The Bank for International Settlements summarized several criticisms of bitcoin in Chapter V of their 2018 annual report. The criticisms include the lack of stability in bitcoin's price, the high energy consumption, high and variable transactions costs, the poor security and fraud at cryptocurrency exchanges, vulnerability to debasement (from forking), and the influence of miners.[187][188][189]
Bitcoin has been criticized for the amount of electricity consumed by mining. As of 2015, The Economist estimated that even if all miners used modern facilities, the combined electricity consumption would be 166.7 megawatts (1.46 terawatt-hours per year).[129] At the end of 2017, the global bitcoin mining activity was estimated to consume between one and four gigawatts of electricity.[202] Politico noted that the even high-end estimates of bitcoin's total consumption levels amount to only about 6% of the total power consumed by the global banking sector, and even if bitcoin's consumption levels increased 100 fold from today's levels, bitcoin's consumption would still only amount to about 2% of global power consumption.[203]
Transactions are defined using a Forth-like scripting language.[3]:ch. 5 Transactions consist of one or more inputs and one or more outputs. When a user sends bitcoins, the user designates each address and the amount of bitcoin being sent to that address in an output. To prevent double spending, each input must refer to a previous unspent output in the blockchain.[67] The use of multiple inputs corresponds to the use of multiple coins in a cash transaction. Since transactions can have multiple outputs, users can send bitcoins to multiple recipients in one transaction. As in a cash transaction, the sum of inputs (coins used to pay) can exceed the intended sum of payments. In such a case, an additional output is used, returning the change back to the payer.[67] Any input satoshis not accounted for in the transaction outputs become the transaction fee.[67]
The successful miner finding the new block is rewarded with newly created bitcoins and transaction fees.[83] As of 9 July 2016,[84] the reward amounted to 12.5 newly created bitcoins per block added to the blockchain. To claim the reward, a special transaction called a coinbase is included with the processed payments.[3]:ch. 8 All bitcoins in existence have been created in such coinbase transactions. The bitcoin protocol specifies that the reward for adding a block will be halved every 210,000 blocks (approximately every four years). Eventually, the reward will decrease to zero, and the limit of 21 million bitcoins[f] will be reached c. 2140; the record keeping will then be rewarded solely by transaction fees.[85]
Computing power is often bundled together or "pooled" to reduce variance in miner income. Individual mining rigs often have to wait for long periods to confirm a block of transactions and receive payment. In a pool, all participating miners get paid every time a participating server solves a block. This payment depends on the amount of work an individual miner contributed to help find that block.[8]

Wu claims that Antbleed, which has since been patched, was only vestigial code left in by mistake when engineers were trying to build a kill switch for a customer’s own use. There was some skepticism about this explanation, but because the S9’s firmware is open source, users are confident in the patched version. Still, the discovery of it was a startling reminder of the need for diversity in the mining hardware industry.
The difficulty is a number that regulates how long it takes for miners to add new blocks of transactions to the blockchain. Because the target is such an unwieldy number with tons of digits, people generally use a simpler number to express the current target. This number is called the mining difficulty.  This difficulty value updates every 2 weeks to ensure that it takes 10 minutes (on average) to add a new block to the blockchain. The difficulty is so important because, it ensures that blocks of transactions are added to the blockchain at regular intervals, even as more miners join the network. If the difficulty remained the same, it would take less time between adding new blocks to the blockchain as new miners join the network. The difficulty adjusts every 2016 blocks. At this interval, each node takes the expected time for these 2016 blocks to be mined (2016 x 10 minutes), and divides it by the actual time it took. It can be calculated as follows:

With no ties to a national economy and lofty goals, Bitcoin's price is famously volatile. Prices have soared and plummeted in the wake of various national policies, financial deals, competing cryptocurrencies, and fluctuating public opinion. On the other hand, as many sovereign nations find themselves with currencies that are also vulnerable, the citizens of countries such as China and Venezuela are turning increasingly to virtual currencies.
Exchanges, however, are a different story. Perhaps the most notable Bitcoin exchange hack was the Tokyo-based MtGox hack in 2014, where 850,000 bitcoins with a value of over $350 million suddenly disappeared from the platform. This doesn’t mean that Bitcoin itself was hacked; it just means that the exchange platform was hacked. Imagine a bank in Iowa is robbed: the USD didn’t get robbed, the bank did.
As noted in Nakamoto's whitepaper, it is possible to verify bitcoin payments without running a full network node (simplified payment verification, SPV). A user only needs a copy of the block headers of the longest chain, which are available by querying network nodes until it is apparent that the longest chain has been obtained. Then, get the Merkle branch linking the transaction to its block. Linking the transaction to a place in the chain demonstrates that a network node has accepted it, and blocks added after it further establish the confirmation.[2]
The domain name "" was registered on 18 August 2008.[15] In November 2008, a link to a paper authored by Satoshi Nakamoto titled Bitcoin: A Peer-to-Peer Electronic Cash System[5] was posted to a cryptography mailing list. Nakamoto implemented the bitcoin software as open source code and released it in January 2009.[16][17][10] Nakamoto's identity remains unknown.[9]