OP_RETURN: Bitcoin's On-Chain Data Mechanism
OP_RETURN embeds arbitrary data in Bitcoin transactions without touching the UTXO set. The mechanism, relay policy distinctions, and where developers go wrong.
№ 002BitcoinBitcoin RBF Carve-Out and Package Relay Explained
How Bitcoin's RBF carve-out rules and package relay interact during contested Lightning channel closes, and why the distinction matters.
№ 003BitcoinBitcoin Taproot Scriptpath Spending: What the Chain Reveals
Scriptpath spending exposes your Merkle tree depth to every node operator. The mechanics, the fingerprinting risk, and what wallet developers are missing.
№ 004BitcoinBitcoin Anchor Outputs: Fee Bumping Presigned Transactions
Anchor outputs let channel parties bump fees on presigned Bitcoin transactions at broadcast time, the mechanism, the carve-out policy, and its real limits.
№ 005BitcoinBitcoin UTXO Set Growth and the Cost of Pruned Nodes
The UTXO set grows with every block and pruning cannot touch it. A look at the mechanics, the real numbers, and the long-term cost for node operators.
№ 006BitcoinBitcoin Median Time Past: Block Timestamp Manipulation
Median Time Past prevents miners from faking Bitcoin block timestamps. The exact mechanic, its real limits, and what a 15% miner actually controls.
№ 007BitcoinBitcoin Taproot Leaf Version: Future-Proofing Scripts
The leaf version field reserves space for new Bitcoin script rules without a hard fork, the exact mechanism, the constraints, and what it enables.
№ 008BitcoinBitcoin Sighash Preimage: Input Values and Fee Theft
BIP143 bakes input values into the sighash preimage, making fee-theft via value misrepresentation cryptographically impossible. Mechanism and worked example.
№ 009BitcoinTaproot On-Chain: Keypath vs Scriptpath Spending
A Taproot output looks uniform until it's spent. The witness field reveals exactly which path was taken, and how much it exposes about your setup.
№ 010BitcoinBitcoin Miniscript Satisfier Algorithm Explained
Miniscript's satisfier finds the cheapest non-malleable witness across all valid spending paths. Worked example, malleability rules, and fee impact.
№ 011BitcoinBitcoin Covenants: Introspection vs Template Approaches
Bitcoin's covenant debate splits on one question: how much can a script inspect its own transaction? A clear breakdown of both camps.
№ 012BitcoinBitcoin Compact Blocks and Mempool Divergence Explained
Compact block reconstruction stalls when mempools diverge. This piece traces the exact failure cascade, the 85% overlap threshold, and what miners do about it.
№ 013BitcoinBitcoin Miniscript: Catching Unsatisfiable Script Branches
Miniscript's compiler flags dead spending branches before funds move, a static analysis walkthrough showing exactly how the rejection mechanism works.
№ 014BitcoinTaproot's Fix for Bitcoin Witness Malleability
Taproot commits every spending script into the output's public key at creation, closing the script-substitution gap SegWit left open.
№ 015BitcoinBitcoin's Dust Limit: How the 546-Sat Threshold Works
Bitcoin's dust limit is derived from relay fees and input byte sizes, not policy preference. The exact arithmetic behind 546, 294, and 330 satoshis, explained.
№ 016BitcoinBitcoin's assumevalid and Pruned Nodes Explained
How Bitcoin's assumevalid parameter and pruned node sync work together, what they skip, and what that means for historical audit depth.
№ 017BitcoinBitcoin Sighash Types and Multisig Malleability Resistance
Sighash type selection determines which transaction fields a signature actually commits to, and which fields remain open to mutation. The mechanism, precisely.
№ 018BitcoinBitcoin Taproot Internal Key Commitment Explained
Taproot's internal key commitment binds script paths at construction, making retroactive invention mathematically impossible. The precise mechanism, examined.
№ 019BitcoinBitcoin Mempool Eviction: When Low-Fee Txs Disappear
Bitcoin's mempool purges low-fee transactions during fee spikes, a deliberate mechanism every sender should understand before broadcasting.
№ 020BitcoinBitcoin Taproot Key Path Spending and Script Privacy
Taproot key path spending makes complex Bitcoin contracts indistinguishable from simple payments. The mechanism, the limits, and why adoption breadth matters.
