Wei Dai

Wei Dai is the cypherpunk who proposed b-money in 1998: a protocol that lets pseudonymous online communities hold money balances and enforce contracts without government institutions, pairing computational money creation by proof of work with signed broadcasts and deposit-backed arbitration.

What b-money Proposed

Dai set out to make Tim May’s crypto-anarchy practical by supplying the two services a cooperating community needs — a medium of exchange and a way to enforce contracts — to and by untraceable entities identified only by digital pseudonyms (public keys), with every message signed and encrypted. He described two protocols. In the first, every participant keeps a separate database of how much money each pseudonym owns; those accounts collectively define ownership, and signed broadcasts update them. The second, more practical protocol hands account-keeping to a subset of participants called servers, linked by a Usenet-style broadcast channel, with affected parties checking that a randomly chosen subset of servers processed each transaction.

Money is created computationally: anyone can mint by broadcasting the solution to a previously unsolved problem whose required effort is easy to measure and whose solution is otherwise worthless, with the units credited equal to the computing cost in a standard basket of commodities. Transfers are signed messages that debit the sender and credit the receiver unless the balance would go negative. Contracts carry a maximum reparation per party and a named arbitrator; participants escrow each party’s maximum reparation into a hash-identified account, then settle on conclusion or, in dispute, by each participant ruling on the broadcast evidence. To keep servers honest in the second protocol, each must deposit money against proof of misconduct and periodically publish its money-creation and ownership databases so participants can verify balances and that the supply was not silently inflated.

Place in the Lineage

B-money is the pseudonymous-money-plus-proof-of-work-issuance rung of the cypherpunk proof-of-work story this wiki traces from cost function to working cash. Where Adam Back’s Hashcash supplies a verifiable cost primitive and Nick Szabo’s Bit Gold turns costly proofs into digital monetary objects with title, Dai’s contribution is pseudonymous money plus contract cooperation, with issuance metered by computational work. The connection to Bitcoin is explicit rather than inferred: the Bitcoin whitepaper by Satoshi Nakamoto cites b-money directly, and Bitcoin realizes Dai’s pseudonymous-money goal by combining proof-of-work issuance with a single ordered public history.

See Also

  • b-money - Dai’s 1998 proposal for pseudonymous digital money and contract enforcement
  • Bitcoin Whitepaper - explicitly cites b-money as a predecessor
  • Satoshi Nakamoto - cited b-money and built the live peer-to-peer cash system
  • Proof of Work - the cost-function-to-consensus lineage b-money’s issuance belongs to
  • Hashcash - Back’s proof-of-work cost function, the adjacent primitive rung
  • Adam Back - Hashcash author, the cost-function rung of the lineage
  • Bit Gold - Szabo’s proof-of-work digital-money design, the adjacent money rung
  • Nick Szabo - Bit Gold author whose work parallels b-money’s aims
  • Bitcoin - the system that realized pseudonymous money with proof-of-work issuance
  • Hal Finney - cypherpunk who extended proof of work and ran early Bitcoin
  • Cypherpunk - topic map for the thread Dai’s work belongs to

Sources