The Ghost in the Timechain: Who Really Built Bitcoin?
Seventeen years after Bitcoin's launch, a forensic investigation into its original source code, pre-release archives, and mailing list records reveals what no documentary or journalist has found: Bitcoin was almost certainly built by a team — and one member has been hiding in plain sight, telling us so on the public record for a decade.
Original forensic evidence from Bitcoin's genesis codebase points to at least two authors — and one of them has been speaking on the public record for years.
Every few years, someone claims to have found Satoshi Nakamoto. Newsweek found a retired engineer named Dorian in 2014. HBO pointed at a developer named Peter Todd in 2024. Craig Wright claimed to be Satoshi himself — and was adjudicated a forger by a UK High Court in March 2024.
All of them overclaimed. All of them collapsed.
This investigation takes a different approach. It does not name a sole Satoshi. It does not claim the mystery is solved. What it does — for the first time — is present verifiable forensic evidence from the original Bitcoin source code, the cypherpunk mailing list archives, the Bitcoin whitepaper metadata, and pre-launch development records that forces a reframing of the entire question.
The world has been searching for one person. The evidence demands we look for at least two.
And one of them has been waving from the back of the room for ten years.
Finding #1 — The Code Has Two Authors
The original Bitcoin source code, preserved in the Maguines/Bitcoin-v0.1 GitHub repository, contains a commenting anomaly that no journalist or researcher has previously published. In script.cpp — the file defining Bitcoin's transaction validation engine — almost every opcode is documented with a Forth-style stack notation comment:
// Stack ops — fully documented
case OP_2DUP:
// (x1 x2 -- x1 x2 x1 x2)
// BUT — the cryptographic opcodes have NO notation:
case OP_HASH160:
case OP_CHECKSIG:
// No (x -- hash) annotation. Just implementation.
The commenting discipline breaks at exactly the cryptographic boundary. Two intellectual personalities in one file.
But the more revealing finding is in market.cpp — a pre-launch marketplace file later deleted from the public release. It contains a comment marker that appears nowhere else in the entire codebase:
// Standard comments use //
//// instead of zero atom, should change to free atom
//// limited to lower than a certain value like 5
Four-slash //// markers — a personal TODO convention belonging to a second author. Found nowhere else in the codebase.
Two distinct commenting styles. Two architectural paradigms — pure procedural in the cryptographic files, object-oriented graph-theory design in the marketplace layer. Same project. Different minds.
Finding #2 — Satoshi Never Called It a Blockchain
The November 2008 pre-release Bitcoin code contains a variable that the world has never discussed:
extern uint256 hashTimeChainBest;
Satoshi privately called Bitcoin a timechain — not a blockchain. The word "blockchain" never appears in the original source.
Bitcoin was conceived first as a proof-of-time system. That framing places its intellectual origin in the cryptographic timestamping tradition of Haber and Stornetta — who are cited three times in the Bitcoin whitepaper, more than any other prior art.
Finding #3 — The Economics Were Rewritten 8 Weeks Before Launch
Bitcoin's "sacred" monetary parameters — 21 million coin cap, 50-coin block reward, 10-minute blocks, halving every 210,000 blocks — were not premeditated. The November 2008 pre-release had entirely different parameters:
November 2008 pre-release: 100-coin reward, halving every 100,000 blocks, block time 15 minutes
January 2009 launch: 50-coin reward, halving every 210,000 blocks, block time 10 minutes
The 21 million cap was a design decision made in the final 8 weeks before launch — by someone with deep formal monetary economics knowledge.The Protagonist — Ian Grigg
The forensic profile that emerges from the code demands someone specific: a systems programmer who also had formal economics training, deep knowledge of digital bearer instruments, European timezone activity, and connections to every intellectual predecessor Bitcoin cites.
Ian Grigg — Australian-British financial cryptographer, founder of Systemics Ltd, inventor of the Ricardian Contract (1996) and Triple-Entry Accounting (2005) — satisfies that profile more completely than any other publicly-known figure. Including Adam Back. Including Nick Szabo. Including everyone named by HBO, Newsweek, or the New York Times.
