The story of how two cryptographers built the parts of a machine of the future—only to learn about it from the news.
🔐 In March 1997, programmer Adam Back sent a technical description of a system called Hashcash to the cypherpunks mailing list. The document spanned three pages and proposed an elegant solution to a problem that was already poisoning the lives of internet users: email spam was overwhelming mail servers, and traditional filters were useless. Back put forward a radical idea—make every email costly. Not in money, but in computation. The sender had to solve a cryptographic puzzle: find a number that, when combined with the email header, would produce a hash with a certain number of leading zeros. A regular user would spend a couple of seconds of CPU time—barely noticeable. A spammer sending millions of emails would hit a physical ceiling: their servers simply couldn’t keep up. Proof-of-work turned computational power into an invisible currency that couldn’t be forged or stolen.
⚙️ The mechanics of Hashcash were elegant in their simplicity. The cryptographic hash function SHA-1 worked like a one-way meat grinder: any data in, a 160-bit string out. Change a single character in the original text, and the result changes completely and unpredictably. There was no going back: you couldn’t reconstruct the original data from the hash. Back proposed finding a number (nonce) such that the hash of the string "date + recipient address + nonce" would start with, say, 20 zero bits. That was a 1-in-a-million chance—a computer would have to try a million combinations on average before stumbling on the right one. The recipient verified the solution instantly: one hash operation, a glance at the start of the string—done. The asymmetry of effort was the secret. Like a lock that’s easy to close but impossible to open without the key. Back didn’t know that 11 years later, this scheme would become the heart of the first cryptocurrency—and that 12 years later, he’d find out about it by accident.
📧 In November 1998, a year after Hashcash was published, programmer Wei Dai sent a description of the b-money concept to the same cypherpunks mailing list. He went further: not just spam protection, but a full-fledged decentralized currency. Network participants collectively maintained a distributed ledger—who owed whom how much. New coins were created through proof-of-work: solve a computational problem, earn a unit of currency. No banks, no intermediaries, just math and consensus. Dai proposed two versions: in the first, every participant stored a full copy of the transaction database; in the second, special servers synchronized the network’s state. The double-spending problem—when a fraudster tries to spend the same money twice—was solved by node voting. If the majority agreed a transaction was valid, it was permanently recorded in the ledger. Dai never brought b-money to a working prototype, leaving the concept at the level of a theoretical manifesto.
💾 By the late 1990s, cryptographers had amassed a library of parts for digital money, but no one had put them together. David Chaum had invented blind signatures back in 1983—a way to make electronic payments as anonymous as cash. Stuart Haber and Scott Stornetta proposed in 1991 linking documents in a chain of hashes to make timestamp forgery impossible—the prototype of blockchain. Nick Szabo described Bit Gold in 1998, a system with proof-of-work and a decentralized ledger, strikingly similar to Bitcoin. All these ideas existed in isolation, like blueprints for engine parts that no one had thought to assemble into a working motor. Cypherpunks discussed math, philosophy, politics—but not business models. Proof-of-work was a tool against spam. A distributed ledger was an academic exercise. Digital money was an anarchist’s utopia.
🧩 Hashcash, meanwhile, found practical use. In the early 2000s, it was integrated into SpamAssassin, a popular anti-spam filter. Back’s idea worked: email clients could demand proof-of-work from unknown senders, filtering out botnets. But the technology never went mainstream—too complex for regular users, too radical for corporations. Back continued consulting on cryptographic projects, writing papers, joining discussions. In 2002, he formalized Hashcash in a second version of the specification, refining the header format and nonce selection algorithm. The technology existed, the description was public, but no one saw it as the foundation for a new economy. The parts lay on the table, waiting for an engineer who would understand how to assemble them.
👤 On October 31, 2008, an email from an unknown Satoshi Nakamoto arrived in the metzdowd.com mailing list—a successor to the old cypherpunks. Subject: "Bitcoin P2P e-cash paper." Nine pages of text described a working digital money system. The very first footnote cited Hashcash by Adam Back and b-money by Wei Dai. Nakamoto took proof-of-work from Hashcash but repurposed it: now, computations didn’t protect against spam but created new coins and synchronized the distributed ledger. Miners competed to find a block—a set of transactions with a nonce such that the block’s hash started with a certain number of zeros. Whoever found it first got a reward in bitcoins and the right to add the block to the chain. The difficulty of the task automatically adjusted every 2016 blocks (about two weeks) to keep the average search time at 10 minutes. This wasn’t just protection against abuse—it was the system’s clockwork, turning electricity into money.
