Proof of Stake: The Making of Ethereum and the Philosophy of Blockchains — Chapter-by-Chapter Outline

Author: Vitalik Buterin (edited by Nathan Schneider) First published: September 27, 2022 Edition covered: First edition, Seven Stories Press, 2022 (ISBN 978-1-64421-248-6, paperback; also available as open-access Creative Commons Attribution-ShareAlike). The book is an essay collection, not a conventionally chaptered book — each "chapter" is a standalone essay originally published between 2014 and 2022 on Buterin's blogs and in Bitcoin Magazine. Nathan Schneider provides a book-length introduction plus short contextual notes before each of the three parts.

---

Central thesis

Blockchain technology — and Ethereum in particular — is not primarily about cryptocurrency speculation or a single "killer app." It is an attempt to build credibly neutral, programmable infrastructure for human coordination: a platform on which new kinds of organizations, governance systems, and social contracts can be instantiated in code and maintained without depending on any single trusted party.

The book argues that this project passes through three philosophical phases. In the premining era, blockchains are a new form of social incentivization — a way to fund public goods and align large groups around shared values without a central authority. In the proof-of-work era, the emphasis shifts to designing systems that are genuinely decentralized across multiple dimensions (architectural, political, logical), resistant to collusion, and philosophically coherent — not just technically functional. In the proof-of-stake era, the focus expands further: legitimacy, coordination, inequality, governance, identity, and the cultural meaning of digital ownership all come into view. Throughout, the animating question is:

If we can build mechanisms that are credibly neutral, openly verifiable, and resistant to capture, what kinds of human institutions might become possible?

The book is simultaneously a technical and philosophical document, tracing Buterin's evolving thinking from early cyber-libertarian idealism toward a more pluralist, mechanism-design-inflected view of how decentralized systems can serve broad human ends — including ends that no market alone would spontaneously produce.

---

Introduction — Nathan Schneider

Central question

Who is Vitalik Buterin as a writer, and what intellectual and biographical arc produced the essays collected here?

Main argument

The writer before the builder. Schneider opens by noting that before Buterin became Ethereum's designer, he became a writer: his first Bitcoin acquisition was not a purchase or mine but a payment in exchange for an article. His sustained writing practice — through Bitcoin Magazine, his own blog, and scattered forum posts — produced the essays that guided Ethereum's early community and shaped its values.

From cypherpunk to infrastructure builder. The introduction traces Buterin's evolution from a teenage Bitcoin enthusiast shaped by libertarian cypherpunk culture to a more pragmatic, pluralist builder. He rejected both Bitcoin maximalism (one chain to rule them all) and naive techno-utopianism, arriving instead at a view that decentralized infrastructure should maximize social welfare, not profit — and that this requires hard thinking about mechanism design, governance, and legitimacy.

The Ethereum founding myth. Buterin wrote the Ethereum whitepaper "on a cold day in San Francisco in November" 2013. The token pre-sale in 2014 raised over $18 million in bitcoin — a record crowdfunding campaign — on the strength of a document. Schneider situates this in the genre of the cryptocurrency whitepaper, simultaneously manifesto and technical spec.

The consensus mechanism as cultural metaphor. Schneider introduces proof of work and proof of stake not only as technical mechanisms but as metaphors: what does it mean to secure a shared ledger through computation (energy and hardware) versus through deposited economic stake? These metaphors run through the entire book.

The book's structure. Part 1 (Premining) covers essays from 2014–2015 when Ethereum was being conceived and launched. Part 2 (Proof of Work) covers 2016–2019, when Ethereum was operating but beset by crises (The DAO hack, governance controversies). Part 3 (Proof of Stake) covers 2020–2022, when Ethereum was approaching and then completing its transition to a less energy-intensive consensus mechanism, and broader questions of governance, legitimacy, and identity came to the fore.

Key ideas

• Buterin began as a reporter, and his writing practice is integral to his thinking: he develops ideas publicly, in dialogue with communities, not in private research labs.
• The Ethereum project was and remains driven by a tension between ideological vision and practical necessity.
• The essays are not a retrospective; they are primary documents — the actual messages that shaped what Ethereum became.
• Schneider, a media studies scholar, contextualizes each essay within the period's events and controversies.

Key takeaway

The introduction frames the collection as an introduction to Buterin the writer-thinker, arguing that understanding his intellectual development is necessary for understanding what Ethereum is and what it is trying to be.

---

Chapter 1 — Markets, Institutions, and Currencies—A New Method of Social Incentivization

(Bitcoin Magazine, January 10, 2014)

Central question

Can currencies themselves become a third mechanism for incentivizing the production of public goods, alongside markets and institutions?

Main argument

The two incumbent mechanisms and their limits. Markets are decentralized and efficient at allocating private goods but cannot fund public goods whose benefits are diffuse. Institutions (corporations, governments) can fund public goods but concentrate power and carry inherent risks of corruption and inefficiency. For ten thousand years, Buterin writes, these two options were essentially all humanity had.

Seigniorage as the hidden fourth function of money. The essay defines seigniorage as the difference between a currency's market value and its intrinsic value — the "phantom value" generated by the social fact of currency use. With commodity money like gold, this value is largely dissipated; with fiat money, it flows to the issuing government. Bitcoin's innovation, Buterin argues, is that its seigniorage goes automatically to fund a public good: network security.

A taxonomy of currency-as-incentive. Buterin surveys four contemporary examples: (1) Bitcoin, whose seigniorage funds network security itself; (2) Primecoin, which directed mining toward finding Cunningham chains of prime numbers, producing useful mathematical research; (3) Dogecoin, whose meme-branded community demonstrated that shared cultural values could sustain a currency without technical differentiation; (4) Ven, a centralized currency whose basket included carbon futures negatively, so its value rose as society reduced CO₂ emissions.

"Economic democracy" through currencies. If currency issuance can be programmed to fund anything — medical research, art, space exploration, environmental protection — then anyone who accepts a currency is effectively voting for the cause it funds. Buterin sketches a vision of "SocialCoin" that delivers a citizen's dividend to everyone in the world, requiring no central treasury.

Proof of excellence. He also previews a mechanism called proof of excellence, in which one's stake in a currency's voting pool is proportional to one's ability to solve complex mathematical challenges. This would make scientific progress itself a form of mining.

Key ideas

• Markets and institutions both have structural failure modes; cryptocurrencies introduce a third coordination primitive.
• Seigniorage is not incidental to money — it is a key mechanism by which currency creates and distributes social value.
• The value of a currency depends heavily on ideals and community, not just technical properties (Dogecoin's $14 million market cap proved this).
• The direction in which seigniorage flows can be programmed, making currency issuance a general-purpose tool for funding collective goods.
• This essay is Buterin's first published articulation of what will later become the Ethereum vision: programmable value and programmable incentives.

Key takeaway

Cryptocurrencies are not just digital cash — they are a new primitive for funding public goods through the phantom value that monetary adoption creates, making currency issuance a mechanism of distributed economic democracy.

---

Chapter 2 — Ethereum: A Next-Generation Cryptocurrency and Decentralized Application Platform

(Bitcoin Magazine, January 23, 2014)

Central question

Why is a general-purpose, Turing-complete scripting layer on top of a blockchain valuable, and what can it enable that existing "cryptocurrency 2.0" protocols cannot?

Main argument

The layering problem. In 2014, a proliferation of specialized blockchain protocols — Mastercoin, BitShares, Counterparty — each implemented specific features (prediction markets, decentralized exchange, colored coins) as discrete protocols layered on Bitcoin. Buterin argues this approach fails: each protocol is too narrow, creates fragmentation, and cannot easily interoperate. Bitcoin itself is "like SMTP" — a specialized protocol for a narrow use case — not "like TCP," a general-purpose base layer.

Ethereum as a "Swiss Army knife." The essay presents Ethereum's key innovation: a blockchain whose scripting language is Turing-complete, allowing arbitrary programs to run on-chain. Rather than one fixed application per chain, Ethereum is a general-purpose platform. Buterin uses a code example: a simple currency contract written in a high-level Ethereum language shows how any financial instrument can be created.

Contracts, not just coins. Ethereum contracts are described as "autonomous agents simulated by the blockchain" — each has its own internal code and state, and the transition function is defined by that code rather than by a fixed protocol rule. This enables financial contracts, decentralized DNS, decentralized exchange, and much more.

Beyond finance. The essay surveys applications beyond pure finance: decentralized file storage (using Freenet-like protocols), decentralized messaging (Bitmessage), identity and reputation systems, and DAOs. The unifying principle is that Ethereum does not try to be the "end of all cryptocurrency protocols" but a platform on which any mechanism can be quickly instantiated.

Ethereum 2.0 foreshadowed. Even in this 2014 essay, Buterin already mentions his intention to move Ethereum to proof of stake — before the platform had even launched.

Key ideas

• The right abstraction for blockchain technology is a general-purpose programmable platform, not a collection of specialized chains.
• Turing-completeness is what makes Ethereum qualitatively different from Bitcoin's restricted scripting language.
• Smart contracts are not merely financial instruments — they are a foundation for any kind of rule-governed interaction.
• Interoperability and modularity are design principles from the beginning.
• The whitepaper genre — simultaneously manifesto and technical specification — is central to how crypto projects build community.

Key takeaway

Ethereum's core contribution is replacing Bitcoin's narrow scripting language with a Turing-complete platform, enabling arbitrary programs to run on-chain and making blockchains a general-purpose substrate for building new social and economic institutions.

---

Chapter 3 — Self-Enforcing Contracts and Factum Law

(Ethereum blog, February 24, 2014)

Central question

How can contracts enforce themselves without relying on courts or governments, and what kind of money makes this possible?

Main argument

The vending machine as proto-smart contract. Citing Nick Szabo's canonical example, Buterin defines a smart contract as "a contract that enforces itself" — a computer program that executes automatically under specified conditions, backed not by a judge but by the hardware or protocol in which it runs. The vending machine is the simplest instance: coins inserted, product dispensed, no human intermediary required.