The Mailing List Evidence — Documented, Verifiable
From the cypherpunks mailing list archive at cryptoanarchy.wiki — Ian Grigg's own posts as iang@systemics.com show direct, timestamped conversations with Bitcoin's cited intellectual ancestors:
The Academic Flowchart — Independent Peer-Reviewed Validation
A 2023 paper published in the Journal of Risk and Financial Management (2023, 16, 382) mapped the complete intellectual history of Triple Entry Accounting in a chronological flowchart. The right-hand column shows:
2004–2005: Grigg documents TEA with cryptographically signed receipts
↓
2008: Nakamoto publishes the Bitcoin Whitepaper
Arrow label: "assumed influence (not cited)" J. Risk Financial Manag. 2023, 16, 382 — peer-reviewed
An independent academic paper has formally documented what this investigation found in the code: the most relevant prior art in financial cryptography was not cited in the Bitcoin whitepaper. The academic community labels it "assumed influence, not cited." Either Satoshi missed the most important predecessor paper in his field — or he wrote it.
Ian Grigg himself pointed people to this paper on X when asked about the relationship between Triple Entry Accounting and Bitcoin. He knows what that flowchart shows.
His Own Words — On The Record
On May 2, 2016, Grigg wrote on his blog:
Craig Wright was later proven a fraud. But notice what Grigg walked back in 2018 — and what he did not. He said: "Nope — I am not a member of the team."
He walked back his own membership. He did not walk back the team's existence. He did not walk back Kleiman's membership. He did not walk back his "direct knowledge." A man being sarcastic in 2016 does not carefully carve out only his own non-membership two years later.
In his October 2016 Epicenter podcast — on the public record — he said mid-sentence: "When Satoshi (the team) were building Bitcoin, they looked at why the systems had failed."
He said it casually. As established fact. Using the plural they.
The Creator's Grief — His Bitcoin Language 2024–2026
Read his X timeline with fresh eyes:
Burnt down by us. First person plural. Present tense. Not a commentator's lament. A creator's grief.
And on May 14, 2025, in a thread about crypto executives being targeted for their wealth:
A man with 1.1 million Satoshi coins — worth approximately $79 billion — who publicly states he holds none. The "etc." covers all crypto. The widest possible distance, created in a casual aside, with a timestamp.
The Right of Reply
Before publishing this investigation, I emailed Ian Grigg at iang@xxxx.org on April 26, 2026 at 18:05 IST with a detailed right-of-reply request — offering to correct any factual errors, include any comment on or off the record, or share the full research PDF for his review before publication.
Within approximately 7 hours, he returned to X and reposted content. He did not reply to the email. He has remained publicly active on X but has not responded to the specific inquiry as of publication.
His silence is noted. The research stands on its primary source documentation regardless.
What This Investigation Does Not Claim
This research does not conclude that Ian Grigg is the sole Satoshi Nakamoto. The cryptographic primitives in Bitcoin's script engine — secp256k1 curve selection, ECDSA implementation, SHA-256d hashing — require expertise that does not match Grigg's published specialty. That points to a second author. His co-founder at Systemics, Gary Howland — who designed the SOX capabilities protocol that Bitcoin Script mirrors, and who has been completely invisible since approximately 2004 — is the strongest unexamined candidate.
The honest forensic conclusion: Bitcoin was built by a team. The economic and contract layer is structurally indistinguishable from Grigg's published prior art. The cryptographic layer was authored by someone else. And Grigg has been confirming the team's existence, in his own words, for a decade.
The world searched for one person. The evidence demands we look for two.
Read the Full Investigation
The complete 66-page forensic research paper — including all code exhibits, mailing list documentation, the peer-reviewed academic flowchart, stylometric analysis, and the full right-of-reply record — is available below.
Your browser doesn't support inline PDF viewing.
All forensic findings are anchored to primary sources. Every code exhibit is from the public Bitcoin pre-release repository. Every quote is from a real archived document, podcast, or email.
Niraj Sinha is the Founder of Unified Crypto Payments Identity (UCPI), a graduate of the Oxford Blockchain Strategy Programme at Saïd Business School, a former Sarbanes-Oxley Auditor at Reuters, and a working blockchain developer with hands-on experience on Bitcoin Core's wallet encryption layer.