№ 021BitcoinBitcoin Script Minimal Push Encoding Rules Explained
Bitcoin's script interpreter rejects non-minimal push opcodes silently. The exact rule, the malleability problem it solves, and where developers go wrong.
№ 022BitcoinBitcoin AssumeValid and IBD Security Explained
AssumeValid skips signature checks during Bitcoin's initial sync, the mechanics, the real risks, and what malicious peers can and cannot do.
№ 023BitcoinBitcoin Script Clean Stack Rule and Taproot Witness Discount
How Bitcoin's clean stack rule shapes Taproot witness discount calculations, with a concrete worked example of script weight and fee math.
№ 024BitcoinWhy Compact Blocks Can't Compress Unknown Transactions
Compact blocks cut bandwidth by sending transaction IDs, not full data. But that shortcut breaks the moment a peer hasn't seen the transaction before.
№ 025BitcoinBitcoin Weight Units and SegWit Fee Rates Explained
Weight units split transactions into base and witness data, priced at 4:1. The math behind sat/vB, vbytes, and why SegWit inputs cost ~40% less.
№ 026BitcoinBitcoin's Median Time Past Rule Explained
Miners set their own block timestamps. Bitcoin's Median Time Past rule is why that doesn't let them unlock CLTV-protected coins early, the mechanic, precisely.
№ 027BitcoinBitcoin Erlay vs INV Relay: Propagation Compared
Erlay swaps Bitcoin's INV flood for set reconciliation via PinSketch, cutting relay bandwidth ~40%. The mechanism, the math, and the real tradeoffs.
№ 028BitcoinBitcoin Fee Estimation: How Wallets Diverge Under Congestion
Same mempool, two wallets, wildly different fee suggestions. The mechanics of Bitcoin fee estimation algorithms, and why they split under congestion.
№ 029BitcoinBitcoin Script Clean Stack Rules in Tapscript
How Bitcoin's clean stack rule works after Tapscript execution, why it differs from legacy Script, and what it means for spending conditions.
№ 030BitcoinBitcoin Erlay: Set Reconciliation Explained
Erlay replaces Bitcoin's flood-based INV announcements with set reconciliation, cutting transaction bandwidth roughly 40% without sacrificing propagation speed.
№ 031BitcoinBitcoin Timelocks: Absolute vs Relative Lock Mechanisms
OP_CLTV and OP_CSV enforce time against different clocks. Conflating them breaks scripts at consensus level, here is the exact distinction.
№ 032BitcoinBitcoin Signet Custom Challenge: Private Consensus Rules
Bitcoin's signetchallenge parameter lets developers run a fully controlled private test network. The mechanism, its real limits, and how to spin one up.
№ 033BitcoinBitcoin CTV: Trustless Payment Pools Explained
CHECKTEMPLATEVERIFY lets Bitcoin users build trustless payment pools without custodians, the exact mechanic, with a worked three-party example.
№ 034BitcoinBitcoin Replace-by-Fee: Full vs Opt-In Rules Explained
Full RBF and opt-in RBF operate differently at the node level, concrete mechanics, fee-rate thresholds, and what miners actually receive in their mempools.
№ 035BitcoinBitcoin Drivechain: Miner-Secured Sidechain Withdrawals
Drivechain repurposes Bitcoin miners as sidechain withdrawal referees, exact mechanism, real tradeoffs, and what critics in the BIP threads actually argue.
№ 036BitcoinBitcoin Sighash Flags: What Signatures Actually Commit To
Bitcoin sighash flags control exactly which transaction fields a signature binds to, understanding them separates safe wallet code from exploitable wallet code.
№ 037BitcoinBitcoin's Taproot Annex: Protocol Extensions Explained
The Taproot annex sits consensus-valid but relay-blocked inside every Taproot input, a reserved extension point whose format and uses are still being settled.
№ 038BitcoinBitcoin's assumevalid: Script Skipping Explained
Bitcoin Core's assumevalid parameter cuts initial sync from days to hours by skipping old script checks, while still verifying proof-of-work and every UTXO.
№ 039BitcoinCoin Age: The Metric That Shaped Early Proof-of-Stake
Coin age powered the first proof-of-stake blockchains before being quietly retired. It had genuine appeal and a structural flaw that slashing eventually solved.
№ 040BitcoinBitcoin Erlay: Peer Selection and Mempool Privacy
Erlay cuts Bitcoin's relay bandwidth by ~84%. The peer selection logic, decided before any transaction data exists, is where the privacy argument lives.