Smart property. Extending the vending machine idea, Buterin describes smart property: physical assets whose ownership and access are controlled by code. A rental car that responds to a smartphone's private key for twenty-four hours after payment; an office building whose access cards are managed by an HR system that automatically processes employment contracts. Smart property is limited, however, by physical security constraints.

The problem of enforcement and the emergence of factum money. The deeper challenge is enforcement. Traditional smart contracts require plugging into an existing monetary system, but the account holder can always close the account. Buterin argues this requires a new kind of money — factum money — which he defines as a balance sheet whose current state is simply the result of executing all contracts. Bitcoin is the first factum money: validity is determined not by government decree but by the logical consistency of the ledger itself. In factum money, if a contract says send $200 to Bob when X happens and X happens, then the world simply agrees that Bob has $200.

"Judges as a service." For disputes that require human judgment — Was the work actually done? — Buterin proposes a new model of arbitration embedded in smart contracts. A contract might contain logic like: if the employer confirms completion OR an independent judge confirms it, release funds to the worker. The judge's power is precisely delineated by the contract itself. This turns judicial expertise into a modular service that any contract can plug in.

Limits. Buterin is candid: smart contracts cannot verify physical-world facts, and machine-learning quality assessment is imperfect. The essay ends not with triumphalism but with a call for carefully scoped contract design.

Key ideas

• Smart contracts are self-enforcing because they are backed by factum money, whose validity depends on cryptographic consensus rather than legal authority.
• The spectrum from commodity money to fiat money to factum money represents increasing abstraction of the enforcement mechanism.
• "Judges as a service" is a vision of modular, specialized arbitration that does not require a general legal system.
• Physical-world verification remains a fundamental limitation of blockchain-based contracts.
• The concept of "factum law" — law that works because everyone agrees on the ledger, not because a government enforces it — anticipates much later debates about code vs. law.

Key takeaway

Factum money, whose validity is determined purely by cryptographic consensus rather than government backing, makes self-enforcing contracts possible by turning the balance sheet itself into the enforcement mechanism.

---

Chapter 4 — On Silos

(Ethereum blog, December 31, 2014)

Central question

Is the fragmentation of the cryptocurrency ecosystem into competing "silos" a problem to be solved by consolidation, or is it an inevitable and even desirable feature of a diverse technological landscape?

Main argument

The case for consolidation and why it fails. Bitcoin maximalists and sidechain advocates argued that fragmentation was harmful: effort should concentrate behind the most successful project. Buterin rejects this position. The crypto ecosystem fragments precisely because its participants hold fundamentally incompatible values and empirical beliefs about consensus mechanisms, monetary policy, privacy, governance, and more. He enumerates his own positions — skepticism of ASIC mining, support for flexible monetary policy, belief in token sales, interest in futarchy — noting that "there are probably very few people who agree with me on every single one."

Fragmentation as legitimate specialization. Different platforms will naturally suit different use cases: Ripple for regulated financial institutions, anonymous networks for high-censorship-resistance needs, general platforms for everything in between. This is analogous to programming languages: experienced developers use different languages for different tasks rather than pledging allegiance to one.

The architecture of cooperation without consolidation. Buterin proposes a more modular vision of the ecosystem: browsers that can access multiple chains (like Chrome extensions for different protocols), reputation and identity data shared across platforms, cross-chain interoperability layers, and shared fundamental research. The key insight is that many layers of the stack — off-chain services, browsers, research — can be modular even when specific applications are platform-specific.

Positive externalities of diversity. A plurality of projects creates redundancy, reduces common-mode failure risks, and enables evolutionary experimentation. Winner-take-all thinking at this stage of technological development is premature and harmful.

Key ideas

• Ideological diversity in the crypto ecosystem is not a bug but a feature: it reflects genuine, legitimate disagreements about values and empirical facts.
• Fragmentation at the application layer is compatible with cooperation at the research and infrastructure layers.
• The right model is modular interoperability, not monolithic consolidation.
• 51%-attack-based "censure" of harmful projects is a last resort, not a general-purpose coordination mechanism.
• This essay prefigures much later debates about blockchain maximalism and ecosystem diversity.

Key takeaway

Cryptocurrency fragmentation is inevitable because participants hold genuinely different values; the appropriate response is not consolidation but modular interoperability that enables cooperation without requiring agreement on fundamentals.

---

Chapter 5 — Superrationality and DAOs

(Ethereum blog, January 23, 2015)

Central question

What fundamental advantage do decentralized autonomous organizations offer over traditional organizations, and how does transparency enable cooperation that market incentives alone cannot sustain?

Main argument

The prisoner's dilemma as the fundamental problem. Buterin opens with a sequence of real-world prisoner's dilemmas: Alice selling low-quality lemons, Bob declining to donate to a public good, David dumping toxic waste, Eve pricing a cancer cure too high. In each case, individually rational action produces collectively bad outcomes.

Superrationality via leakiness. Drawing on David Friedman's analysis, Buterin argues that humans are "leaky agents" — their facial expressions, body language, and behavioral patterns continuously and inadvertently reveal their intentions. This enables a form of cooperation beyond simple market exchange: agents can adopt a superrational strategy of cooperating with other agents that appear virtuous and defecting against those that appear non-virtuous. Genuine virtue is more convincing than fake virtue because faking it requires more cognitive computation ("you'd better not trust someone who doesn't drink").

Corporations as opacity machines. Modern corporations undermine superrational cooperation by allowing individuals to outsource morally questionable actions to third parties who are invisible to others. The market arbitrages morality, placing dirty work with whoever is willing to absorb their conscience at lowest cost.

DAOs as transparency machines. A DAO (decentralized autonomous organization) is unique because its governance algorithm is not just leaky but fully public — anyone can inspect the source code. A futarchy DAO that maximizes human lifespan will behave very differently from one maximizing paperclip production, regardless of who operates it. The organization's "mind" is made radically transparent.

Type I and Type II DAOs. Buterin distinguishes Type I DAOs (with some internal state but limited autonomous governance — gambling, stablecoins, file storage) from Type II DAOs (capable of making theoretically arbitrary decisions through futarchy, democracy, or subjective extra-protocol governance). Type II DAOs can potentially engage in superrational cooperation not just with humans but with each other.

Limits. Superrational cooperation cannot solve massive-multiparty public goods problems (where exclusion is impossible), but it can address information asymmetries — and as modern society grows more complex, this may be its most important application.

Key ideas

• The prisoner's dilemma is not just a game-theory curiosity — it describes a large class of real-world coordination failures.
• Human "leakiness" (unconscious signaling of intentions) is the foundation of much social cooperation that formal incentives cannot replicate.
• Large centralized organizations decouple individual reputation from organizational action, undermining superrational cooperation.
• DAOs' distinguishing feature is not just decentralization but radical transparency of governance logic.
• This essay anticipates the DAO movement that would explode in 2016 and again in 2020–2021.

Key takeaway

DAOs offer a qualitatively new form of organizational trust because their governance code is fully public, enabling superrational cooperation by making it impossible for the organization's "mind" to act dishonestly even if its participants would prefer it.

---

Chapter 6 — The Value of Blockchain Technology

(Ethereum blog, April 13, 2015)

Central question

What is blockchain technology fundamentally useful for, and why will there be no single "killer app"?

Main argument

No killer app: the doctrine of low-hanging fruit. Buterin's first claim is deliberately counterintuitive: if there were a single dominant application for blockchains, it would already exist. The closest things to killer apps are Silk Road and WikiLeaks donations — applications where blockchain was not merely convenient but truly necessary. All remaining opportunities live in a long tail.

Blockchains redefined. Rather than defining blockchains in financial terms, Buterin offers a software-developer-facing definition: "A blockchain is a magic computer that anyone can upload programs to and leave the programs to self-execute, where the current and all previous states of every program are always publicly visible, and which carries a very strong cryptoeconomically secured guarantee that programs running on the chain will continue to execute in exactly the way that the blockchain protocol specifies." This definition makes no mention of currency, transactions, or consensus algorithms.

Why blockchains are useful: the enumerated properties. Under this definition, blockchains offer: (1) guaranteed data availability; (2) extremely high uptime for applications; (3) long-term uptime — applications continue running even if the original developer loses interest; (4) honest execution — users can verify that the application does what it claims; (5) trust under adversarial conditions — the application cannot be manipulated even if the developer is bribed or threatened; (6) "constitutional" backdoors — developers can give themselves limited administrative keys but bind themselves publicly to constraints on how those keys can be used (e.g., a one-month public waiting period before any update).

Blockchains as Lego Mindstorms. The value is not in any single use case but in enabling rapid creation of arbitrary new social and economic mechanisms. "They're Lego Mindstorms for building economic and social institutions." The currency is necessary as economic plumbing (to fund consensus participation, hold deposits, pay fees) but is not the center of value.

The "long tail" of marginal advantages. For most applications, blockchains are not indispensable; they are marginally better than a centralized alternative in specific dimensions (availability, tamper-resistance, long-term persistence). But because this marginal improvement applies across millions of applications, aggregate value is large.

Key ideas

• The "killer app" framing is misleading: blockchain value is diffuse, not concentrated in one application.
• The currency component is economic plumbing, not the primary value proposition.
• The key unique property is guaranteed, long-term, tamper-resistant execution of arbitrary programs.
• "Constitutional" restrictions on admin keys are a mechanism for building user trust without full decentralization.
• Blockchains are to social institutions what JavaScript is to web applications: a platform for rapid instantiation of new mechanisms.

Key takeaway

Blockchain technology's value lies not in a killer app but in a long tail of applications where tamper-resistant, long-running, openly verifiable execution provides a marginal advantage — aggregating across millions of use cases into large social value.

