There is a place in the book of Judges where the river narrows and a war ends, not with a battle, but with a vocabulary test. Gilead held the crossings. Every man who wanted to go home had to speak one word. Say shibboleth. Those who said sibboleth were killed at the water, and the text gives the number without flinching: forty and two thousand. A whole tribe undone by a consonant. I keep thinking about that ford. I think about it every time I watch somebody try to recite twelve words from memory.
I. The Word Nobody Can Fake
A shibboleth is not a password.
A password is a secret, and secrets can be stolen, bought, or tortured out of a man. A shibboleth is something else. A shibboleth is a thing you either are or are not, surfacing in the mouth without permission. The Ephraimite at the ford was not guarding a secret. He simply could not make the sound. He had every intention of lying and his own tongue betrayed him anyway.
That is the harder kind of test. Not what do you know. What are you.
Bitcoin runs on both kinds. The private key is a secret. But the schedule, the arithmetic that halves the subsidy at a block height nobody voted for, that is the other thing. It does not ask what you believe. It asks what you did.
II. Two Thousand and Forty Eight Words
Here is the part almost nobody reads.
When you write down a seed phrase, you are not writing down words. You are writing down numbers wearing words as clothing. There are exactly 2048 in the list, because 2048 is two to the eleventh, and eleven bits is what one word has to carry. Your entropy gets chopped into eleven-bit slices and each slice points at a line. The words are a costume for binary.
But somebody had to choose the 2048. That is where it gets strange.
Go and read the rules the wordlists were built under and you find a document nobody expects. The French list was assembled under sixteen numbered constraints, and the sixteenth reads: no embarrassing words, in a very very large scope, or belonging to a particular religion. The Italian list forbids words that remind one of negative, sad or bad things. The Spanish list was built so that no word in it appears in any other language list, which means a single word tells you which tongue you are holding.
Sit with that first one for a moment.
The men who built the vocabulary of Bitcoin custody sat down and deliberately swept the religion out of it. Not by accident. By rule. Every word you could possibly be handed when you generate a wallet was screened to make sure it carried no god in it.
And then we went and built cathedrals out of the thing anyway.
III. The Checksum Is the Consonant
The other rule is quieter and it is the one that does the killing.
The specification itself says the checksum is the first ENT over 32 bits of the SHA256 hash of your entropy, appended to the end. In plain speech: a twenty-four word phrase carries eight bits that are not entropy at all. They are a receipt. They exist to disagree with you.
Eight bits is one in two hundred and fifty six. Which means if you sit down and write twenty-four real English words from the real list, in a real order, out of your own head, the wallet will reject you two hundred and fifty five times out of two hundred and fifty six. Every word spelled correctly. Every word on the list. Refused anyway.
That is sibboleth. That is exactly sibboleth. The words were right. The sound was wrong.
There is no arguing with it. No explaining to the software that you meant well, that you were tired, that the eleventh word was smudged. The checksum is not listening for sincerity. It is listening for one consonant, and the consonant is arithmetic.
Every word on the list is designed to be identified by its first four letters alone, which is its own small mercy. The list forgives your handwriting. It does not forgive your arithmetic.
IV. The Halving Is the Ford
Now bring the cut into it.
The halvings landed in 2012, then 2016, then 2020, then 2024, and the next one waits at block 1,050,000 like a man standing in shallow water. None of these is the Halfture. Each one is a rehearsal, a dress run, a smaller crossing that teaches the shape of the larger one. The Halfture is the last cut, the terminal halving out near block 6,930,000, where the subsidy finally rounds to nothing and the ledger stops issuing forever. The Halfture is the Rapture. Only that one.
But every rehearsal works the same way the ford works.
The cut does not ask your opinion of Bitcoin. It does not know whether you are a believer or a tourist or a man who bought at the top and has been quietly dying ever since. It arrives at a block height, halves the flow, and moves on. What it does is sort. Not by intention. By position.
You were holding, or you were not. That is the entire examination.
And I will say the thing plainly here, once, and then leave it alone: you have to hold Bitcoin to be saved. I mean that as theology and not as a prospectus. I do not know what the price does. Nobody who tells you they know is telling you the truth, and if you take a sermon for a trade you deserve the trade you get. But the doctrine is not about price. The doctrine is about which side of the water you are standing on when the count comes.
V. What the Ford Does Not Care About
The Gileadites did not check papers.
That detail matters more than it looks. They did not verify lineage, or take testimony, or consult a registry of who lived where. A registry can be forged, or lost in a fire. They asked for a sound, because a sound is the one credential a man carries in his body and cannot hand to anyone else.
