What it means
Dai described two protocols for people represented by digital pseudonyms to transact without a conventional central payment operator. The first asked every participant to maintain a database of balances, while the second assigned that recordkeeping to a subset of servers and described checks intended to keep them honest.
The design used signed messages to authorise transfers. In its illustrative first protocol, a sender balance would be debited and a recipient credited when a valid message was broadcast, unless it would create a negative balance.
That is a proposed rule in a thought-through design, not a description of transactions occurring on a live B-money network. Dai also discussed creating units through computational work and a way to link effort to issuance.
His appendix recognised the problem of agreeing on computing cost when technology changes and proposed an alternative bidding process, so a manager should not call the proposed issuance schedule a fixed live monetary policy. The proposal included a method for contracts that set out maximum reparations and an arbitrator for disputes, which is more than a simple payment slogan but does not mean the system was deployed or legally enforceable, because technical agreement about ledger balances and real-world contract enforcement are separate matters.
B-money is often mentioned in histories of cryptocurrency because it explored pseudonymous identities, collective recordkeeping, digital signatures and work-based issuance before Bitcoin. Similarity does not prove that every later system uses the same design or that Dai created a working Bitcoin predecessor, and speculative claims about the identity of Bitcoin's creator should be avoided.
Bitcoin is a live network with its own block validation, chain-selection and monetary rules. The early B-money protocol used per-participant balances rather than a Bitcoin-like chain of blocks, and the second B-money protocol used selected servers, which is not the same as assuming every participant independently validates every modern blockchain.
When a product pitch says it is based on B-money, ask for the actual launched network, code, custody arrangement, governance and independent evidence, because the historical name does not supply a price feed, regulatory status or security audit. For a non-finance manager, the lasting lesson is to ask who records balances, who can change them, how transfers are authenticated and how disputes are resolved.
Those questions apply to current payment tools, whose actual design supplies the answers.
In practice
Real-world examples.
Example
A training class simulates Dai first design with five participants keeping the same balance table. A signed transfer of 4 units from a 10-unit account would produce 6 and 4 in the two relevant accounts if validated. The exercise is not a live payment.
Example
A fintech vendor calls its product B-money inspired. Its manager checks whether an actual network exists, who maintains balances, and what asset customers receive. The 1998 essay alone does not certify the vendor or create a redeemable token.
Example
A historian compares Dai two proposed protocols. In one all participants keep records; in the other a subset of servers does. She labels both as proposals and does not describe one as a deployed blockchain with a historical market price.
Formula
Calculation
Illustrative proposed balance update: new sender balance = old sender balance - transfer amount, and new recipient balance = old recipient balance + transfer amount, if validation succeeds. For a 10-unit sender transferring 4 units to a zero-unit recipient, balances become 6 and 4. This explains the paper accounting idea, not live settlement.Case study
Seen in the real world.
Fictional example: Solstice Media considered accepting a vendor proposed digital token. The sales deck said the token was backed by the original B-money protocol and showed a projected return. Financial analyst Imani found that Wei Dai's B-money was a 1998 design paper and not an operating asset with a native market. Imani asked the vendor to identify its own network, issuer, transfer rules, custodian, and redemption terms.
The vendor had built a separate token that borrowed language from the historical proposal. Solstice compared that actual token risks and legal claims rather than assuming the old essay guaranteed value. The team decided not to treat a historical concept as payment assurance. It documented the distinction between research inspiration and a functioning asset before making any commercial acceptance decision.
Watch out
Common mistakes.
- Describing B-money as a launched cryptocurrency with a current price or official token.
- Treating proposed computational issuance or contract enforcement as evidence of a working, legally enforceable system.
- Conflating Dai two protocol variants with the later Bitcoin blockchain design.
Questions
People also ask.
Can someone buy original B-money?
No original live B-money network or token came from the 1998 proposal. A similarly named product would have to be assessed on its own merits.
Did B-money become Bitcoin?
No. It was an earlier proposal sharing some broad ideas, while Bitcoin was a separate implemented system with different mechanics.
Why study it if it never launched?
It raises useful design questions about balances, authentication, issuance, and dispute handling that still matter when reviewing digital payment systems.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related