Original Bitcoin Laboratory
Evidence‑first, executable reconstructions of the earliest Bitcoin — the 15 Nov 2008 pre‑release and the January 2009 released client — built from two hash‑verified archives, with nothing disabled and no chain privileged. Released as candidates: a Bitcoin, not the Bitcoin. Not money.
Bitcoin runs that same January 2009 client on a genesis of its own — its own network, its own signed release, and a chain it is still mining. It is not a reconstruction and not interoperable with the two above, and it is the chain to look at first: it is the one with a live network, mined blocks and a released client that provably mined them.
The January 2009 archive is distributed everywhere as bitcoin-0.1.0.rar. The bytes say it is v0.1.1, built 10 January 2009 — two days after v0.1.0 was announced. We inherited that label and repeated it; this note records what the file actually is. The 0.1.0→0.1.1 delta is irc.cpp and serialize.h — networking only — so no genesis, consensus or executed result on this site changes. the six checks →
Its own genesis, its own network, its own signed release — running Satoshi's January 2009 client. Every block after the genesis has been mined by the released client itself, bound to it before and after by process identity. Sealed findings sets cover the chain block by block; the current tip is on the live status feed. Separate from the two reconstructions; they do not interoperate.
Open Bitcoin →The released January 2009 constitution — COIN=1e8, 50-coin subsidy, 210k halving, 10-minute target — with the full original opcode vocabulary and OP_NOTEQUAL re-opened. Nothing disabled.
Open JAN09-X →November 2008's constitution instead — COIN=1e6, 100-coin subsidy, 100k halving, 15-minute target, and proof-of-work counted in leading zero bits rather than a compact target.
Open NOV08-X →A node serves Bitcoin, and two always-on anchors serve JAN09-X and NOV08-X. Clone the repo and point a node at any of the three — it syncs and independently re-validates every block.
Read the invitation →Anchor uptime, each chain's tip height, and the most recent blocks — measured live over the peer-to-peer protocol.
See the live status →Rebuild Satoshi's 3 Jan 2009 block from the Times headline and the raw parameters, hashed live in your browser — no server, no install, nothing to trust but SHA-256. Change a character and watch it break.
Open the verifier →Paste raw bytes and re-check them on your device — proof-of-work, the merkle commitment, the script interpreter, ECDSA — run by the node's own Rust validator compiled to WebAssembly. No server; nothing to trust but the bytes.
Open the verifier →Pick an origin and a moment in history; see how far each Bitcoin version stood from it. Distance, not identity.
Open the tracker →Describe any object — a paper, a chain, a token, an amount — and see where it qualifies as a Bitcoin or a satoshi, and where the answer is convention, not fact.
Open the compass →There are two Bitcoin geneses now — January 2009 and August 2026. Same axes, same derivation, no ranking: what differs, what is identical, and what cannot be proved about either.
Compare them →On a pinned period toolchain, Satoshi's unmodified source compiles and runs — from the
sha.cpp hash and the Script interpreter to a full
bitcoin.exe linked from source (i686 · OpenSSL 1.0.2 ·
wxWidgets 2.8 · Berkeley DB · Boost).
Two unmodified 2009 binaries, in isolated VMs, re-derive the genesis and then mine, relay, sustain, and reorganise real blocks — each result verifiable from the raw block bytes.
See the witness →November 2008 hardcodes a genesis too. Its hash re-derives from a 76-byte header — four
shorter than January's — and its coinbase is the bare integer 247422313:
no headline, no proof of time, stamped seven weeks before the whitepaper was public.
v0.1.0 against v0.1.3 of 13 January 2009, the next codebase that survives, file by file. 8 of 26 changed; no consensus rule moved. The archive's provenance is traced to two independent mirrors, and a sha256 recorded for it that neither publishes.
Read the diff →Two independent nodes (Python + Rust), cross‑checked byte‑for‑byte. verify_genesis.py
re‑derives both genesis blocks from source, forever.
The runbooks that build and run each chain, the release‑signing and verification guides, and the scope, evidence and governance notes — the whole written record, listed once.
Open the index →What this is, honestly. A research microscope, not a coin. Which live network "is" Bitcoin has no factual answer — only convention; this lab privileges none. The experimental chains are stamped not money: no premine, no sale, no value assigned, no promises. The durable artifact isn't a running node — it's the reproducible recipe, which lets anyone re‑derive the exact genesis with no key and no node to trust.
Verify what you run. Every release tarball is GPG‑signed by
the laboratory release key — fingerprint
B128 526A F85A E4A8 F22B 949F B014 5F74 B78C F1DA.
How to verify →
Post-quantum signing, measured. What a quantum-resistant signature would actually cost a 2009-shaped chain — signature and key sizes cross-checked against FIPS 204/205, sign and verify timings against a measured process-spawn floor, and the transaction arithmetic that follows. Verification is not the problem; size is — a transaction grows 19× to 86×. Reproducible in one command, and it takes no position on whether Bitcoin should change anything. The measurement →
Bitcoin's script limits were retrofitted, and here are the dates. The caps on pushed-element size, script size, stack depth and numeric operands are commonly taken to be part of the original design. None of the four is in the January 2009 release. All four arrive on 29 July 2010 in a commit whose message describes a makefile change, and the element cap is tightened 5,000 → 520 seventeen days later under the message “misc changes”. Every commit in the window was fetched and tested individually; the genesis interpreter was compiled and executed rather than read. It claims no priority — the commits are public — only the dating, the method, and the artifacts. The note →
Related research (a separate project). satoshi‑onchain — a reproducible verifier + Patoshi classifier for the original Satoshi's on‑chain footprint (the genesis block, the ~1.1M‑BTC Patoshi mining pattern, the block‑170 Satoshi→Finney spend) — forensic, not cryptographic, in the same honest, evidence‑tiered style. A companion angle on the same origin: this lab reconstructs the earliest code; that one measures the earliest chain.