№ 041BitcoinBitcoin Covenant Opcodes: Trust Assumptions Compared
OP_CTV, OP_VAULT, and CSFS enforce spending rules differently. Their trust assumptions diverge sharply, and that gap determines your real attack surface.
№ 042BitcoinBitcoin's Quadratic Hashing Bug: SegWit's Fix Explained
Bitcoin's sighash algorithm scaled as N² with input count, creating a live attack vector. The mechanics, the 2015 megatransaction, and how BIP143 closed it.
№ 043BitcoinBitcoin's Quadratic Sighash Bug, Explained
Before SegWit, a single crafted transaction could stall nodes for minutes. The mechanism, the real attack surface, and what BIP143 actually changed.
№ 044BitcoinBitcoin Hashrate Escrow and Merged-Mined Sidechains
Hashrate escrow lets Bitcoin miners secure sidechains without a second consensus system, the exact mechanism, BIP 300 numbers, and honest caveats included.
№ 045BitcoinBitcoin's Taproot Annex: Reserved Space Explained
The Taproot annex is a reserved byte field in Bitcoin transactions, committed at signing, consensus-valid today, and blank until a future soft fork fills it.
№ 046BitcoinBitcoin Miniscript: Complex Spending Conditions Explained
Miniscript compiles human-readable Bitcoin spending policies into verifiable, non-malleable Script, concrete mechanism and a worked treasury example inside.
№ 047BitcoinSIGHASH_ANYPREVOUT and Eltoo Payment Channels
APO lets eltoo overwrite old channel states without penalty transactions or revocation archives. A concrete look at the mechanism and what blocks deployment.
№ 048BitcoinBitcoin's Dandelion Protocol and Transaction Origin Privacy
Dandelion splits Bitcoin propagation into stem and flood phases to defeat IP-to-transaction correlation. Mechanics, real tradeoffs, and deployment status.
№ 049BitcoinBitcoin Covenant Proposals: Miner Trust and Recursion
CTV, CSFS, and MATT draw the line between allowed and forbidden differently, and each encodes a distinct bet on miner honesty and script recursion.
№ 050BitcoinBitcoin Transaction Pinning and Lightning Force-Closes
Transaction pinning can trap Lightning Network force-closes at uncompetitive fee rates, burning timelocks. The mechanics, the stakes, and the fixes in progress.
№ 051BitcoinBitcoin Erlay Fanout Phase: Peer Selection Explained
Erlay's fanout phase pushes transactions to a randomized peer subset, not the whole network. A close look at the mechanism, its privacy logic, and its limits.
№ 052BitcoinBitcoin Output Script Versioning and Covenant Enforcement
How Bitcoin's script versioning lets developers add spending rules without breaking old nodes. The mechanics, tradeoffs, and a worked example.
№ 053BitcoinBitcoin Sighash Flags: Partial Signing Explained
Sighash flags let Bitcoin signers commit to only part of a transaction, the mechanics, the real tradeoffs, and what each flag actually does.
№ 054BitcoinBitcoin Silent Payments: Unique Addresses via BIP-352
BIP-352 lets senders derive a fresh Bitcoin address from your published keys alone, no coordination, no on-chain fingerprint. The mechanism, plainly explained.
№ 055BitcoinBitcoin Erlay Protocol: Cutting Node Bandwidth by 40%
Erlay uses set reconciliation to cut Bitcoin node bandwidth ~40%. The mechanism, a worked example, and an honest account of the latency trade-off.
№ 056BitcoinBitcoin Transaction Pinning and Fee Bumping Reliability
Transaction pinning can trap a Lightning channel close at a low fee rate, blocking CPFP and RBF. The mechanics, the stakes, and the fixes underway.
№ 057BitcoinBitcoin Covenant Proposals: Security Assumptions Compared
CTV, CSFS, APO, and CAT rest on structurally different trust models. A mechanical breakdown of what actually separates them, and why it matters.
№ 058BitcoinBitcoin Script and Recursive Covenants: The Opcode Gap
Bitcoin Script cannot inspect its own outputs, making recursive covenants impossible today. The mechanics, the proposals, and the tradeoffs, examined plainly.