---

Chapter 7 — Why Cryptoeconomics and X-Risk Researchers Should Listen to Each Other More

(medium.com/@VitalikButerin, July 4, 2016)

Central question

What is the structural similarity between the challenge of building safe artificial intelligence and the challenge of building secure cryptoeconomic systems, and what can each field learn from the other?

Main argument

The same problem at different IQ levels. Buterin identifies a structural isomorphism: both AI safety and cryptoeconomics are trying to regulate a very complex and smart system using a much simpler and dumber set of rules. AI safety is about "agents with IQ 150 trying to control agents with IQ 6,000"; cryptoeconomics is about "agents with IQ 5 trying to control agents with IQ 150." The problems differ in scale but share a common structure.

Edge instantiation in both fields. In AI safety, the problem of edge instantiation — where an AI satisfies the letter of its utility function in ways that violate its spirit (cure cancer by killing everyone) — has a direct analogue in The DAO hack of 2016, where a splitting function intended for one purpose was exploited in a completely unintended way.

Mitigation strategies shared across fields. Buterin surveys several approaches that both communities are exploring: (1) curators with limited but sufficient emergency powers (analogous to AI interruptibility research); (2) slow-down mechanisms — The DAO's mandatory time delays on actions were what made its rescue possible; (3) formal verification — using computer programs to prove properties of other programs; (4) superrational decision theories — open-source agents can commit to run code that treats other agents that make the same commitment more favorably ("values handshakes").

Decentralization as a lesson from crypto to AI. The crypto ecosystem's lesson for AI safety: have different teams implement different pieces redundantly, so that an oversight in one system is unlikely to pass undetected through all others.

Key ideas

• The challenge of making dumb rules govern smart agents is shared between cryptoeconomics and AI safety, despite large differences in the agents' intelligence levels.
• Time delays, formal verification, and limited-but-robust intervention powers are cross-domain mitigation strategies.
• The DAO is an early live experiment in what happens when a complex economic system is exploited through edge cases in its specification.
• Open-source agents can make credible commitments that closed-box agents cannot ("values handshakes" — committing to run code that averages two previously separate goal functions).

Key takeaway

Cryptoeconomic systems and AI systems face the same fundamental challenge — regulating highly intelligent agents with simple rules — and the communities working on each have independently developed insights that are highly transferable.

---

Chapter 8 — A Proof-of-Stake Design Philosophy

(medium.com/@VitalikButerin, December 30, 2016)

Central question

What philosophical principles should guide the design of a proof-of-stake consensus mechanism, and how does this differ from the philosophy underlying proof of work?

Main argument

Cryptoeconomic organisms. Buterin characterizes systems like Ethereum as "decentralized, jurisdiction-less entities that exist entirely in cyberspace, maintained by a combination of cryptography, economics, and social consensus" — not quite corporations, not quite open-source software projects, not quite BitTorrent.

The cypherpunk asymmetry. Cryptography is unusual in that it strongly favors the defender: breaking an ECC key requires state-level resources, while maintaining it requires none. This defender's advantage should be preserved in protocol design. Proof of work violates this: cost of attack and cost of defense are in a 1:1 ratio.

Social consensus as the ultimate backstop. In the medium to long term, humans are actually quite good at consensus: even with unlimited hash power, an attacker couldn't convince the world that a rewritten chain is legitimate without subverting block explorers, major community members, the New York Times, and archive.org simultaneously. Social consensus is what ultimately secures any blockchain; honest protocols should acknowledge this rather than pretend it doesn't exist.

Security from penalties, not rewards. The core philosophical difference: proof of work derives security from the prospect of losing future block rewards; proof of stake derives security from the explicit penalty of losing deposited value. The one-sentence philosophy of proof of stake: "Security comes from putting up economic value-at-loss." A given finalized state has x-dollar security if achieving finalization for any conflicting state requires malicious validators to lose x dollars in protocol penalties — and penalties can be set hundreds or thousands of times larger than the rewards validators received.

Attack-defense asymmetry in PoS. Under PoS, a successful 51% attack that costs $50 million results in the attacking validators losing $50 million while the community can fork to remove them. The blockchain recovers in days. This is attack-defense asymmetry in favor of the defender — the opposite of PoW.

Economics is not everything. Validators can be motivated by extra-protocol factors: ideology, coercion, hacking, or simply bad judgment. Good protocols work under multiple models simultaneously — economic rationality, Byzantine fault tolerance, behavioral economics, simple fault tolerance.

Against speed maximalism. Protocols that reward validators for minimum latency create dangerous incentives for infrastructure centralization (all validators on the same hosting provider). Better to design protocols where reasonable latency is acceptable.

Key ideas

• The fundamental design goal is attack-defense asymmetry in favor of honest participants.
• Proof of stake achieves this through explicit value-at-loss (penalties) rather than opportunity cost (foregone rewards).
• Social consensus is a genuine security layer, not a sign of weakness — protocols should be designed in ways that leverage it.
• Good consensus protocols must work under many failure models simultaneously, not just the most convenient economic rationality assumption.
• PoW's energy expenditure is not just wasteful — it represents a fundamental philosophical failure to achieve cypherpunk goals.

Key takeaway

Proof of stake is philosophically superior to proof of work because it derives security from explicit, asymmetric economic penalties rather than opportunity costs, restoring the defender's advantage that cryptography provides and that proof of work sacrifices.

---

Chapter 9 — The Meaning of Decentralization

(medium.com/@VitalikButerin, February 6, 2017)

Central question

What does "decentralization" actually mean, and what are the distinct arguments for it?

Main argument

Three axes of decentralization. Buterin identifies three independently variable dimensions: (1) Architectural decentralization — how many physical computers make up the system, and how many can fail without system failure; (2) Political decentralization — how many individuals or organizations control those computers; (3) Logical decentralization — whether the system's data and interface look like a single monolithic object or an amorphous swarm. Blockchains are architecturally and politically decentralized but logically centralized (one agreed-upon state).

Three reasons for decentralization. (1) Fault tolerance — decentralized systems are less likely to fail accidentally because there is no single point of failure. But naive fault-tolerance analysis ignores common mode failure: four jet engines all manufactured by the same rogue employee can fail simultaneously. Blockchains face common-mode risks: shared client software, shared development teams, shared mining hardware manufacturers. (2) Attack resistance — decentralized systems are more expensive to attack. Economic models sometimes suggest centralization maximizes security (economic margin is $50M regardless of concentration), but this breaks down under coercion: if you can threaten one person with death, $50M doesn't matter, but if the stake is spread across ten people, you must threaten ten. (3) Collusion resistance — decentralized systems make it harder for participants to coordinate against the interests of others. But this is the most nuanced and difficult goal: blockchains need some coordination (to fix bugs, to evolve the protocol) but not too much (collusion to extract from users).

The collusion paradox. Ethereum's community is praised for its ability to coordinate rapidly to fix security issues — but how can you foster good coordination while preventing bad coordination? The essay identifies three approaches: building protocols that resist coordination regardless; finding a happy medium; or making beneficial coordination easy and harmful coordination hard. The third is hardest; even the second often happens by accident (Bitcoin's English-speaking developers and Chinese-speaking miners form a "bicameral" structure by accident).

Key ideas

• Confusing the three axes of decentralization leads to poor reasoning: "more decentralized" is not a single scalar quantity.
• Common-mode failure is the most underappreciated threat to architectural decentralization.
• Collusion resistance is the hardest form of decentralization to engineer deliberately.
• Multiple client implementations, geographically distributed developer teams, and proof-of-stake (which reduces hardware centralization risk) are practical measures for improving all three axes.
• The ultimate defense of any blockchain is users' ability to fork away from a captured chain — the "exit" option.

Key takeaway

Decentralization has three distinct dimensions — architectural, political, and logical — and three distinct justifications — fault tolerance, attack resistance, and collusion resistance — and designing for all three simultaneously requires different and sometimes conflicting approaches.

---

Chapter 10 — Notes on Blockchain Governance

(vitalik.ca, December 17, 2017)

Central question

What are the genuine advantages and serious risks of on-chain coin-holder voting as a governance mechanism for blockchain protocols?

Main argument

The appeal of on-chain governance. Explicit on-chain governance (as in Tezos, EOS, NEO, Lisk) allows protocols to evolve rapidly without the fragility of informal governance. It avoids the "tyranny of structurelessness" that emerges when informal processes create de facto centralized power without accountability.

Two models of governance. The decision function view treats governance as an algorithm taking stakeholders' preferences as inputs and producing outputs (policy decisions). The coordination view treats governance as a layered system of focal points that influence individual behavior. The bottom layer is always individuals' ability to run whatever software they want; above that are coordination institutions that raise or lower "flags" signaling whether changes should happen.

Low voter participation. Empirically, coin-holder votes show extremely low participation: The DAO carbonvote reached 4.5%, EIP votes around 2.7%; Lisk's top delegate received only 30%. This undermines legitimacy and leaves outcomes vulnerable to capture by a small number of holders.

Game-theoretic attacks: the bribe problem. In any vote, the probability that any single voter is pivotal is tiny, so the personal incentive to vote honestly is tiny-squared. A small bribe spread across many participants can swing a vote. Worse, "bribes" can be highly obfuscated: exchanges offering zero fees and good UIs are implicitly voting on users' behalf in exchange for convenience; coins can be rented on money markets to participate in votes without any price exposure.

Non-representativeness. Coin holders are only one class of user — in Ethereum, many applications (CryptoKitties, ENS) have nothing to do with ETH as an investment. A coin-holder vote gives disproportionate power to wealthy holders.

Centralization in practice. Even the existing example of miner voting on gas limits essentially tracks decisions made by a small group of insiders — the chart looks like "a magic number renegotiated by guys sitting in a room."

"Digital constitutions" are insufficient. Encoding norms as on-chain rules is tempting but fails because meaningful norms are hard to express in code, and sophisticated actors can find roundabout ways to violate their spirit while respecting their letter.

