68

Since bitcoins are being regularly rewarded to miners, will the number of bitcoins continue to grow indefinitely, or will there be a maximum total number of bitcoins in existence? And if there is some kind of limit, what is it and how is it enforced?

0

7 Answers 7

51

Every block introduces 50 new coins in the system. This quantity (50) halves every 210,000 blocks. So, getting the limit of coins it is possible to generate is quite easy : it's the sum of a geometric series.

latex formula

Also, note that this is an upper bound ; the actual quantity will probably be a bit lower due to rounding issues (BTC has a finite number of decimals, 8).

1
  • 2
    Artefact, yes but that is not the theoretical limit... Basically its (10^8)... 100,000,000
    – intmain
    Nov 19, 2012 at 22:34
41

A pre-defined schedule limits the total number of bitcoins so that they gradually approach a total of 21 million (ignoring those that have been lost through deleted or misplaced wallet files). The limit of 21 million bitcoins is "hard-wired" in to the protocol, and there will never be more bitcoins than this:

The Schedule on which Bitcoins are released into the economy through being rewarded to miners

4
  • 5
    Note that there are some assumptions built into the timing and unless the protocol is changed, they will actually be mined a bit earlier than this chart suggests. Aug 31, 2011 at 0:00
  • 4
    Or later--if the value drops precipitously and difficulty takes a while to get low enough again. But the graph is a good rough approximation. Aug 31, 2011 at 0:02
  • 3
    I think that's very unlikely. Even if there are a few precipitous drops, I think that will be outweighed by the overall trend of increasing hashing power (and they'll be followed be precipitous drops in difficulty). But, yes, that is possible. Aug 31, 2011 at 0:04
  • 1
    I think saying "hard wired" is a bit misleading. The production schedule is coded in the software and could be changed to create more bitcoin. Fortunately anyone or any group that could change it is strongly incentivized to maintain the limit as it is integral to our idea of and trust in bitcoin. Feb 26, 2016 at 16:30
15

As Artefact2 mentioned, Bitcoin uses fixed-point math to calculate the block subsidies. So, ignoring the unspendable genesis block, the sundry lost coins and unclaimed rewards, the maximum number of bitcoins is 20999999.9769 BTC.

I found that number through the following python program:

COIN = 100 * 1000 * 1000
nSubsidy = 50 * COIN
nHeight = 0
total = 0
while nSubsidy != 0:
    nSubsidy = 50 * COIN
    nSubsidy >>= nHeight / 210000
    nHeight += 1
    total += nSubsidy

print total / float(COIN)

It's intended to mirror this code from the Bitcoin client:

int64 static GetBlockValue(int nHeight, int64 nFees)
{
    int64 nSubsidy = 50 * COIN;

    // Subsidy is cut in half every 210000 blocks, which will occur approximately every 4 years
    nSubsidy >>= (nHeight / 210000);

    return nSubsidy + nFees;
}

Of course, it only differs from 21 million BTC by only 3 bitcents, so the difference isn't significant.

9

According to a BIP (Bitcoin Improvement Proposal) I found, this code:

 nSubsidy >>= (nHeight / 210000);

will actually wrap the reward generation back to 50 at some point in 2200 or so. Making the supply of bit coins infinite. The python code above does not have this property. The C++ code does. See BIP https://github.com/bitcoin/bips/blob/master/bip-0042.mediawiki

4
  • 1
    This is actually the right answer. Unfortunately many people are not aware of it because they don't do C++. Aug 13, 2015 at 22:29
  • 1
    Gregory - what does this mean in practical terms after 2200?
    – user32235
    Jan 22, 2016 at 0:39
  • 3
    Carefully note the date on that BIP. Feb 26, 2016 at 17:31
  • You should provide a little more details: are you talking of an integer overflow case? Is this code located in the reference implementation or in a pull request proposed by a BIP, and which one? Is it a tracked bug?
    – PPC
    Aug 11, 2017 at 8:53
6

As per the current rules there will only ever be 21 million coins at most (explained in other answers here). However, I'd like to add that this is by general agreement, which means that it can be changed.

See this question: Could there be hyperinflation in Bitcoin?

Looking at the history of money, I am skeptical that there will only ever be 21 million coins. I don't know of too many instances in history when money could be created out of thin air and wasn't. It would be foolish to ignore history. Whether or not there will be more than 21 million coins depends on whether or not "the people" demand it, and once again history is our guide.

1

Re. 'how is it enforced?': The 21 million limit is enforced by game theory. Theoretically, 50% of miners could adopt code that would increase the rate of production but this would break the social contract that Satoshi created, irrevocably harm the integrity of bitcoin, and crash the price. Therefore, anyone or any group that could change the limit is incentivized to not do so.

3
  • 4
    This is incorrect. Full nodes in the network validate all blocks, and if miners would adapt their code to increase the amount of money printed, their blocks would be invalid, and simply ignored by the network. Of course, miners could also try to convince the entire ecosystem to adopt the new rules, but that's much more complicated than just game theory. Jul 21, 2016 at 10:34
  • 1
    Saying, "miners could also try to convince the entire ecosystem to adopt the new rules," is wrong, I think. Wouldn't it just have to be 51% not the entire ecosystem? Nov 8, 2016 at 21:59
  • @AlexMillar The limit is enforced by the social contract. That contract is understood in terms of game theory. Dec 16, 2017 at 10:56
0

I wrote a detailed analysis of the supply and inflation in Bitcoin, for those who are interested in the math behind it. Below is a formula expressing Bitcoin supply as a function of block height:

enter image description here

where S is supply, h is block height, alpha=1/2, beta=210,000, R_0=50 and topless square braces denote the floor function.

Taking its limit as h-> infinity, we arrive at the same result provided by @Artefact2.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.