№ 059BitcoinBitcoin Tapscript: Conditional Spending, Hidden Branches
Tapscript lets Bitcoin transactions spend one condition while keeping all others permanently hidden. The exact mechanism, with a worked example.
№ 060BitcoinBitcoin Output Scripts and UTXO Set Growth Explained
P2PKH, P2SH, P2WPKH, and P2TR each leave a different footprint on Bitcoin's UTXO set, the tradeoffs affect every full node running today.
№ 061BitcoinBitcoin Locktime and Sequence Numbers Explained
How Bitcoin's locktime field and sequence numbers combine to create relative timelocks. The mechanics, a worked example, and one common misconception.
№ 062BitcoinBitcoin Dust: Why High-Fee Networks Create It Faster
Small UTXOs become unspendable dust when fees exceed their value. High-fee networks accelerate this faster than most people realise.
№ 063BitcoinBitcoin Script Cannot Read External Data
Bitcoin Script is a sealed execution environment with no I/O. This piece traces the exact mechanism, the design reasoning, and what DLCs build around it.
№ 064BitcoinBitcoin Mempool Replacement Policies Explained
Bitcoin nodes apply different replacement rules to the same transaction. The mechanics, tradeoffs, and practical fixes for a stuck or rejected bump.
№ 065BitcoinBitcoin Signet: Controlled Testing Without Testnet Chaos
Signet replaces proof-of-work with a signature check, giving Bitcoin developers stable block times and reproducible test conditions. The mechanism, examined.
№ 066BitcoinBitcoin's Unspendable Outputs and the Shrinking Float
Millions of BTC are locked in addresses no one controls. The supply effect is real; the estimates are murkier than most analysts admit.
№ 067BitcoinBitcoin Proof-of-Work: Why Blocks Cost Real Energy
Bitcoin's Hashcash mechanism forces miners to burn electricity to produce valid blocks. The energy expenditure is the security model, not a design flaw.
№ 068BitcoinBitcoin Node Security: Outbound vs Inbound Connections
Bitcoin Core trusts outbound connections more than inbound, and for precise reasons. The security logic behind that asymmetry, explained for node operators.
№ 069BitcoinBitcoin's Script Version Byte and Soft Fork Upgrades
Bitcoin's one-byte witness version field lets soft forks add new spending rules without invalidating old wallets or splitting the chain.
№ 070BitcoinBitcoin Full Node Economics: A Ten-Year Breakdown
Hardware, bandwidth, and opportunity costs all shape whether running a full Bitcoin node makes financial sense. The arithmetic, read straight.
№ 071BitcoinBitcoin Coin Selection: Fees, UTXOs, and Wallet Algorithms
Coin selection algorithms quietly determine your transaction fees and UTXO bloat. This piece breaks down Branch and Bound, dust, and consolidation strategy.
№ 072BitcoinBitcoin Timelocked Multisig for Inheritance Planning
Timelocked multisig scripts can serve as a Bitcoin dead-man's switch. Here are the mechanics, the design tradeoffs, and the failure modes.
№ 073BitcoinBitcoin Compact Filters: Private Light Client Sync
BIP 157/158 compact filters let Bitcoin light clients verify transactions locally without exposing addresses to any full node. The mechanism, plainly explained.
№ 074BitcoinBitcoin Anti-Fee-Sniping: Mechanism and Miner Incentives
Anti-fee-sniping uses nLocktime to make block reorgs unprofitable. Learn the exact mechanism, the privacy tradeoff, and why it matters more each halving.
№ 075BitcoinLightning Node Routing Revenue: The Real Net Math
Channel open/close costs and rebalancing fees routinely exceed routing income. A breakdown of the full cost structure most node dashboards hide.
№ 076BitcoinBitcoin SPV Bloom Filters and the Privacy Leak
SPV bloom filters were designed to obscure your addresses from nodes, the intersection attack math shows why they don't, and what actually works instead.
№ 077BitcoinBitcoin Script Has No Loops: Security by Design
Bitcoin Script omits loops entirely, not as a limitation, but as a deliberate defense against Denial-of-Service attacks on every node in the network.
№ 078BitcoinBIP-32 HD Wallets: How Key Derivation Actually Works
BIP-32 derives millions of Bitcoin keys from one seed without exposing the root. The exact mechanism, the hardening tradeoff, and where the real risks sit.