Toward multifactorial consensus. Buterin's prescription: governance should involve multiple, independent coordination flags — the project roadmap, core developer consensus, coin-holder votes, user polls, and established norms. Coin voting is one useful input, not the sole mechanism. The ultimate check is always users' ability to fork away from unwanted changes.

Key ideas

• Tightly coupled voting (automatic protocol changes based on votes) is much riskier than loosely coupled voting (voting as a coordination signal that users can override).
• Low voter participation is not merely a PR problem — it fundamentally undermines security and legitimacy.
• Bribery attacks on coin voting are realistic and already observed (Lisk, ARK).
• The fundamental check on governance is always individual users running their own software and being willing to fork.

Key takeaway

On-chain coin-holder voting has real benefits but deep structural flaws — low participation, bribery vulnerability, non-representativeness — and should be one of several governance inputs rather than the sole or automatic mechanism for protocol decisions.

---

Chapter 11 — On Collusion

(vitalik.ca, April 3, 2019)

Central question

Why do so many incentive mechanisms — content curation, governance, public goods funding — fail when participants can collude or create fake identities, and what approaches might work despite this?

Main argument

The mechanism design explosion. By 2019, mechanism design was being applied everywhere in crypto: prediction markets, token-curated registries, content curation, social media rewards. The essay opens with a case study of Bihu, a Chinese platform rewarding content creators based on staked token upvotes — and immediately identifies the attack: simply upvote your own sockpuppet accounts and extract an "interest rate" from the mechanism.

Plutocracy and bribery as structural flaws. Systems that add superlinearity to prevent pure self-voting introduce two new problems: they entrench plutocracy (large holders can still self-vote profitably) and they become vulnerable to bribery (paying many small holders to vote for you). In practice, blockchain governance has already seen explicit bribery ("staking pools that share dividends"), exchange-mediated implicit bribery, and even coin-rental attacks (borrow tokens, vote, return tokens, zero price exposure).

The formal impossibility result. Buterin proves a deep point: in the general case, mechanisms that try to reward public goods funding cannot be both identity-free and collusion-safe. If a mechanism makes it cheap for a distributed community to support an author, it also makes it cheap for a concentrated attacker with sockpuppet accounts to drain the mechanism. The attacker always has an advantage because they are already coordinated.

Majority games and instability. The mathematical framework underlying this is cooperative game theory: majority games (any group of more than half the participants can capture the full reward and split it) have no stable equilibrium. Any coalition can be profitably disrupted by a new coalition. This, Buterin argues, is "arguably highly underrated as a simplified general mathematical model of why there may be no 'end of history' in politics."

Collusion-safe mechanisms: futarchy and prediction markets. The class of games that are identity-free and collusion-safe is not empty. Futarchy-type mechanisms — where "voting" is a prediction with money at stake — are collusion-safe because making a wrong prediction is costly. But their applicability is limited to situations where outcomes can be measured against a price signal or similar objective metric.

Attacking the identity problem head-on. The other approach: build robust, decentralized identity systems that make it difficult to credibly rent or sell one's identity. Key requirements: (1) hard to obtain multiple identities; (2) identity cannot be credibly transferred (the seller can always issue a transaction revoking their own identity and replacing it). This likely requires zero-knowledge proofs, in-person verification at issuance, and mechanisms for revocation.

Key ideas

• In the presence of collusion, most mechanism-design results break down: the "invisible hand" cannot distinguish between a distributed community and a concentrated actor pretending to be one.
• Majority games have no stable equilibrium under cooperative game theory — this is more general than Arrow's theorem as a model of political instability.
• Identity-free and collusion-safe mechanisms exist (futarchy, prediction markets) but cannot solve the general public-goods problem.
• Robust decentralized identity — hard to multiply, impossible to credibly sell — is a prerequisite for richer governance mechanisms.
• Quadratic voting and quadratic funding, which Buterin was developing in parallel with Zoë Hitzig and E. Glen Weyl, require identity to work correctly.

Key takeaway

Collusion and fake identity are not implementation problems to be patched but fundamental structural challenges: mechanisms that can help dispersed communities coordinate will, without identity safeguards, also help concentrated actors simulate being dispersed communities.

---

Chapter 12 — On Free Speech

(vitalik.ca, April 16, 2019)

Central question

What does "free speech" mean as a social norm, beyond its legal definition, and how should blockchain and crypto communities apply it?

Main argument

Free speech as a social principle, not just a legal rule. Buterin disputes the common argument that free speech norms apply only to government action. When the /r/bitcoin moderator TheyMos banned discussion of increasing Bitcoin's block size, defenders said it was legal because the forum was privately owned. Buterin responds: freedom of speech is also a social principle whose underlying goal is ensuring that good ideas win rather than ideas favored by whoever holds power. Corporate, platform, and community power can undermine this goal just as governmental power can.

The underlying norm. Citing Eliezer Yudkowsky: "Bad argument gets counterargument. Does not get bullet. Never." The principle is that responses to ideas should address those ideas rather than silence them. Silencing methods — firings, bans, platform deplatforming — succeed based on the power of the silencer, not the quality of the argument.

Safe spaces and public spaces. Buterin endorses the legitimacy of private safe spaces (ethresear.ch filtering off-topic posts) while criticizing the annexation of public spaces to serve as safe spaces for one faction. The /r/bitcoin subreddit was a "public space" because its value was created by thousands of people with an implicit expectation of open discourse — even if technically owned by one moderator.

Algorithmic amplification as a form of censorship. Modern content moderation involves not just banning but algorithmic de-prioritization — subtle enough that individuals may not notice but powerful enough to shape discourse. This raises harder questions about what free speech norms require.

The blockchain community's special obligation. Crypto communities are especially obligated to take free speech seriously because censorship resistance is among their core stated values. Inconsistency on this point is particularly damaging.

Key ideas

• Free speech is a social norm with a principled justification (good ideas should win on their merits) that applies to powerful private actors as well as governments.
• The key distinction is between addressing an argument and silencing it — the latter's success depends on power, not truth.
• "Public spaces" are defined functionally, not by ownership: a space is public if its value was created by a community with an implicit expectation of openness.
• Algorithmic moderation raises new free-speech questions that direct-ban frameworks do not fully address.

Key takeaway

Free speech is a social principle whose goal — ensuring ideas win on their merits — applies to powerful platform operators and community moderators, not just governments; and crypto communities have a special obligation to take this seriously given their stated commitment to censorship resistance.

---

Chapter 13 — Control as Liability

(vitalik.ca, May 9, 2019)

Central question

How is the regulatory environment shifting in ways that make control over user data and assets a liability rather than an asset for application developers, and what does this mean for decentralized design?

Main argument

The old attitude toward data. A decade ago, Zuckerberg said the age of privacy was over; Eric Schmidt argued that anyone who had something to hide probably shouldn't be doing it. Every additional piece of data was a potential machine-learning advantage; restrictions were weaknesses.

The regulatory shift. GDPR (right to consent, right to delete, right to download data), data-localization rules (India, Russia), sharing-economy employment classification (Uber drivers as de facto employees), and FinCEN cryptocurrency guidance all reflect a common underlying trend: control over users' data, funds, or activity is increasingly classified as a regulated activity. FinCEN explicitly distinguishes between wallets where users hold their own keys (not regulated) and custodial wallets where the operator holds keys (regulated as money transmission).

Control has become a liability. The reversal: every bit of control a developer has over users is now a potential regulatory exposure — as a money transmitter, as an employer, as a data processor. The easiest way to avoid this exposure is to build applications that never centralize control in the first place.

Unexpected benefit for decentralization. Though these regulations were not designed to promote decentralization, their effect is to give a "big nudge" toward "can't be evil" design: applications where the developer truly lacks the ability to manipulate user funds or data. This aligns regulation with cypherpunk values by accident.

The nuance. Not every application can afford to give up centralized control. But the mental shift — from "I want control just in case it's useful later" to "I want as little control as possible to minimize liability" — is itself valuable and changes the default calculus for application design.

Key ideas

• The regulatory direction of travel is clear: control over users' digital assets and data is increasingly a regulated activity with compliance costs.
• FinCEN's cryptocurrency guidance precisely tracks the line between "not regulated" (user-controlled keys) and "regulated" (operator-controlled keys) — a line that mirrors decentralization values.
• Even regulations that are not explicitly pro-freedom can have pro-decentralization effects as an unintended side consequence.
• "Can't be evil" design (architecturally unable to manipulate user data/funds) is both a regulatory strategy and a user-trust strategy.

Key takeaway

The evolving regulatory environment is, inadvertently, a strong argument for decentralized application design: as control over user data and assets increasingly triggers regulatory liability, building systems where developers lack such control becomes both legally prudent and philosophically aligned with cypherpunk values.

---

Chapter 14 — Christmas Special

(vitalik.ca, December 24, 2019)

Central question

Can mathematical structures underlying advanced cryptography and blockchain technology be made accessible and fun through play?

Main argument

This short, playful essay presents four games Buterin invented for playing with friends that simultaneously illustrate deep mathematical concepts. (1) 1.58-dimensional chess: played on a Sierpinski-triangle board of 27 accessible squares out of 64, illustrating fractal geometry and how the dimensionality of a space (log₃/log₂ ≈ 1.58) affects strategic balance — in lower-dimensional spaces, defense becomes much easier than offense. (2) Three-dimensional tic-tac-toe: played on a 4×4×4 grid, with winning as four in a line in any direction including 3D diagonals. (3) Modular tic-tac-toe: a 2D board where lines wrap around, equivalent to a 2D vector space over integers modulo 4. (4) Tic-tac-toe over the four-element binary field (polynomials over Z₂ modulo x²+x+1): even more abstract, with twenty winning combinations. Finally, modular poker: hands are ranked by the longest arithmetic sequence (with any constant difference, allowing wrap-around) that can be formed — equivalent to finding a line L(x) = mx + b through the most card values.