🔗 On January 3, 2009, Nakamoto launched the Bitcoin network, mining the first block—the genesis block. Embedded in its data was a message: the headline of an article from The Times that same day—"Chancellor on brink of second bailout for banks." A political statement: while banks were collapsing, demanding state bailouts, a currency was being born that couldn’t be bankrupted or printed by decree. In the first months, the network ran with almost no participants. Nakamoto mined alone, occasionally chatting on forums with enthusiasts. Hal Finney, a cryptographer and colleague from the old cypherpunks mailing list, became the second miner and received the first transaction—10 BTC—on January 12, 2009. The system worked, but the world didn’t notice.
⏳ Adam Back was busy with other projects at the time. Hashcash was part of his résumé, but not his main achievement. He wasn’t tracking new projects in the old mailing lists—the metzdowd list was quickly cluttered with random ideas, most of which died within a month. Bitcoin seemed like just another experiment. It was only in the summer of 2009, when someone mentioned the project in conversation, that Back took an interest. He read the whitepaper, saw the citation of his 12-year-old work, and launched the client. The network had already been running for six months. The blockchain contained tens of thousands of blocks. His invention had become the clockwork of a machine he discovered after the fact. Wei Dai found out about Bitcoin around the same time, also through a mention in correspondence. Neither of them received bitcoins in the early days, didn’t participate in the system’s design, or communicate with Nakamoto before the launch. They were the authors of the parts, not the co-authors of the project.
⚡ By the end of 2010, Bitcoin was no longer a geek’s toy. Mining difficulty had increased 400-fold since launch—CPUs couldn’t keep up. Miners switched to graphics cards: GPUs processed thousands of hashes in parallel, outperforming CPUs by hundreds of times in efficiency. The first mining pool—Slush Pool—appeared in November 2010, pooling participants’ power for stable earnings. In 2013, the era of ASICs began—specialized chips designed exclusively for the SHA-256 algorithm. The first devices from Butterfly Labs and Avalon delivered tens of gigahashes per second, turning graphics cards into museum pieces. By 2015, the total power of the Bitcoin network reached 400 petahashes per second—that’s 400 quadrillion hash attempts every second.
🏭 Proof-of-work, once an anti-spam tool, had become a global industry. Bitmain, a Chinese manufacturer of ASIC miners, became one of the world’s largest buyers of semiconductors. Mining farms occupied abandoned factories in Iceland, hydroelectric plants in Sichuan, warehouses in Texas. By 2017, Bitcoin’s electricity consumption matched that of Ireland. Critics called it ecological madness. Supporters countered that the banking system consumed an order of magnitude more. Adam Back watched this transformation with a mix of pride and bewilderment: his 1997 idea, conceived to protect mail servers from overload, was now burning megawatts to produce digital gold.
📌 Today, in 2026, proof-of-work remains the standard for Bitcoin, but the crypto industry is experimenting with alternatives. Ethereum completed its transition to proof-of-stake in 2022—a consensus mechanism where the right to add blocks is determined not by computational power but by the size of a cryptocurrency deposit. The network’s energy consumption dropped by 99.95%, but new risks emerged: concentration of control among large token holders, vulnerability to cartel collusion. Proof-of-work is criticized for wastefulness, but it remains the only consensus mechanism tested by 17 years of continuous operation under attack.
🔬 In 2014, Adam Back became CEO of Blockstream, a company developing infrastructure on top of Bitcoin, including the Lightning Network for fast payments and Liquid—a sidechain for financial institutions. Wei Dai retreated from public life, working as an engineer at Microsoft Research. Both inventors watch as their ideas transform into an industry with a market capitalization of over a trillion dollars. Hashcash, created to save mail server bandwidth, now secures a network processing hundreds of thousands of transactions daily. Revolutions are built from other people’s tools by those who see connections where inventors saw only scattered parts. Genius isn’t about creating something new—it’s about understanding how to connect the old.