№ 079BitcoinBitcoin Halving Explained: The Code That Slows New Coin Supply
Every four years, Bitcoin cuts its mining reward in half. Here's what that actually means for supply, miners, and the 21 million cap, without the price hype.
№ 080BitcoinPSBT and Bitcoin Multisig: The Offline Signing Format
BIP-174's PSBT format lets distributed signers approve Bitcoin transactions independently, on air-gapped devices, with no shared online session required.
№ 081BitcoinBitcoin Compact Block Relay: Latency, Numbers, Mechanics
Compact block relay cuts Bitcoin's propagation bandwidth by ~98%. BIP 152 explained with figures, a worked example, and misconceptions addressed.
№ 082BitcoinWhy Bitcoin's Timechain Makes Censorship Very Costly
Bitcoin's block structure makes retroactively censoring a confirmed transaction ruinously costly. Here's the exact mechanism, with numbers.
№ 083BitcoinBitcoin Network Topology: Speed vs Privacy Explained
How Bitcoin's peer-to-peer topology shapes how fast your transaction spreads and how private it stays. The tradeoff most guides skip entirely.
№ 084BitcoinBitcoin Schnorr Signatures and Key Aggregation Explained
Schnorr signatures let multiple Bitcoin signers collapse into one. Here's exactly how key aggregation works and why it cuts fees and improves privacy.
№ 085BitcoinBitcoin Replace-by-Fee: Why Merchants and Devs Clash
Replace-by-Fee lets senders bump stuck transactions, but it breaks zero-confirmation payments. Here's the real mechanic behind the tension.
№ 086BitcoinHow Bitcoin Script Evaluates Multi-Condition Spending Paths
Bitcoin's Script interpreter walks a stack machine through every spending condition. Here's exactly how multi-path validation works, with a concrete example.
№ 087BitcoinBitcoin Halving and Transaction Fees: What Changes
The block reward halving cuts miner subsidies, not fee revenue. Here's the exact mechanism, with numbers, and why the distinction matters.
№ 088BitcoinBitcoin Pay-to-Script-Hash: How P2SH Works
P2SH lets Bitcoin hide multisig and contract logic until coins are spent. Here's the exact mechanism, with a worked example.
№ 089BitcoinBitcoin's Coinbase Maturity Rule Explained
Bitcoin forces miners to wait 100 blocks before spending a block reward. Here's the exact mechanic, why it exists, and what it prevents.
№ 090BitcoinHow SegWit Changed Bitcoin Transaction ID Calculation
SegWit didn't just shrink fees. It fixed a subtle flaw in how Bitcoin transaction IDs are built. Here's the exact mechanism, explained clearly.
№ 091BitcoinWhy High Bitcoin Fees Don't Always Mean Faster Confirmation
A higher fee doesn't guarantee a faster Bitcoin confirmation. Here's the exact mechanics of mempool prioritisation, and where the logic breaks down.
№ 092BitcoinHow Bitcoin's UTXO Model Prevents Double Spending
Bitcoin stops double spending without a bank using unspent transaction outputs. Here's the exact mechanism, with a worked example.
№ 093BitcoinHow Hash Functions Prevent Bitcoin Block Malleability
Cryptographic hash functions lock every Bitcoin block into place. Here's the exact mechanism that makes retroactive tampering computationally absurd.
№ 094BitcoinHow Taproot Changed Bitcoin Multisig's On-Chain Footprint
Taproot made complex Bitcoin multisig wallets look identical to single-sig on-chain. Here's the exact mechanism, the tradeoffs, and what it means for privacy.
№ 095BitcoinBitcoin Dust Threshold: What Makes a UTXO Unspendable
The Bitcoin dust threshold isn't arbitrary. Here's the exact fee logic that turns a tiny UTXO into an unspendable output — and why it matters.
№ 096BitcoinOP_RETURN: How Bitcoin Stores Data On-Chain
OP_RETURN lets anyone embed up to 80 bytes of arbitrary data in a Bitcoin transaction. Here's exactly how it works and what it costs.
№ 097BitcoinBitcoin Institutionalization Faces a Fundamental Clash
A circular economy founder argues bitcoin institutionalization works against the asset's original design. Here's where the friction actually lives.
№ 098BitcoinHow Mempool Congestion Spreads Across Node Clusters
Mempool congestion doesn't hit all nodes at once. Here's how geographic propagation works and why your fee estimate can lag reality by minutes.