Bitcoin Supply·BitcoinStats.io

∞/21M

Block-anchored research

Bitcoin Supply

A reconciled account of protocol-permitted issuance, the Bitcoin Core UTXO set, and current UTXOs classified as mathematically unspendable.

Waiting for a verified block anchor… Reconciliation unavailable Unavailable
Scheduled Supply–
Not Present in UTXO Set–
Money Supply (UTXO Set)–
Known Unspendable UTXOs–
Effective Supply–
Block-Anchored Supply Reconciliation
Verifying
Waiting for a verified block anchor…
Scheduled Supply − Money Supply = Not Present in UTXO Set
Scheduled Supply
–
Money Supply (UTXO Set)
–
Not Present in UTXO Set
–
Money Supply − Known Unspendable UTXOs = Effective Supply
Known Unspendable UTXOs
–
Effective Supply
–
Methodology & audit record
Block hash
–
Atomic reconciliation
–
Source anchors
–
Independent full UTXO audit
–
Protocol Issuance Schedule
New Supply (24h)
–
New Supply (1y)
–
Issuance Remaining
–
Max Supply
20,999,999.9769 ₿
Protocol Issuance Milestones
–
–
Upcoming Issuance Milestones (est.)
–
–
Scheduled Supply Curve
scheduled supply since genesis
Observed chain Estimated schedule Halving
Loading supply curve…
Current UTXO Spendability Classification
Waiting for an aligned classifier result

Current UTXOs grouped by deterministic script and key classifications. Each output is counted once under its primary classification; any additional matching predicates are retained as audit information, not added again. This retained evidence record is not an estimate of lost keys, dormant coins, liquidity, or market float.

RuleClassificationUTXOsValueShare
Waiting for an aligned classifier result…

Browse the current classified-outpoint inventory, exact predicates and per-rule evidence in UTXO Spendability Evidence →

Deterministic Supply Event Ledger
Open event ledger →
BlockEventEvidenceAmountRecord
Loading canonical event publication…

Recent, bounded canonical evidence only. It is separate from the supply accounting identities above.

Methodology & Audit Record

The primary accounting identity is Scheduled Supply − Money Supply (UTXO Set) = Not Present in UTXO Set. Its components are the genesis coinbase, BIP30-overwritten outputs, unclaimed block rewards, and outputs pruned by Bitcoin Core's unspendable-script rule.

Effective Supply applies a second, separate identity: Money Supply − Known Unspendable UTXOs. The classifier operates on the current UTXO set at the same block anchor. It makes no claim about lost keys, dormant coins, intentional burns, liquidity, or quantum exposure.

BitcoinStats UTXO Spendability Method v2. The table above is the current, anchor-aligned result of the versioned S3 classifier contract. Its source, exact predicates and counting policy are recorded below; it does not estimate lost keys, liquidity, or market float.

Publication is fail-closed: the UTXO snapshot, output analytics and block history must agree on one block hash, and both published reconciliation deltas must be zero satoshis. The snapshot card records its source anchors, classifier provenance and independent full-UTXO audit state.

See Supply Evidence for the complete first reconciliation and Unclaimed Block Rewards for the block-level evidence.

BitcoinStats UTXO Spendability Method

v2 — current classifier contract. The live Start9 S3 binary and contract are pinned by SHA-256; each public result must match its UTXO-set height and block hash. Rule identifiers BSU-01 through BSU-07 are the BitcoinStats public taxonomy.

Scope
The classifier evaluates scriptPubKey bytes of current UTXOs only, at the same height and block hash as the published UTXO-set amount.
Lost keys, dormant coins, intentional burns, liquidity, market float, and probabilistic cryptographic assumptions are out of scope.
RuleClassificationExact predicateWhy it cannot be spent
BSU-01 Legacy public-key encoding rejected An exact single-push OP_CHECKSIG script contains bytes rejected by legacy SEC public-key encoding checks. CHECKSIG cannot validate a signature with bytes that do not form an accepted legacy public-key encoding.
BSU-02 Legacy public key outside secp256k1 An exact single-push OP_CHECKSIG script contains an accepted SEC serialization that is not a secp256k1 point. No ECDSA signature can verify against public-key bytes that do not represent a valid curve point.
BSU-03 Bare multisig quorum unsatisfiable An exact bare M-of-N OP_CHECKMULTISIG script contains fewer than M curve-valid public keys. At most one signature can match each curve-valid key, so the threshold is unreachable.
BSU-04 HASH160 operand-width contradiction An exact P2PKH-like or P2SH-like HASH160 comparison directly pushes a value not 20 bytes long. HASH160 always produces a 20-byte vector, so equality to a differently sized vector is impossible.
BSU-05 Empty HASH160 equality contradiction The script is exactly OP_DUP OP_HASH160 OP_0 OP_EQUALVERIFY OP_CHECKSIG. OP_HASH160 always produces 20 bytes; it cannot equal the empty vector required by OP_0.
BSU-06 SegWit v0 witness-program width violation An exact native version-0 witness program has a direct program length from 2 through 40 other than 20 or 32. BIP141 defines version-0 witness programs only at lengths 20 and 32.
BSU-07 Taproot output key cannot be lifted An exact OP_1 PUSH32 Taproot output has an x-coordinate for which BIP341 lift_x fails. Neither Taproot key-path nor script-path validation can bind to a non-existent secp256k1 output key.
Counting and reconciliation
Each current outpoint contributes at most once to Known Unspendable UTXOs, even when it matches more than one predicate.
A stable primary-classification order produces the public category rows; matching classifications remain an audit check and are not added to the total again.
The primary category totals must equal the union total, and Known Unspendable UTXOs plus Effective Supply must equal Money Supply.
Pinned source
Classifier binary SHA-256: 6627e54bfb391b6c38763825f950f46e1c1279ea5cfeca37ff756fa9fdf81944
Classifier contract SHA-256: 0cc92dc621f7706e4cc1311f7d4a94419e8d7a17efad40806eae96c798e959ea
Protocol Issuance Schedule

Bitcoin's theoretical maximum supply is 20,999,999.9769 ₿ - not exactly 21 million. This is a direct consequence of how Bitcoin Core computes block subsidies using integer (floor) division in satoshis. From epoch 10 onward, each halving introduces a sub-satoshi rounding loss that accumulates to 2,310,000 sat (0.0231 ₿) that will never exist.

The remaining issuance on this page counts down to the true theoretical maximum of 20,999,999.9769 ₿. No new bitcoin will ever be created after epoch 32 (≈ year 2139), when floor(1 sat / 2) = 0.

Related Research