Why it's here. Schneider's introductory note frames this essay as a window into Buterin's character: he is a person who finds it natural to play in the mathematical structures that underlie cryptographic systems. The Sierpinski triangle that generates the 1.58-dimensional chess board is related to the Merkle tree structures central to blockchain data integrity. The finite field underlying the fourth game is the same kind of algebraic structure used in elliptic-curve cryptography and zero-knowledge proof systems.

Key ideas

• The mathematical structures in cryptography and blockchain are beautiful in their own right, independent of their applications.
• 1.58-dimensional chess illustrates how fractal (non-integer) dimensionality arises naturally from recursive construction rules.
• Modular arithmetic and finite fields, which seem abstract, have simple game-theoretic manifestations that can be directly played.
• Play is how Buterin thinks: he uses games to make abstract structures concrete and shareable.

Key takeaway

This deliberately light essay reveals that the mathematical foundations of blockchain technology — fractal geometry, modular arithmetic, finite fields — are not dry engineering but intrinsically playful structures that Buterin genuinely finds beautiful.

---

Chapter 15 — Credible Neutrality as a Guiding Principle

(Nakamoto, January 3, 2020)

Central question

What does it mean for a mechanism to be "credibly neutral," and why is this property so important for the mechanisms that govern large, diverse communities?

Main argument

The opening paradox. People are sometimes upset that governments allocate 5% of GDP to specific industries but not about governments spending far more enforcing property rights. They object to premining but not to PoW mining rewards. They object to platform censorship of disfavored ideas but not to ride-sharing platforms banning low-rated drivers. Why the inconsistency? Buterin argues these intuitions are tracking something real: a distinction between mechanisms that are credibly neutral and those that are not.

A mechanism defined. Mechanisms are algorithms plus incentives: they take inputs from multiple participants, assess their preferences, and produce outcomes. Examples: private property and trade, auctions, democracy, social media upvotes, blockchain consensus.

Credible neutrality defined. A mechanism is credibly neutral if, by looking at its design, it is easy to see that it does not discriminate for or against any specific people or outcomes. "Anyone who mines a block gets 2 ETH" is credibly neutral; "Bob gets 1,000 coins because we know he's valuable" is not. "Five flags means a post is hidden" is credibly neutral; "our moderation team decides" is not.

The four rules for credibly neutral mechanisms. (1) Don't write specific people or specific outcomes into the mechanism — let outcomes be emergently discovered from participants' inputs. (2) Open source and publicly verifiable execution. (3) Keep it simple — fewer parameters mean less room for hidden privilege, and a "veil of ignorance" grows over time between mechanism designers and their potential beneficiaries. (4) Don't change it too often — frequent changes reset the veil of ignorance and allow designers to target current friends or enemies.

Credible neutrality vs. neutrality. The key word is "credible." It is not enough that a mechanism is in fact neutral; it must be visibly neutral to a diverse audience that includes hostile interpreters. This requires common knowledge — everyone must be able to see that the mechanism is fair, and know that everyone else can see this, because everyone is thinking about whether others will abandon the mechanism.

Efficacy must accompany neutrality. Extreme neutrality-purism fails: if we insist on only neutral mechanisms, we will fail to address many genuine public goods problems. Imperfectly neutral mechanisms (premines, time-limited developer rewards) are acceptable in the short term if they are explicitly acknowledged, constrained, and designed to expire. "Schelling fences" — publicly agreed limits on how much funding can be drawn from a mechanism — help.

Key ideas

• Credible neutrality is the property that makes mechanisms legible and legitimate to large, diverse communities.
• It is different from merely being neutral: it requires the neutrality to be visible and verifiable, not just asserted.
• The four design rules (no specific names/outcomes, open source, simplicity, infrequent changes) constitute a practical checklist.
• The tradeoff with efficacy is real: perfectly neutral mechanisms may fail to produce important public goods; imperfectly neutral ones can be acceptable with proper safeguards.

Key takeaway

Mechanisms that govern large communities must be not just neutral but credibly neutral — visibly and verifiably fair to a diverse and potentially hostile audience — because common knowledge of fairness is what sustains participation and prevents the mechanism from being abandoned.

---

Chapter 16 — Coordination, Good and Bad

(vitalik.ca, September 11, 2021)

Central question

Why is coordination — the ability of large groups to act together — simultaneously one of the most powerful forces for good and one of the most dangerous forces in existence?

Main argument

Coordination as a spectrum. Every individual acting entirely for themselves ("every man for himself") is a disaster; total coordination of everyone with everyone is ideal but unachievable. The real landscape in between is not a smooth ramp upward but a terrain with dangerous local maxima.

The core counterintuition. While "everyone coordinating with everyone" is better than "every man for himself," each individual step toward more coordination is NOT necessarily beneficial. Coordination that is improved in an unbalanced way — some subgroup becoming more coordinated while others remain uncoordinated — can be harmful. A king who coordinates his army against a disorganized populace is more dangerous than one who cannot.

Toward "galaxy-brained" thinking. When individual actors or groups convince themselves through seemingly plausible chains of reasoning to take actions that would strike an outside observer as clearly harmful, they are engaged in what Buterin calls "galaxy-brained" thinking. The more powerful and coordinated a group, the more dangerous galaxy-brained reasoning becomes: the group can execute on a bad idea at scale before anyone stops them.

Ethereum community coordination as a case study. The Ethereum community is praised for its ability to coordinate quickly to fix security vulnerabilities. But this same coordination capacity could theoretically be used to coordinate against users' interests. The challenge is preserving the "good" coordination (fixing bugs, evolving the protocol) while preventing the "bad" kind (capturing value from users).

Defending against bad coordination. Buterin identifies several strategies: (1) keep important social norms simple and robust enough that they can survive determined attack; (2) maintain a diversity of power centers that check each other; (3) rely on the specific, hard-to-fake commitments that open-source code enables; (4) ensure that the "exit" option — users forking away — remains credible and low-cost.

Key ideas

• Coordination has diminishing returns and can become harmful when it benefits a subgroup at others' expense.
• Galaxy-brained reasoning — convincing chains of logic leading to harmful actions — is the primary mechanism by which coordinated groups go wrong.
• The goal is not maximum coordination but robust, diverse coordination that resists capture by any single interest.
• Ethereum's governance must be designed to enable protocol evolution while resisting capture by developers, miners/validators, or large token holders.

Key takeaway

Coordination is not unconditionally good: each incremental step toward more coordination in an unbalanced system can be harmful, and the design challenge is building systems where beneficial coordination is easy and harmful coordination is structurally difficult.

---

Chapter 17 — Prediction Markets: Tales from the Election

(vitalik.ca, 2021)

Central question

What did the 2020 US presidential election reveal about the practical functioning of prediction markets, and what design improvements would make them more reliable information aggregators?

Main argument

The 2020 election as a stress test. The 2020 US presidential election was the most-traded event in the history of prediction markets at the time. Buterin uses his own experience participating in Augur, Polymarket, and other markets to analyze what worked and what failed.

Market failures in practice. Several problems emerged. (1) Resolution disputes: Defining "who wins" seemed simple but involved genuine ambiguity (when does a winner get "declared"? by whom?). (2) Thin liquidity: Even markets with large nominal interest had too little liquidity to allow large positions without moving the price. (3) Persistence of irrational prices: Even after strong evidence emerged, some markets took many days to converge to what seemed like obvious values, suggesting participants were uncertain about resolution criteria rather than about the underlying outcome.

Can prediction markets become better? Buterin argues yes, through: (1) Better oracle design — more precise resolution criteria specified in advance; (2) Conditional markets — "what is Biden's chance of winning given that he is the nominee?" type structures that isolate the relevant uncertainty; (3) Subsidized market-making by parties who want information, not profit; (4) Combinatorial prediction markets that allow betting on many outcomes simultaneously.

The deeper purpose. Beyond providing probabilities, prediction markets are a governance mechanism: they surface dispersed information that no central authority possesses. The 2020 election showed that this potential is real but that current implementations have significant practical barriers to achieving it.

Key ideas

• Prediction market failures in 2020 came primarily from oracle design (resolution criteria) and liquidity problems, not from fundamental market irrationality.
• Conditional markets can isolate specific uncertainties and reduce the noise from correlated events.
• The value of prediction markets is as much epistemic (aggregating dispersed information) as financial.
• Crypto prediction markets (Augur, Polymarket) have structural advantages over traditional betting markets (permissionless, global, non-custodial) but also structural disadvantages (oracle complexity, interface friction).

Key takeaway

The 2020 election stress-tested crypto prediction markets and found them promising but immature: the primary failures were oracle design and liquidity rather than market efficiency, suggesting specific, tractable improvements rather than fundamental limitations.

---

Chapter 18 — The Most Important Scarce Resource Is Legitimacy

(vitalik.ca, March 23, 2021)

Central question

What is legitimacy, and why is it the most important scarce resource in the blockchain ecosystem — more important than hashpower, developer talent, or financial capital?

Main argument

The resource misallocation problem. Bitcoin and Ethereum together spend over $50 million per day on proof-of-work mining. The Ethereum Foundation's entire annual budget for research and development is $30 million — roughly one day of mining expenditure. This is a staggering misallocation, yet it persists because redirecting issuance toward public goods is politically fraught.

Legitimacy defined. Buterin defines legitimacy as a property of decisions, processes, or structures that makes people believe they should be followed, and that others also believe this. It is an intrinsically social phenomenon — a stable Nash equilibrium in a coordination game where the reward for conforming to a convention is that others conform to it too. "Legitimacy by brute force," "legitimacy by continuity," "legitimacy by fairness," "legitimacy by process," "legitimacy by performance," and "legitimacy by participation" are distinct sources.

