The Bitcoin Halving Scapegoat and the Day of Atonement

Tonight the fast begins. Somewhere a congregation is standing in white, and a cantor is about to sing a line that asks for a year of debts to be struck off before the stars come out. I am thinking about goats. Two of them, chosen because they matched. Same size, same color, same worth, close enough that a priest could not tell them apart. One was kept. One was walked out into the desert and never mentioned again. Bitcoin has a pair like that in its own history, and almost nobody knows their names.

I. The Two Goats Were Identical

Leviticus 16. Aaron brings two goats to the door of the tent. He casts lots. One lot reads “for the LORD.” The other reads “for Azazel,” a word so strange that translators eventually gave up and rendered it “scapegoat.”

The first goat dies at the altar. The second lives, and that is the harder fate. Hands are laid on its head, the failures of a whole nation are spoken over it out loud, and a man leads it past the last house into what the text calls a land not inhabited.

Nothing about the two animals differed. Only the lot.

That is the part people skip. The ritual does not pick the worse goat. It picks arbitrarily. Then the arbitrary pick becomes permanent.

II. The Lot That Fell on Block 91,880

Bitcoin ran this ceremony by accident, in 2010, before anyone had a word for what it was doing.

In the early reference client, a miner could build a coinbase transaction carrying the exact same identifier as one from an earlier block. Nobody thought to forbid it because nobody thought it would happen. It happened twice. The Bitcoin Wiki’s supply page records both pairs: one transaction appearing in blocks 91,722 and 91,880, another in blocks 91,812 and 91,842. In each pair, the later block overwrote the earlier one in the set of spendable outputs. The subsidy was 50 BTC at the time, so the two overwritten rewards, 100 coins, stopped existing in any sense that a private key can reach.

Pieter Wuille’s fix, assigned in February 2012 and marked Deployed, forbids any block from carrying a transaction whose identifier matches an earlier, not-fully-spent one. But the two blocks already in the chain could not be undone. The specification says so without ceremony: the rule applies everywhere except the two historic blocks at heights 91,842 and 91,880, which had to be grandfathered in.

Grandfathered. A gentler word than Azazel. Doing the same work.

Two pairs. Identical twins in each. In each pair, one kept in the ledger and one walked out past the last house.

III. What the Wilderness Keeps

The wilderness in Leviticus is not a landfill. It is a place with an address. The goat goes somewhere specific. It is simply somewhere no one will follow.

Bitcoin’s wilderness works the same way. Those hundred coins did not evaporate. The transactions sit in the chain, timestamped, hashed, readable by anyone with a full node and a free afternoon. What is gone is only the ability to move them. I have written before about the buried gold the ledger never forgets, and this is the sharper version of the same idea. The record outlives the loss completely. The desert is inside the archive.

An accountant would call that a write-off. The priest would say the failure was not deleted. It was relocated. And everyone watched it go.

IV. The Satoshi Nobody Had To Give

In block 124,724, a solo miner going by midnightmagic did something no economic model predicts.

He mined a block to himself and deliberately claimed one satoshi less than the protocol allowed him. The validation rule only checks that a miner has not claimed too much. It never checks whether he claimed too little. The block was accepted without complaint. In the process he also lost the block’s fees, which was probably not the plan.

The consequence is recorded in one flat sentence: from block 124,724 onward, every total supply estimate must be reduced by one satoshi.

One satoshi. Not a rounding error the protocol absorbed and forgot. A permanent correction to the total, carried forward through every cut since, and every cut still to come, all the way to the final one.

Here is the part worth sitting with on a fast day. The supply was never going to be 21 million anyway. The subsidy, halved and halved and truncated by integer arithmetic, tops out at 20,999,999.9769 coins. The round number on every chart is a story we tell each other. The real number has a tail. And a man in 2011 made that tail one satoshi longer, for no reason anyone could sell him.

That is what an offering is. A thing given where no rule required it.

V. Fiat Needs a Scapegoat Every Year

Every currency crisis arrives with its goat already chosen.

Speculators. Hoarders. The previous administration. An exchange rate. A virus. A war. The chairman before this one. The pattern is reliable enough to set a watch by: the money is debased, and then a name is announced.