A seed phrase is like that and unlike it at once. Unlike, because a phrase can in fact be handed over, which is why the whole architecture of custody is really an architecture of not handing it over. Like, because at the moment of use nothing else counts. Not your conviction, not the years you spent explaining the protocol to relatives at Christmas. Twelve words in the right order, or nothing.
I have written before about the discipline of requiring two witnesses before a thing is established, and multisig is the closest Bitcoin comes to mercy on this point: it lets you be partly wrong and survive. But multisig only widens the ford. Somewhere at the end of every branch there is still a string of words and a hash that either agrees or does not.
VI. Forty and Two Thousand
The number in Judges is brutal and I do not want to soften it.
Forty-two thousand men who thought they were going home. The instrument was not a sword first, it was a word, and the word was a grain of wheat: shibboleth means an ear of corn, or a flowing stream, depending on who is translating. A harvest word. A river word. Used as a blade.
Bitcoin keeps its own count at the water, in public. The coins nobody can move are the Ephraimites of this story. Not villains. Not fools, mostly. People who had the thing and could not say the word in time. A drive thrown out. A phrase on a receipt that faded. A man who was certain he would remember.
The chain does not mourn them. It records that the coins did not move.
That is what a hard rule looks like from the inside. Not cruelty, which requires an intention, but something colder and, I think, cleaner: a system that keeps its promise exactly, to everyone, including the people the promise destroys.
VII. The Counter-Sermon
Here is the best case against everything above, and it is a strong one.
The shibboleth story is not about integrity. It is about slaughter at a river crossing, and reading it as an inspiring parable is a grotesque use of somebody else’s massacre. The Gileadites were killing men who had already surrendered, using an accident of dialect as the warrant. If Bitcoin’s supply schedule works like that, that is an indictment and not a compliment.
The second objection lands harder. A system that destroys people for a typo is not a system with high standards. It is a system with bad ergonomics. Every other financial rail on earth has a recovery path, and the reason is not weakness, it is that humans forget things and the humane response is to build for that. We have decided to call our missing undo button a virtue.
Third: the wordlist rule I made so much of cuts the other way. The builders swept religion out of the vocabulary on purpose. They wanted an instrument with no altar in it. Everything here is me putting the altar back into a room that was cleaned specifically so people like me would stay out.
And fourth, the largest one. Maybe none of this saves anyone. Maybe the cuts keep landing, the schedule runs out toward its terminal block, and it turns out to have been an interesting monetary experiment and nothing more. No ford. No sorting. Just an asset, doing what assets do, indifferent to the sermons we hung on it.
I hold anyway. I am telling you what I do, not what you should do.
VIII. Say the Word
So the schedule walks toward the Halfture, cut by cut, and each cut is a narrow place in the river.
You do not get to argue at the ford. You do not get to explain that you understood the assignment, that you were early, that you meant to. The count is taken from where you are standing and nothing else. There are eight bits in a long phrase that exist only to tell you no, and a block height out past all of our lifetimes where the issuance stops, and between here and there the only thing asked of anyone is whether they can still say the word when the water is loud.
Practice it now, while nobody is watching.
Buy Bitcoin, Prepare for Halfture.
FAQ
What does the Bitcoin Halving Shibboleth actually mean?
It is a frame, not a feature of the protocol. A shibboleth is a test you pass by what you are rather than by what you know, and the halving works the same way: it arrives at a fixed block height, cuts the subsidy, and sorts holders from non-holders without asking anyone’s opinion. The Halfture, the final cut, is the terminal version of that test.
Why are there exactly 2048 words in a Bitcoin seed phrase list?
Because 2048 is two to the eleventh power, so each word encodes exactly eleven bits of your entropy. The BIP39 wordlists were also built under language-specific rules, including a French constraint against words belonging to a particular religion and an Italian constraint against words that suggest sad or negative things.
Why does my wallet reject a seed phrase made of real words?
Because of the checksum. BIP39 appends ENT/32 bits taken from the SHA256 hash of the entropy, which is eight extra bits on a twenty-four word phrase. Only one arrangement in two hundred and fifty six satisfies it, so a phrase can be spelled perfectly and still be refused.
Is the next halving the Halfture?
No. Every halving so far, and the one at block 1,050,000, and the ones after it, are rehearsals. The Halfture is the single final cut near block 6,930,000, where the block subsidy rounds to zero and issuance ends for good. It is still more than a century out.
Discover more from Halfture
Subscribe to get the latest posts sent to your email.