Most money has no ceiling. A central bank can decide, on a Tuesday, to create more of it — and historically, they do. Bitcoin made the opposite promise, and baked it straight into the code every node runs: there will only ever be 21 million bitcoin. Not “we plan to stop,” not “unless the board votes otherwise” — a hard, arithmetic limit enforced by thousands of independent computers. In this lesson you’ll see exactly how that limit works: the reward that halves every four years, the schoolbook series that conveniently sums to 21 million, why “only 21 million coins” doesn’t mean what people think, and what happens around the year 2140 when the new-coin faucet finally runs dry.
A Supply Set in Code
Before you read — take a guess
Guess before reading: what enforces Bitcoin's 21-million limit?
In lessons 2 and 3 you saw that miners assemble blocks and win them through proof-of-work. The reward they collect for winning a block is called the block subsidy (paid out in the block’s coinbase transaction — the special line that mints brand-new coins). That subsidy is the only way new bitcoin enters existence. There’s no “create coins” button anywhere else.
And the subsidy isn’t fixed forever. The protocol shrinks it on a strict, public schedule. Because every node checks the schedule, a miner who tried to pay themselves more than the rules allow would simply have their block rejected by everyone else. The 21-million cap is a consequence of that schedule — not a separate setting someone could quietly raise.
Issuance vs. transactions
The cap is on issuance — how many coins are created. It says nothing about how many transactions happen. People will keep sending bitcoin back and forth long after the last coin is minted; the limit only stops new coins from appearing.
Where do brand-new bitcoin come from?
The Halving: Cutting New Supply in Half
Before you read — take a guess
Roughly how often does the block subsidy get cut in half?
The rule is delightfully simple: every 210,000 blocks, the block subsidy is cut in half. This event is called a halving (sometimes “halvening” by people who enjoy annoying others). At roughly one block every ten minutes, 210,000 blocks take about four years, so a halving lands roughly every four years.
It started at 50 BTC per block in 2009 and steps down from there:
| Era starts (approx.) | Halvings so far | Block subsidy | New BTC per ~4-yr era |
|---|---|---|---|
| 2009 | 0 | 50 | 10,500,000 |
| 2012 | 1 | 25 | 5,250,000 |
| 2016 | 2 | 12.5 | 2,625,000 |
| 2020 | 3 | 6.25 | 1,312,500 |
| 2024 | 4 | 3.125 | 656,250 |
| ~2028 | 5 | 1.5625 | 328,125 |
| ~2032 | 6 | 0.78125 | 164,062.5 |
Each era mints exactly half as many new coins as the one before. The subsidy keeps halving — about 33 times in total — until it drops below one satoshi (the smallest unit, which we’ll meet shortly) and effectively rounds to zero around the year 2140.
Scrub through the halvings below. Watch the block reward step down (50 → 25 → 12.5 → …) while the cumulative-supply curve climbs steeply at first, then flattens as it presses up against the 21-million ceiling:
- Current block reward
- 50 BTC
- Mined so far
- 10,500,000 BTC
Drag through the halving epochs: the reward halves each step (50 → 25 → 12.5 → …) while total supply rises fast early on, then flattens toward the 21,000,000 cap.
Sort each statement: true of how halvings work, or a myth?
Place each item in the right group.
- The new-supply rate stays constant forever
- Each era mints half as many new coins as the previous one
- Halvings continue until the subsidy rounds to zero (~2140)
- After a halving, mining stops completely
- The subsidy is cut in half every 210,000 blocks
Why It Adds Up to 21 Million
Before you read — take a guess
Guess: why does the never-ending stream of halvings still add up to a finite 21 million?
Here’s the satisfying bit of arithmetic. Total supply is the number of blocks per era (210,000) times the sum of all the per-block rewards across every era:
total = 210,000 × (50 + 25 + 12.5 + 6.25 + …)
Factor out the 50:
total = 210,000 × 50 × (1 + 1/2 + 1/4 + 1/8 + …)
That bracket is a famous geometric series. Adding 1, then half, then a quarter, then an eighth, forever, converges — it sneaks up on 2 without ever passing it. So:
total = 210,000 × 50 × 2 = 21,000,000
That’s the whole magic. The “infinite” halvings don’t blow up because each one contributes only half of what the previous era did. An ever-shrinking sum that homes in on a fixed value is exactly why a schedule with no formal end still has a hard ceiling.
Picture a 2-metre walk. First you cover 1 metre. Then half the remaining gap (1/2). Then half of what’s left (1/4), then 1/8, and so on. Each step closes half the remaining distance, so you’re always inside the 2-metre mark and forever creeping toward it but never overshooting. The partial sums go 1, 1.5, 1.75, 1.875, 1.9375 … → 2. Multiply that 2 by 210,000 × 50 and you land on 21,000,000. The cap is the finish line the supply walks toward but never crosses.
Fill in the blanks about the supply maths.
Pick the right option for each blank, then check.
