Where 21 million comes from

Twenty-one million is the most quoted number in bitcoin and the least examined. It is usually presented as a rule someone wrote down — a cap, a limit, a promise. It is none of those things. Nobody decreed it, no document states it as a target, and there is no clause anywhere saying "the supply shall be 21,000,000".

It is a consequence. And knowing what it is a consequence of tells you rather a lot about how much confidence the number deserves.

1The schedule

Each new block creates some bitcoin from nothing and awards it to whoever mined it. That is the only way bitcoin is ever issued — there is no other tap.

The amount is not fixed. It began at 50 bitcoin per block and halves every 210,000 blocks, which at ten minutes a block works out to roughly every four years. Everything else follows from those two numbers.

2Where the number falls out

Add that column up and it converges, for the same reason walking half the remaining distance to a wall never quite reaches it but never overshoots either.

A halving series sums to exactly twice its first term. Each era mints 210,000 blocks, and the first era pays 50 per block, so:

210,000 × 50 × 2 = 21,000,000

That is the whole derivation. Twenty-one million is not a ceiling anyone imposed on the schedule — it is what the schedule adds up to. Ask why it is not twenty or twenty-five million and the honest answer is that the initial reward and the halving interval were chosen, and this is their product.

Nobody set the supply cap. Somebody set a payout schedule, and 21 million is where it lands.

3Slightly less than 21 million, actually

The true final figure is a little under, for reasons that are pleasingly mundane.

• The maths is done in whole satoshis. Rewards are integers of the smallest unit, so each halving discards fractional remainders. Those roundings never come back.
• The genesis block's 50 bitcoin cannot be spent. A quirk of the original code leaves it permanently outside the spendable set — the very first coins ever issued are unreachable.
• Some miners under-claimed. A handful of blocks over the years paid their own reward incorrectly and took less than they were entitled to. That bitcoin was simply never created.
• Coins get lost. Not part of the protocol, but real: keys thrown away, drives destroyed, seeds never written down. Those coins remain in the ledger permanently and will never move again.

So the ceiling is just below 21 million, the circulating figure is meaningfully lower still, and no accounting anywhere can tell you the difference — because a lost coin and a patiently held one look identical on-chain.

4Where we are now

Four halvings have happened. The reward stands at 3.125 bitcoin per block, and a little over twenty million — roughly 95% of everything there will ever be — has already been issued.

That means the famous scarcity is largely historical. The remaining million or so trickles out over the next hundred and fourteen years, with the final satoshi arriving somewhere around 2140. Anyone buying today is buying from existing holders far more than from new supply.

A tall glass measuring jug almost full, with a single slow drip suspended from the tap above it, shot against a dark background so the meniscus reads clearly.

Image to come

5Why the cap actually holds

This is the part that matters, and it is not about mathematics at all.

A schedule in a document is worth nothing on its own — every currency that ever inflated had rules against it. What makes bitcoin's different is who checks.

When a miner produces a block, they write their own reward into it. Nothing stops them writing a larger number. What stops it mattering is that every node receiving that block independently recalculates what the reward should be at that height and compares. A block claiming more is invalid — not disputed, not overruled by vote, simply discarded, along with all the work that went into producing it.

So the cap is not enforced by a majority, a foundation, or an agreement. It is enforced separately, in parallel, by every full node in the world, each answering only to its own copy of the rules. A miner with all the hashpower on earth cannot mint one extra satoshi, because the recipients would refuse the block. This is precisely the boundary drawn in the problem bitcoin solved: mining decides ordering, nodes decide validity.

6What happens when issuance ends

Miners are paid from two sources: the block subsidy, and the fees in the transactions they include. Today the subsidy is much the larger. It halves every four years toward nothing, and eventually fees have to carry the whole security budget on their own.

Whether that transition is comfortable is a genuinely open question, and anyone claiming certainty in either direction is overselling. The honest position:

• The subsidy shrinks on a fixed schedule that does not care whether fee revenue has grown to replace it.
• Fee revenue is volatile — it depends on demand for block space, which rises and falls with use.
• The transition is gradual, spanning decades, which gives the fee market a long time to develop. That is a reason for optimism rather than a guarantee.
• Nobody has to solve it today, and nobody can currently prove how it resolves.

7You will probably never own a whole one

Twenty-one million is small. Fewer coins than there are millionaires in the world, and the unit was never meant to be the thing you hold.

Each bitcoin divides into 100,000,000 satoshis, giving 2.1 quadrillion of them in total — and the satoshi, not the bitcoin, is the actual base unit of the protocol. Every amount in every transaction is denominated in whole satoshis; "0.001 BTC" is a display convenience your wallet performs for you.

Thinking in satoshis makes the arithmetic saner and removes the psychological trap of feeling shut out because you cannot buy a whole one. You would not refuse to hold dollars on the grounds that you own no gold bars.

The short version

Fifty bitcoin per block, halving every 210,000 blocks, sums to 21 million. Slightly less in practice, thanks to rounding, an unspendable genesis block, a few under-claiming miners, and a great many lost keys. About 95% is already issued. And the number holds not because anyone promised it but because every node independently rejects any block that breaks it.