The story of how a cryptographer designed the architecture of a revolution—only to become its witness, not its co-author.
🔐 In August 2008, British cryptographer Adam Back received an email from an unknown sender signing off as Satoshi Nakamoto. The stranger was asking about Hashcash—a proof-of-work algorithm Back had developed back in 1997 to combat spam. In their exchange, Back mentioned another project: b-money, a decentralized currency concept published by Wei Dai a decade earlier in the cypherpunks mailing list. Nakamoto thanked him and vanished. Two months later, in October 2008, a nine-page document titled "Bitcoin: A Peer-to-Peer Electronic Cash System" appeared in the same mailing list. The references cited two works: Back’s Hashcash and Dai’s b-money.
⚡ The paradox unfolded like a detective story with inverted cause and effect. Wei Dai, whose 1998 concept contained all the key elements of the future Bitcoin—proof-of-work, a distributed ledger, cryptographic hashes for transaction verification—only learned that his idea had become the foundation of a new currency when Adam Back forwarded him a link to Nakamoto’s whitepaper. He and Nakamoto had never communicated before the network’s launch. Dai took no part in the development, offered no advice, didn’t even know the project existed. His work influenced Bitcoin like a ghost—invisibly, without contact, through a chain of forwards and mentions in mailing list archives where cypherpunks traded ideas about crypto-anarchy and digital money. The man who could have been the revolution’s co-author remained its unwitting godfather.
💰 In November 1998, Wei Dai, developer of the cryptographic library Crypto++ and co-author of the authentication algorithm VMAC, published a description of the b-money system in the cypherpunks mailing list. The concept was radical: an electronic currency without a central issuer, where every participant maintained a synchronized transaction database, and the creation of new tokens required computational work—proof-of-work. Transactions were verified by the community through cryptographic signatures, contracts executed automatically, and rewards for work distributed via a collective ledger. Dai described two protocols: the first required a synchronous, non-blocking anonymous broadcast channel—a technology that didn’t exist in 1998. The second protocol used a subset of nodes for verification, accounting for the internet’s unreliability at the time. The idea was inspired by Tim May’s "The Crypto Anarchist Manifesto" and discussions with Nick Szabo, who was simultaneously developing the bit gold concept.
🧩 b-money was an architectural blueprint without a foundation. Dai himself acknowledged a critical unsolved problem: how to fairly distribute tokens at the system’s launch without a central issuer? If currency creation required computational work, who determined the initial value of that work? How to prevent early participants from gaining a disproportionately large share, devaluing the system for everyone else? Dai proposed a mechanism where token value was pegged to a basket of goods, but this required an external oracle—a trusted data source, which contradicted the idea of decentralization. The initial distribution problem turned b-money from a working protocol into a philosophical experiment.
🔬 Discussions in the cypherpunks mailing list after the November 1998 publication included Adam Back and Tim May, but led to no breakthrough. Dai was a member of the Cypherpunks, Extropians, and SL4 mailing lists—communities where cryptography, transhumanism, and artificial intelligence were debated. His work remained a concept, buried in archives, until a decade later when an unknown programmer found a way to solve the problem Dai considered unsolvable. Bitcoin used mining with a gradually decreasing reward: the first blocks yielded 50 BTC, then the reward halved every 210,000 blocks. This created predictable inflation and incentivized early participants without devaluing the system for latecomers. The solution was elegant, but Dai learned of it as an outside observer.
🕵️ How did Satoshi Nakamoto discover Wei Dai’s work? The Bitcoin whitepaper contains no direct quotes from b-money, only a mention in the references. The cypherpunks mailing list archives were public, but b-money wasn’t widely known outside a narrow circle of crypto-anarchists. The only clue was the correspondence with Adam Back in August 2008, where Back mentioned Dai’s concept. This means Nakamoto either already knew about b-money and was seeking confirmation, or Back became an accidental conduit for the idea. Back’s first contact with Nakamoto occurred two months before the whitepaper’s publication—too short a time to develop a protocol from scratch, suggesting Bitcoin was being built in parallel, with b-money serving as conceptual validation.
🌐 The spectral connection between Dai and Nakamoto became one of the strangest chains of influence in tech history. Dai received no acknowledgments, took no part in the January 3, 2009 network launch when the first block was mined. His name appeared in the whitepaper as a footnote, and he only learned of it through Back’s forward. This wasn’t plagiarism—Nakamoto honestly cited the source—but neither was it collaboration. b-money influenced Bitcoin as an idea, not as code or consultation. Dai remained in the shadows until Bitcoin became a phenomenon, and journalists began searching for its predecessors.
📡 The irony deepened because Dai was an active participant in the very communities where Bitcoin was born. He discussed cryptography with the same people who would later become early adopters of the new currency. But when Nakamoto published the whitepaper in the cryptography@metzdowd.com mailing list in October 2008, Dai wasn’t among the first commenters. He learned about Bitcoin not firsthand, but through an intermediary, as if his own idea had returned to him as someone else’s invention. This wasn’t theft, but a strange form of cultural transmission, where the concept’s author became its spectator.
⚙️ Why did b-money remain a concept? The technical barriers of 1998 were insurmountable. Dai’s first protocol required a synchronous, non-blocking anonymous broadcast channel—infrastructure that didn’t exist. The late-nineties internet was slow, unreliable, with high latency. The idea of a distributed ledger where thousands of nodes synchronized data in real time was utopian. The second protocol, using a subset of nodes for verification, was more realistic but still required solving the initial distribution problem. Dai couldn’t launch a system that was both fair and decentralized.
🛠️ Bitcoin solved this through mining with dynamic difficulty. The proof-of-work algorithm adapted to the network’s computational power: if blocks were mined too quickly, difficulty increased; if too slowly, it decreased. This created a self-regulating system where the reward for work remained predictable and inflation controlled. Dai hadn’t proposed such a mechanism in 1998 because he saw no way to tie computational work to economic value without an external arbiter. Nakamoto bypassed the problem by making the network itself the arbiter: Bitcoin’s value wasn’t determined by a basket of goods, but by market demand and supply.
🔧 Another difference was the approach to anonymity. b-money assumed full participant anonymity through pseudonyms and cryptographic keys but didn’t solve the double-spending problem without trusted nodes. Bitcoin used a public transaction ledger, where anonymity was achieved through pseudonymous addresses, and double-spending was prevented by majority consensus. This was a compromise between privacy and verifiability that Dai hadn’t considered. His concept was more radical but less practical.
📌 Today, Wei Dai remains a figure known in cryptographer circles but not in mainstream culture. His Crypto++ library is used in thousands of projects, the VMAC algorithm became an authentication standard, but b-money is mostly mentioned as a historical curiosity. Dai didn’t become a billionaire like early Bitcoin miners, didn’t found a company, didn’t write a book about his role in creating cryptocurrencies. He continues working on cryptographic projects, avoiding the spotlight.
📌 In interviews, Dai has acknowledged that Bitcoin solved a problem he considered unsolvable but expressed skepticism about the system’s long-term sustainability. He pointed to mining’s high energy consumption, the centralization of computational power in large pools, and price volatility as signs that Bitcoin is an experiment, not a final solution. His view of cryptocurrencies remains pragmatic: a tool, not an ideology.
📌 Modern projects like Ethereum with its smart contracts or Monero with its focus on privacy are developing ideas laid out in b-money. The concept of executing contracts through digital signatures, which Dai described in 1998, became the foundation of decentralized applications. But Dai himself remains in the shadows—as the man who could have been the revolution’s co-author but ended up its unwitting godfather, the one who named the idea without seeing it realized.