Why legitimacy is the scarcest resource. Because blockchains are coordination technologies, the ability to mobilize large communities behind any particular chain, rule, or decision depends entirely on legitimacy. Bitcoin Cash's attempt to capture "Bitcoin" brand legitimacy failed. Ethereum Classic's attempt failed. The EF's ability to coordinate Ethereum's development depends on legitimacy, not legal authority. Even proof-of-work security ultimately relies on the legitimacy of the chain — no amount of hashpower can help if the community collectively decides your chain is not the real one.

Implications for public goods funding. If the Ethereum ecosystem were to direct a portion of ETH issuance toward funding public goods (researchers, protocol developers, infrastructure), this would be extremely valuable — but it requires establishing that this funding mechanism is legitimate. Current experiments: Gitcoin Grants (quadratic funding), Protocol Guild (direct funding for Ethereum client developers), retroactive public goods funding.

The EF's legitimacy paradox. The Ethereum Foundation has significant legitimacy but deliberately keeps its footprint small because using that legitimacy too aggressively risks centralizing power in ways that would be hard to reverse. The most important thing the EF can do is preserve the legitimacy of the broader Ethereum ecosystem, not maximize its own influence.

Key ideas

• Legitimacy is a Nash equilibrium: it is stable because each person follows a convention partly because they expect others to follow it.
• The blockchain ecosystem wastes enormous resources on proof-of-work security while under-funding protocol development — and the reason is legitimacy constraints on redirecting issuance.
• Building legitimate public-goods funding mechanisms is among the most important unsolved problems in the space.
• Multiple sources of legitimacy (fairness, process, participation, performance) can be combined and play different roles in different contexts.

Key takeaway

Legitimacy — the social property that makes people follow decisions and expect others to do the same — is the most important scarce resource in any blockchain ecosystem, because it is what actually secures the chain, funds development, and enables governance; raw hashpower or financial capital matter only insofar as they maintain it.

---

Chapter 19 — Against Overuse of the Gini Coefficient

(vitalik.ca, July 29, 2021)

Central question

Why is the Gini coefficient a misleading measure of inequality in cryptocurrency ecosystems, and what alternative measures better capture what we actually care about?

Main argument

Gini's single-number problem. The Gini coefficient combines two distinct social problems — "suffering from lack of resources" and "concentration of power" — into a single index. Buterin calls these Dystopia A (half the population has nothing) and Dystopia B (one person has half of everything). These are bad in fundamentally different ways: Dystopia A is about deprivation; Dystopia B is about undemocratic power concentration. The same Gini score can arise from very different underlying distributions.

Why this matters especially for cryptocurrency. In a geographic community, measured inequality reflects inequality in actual life resources. But in a cryptocurrency community, measured inequality can arise from two completely different sources: genuine wealth inequality, and inequality in level of interest or participation. Someone holding $15 of a national currency is probably poor; someone holding $15 of a cryptocurrency is probably a curious dabbler. Using Gini to compare crypto inequality to national-economy inequality is therefore a category error.

Better measures for the two problems. For Dystopia A (deprivation): use a utility-based measure such as the difference between log-of-average income and average-of-log income. This directly quantifies the welfare loss from inequality under the assumption that utility is logarithmic in income. For Dystopia B (power concentration): use the Herfindahl-Hirschman Index (which weights large actors' shares more heavily) or the Nakamoto coefficient (minimum number of participants needed to add up to more than 50% of total stake). These specifically track power concentration near the top without being distorted by the long tail of small holders.

Limits of all indices. Even these better measures are insufficient because harms from concentration depend on relationships and the ability to collude, and lack of resources may not be harmful if people have informal support networks. But they are better than Gini for these specific purposes.

Key ideas

• The Gini coefficient conflates two distinct social problems that require different policy responses.
• Cryptocurrency Gini comparisons are particularly misleading because they confuse participation inequality (healthy, inevitable) with resource inequality (potentially harmful).
• Utility-based measures capture deprivation more accurately; HHI and Nakamoto coefficient capture power concentration more accurately.
• No index fully captures the network-dependent nature of both deprivation and power.

Key takeaway

The Gini coefficient is the wrong tool for analyzing inequality in cryptocurrency ecosystems because it conflates deprivation with power concentration and ignores the fundamentally different character of participation in an internet community versus a geographic one; the Nakamoto coefficient and HHI are better tools for the specific problems crypto communities actually face.

---

Chapter 20 — Moving Beyond Coin-Voting Governance

(vitalik.ca, August 16, 2021)

Central question

Why is pure coin-voting governance — even when it appears to avoid the pitfalls of informal governance — structurally inadequate for crypto protocols, and what alternative designs are promising?

Main argument

DeGov is both necessary and dangerous. The Declaration of Independence of Cyberspace (1996) imagined a world of pure cryptography and private property — no governance needed. But any sufficiently complex system creates governance problems that markets alone cannot solve: protocol upgrades, parameter changes, emergency responses to hacks. Pure "governance by code" is not governance at all; it is governance frozen at deployment time, which becomes inadequate as circumstances change. The Steem/Hive fork, where a hostile takeover led to mass exit, illustrates what happens when governance mechanisms fail.

The specific failures of coin voting. Buterin catalogs coin voting's structural problems: (1) Whales dominate — one entity with $100M worth of tokens has far more than 100,000x the governance power of someone with $1K worth; (2) Voter apathy — typical participation rates are under 10%; (3) Short-termism — coin holders are compensated by price appreciation and may not care about long-term protocol health; (4) Plutocratic capture — hostile takeovers like Steem's become possible whenever a single entity can acquire majority stake.

Alternative 1: Conviction voting. Votes accumulate "conviction" over time as they remain committed, giving long-term holders more influence and making rapid hostile takeovers harder.

Alternative 2: Quadratic voting. Voting power is the square root of tokens held, so influence scales sub-linearly with stake. But this requires identity to prevent Sybil attacks.

Alternative 3: Reputation-based voting. Non-transferable governance rights, earned through participation rather than purchased. Buterin's concept of "proof of participation" — governance rights proportional to demonstrated on-chain activity — is one instantiation.

Alternative 4: Futarchy. Governance decisions are made by prediction markets betting on outcomes that correlate with protocol health. But this requires measurable objective functions.

Alternative 5: Separation of powers. Rather than having one mechanism determine everything, design multi-chamber governance where different groups (token holders, core developers, validators, users) have vetoes or participation rights in different types of decisions.

The core principle. Governance mechanisms should be hard to capture by concentrated economic interests. This points toward mechanisms where governance power correlates with some combination of skin-in-the-game, demonstrated participation, and breadth of representation — not just raw financial stake.

Key ideas

• Coin voting is a reasonable first approximation but has fundamental structural flaws that become more dangerous as protocols accumulate more value.
• Non-transferable governance rights based on participation address plutocracy but require identity infrastructure.
• No single alternative is complete; real governance systems will likely combine multiple mechanisms.
• The goal is capturing the benefits of decentralized governance (legitimacy, resistance to capture) while avoiding the failure modes (plutocracy, voter apathy, hostile takeovers).

Key takeaway

Pure coin-voting governance is structurally vulnerable to plutocratic capture, voter apathy, and short-termism; better governance designs combine multiple mechanisms — conviction voting, quadratic voting, reputation-based rights, or separation of powers — that make governance power proportional to participation and commitment rather than raw financial stake.

---

Chapter 21 — Trust Models

(vitalik.ca, August 20, 2021)

Central question

What does it mean precisely to "trust" a system, and how can we compare different blockchain architectures on a rigorous multi-dimensional trust model?

Main argument

Trust as assumptions about behavior. Buterin defines trust as "the use of any assumptions about the behavior of other people." This deliberately broad definition includes trusting that strangers won't stab you (social trust in legal systems), trusting that software was written honestly (reputational trust in developers), and trusting that farmers will grow food (market trust).

A four-dimensional framework. Trust can be decomposed along four axes: (1) How many people must behave as expected? (2) Out of how many total? (3) What motivations are required (pure altruism vs. mild altruism vs. rational self-interest)? (4) How badly does the system fail if the assumption is violated?

The trust matrix. From this framework, Buterin draws a grid: "1 of 1" (traditional centralized model), "N of N" (dystopian — everything must work), "N/2 of N" (blockchain consensus), "1 of N" (fraud proof systems — works if anyone is honest), "few of N" (data availability), "0 of N" (self-verifying). The key insight: "1 of N" is much closer to "0 of N" than it is to "N/2 of N." If your current actor fails or turns malicious, you can simply switch to another — you are not screwed the way you would be in a "1 of 1" system.

Applying the framework to Layer 2 systems. Buterin maps major L2 designs: payment channels have "1 of 1" liveness trust (counterparty can freeze funds temporarily) but "N/2 of big-N" safety trust (requires blockchain majority honesty); ZK rollups have "1 of small-N" liveness trust and no safety-failure risk; ZK rollups with light-withdrawal enhancement have no liveness or safety failure risk. This gives a precise vocabulary for comparing L2 security claims.

Liveness vs. safety failure. A liveness failure is being temporarily unable to act (funds stuck). A safety failure is something actively bad happening (invalid state accepted). These require different analysis and have very different severity.

Key ideas

• "Trust" is not binary — there are distinct points on a spectrum from "1 of 1" (fully centralized) to "0 of N" (fully self-verifying).
• The "1 of N" model is much stronger than it appears: one honest actor anywhere is sufficient.
• ZK rollups can, in principle, achieve near-zero trust requirements for both liveness and safety.
• Even software correctness depends on a "few of N" trust model (someone reviewing the code), which means going from "1 of N" to "0 of N" on one dimension while ignoring others is often illusory.

Key takeaway

Trust is not a binary property but a multi-dimensional spectrum characterized by how many actors must be honest, what motivations they need, and how the system fails if they are not; and this framework gives a rigorous vocabulary for comparing the security properties of different blockchain architectures.

