We survey eighteen years of cryptographically secured distributed ledgers, beginning with the publication of Bitcoin: A Peer-to-Peer Electronic Cash System by Satoshi Nakamoto in October 2008. We trace the evolution from proof-of-work value transfer (Bitcoin) to general-purpose smart-contract platforms (Ethereum), the rise and fall of decentralized finance and non-fungible tokens, and persistent technical and social critiques of the technology. We conclude that blockchain has succeeded as a settlement layer for permissionless digital assets while broadly failing to displace conventional databases or institutions outside of speculative applications.
Index Terms— Bitcoin, Ethereum, smart contracts, DeFi, NFT, consensus, cryptography.
On 31 October 2008, an author or authors using the pseudonym Satoshi Nakamoto posted a nine-page paper to the metzdowd.com cryptography mailing list. The paper proposed a system in which an append-only chain of blocks, each containing a Merkle root of transactions and the hash of its predecessor, would be extended by participants competing to find a hash with a given prefix of zero bits. The longest chain would be considered canonical.
This was Bitcoin. The genesis block was mined on 3 January 2009 with the embedded text "The Times 03/Jan/2009 Chancellor on brink of second bailout for banks."
Bitcoin's data structure is a doubly-linked, hash-chained sequence of blocks. Each block header (Fig.\,1) contains a 32-byte previous-block hash, a Merkle root, a timestamp, a difficulty target, and a 32-bit nonce. A miner is rewarded with newly issued bitcoin (the coinbase) plus transaction fees.
The proof-of-work condition is
SHA-256(SHA-256(header)) < T,
where T is a target adjusted every 2016 blocks (~two weeks) to keep mean block time near ten minutes. Total supply is asymptotically capped at 21 million BTC by a halving schedule of the block subsidy.
Vitalik Buterin's white paper appeared in late 2013; the Ethereum mainnet launched 30 July 2015. Ethereum extends Nakamoto's design with the Ethereum Virtual Machine (EVM), a quasi-Turing-complete bytecode runtime, and an account-based state model.
A smart contract is code deployed at an address; calling it executes deterministically against the global state, with execution metered in gas. The canonical example is ERC-20 fungible tokens (Vogelsteller & Buterin, 2015):
function transfer(address to, uint256 v) public returns (bool) {
require(balances[msg.sender] >= v, "insufficient");
balances[msg.sender] -= v;
balances[to] += v;
emit Transfer(msg.sender, to, v);
return true;
}
| Mechanism | Used by | Property |
|---|---|---|
| Proof-of-Work | Bitcoin, Litecoin | Energy-bound, leader election by hash race |
| Proof-of-Stake | Ethereum (post-Merge), Solana | Capital-bound, slashing for misbehavior |
| BFT (PBFT, Tendermint) | Cosmos, Hyperledger | Sub-second finality, fixed validator set |
| DAG protocols | IOTA, Hedera, Aptos | Concurrent ordering of transactions |
Ethereum's transition from PoW to PoS — "The Merge" — completed on 15 September 2022 and reduced network energy consumption by an estimated 99.95% [3].
DeFi is the family of smart-contract systems that re-implement financial primitives — lending, exchange, derivatives — on a public ledger. Notable protocols include Uniswap (constant-product AMM, Adams 2018), Aave, Compound, MakerDAO, and Curve.
The Uniswap v2 invariant for a pool with reserves x and y is
x · y = k, constant.
A trade of Δx in returns Δy = y − k/(x+Δx). Total Value Locked (TVL) peaked near $180 billion in November 2021 and contracted sharply through 2022–2023 amid protocol exploits and the collapse of Terra-Luna and FTX.
The ERC-721 standard (Entriken et al., 2018) defined non-fungible tokens. The 2021 cycle saw Beeple's Everydays: The First 5000 Days sell at Christie's for $69.3M, the launch of OpenSea as a billion-dollar marketplace, and a swift retracement.
The category survives in narrow domains — ENS names, on-chain art, ticketing experiments — but the broader thesis of NFTs as a primary metadata layer for digital ownership remains unproven.
Layer-2 rollups batch many user transactions into a single L1 commitment. Optimistic rollups (Arbitrum, Optimism) assume validity by default with a fraud-proof window; ZK rollups (zkSync, StarkNet, Scroll, Linea) submit succinct validity proofs.
From the earliest days, observers have argued that blockchains rarely solve real coordination problems better than centralized alternatives [5,6]. Major lines of criticism include:
"Blockchains permit a small set of valuable use cases at enormous and persistent cost."
— paraphrased from a 2018 talk by Bruce Schneier.
Fig. 3. 3Blue1Brown, "But how does bitcoin actually work?" Search alternative: ethereum explained.
The 80-byte block header of block #835,000 (March 2024) decomposes as:
version : 0x20000000 (4 bytes) prevBlockHash : 0000…d3a8 (32 bytes) merkleRoot : 5b2c…f019 (32 bytes) timestamp : 0x65fa6f30 (4 bytes; unix epoch) bits (target) : 0x17034219 (4 bytes; difficulty) nonce : 0x9c3a01ef (4 bytes; PoW search var)
To validate: compute SHA-256(SHA-256(header)) and verify the result, interpreted little-endian, is below the target implied by bits. Verify the Merkle root matches a recomputation over the included transactions. Verify the prevBlockHash matches the parent. The full chain is the longest sequence of such valid headers.
| Year | Total losses (USD bn) | Top vector |
|---|---|---|
| 2014 | 0.5 | Mt. Gox custody breach |
| 2018 | 1.7 | Exchange hacks (Coincheck) |
| 2021 | 3.2 | DeFi protocol bugs |
| 2022 | 3.8 | Cross-chain bridge exploits (Ronin, Nomad, Wormhole) |
| 2023 | 1.7 | Mixed; phishing rising |
| 2024 | 2.2 | DPRK-attributed exchange hacks |
Source: Chainalysis, TRM Labs, public incident disclosures.