Block-anchored research
Bitcoin Supply
A reconciled account of protocol-permitted issuance, the Bitcoin Core UTXO set, and current UTXOs classified as mathematically unspendable.
Methodology & audit record
- Block hash
- –
- Atomic reconciliation
- –
- Source anchors
- –
- Independent full UTXO audit
- –
Current UTXOs grouped by deterministic script and key classifications. Each output is counted once under its primary classification; any additional matching predicates are retained as audit information, not added again. This retained evidence record is not an estimate of lost keys, dormant coins, liquidity, or market float.
| Rule | Classification | UTXOs | Value | Share |
|---|---|---|---|---|
| Waiting for an aligned classifier result… | ||||
| Block | Event | Evidence | Amount | Record |
|---|---|---|---|---|
| Loading canonical event publication… | ||||
Recent, bounded canonical evidence only. It is separate from the supply accounting identities above.
The primary accounting identity is Scheduled Supply − Money Supply (UTXO Set) = Not Present in UTXO Set. Its components are the genesis coinbase, BIP30-overwritten outputs, unclaimed block rewards, and outputs pruned by Bitcoin Core's unspendable-script rule.
Effective Supply applies a second, separate identity: Money Supply − Known Unspendable UTXOs. The classifier operates on the current UTXO set at the same block anchor. It makes no claim about lost keys, dormant coins, intentional burns, liquidity, or quantum exposure.
BitcoinStats UTXO Spendability Method v2. The table above is the current, anchor-aligned result of the versioned S3 classifier contract. Its source, exact predicates and counting policy are recorded below; it does not estimate lost keys, liquidity, or market float.
Publication is fail-closed: the UTXO snapshot, output analytics and block history must agree on one block hash, and both published reconciliation deltas must be zero satoshis. The snapshot card records its source anchors, classifier provenance and independent full-UTXO audit state.
See Supply Evidence for the complete first reconciliation and Unclaimed Block Rewards for the block-level evidence.
v2 — current classifier contract.
The live Start9 S3 binary and contract are pinned by SHA-256; each public result must match its UTXO-set height and block hash. Rule identifiers BSU-01 through BSU-07 are the BitcoinStats public taxonomy.
| Rule | Classification | Exact predicate | Why it cannot be spent |
|---|---|---|---|
| BSU-01 | Legacy public-key encoding rejected | An exact single-push OP_CHECKSIG script contains bytes rejected by legacy SEC public-key encoding checks. | CHECKSIG cannot validate a signature with bytes that do not form an accepted legacy public-key encoding. |
| BSU-02 | Legacy public key outside secp256k1 | An exact single-push OP_CHECKSIG script contains an accepted SEC serialization that is not a secp256k1 point. | No ECDSA signature can verify against public-key bytes that do not represent a valid curve point. |
| BSU-03 | Bare multisig quorum unsatisfiable | An exact bare M-of-N OP_CHECKMULTISIG script contains fewer than M curve-valid public keys. | At most one signature can match each curve-valid key, so the threshold is unreachable. |
| BSU-04 | HASH160 operand-width contradiction | An exact P2PKH-like or P2SH-like HASH160 comparison directly pushes a value not 20 bytes long. | HASH160 always produces a 20-byte vector, so equality to a differently sized vector is impossible. |
| BSU-05 | Empty HASH160 equality contradiction | The script is exactly OP_DUP OP_HASH160 OP_0 OP_EQUALVERIFY OP_CHECKSIG. | OP_HASH160 always produces 20 bytes; it cannot equal the empty vector required by OP_0. |
| BSU-06 | SegWit v0 witness-program width violation | An exact native version-0 witness program has a direct program length from 2 through 40 other than 20 or 32. | BIP141 defines version-0 witness programs only at lengths 20 and 32. |
| BSU-07 | Taproot output key cannot be lifted | An exact OP_1 PUSH32 Taproot output has an x-coordinate for which BIP341 lift_x fails. | Neither Taproot key-path nor script-path validation can bind to a non-existent secp256k1 output key. |
6627e54bfb391b6c38763825f950f46e1c1279ea5cfeca37ff756fa9fdf819440cc92dc621f7706e4cc1311f7d4a94419e8d7a17efad40806eae96c798e959eaBitcoin's theoretical maximum supply is 20,999,999.9769 ₿ - not exactly 21 million. This is a direct consequence of how Bitcoin Core computes block subsidies using integer (floor) division in satoshis. From epoch 10 onward, each halving introduces a sub-satoshi rounding loss that accumulates to 2,310,000 sat (0.0231 ₿) that will never exist.
The remaining issuance on this page counts down to the true theoretical maximum of 20,999,999.9769 ₿.
No new bitcoin will ever be created after epoch 32 (≈ year 2139), when floor(1 sat / 2) = 0.
- Maximum Supply - why the hard cap is exactly 20,999,999.9769 ₿, not 21 million, with the full epoch table.
- Subsidy Epochs - current epoch progress, blocks remaining, and halving countdown.
- Supply Evidence - the exact genesis, BIP30, unclaimed reward, and provably prunable output reconciliation.
- Unclaimed Block Rewards - a combined, filterable record of subsidy and fee shortfalls.
- Deterministic Supply Event Ledger - a bounded canonical record of recent provably prunable outputs and unclaimed reward events.
- UTXO Spendability Evidence - an inventory of current UTXOs classified as mathematically unspendable.