---

Chapter 22 — Crypto Cities

(vitalik.ca, October 31, 2021)

Central question

What would it look like for cities to seriously use blockchain and cryptographic technologies, and which specific applications would actually create value?

Main argument

The local government moment. Buterin opens by noting a convergence: cities are increasingly experimenting with radical governance ideas (Miami's tech-friendly approach, Colorado's quadratic voting experiments, Wyoming's DAO law), while crypto ideas (coins, NFTs, DAOs) are going mainstream. The essay asks what happens when these trends meet.

Surveying existing experiments. Four real projects are examined: (1) CityCoins.co (MiamiCoin): 70% of STX revenues from coin issuance go to existing stakers, 30% to the city government — but the model is heavily tilted toward early adopters. (2) Reno under Mayor Hillary Schieve: NFT sales for local art, a RenoDAO with resident-accessible governance, blockchain-secured random number generators for casinos. (3) CityDAO: a Wyoming DAO trying to create entirely new cities from scratch, using Harberger taxes and citizen NFTs, explicitly avoiding coin-voting governance in favor of participation-based voting. (4) Busan, Korea: government-backed NFT conference exploring local digital art.

Category 1: Making existing processes more transparent and trustworthy. Blockchains can make government payments, procurement, random number generation (for lotteries, sortition), certificate issuance, and asset registries more verifiable and tamper-resistant. A government-internal stablecoin that tracks all spending on-chain — with optional ZK privacy for individual amounts but a public total — is one concrete example.

Category 2: New economic and governance experiments. Harberger taxes on land (self-assessed, with tax proportional to the price you'd accept for sale) could dramatically improve urban land allocation. Quadratic funding for local businesses and news outlets could subsidize positive externalities more efficiently than traditional grants. City tokens designed for broad, non-speculative ownership (parking discounts for holders, zoning fee revenue) could align residents' economic interests with city success without the perverse incentives of current home ownership.

The optionality trap. The most important warning: governments should avoid "too quickly sacrificing optionality" — launching a poorly designed city token before thinking through the long-term economics, or selling off too much land early. Reversibility and experimental incrementalism are key.

Key ideas

• Blockchain's value for cities comes from two distinct functions: making existing processes verifiable (anti-corruption layer) and enabling new governance experiments (quadratic voting, Harberger taxes, DAOs).
• City tokens have a wide design space, and the CityCoins.co model (heavily front-loaded to early adopters) is not the only option.
• Blockchain-secured voting at the local level is the appropriate starting point for democratic electronic voting.
• New cities (CityDAO) have a "blank slate" advantage but face the challenge that most people will live in existing cities for the foreseeable future.

Key takeaway

Crypto cities represent a genuine convergence of two trends — local government experimentation and blockchain technology mainstreaming — and offer two distinct categories of value: transparent, verifiable versions of existing processes, and new economic experiments in land ownership, governance, and public goods funding.

---

Chapter 23 — Soulbound

(vitalik.ca, January 26, 2022)

Central question

What would it mean for NFTs and blockchain assets to be non-transferable — "soulbound" — and why might this open up important new design possibilities?

Main argument

The World of Warcraft metaphor. In WoW, soulbound items (once equipped, cannot be transferred or sold) ensure that the most powerful items require personal participation: you cannot buy the legendary sword; you must kill the dragon yourself. The mechanism keeps the game meaningful — wealth cannot substitute for skill and effort.

The NFT transferability problem. Current NFTs are essentially fully tradeable: ownership signals only purchasing power, not personal achievement or participation. POAP (Proof of Attendance Protocol) NFTs illustrate the issue: a POAP from an event is supposed to signal "I was there," but if it can be purchased on a secondary market, it signals only "I was willing to pay."

Governance rights and transferability. Transferable governance rights have two failure modes: (1) concentrated interests buy up governance from dispersed holders, undermining the goal of broad governance; (2) governance flows toward the determined-but-incompetent (who want power) rather than the meek-but-thoughtful (who would provide the most valuable input). Non-transferable governance rights — like citizenship in a democracy — better represent the goal of governance by the governed.

Technical implementation challenges. Naive non-transferability can be circumvented (create a wrapper smart contract that holds the NFT, sell the wrapper). More robust approaches: (1) Proof of Humanity attestations — which have a revocation mechanism allowing the original holder to invalidate a transferred attestation — create de facto soulbound NFTs; (2) Binding NFTs to ENS names that users care about and won't transfer; (3) Hash-commitment schemes that hide ownership except when the holder chooses to reveal it; (4) ZK-SNARKs to prove possession of an item without revealing which item.

Privacy considerations. Soulbound items that are publicly visible create privacy risks: a vaccination POAP that is automatically visible to everyone would create social pressure to reveal medical decisions. Privacy and non-transferability must be designed together — zero-knowledge techniques allow selective disclosure.

The cultural diagnosis. Current crypto culture is heavily money-oriented: status comes from expensive NFTs, conspicuous on-chain wealth. Soulbound items offer an alternative where on-chain assets can represent who you are — your history of participation, your verified achievements — not just what you can afford.

Key ideas

• Soulbound items represent a fundamental design choice: some on-chain assets should signal participation and identity rather than purchasing power.
• Non-transferable governance rights address the plutocracy problems in coin voting while preserving on-chain verifiability.
• Technical implementation is solvable but requires careful design around revocation, privacy, and the wrapper-contract attack.
• This essay plants the seed for the later "Decentralized Society: Finding Web3's Soul" paper (2022) co-authored with E. Glen Weyl and Puja Ohlhaver.

Key takeaway

Making blockchain assets "soulbound" — non-transferable, linked to specific individuals rather than tradeable like commodities — would unlock a design space where on-chain items represent identity, participation, and social relationships rather than just wealth, opening paths to governance and social infrastructure that go far beyond financialization.

---

The book's overall argument

1. Introduction (Nathan Schneider) — establishes Buterin as a writer-thinker whose evolution from cyber-libertarian to pluralist mechanism designer defines what Ethereum is and what it aspires to be.
2. Chapter 1 (Markets, Institutions, and Currencies) — proposes that programmable currency issuance (seigniorage) is a new primitive for funding public goods, complementing markets and institutions.
3. Chapter 2 (Ethereum: A Next-Generation Cryptocurrency) — presents the Ethereum platform as a Turing-complete, general-purpose smart contract layer: not another special-purpose coin but a substrate for any mechanism.
4. Chapter 3 (Self-Enforcing Contracts and Factum Law) — introduces factum money and self-enforcing contracts as a coherent system: the ledger's validity is the enforcement mechanism, removing the need for courts.
5. Chapter 4 (On Silos) — argues against crypto maximalism: ideological diversity is healthy, and the appropriate response is modular interoperability rather than consolidation under any single flag.
6. Chapter 5 (Superrationality and DAOs) — shows that radical organizational transparency (DAOs with public governance code) can enable a form of cooperation based on credible commitment that traditional corporations cannot replicate.
7. Chapter 6 (The Value of Blockchain Technology) — clarifies the underlying value proposition: not a killer app but a general-purpose platform offering guaranteed, tamper-resistant execution across a long tail of applications.
8. Chapter 7 (Why Cryptoeconomics and X-Risk Researchers Should Listen to Each Other More) — reveals the deep structural similarity between AI safety and cryptoeconomic design: both face the challenge of simple rules governing complex, intelligent agents.
9. Chapter 8 (A Proof-of-Stake Design Philosophy) — articulates the philosophical case for PoS: security from economic penalties (value-at-loss) rather than energy expenditure restores the defender's advantage that cryptography provides.
10. Chapter 9 (The Meaning of Decentralization) — decomposes decentralization into three axes and three rationales, providing a conceptual toolkit for evaluating protocol design choices.
11. Chapter 10 (Notes on Blockchain Governance) — critiques on-chain coin voting and proposes "multifactorial consensus" as a more robust governance model.
12. Chapter 11 (On Collusion) — proves that mechanisms for funding public goods cannot be simultaneously identity-free and collusion-safe, establishing identity infrastructure as a precondition for richer governance.
13. Chapter 12 (On Free Speech) — applies the norm that bad arguments get counterarguments not bullets to privately owned but functionally public platforms, arguing crypto communities have a special obligation to uphold this.
14. Chapter 13 (Control as Liability) — shows that regulatory trends inadvertently push developers toward cypherpunk-aligned "can't be evil" design by making control over user assets a regulatory liability.
15. Chapter 14 (Christmas Special) — reveals the playful mathematical sensibility underlying Buterin's technical thinking, connecting fractal geometry and finite fields to blockchain data structures through games.
16. Chapter 15 (Credible Neutrality as a Guiding Principle) — proposes credible neutrality as the master design principle for mechanisms that must serve large, diverse communities: visible, verifiable fairness rather than merely asserted neutrality.
17. Chapter 16 (Coordination, Good and Bad) — warns that coordination is not unconditionally valuable: unbalanced coordination can be as harmful as no coordination, and "galaxy-brained" reasoning is the primary failure mode of well-coordinated groups.
18. Chapter 17 (Prediction Markets: Tales from the Election) — uses the 2020 election as a stress test, finding that prediction markets are promising but need better oracle design and liquidity to realize their epistemic potential.
19. Chapter 18 (The Most Important Scarce Resource Is Legitimacy) — argues that legitimacy — the social property making coordination stable — is what actually secures blockchains, funds development, and enables governance; all other resources depend on it.
20. Chapter 19 (Against Overuse of the Gini Coefficient) — develops a more precise analytical vocabulary for inequality in crypto communities, distinguishing deprivation (Dystopia A) from power concentration (Dystopia B) and recommending appropriate measures for each.
21. Chapter 20 (Moving Beyond Coin-Voting Governance) — shows coin voting's structural failure modes and maps out alternatives that make governance power proportional to participation rather than raw financial stake.
22. Chapter 21 (Trust Models) — provides a rigorous multi-dimensional framework for comparing trust requirements across blockchain architectures, from "1 of 1" to "0 of N."
23. Chapter 22 (Crypto Cities) — applies the book's ideas to a concrete institutional context (city governments), identifying both incremental (transparency/anti-corruption) and radical (Harberger taxes, quadratic governance, DAOs) applications.
24. Chapter 23 (Soulbound) — closes the arc by arguing that blockchains need to represent not just economic value but human identity and social relationships, pointing toward a post-financialization vision of what the technology can be.

