [Hashcash](http://www.hashcash.org/).

> **Comments:**
> **username_0**: 1) A legitimate email provider only needs to destroy the coins once, whereas a spam sender will need to do it every time his server is blocked. 2)  [This page](http://email.about.com/od/emailtrivia/f/emails_per_day.htm) estimates that there are 280,000 legitimate email messages sent per day. Imagine if all those required a bitcoin transaction. Sure, some can be batched up/not sent, but what about the other ones?  

---

### Answer by username_6 on 2014-10-29. Score: 0

I'm not aware of any tool that does this specifically.

One easy way to burn coins would be to send them to a junk bitcoin public address.

To convince people the public address is indeed junk
Generate it with a public formula relying on crypto hash function :
truncateToCompressedPublicAdressLength( sha512( "anything : for example the cause for which you are burning the coin" ) )

Generating the key from its compressed representation should give a 'valid' (representing a point on the elliptic curve) public address, with a probability > 0.5, so you just have to twiddle a few bits if the key is not valid.

The address would be considered junk by design, provided you trust sha512 and bitcoin.

You can even let them choose freely the last few bytes of the public key (after the hash was applied), to convince them even more you can't know the associated private key.

Blog article about people hiding data into the blogchain:
<http://www.righto.com/2014/02/ascii-bernanke-wikileaks-photographs.html>

You may find information relative to proof of burning: <https://en.bitcoin.it/wiki/Proof_of_burn>

> **Comments:**
> **username_6**: similar answer : http://bitcoin.stackexchange.com/questions/1851/how-to-generate-a-valid-bitcoin-address-for-destroying-bitcoins  

---