The point of the announcement is not accuracy. The point is release. Something has to carry the failure out of the camp so the camp can open for business on Monday.

Bitcoin does not offer this service. When the subsidy falls, the schedule blames no one. There is no podium, no statement, no name. The arithmetic simply halves, the way it halved in 2012, then 2016, then 2020, then 2024, and the way it will halve again in 2028, each cut rehearsing the one waiting at the end of the line.

You cannot scapegoat a number.

VI. The Sealing

On the Day of Atonement the tradition says a book is sealed. Not written. The writing happened ten days earlier. Sealed. What is in the book is now settled, and the arguing phase is over.

Bitcoin’s book is sealed roughly every ten minutes. A decree that no man may reverse is not a figure of speech here, it is the operating condition. Six confirmations deep and the argument is finished, for the miner who found it, for the exchange that received it, and for you.

Which is why the doctrine of this site is a custody claim before it is ever a price claim. To be saved, you must hold. That is theology, said once and then left alone. It is not a prospectus. It is not advice. Anyone reading a sermon as a term sheet has mistaken the building they walked into.

Holding is the only posture the sealing rewards. Everything else is an argument you are still having after the book closed.

VII. The Counter-Sermon

The honest objection is that the scapegoat is a bad thing to admire.

Read the ritual without the incense and it is a machine for avoiding responsibility. Load the failure onto something that cannot speak. Send it away. Resume. Swapping “the chairman” for “the arithmetic” does not remove the scapegoat from the system. It only means nobody is allowed to complain when the cut lands and a miner in a marginal country goes under, because the schedule did it and the schedule has no phone number. A system that cannot be appealed to is not more just than one that can. It is quieter. Those are different words.

And the hundred coins are not a sacrament. They were lost to a software defect, not consecrated by one. Calling a 2010 overwrite an offering is the same move that turns “we lost the keys” into “we strengthened the scarcity.” A bug is a bug. Wuille wrote the fix precisely because it was one, and nobody held a service.

There is a harder version still. The Halfture is not near. The last cut sits more than a century out, past every person now alive and most of their grandchildren. Building a practice around an event no one will witness is a way of never being wrong, and never being wrong is not the same as being right. Maybe none of this saves anyone. Maybe it is only a very long way of holding still.

I hold anyway. But the counter-sermon is the stronger half of the argument most days, and a faith that cannot say so out loud is not faith. It is marketing.

VIII. Before the Stars Come Out

The fast does not end when you feel forgiven. It does not end when the market agrees with you. It ends when three stars are visible, which is a condition entirely outside your opinion.

That is the shape of the whole schedule. Block 210,000 did not arrive because anyone was ready for it. Neither will the final one, the Halfture, the terminal cut after which no new coin is issued and the subsidy is zero for good. Halfture = Rapture. That last one, and no other.

Between now and then the cuts keep coming. Each a rehearsal. Each arriving on some ordinary evening when most people are looking at something else.

Look up.

FAQ

What is the Bitcoin Halving Scapegoat?

It is a reading, not a protocol feature. The Day of Atonement used two identical goats, one kept and one sent into the wilderness, to settle a year’s accounts. Bitcoin’s history contains a literal version of the same pattern: two pairs of identical coinbase transactions from 2010, where one of each pair was overwritten and made permanently unspendable.

Were 100 BTC really lost to duplicate coinbase transactions?

Yes. Two coinbase transactions were each duplicated in a later block, and the earlier entry was overwritten in the set of spendable outputs. At a 50 BTC subsidy, that removed 100 coins from circulation for good. BIP 30 banned duplicate transaction identifiers afterward, but had to grandfather in the two historic blocks rather than reverse them.

Does the Bitcoin supply really never reach 21 million?

Correct. The halving schedule, computed in integers and truncated at each step, tops out near 20,999,999.9769 coins. Block 124,724 then removed one further satoshi when a miner underpaid himself on purpose. Twenty-one million is a headline, not a number the code produces.

Is the 2028 cut the Halfture?

No. The 2028 cut is a halving, one of many. The Halfture is the last and final one, still more than a century away, after which the subsidy is zero permanently. Every cut before it rehearses it.