---

Common misunderstandings

Misunderstanding: Proof of Stake is just about reducing energy consumption.

Buterin's philosophical case for PoS is primarily about restoring the defender's advantage. Energy reduction is a consequence, not the fundamental justification. The key is that PoS derives security from explicit economic penalties (value at loss) rather than opportunity costs, making attacks asymmetrically expensive relative to defense — the cypherpunk property that PoW violates.

Misunderstanding: Decentralization is a single property that you either have or don't.

The essay on the meaning of decentralization makes clear that decentralization has three independent axes (architectural, political, logical) and three independent rationales (fault tolerance, attack resistance, collusion resistance). A system can be decentralized in one dimension while remaining centralized in others, and the appropriate design choices depend on which rationale matters most for a given context.

Misunderstanding: On-chain governance via coin voting is a panacea for blockchain governance problems.

The essays on blockchain governance and on moving beyond coin voting make the opposite case: coin voting has deep structural flaws (low participation, bribery vulnerability, plutocratic capture, non-representativeness) and should be one of several governance inputs in a multifactorial consensus framework, not the sole or automatic mechanism.

Misunderstanding: Buterin is a libertarian or crypto-anarchist who believes all human institutions should be replaced by blockchain-based alternatives.

By 2020–2022, Buterin explicitly argues that blockchains should work with existing institutions (city governments, legal systems) rather than supplanting them. The Crypto Cities essay, the Soulbound essay, and the overall arc of Part 3 reflect a move toward pluralist institution-building rather than radical replacement.

Misunderstanding: The Ethereum whitepaper and early vision are the same as what Ethereum became.

The book traces substantial evolution in Buterin's thinking. Early essays reflect cyber-libertarian ideals; later essays engage seriously with legitimacy, identity, governance, collusion resistance, and inequality. The book is deliberately structured to show this development, not to present a timeless unified vision.

Misunderstanding: Smart contracts are autonomous and trustless in an absolute sense.

The Trust Models essay makes clear that no system is fully trustless: even "0 of N" systems rely on software that was written by humans and reviewed by others. The essay provides a rigorous framework for precisely characterizing how much trust a system requires and from whom — which is more useful than a binary trusted/trustless claim.

---

Central paradox / key insight

The book's central paradox can be stated precisely:

Blockchains are designed to eliminate the need for trust — yet their security, legitimacy, and governance all depend fundamentally on social trust.

Proof of work was supposed to make social consensus irrelevant: the "true" chain is simply the one with the most accumulated work, full stop. But as the Proof-of-Stake Design Philosophy essay shows, a 51% attacker with unlimited hashpower still could not convince the world that a rewritten chain is legitimate — because legitimacy is a social phenomenon, not a computational one. The social layer is always the ultimate backstop.

Similarly, smart contracts are "self-enforcing" only because the community collectively enforces the ledger. The DAO hack was reversed not by code but by a hard fork — a social decision. Factum money "just is" only because enough people agree that it is.

The key insight the book arrives at, through essay after essay, is that the goal is not to eliminate trust but to distribute it and make it explicit and auditable. The right question is not "does this system require trust?" but "how many people must be trusted, for what, with what motivation, and with what consequences if they defect?" The shift from "trustless" as a binary claim to trust as a precisely characterized multi-dimensional property is the book's most important philosophical contribution.

The corollary: because social trust cannot be designed away, the social norms around blockchains — credible neutrality, free speech, collusion resistance, legitimate governance — matter as much as the cryptographic protocols. This is why the book is a philosophy book as much as a technical one.

---

Important concepts

Seigniorage

The difference between a currency's market value and its intrinsic value — the "phantom value" generated purely by the social fact of the currency being used as money. Bitcoin's innovation was directing seigniorage toward a public good (network security); Ethereum's vision extends this to arbitrary public goods through programmable issuance.

Factum money

Money whose validity is determined entirely by cryptographic consensus — "the balance sheet just is, with a few rules on how it can be updated." Distinct from commodity money (valuable because of intrinsic use), commodity-backed money (redeemable for a commodity), and fiat money (declared valid by a government). Smart contracts become possible on factum money because the ledger itself is the enforcement mechanism.

Smart contract

A contract that enforces itself: a computer program whose execution is guaranteed by the cryptoeconomic protocol in which it runs, not by courts or legal systems. First named by Nick Szabo; given practical implementation by Ethereum.

Superrationality

A mode of cooperation beyond simple Nash equilibrium reasoning: agents who are "leaky" (whose inner states are imperfectly but usefully readable from external signals) can cooperate by adopting strategies of cooperating with those who appear virtuous and defecting against those who do not. DAOs instantiate superrationality by making organizational logic fully public and therefore fully readable.

Credible neutrality

The property of a mechanism that makes it visibly and verifiably fair to a large, diverse audience — not just neutral in fact but easy to see as neutral. Required for mechanisms that must serve as common infrastructure across groups with conflicting interests. The four design rules: no specific people/outcomes hardcoded, open source, simple, infrequently changed.

Legitimacy

A social Nash equilibrium in which people follow decisions, processes, or conventions partly because they expect others to follow them. Buterin identifies six sources: brute force, continuity, fairness, process, performance, and participation. The most important scarce resource in any blockchain ecosystem because it is what actually secures chains, enables governance, and funds development.

Proof of stake (as a philosophy)

A consensus mechanism whose security derives from explicit economic penalties (value at loss) rather than opportunity costs (foregone mining rewards). The one-sentence philosophy: "Security comes from putting up economic value-at-loss." Achieves a defender's advantage that PoW lacks: attackers lose their deposited stake while the honest community can fork away and recover.

Collusion resistance

The property of a mechanism making it difficult for a coordinating group to profit at the expense of non-coordinating participants. Buterin shows this is in fundamental tension with identity-freedom: mechanisms that help dispersed communities coordinate will also help concentrated actors simulate being dispersed communities. Robust identity systems are a prerequisite for collusion-resistant mechanism design.

Galaxy-brained reasoning

Seemingly plausible chains of logic that lead actors (individuals or coordinated groups) to take actions that would strike outside observers as clearly harmful. The risk increases with the power and coordination of the group executing the reasoning. Robust social norms and diverse power centers are defenses against galaxy-brained group action.

Soulbound item

In World of Warcraft, an item that cannot be transferred or sold once acquired — used as a metaphor for on-chain assets that represent identity, participation, and social relationships rather than purely tradeable economic value. Soulbound NFTs could represent verified attendance, earned credentials, or non-transferable governance rights, enabling blockchains to represent the social fabric of communities rather than just their financial activity.

Nakamoto coefficient

The minimum number of participants whose combined stake exceeds 50% of total stake in a blockchain system. A concrete measure of power concentration that focuses on the top of the distribution — more relevant for detecting "Dystopia B" (undemocratic power concentration) than the Gini coefficient.

Trust model taxonomy

Buterin's framework: "1 of 1" (single trusted party, fully centralized), "N/2 of N" (majority consensus, standard blockchain), "1 of N" (works as long as anyone is honest, e.g., fraud proofs), "few of N" (data availability checks), "0 of N" (fully self-verifying). The key insight: "1 of N" is much closer to "0 of N" than to "N/2 of N" in terms of practical security.

---

References and Web Links

Primary book and edition information

• Vitalik Buterin. Proof of Stake: The Making of Ethereum and the Philosophy of Blockchains. Edited by Nathan Schneider. Seven Stories Press, 2022. ISBN: 978-1-64421-248-6.
  • Publisher page (Seven Stories Press / Penguin Random House)
  • Open access version on Internet Archive
  • Nathan Schneider's author page with background on the book

Background and overview

• Kirkus Reviews review of Proof of Stake
• Goodreads page with reader discussion
• Ethereum Foundation — official background on Ethereum
• Vitalik Buterin's personal blog (vitalik.ca)

The original essays (primary sources)

• "A Proof-of-Stake Design Philosophy" — Buterin, December 2016
• "The Meaning of Decentralization" — Buterin, February 2017
• "Notes on Blockchain Governance" — Buterin, December 2017
• "On Collusion" — Buterin, April 2019
• "Credible Neutrality as a Guiding Principle" — Buterin, January 2020
• "The Most Important Scarce Resource Is Legitimacy" — Buterin, March 2021
• "Moving Beyond Coin-Voting Governance" — Buterin, August 2021
• "Soulbound" — Buterin, January 2022
• "Crypto Cities" — Buterin, October 2021

Key intellectual background

• Nick Szabo, "Smart Contracts: Building Blocks for Digital Markets" (1996)
• Ethereum Whitepaper (appendix to book; also available at ethereum.org)
• E. Glen Weyl, Eric Posner. Radical Markets: Uprooting Capitalism and Democracy for a Just Society. Princeton University Press, 2018.
• Vitalik Buterin, Zoë Hitzig, E. Glen Weyl. "A Flexible Design for Funding Public Goods." Management Science, 2019.
• Vitalik Buterin, E. Glen Weyl, Puja Ohlhaver. "Decentralized Society: Finding Web3's Soul." 2022.

Additional chapter summaries and study resources

These are secondary summaries and should be used alongside, rather than instead of, the original book.

• Shortform book summary of Proof of Stake
• Medium: Vitalik Buterin's "Proof of Stake" Book Summary and Key Takeaways (Jesiel)
• Medium: Book Review of Proof of Stake (Allen D.)