New coins arrive only through the block , which halves every 210,000 blocks. Because each era adds of the coins the previous era did, the running total on a fixed ceiling of BTC.
Satoshis: Small Enough to Use
Before you read — take a guess
Guess: is '21 million coins' too few for the whole world to use?
A common gut reaction: “21 million coins for 8 billion people? That’s nowhere near enough!” The trick is that a bitcoin is not the smallest unit. Each one divides into 100,000,000 satoshis — “sats” for short, named after Bitcoin’s pseudonymous creator, Satoshi Nakamoto.
Run the multiplication and the “scarcity of units” worry evaporates:
| Unit | How many in one BTC | Total in existence (at 21M cap) |
|---|---|---|
| BTC (bitcoin) | 1 | 21,000,000 |
| Satoshi (sat) | 100,000,000 | 2,100,000,000,000,000 |
That’s 2.1 quadrillion satoshis. The number of coins is capped, but the number of usable units is enormous. Scarcity of coins is a property of the issuance schedule; divisibility is a separate property entirely — and bitcoin has plenty of it.
Myth: “21 million is too few to be useful”
“Only 21 million” describes coins, not units. Because each coin splits into 100 million satoshis, the network can handle tiny payments just fine. A capped coin count limits how many bitcoin exist, not how finely you can divide them.
Fill in the units.
Pick the right option for each blank, then check.
The smallest unit of bitcoin is the . One bitcoin equals of them, so the 21-million cap really represents of the smallest units.
Disinflation vs Fiat
Before you read — take a guess
Guess: what happens to Bitcoin's rate of new-coin creation over time?
Economists call newly created supply inflation of the money supply. Bitcoin’s is disinflationary: the rate of new coins relative to those already in circulation keeps falling at every halving, heading toward zero. Early on, 50 new coins per block against a small existing pile was a high rate; today’s smaller subsidy against ~19.7 million already-mined coins is a tiny one, and it shrinks again every four years.
Contrast that with fiat money (government-issued currency like the dollar or euro). Central banks can expand the fiat supply at their discretion — to fight a recession, fund spending, or respond to a crisis. That flexibility is sometimes a feature and sometimes a problem, but the key difference is who decides: with fiat, a committee; with Bitcoin, a fixed, public formula that no one can quietly change.
This predictable, transparent, ever-falling issuance is the heart of the “digital scarcity” or “digital gold” narrative — the story that a provably capped asset can act as a store of value.
A narrative, not a guarantee
“Digital gold” is a story people tell, and it’s worth holding at arm’s length. Scarcity is necessary for an asset to hold value, but it isn’t sufficient: plenty of scarce things are worthless because nobody wants them. Price isn’t promised by the supply schedule. Value still depends on demand — on people actually wanting to hold it. A fixed supply makes Bitcoin scarce; it does not make it valuable on its own.
Match each term to the right description.
Pick a term, then click its definition.
When the Subsidy Hits Zero
Before you read — take a guess
Guess: around 2140, when the block subsidy reaches zero, how will miners get paid?
After about 33 halvings, the subsidy drops below a single satoshi and rounds to zero, expected around the year 2140. At that point the coinbase stops minting new coins forever — and the last fraction of a bitcoin has been issued.
But mining doesn’t stop. Miners keep doing the same job (ordering transactions, securing the chain), now paid only by transaction fees — the tips users attach to get their payments confirmed (you saw the fee market in the mempool lesson). The security that proof-of-work buys must then come entirely from those fees rather than from a mix of fees plus a subsidy.
Whether fees alone will pay for enough security is a genuinely open economic question — honest people disagree. The optimistic view: a busy, valuable network generates plenty of fees. The cautious view: fees are volatile, and it’s untested over the very long run. We don’t have to resolve it here; just know it’s debated rather than settled.
Myth roundup
- “We’ll run out of bitcoin / mining stops at 21 million.” The cap limits issuance, not transactions. Mining continues indefinitely, funded by fees.
- “A halving guarantees the price goes up.” It cuts the new-supply flow, not the price. People speculate about a “halving cycle,” but correlation isn’t causation and past patterns don’t guarantee future ones — demand still drives price.
- “Satoshi can mint more, or the cap is easy to raise.” Changing the cap would require near-universal agreement among independent nodes and would shatter the social contract that gives Bitcoin its appeal. No single person controls it.
Which statements about the supply schedule are TRUE? (Select all that apply.)
The Big Picture
Six ideas hold the whole supply story together: new coins arrive only via the block subsidy; the subsidy halves every 210,000 blocks; the resulting geometric series converges on 21 million; coins are highly divisible into satoshis; issuance is disinflationary versus discretionary fiat; and after ~2140 the network runs on fees alone. Chunk it into one picture:
Big picture
Bitcoin's fixed supply
- Bitcoin's 21M supply
- How coins are issued
- Block subsidy — new coins in the coinbase, paid to the miner
- Halving — subsidy cut in half every 210,000 blocks (~4 yrs)
- Schedule: 50 → 25 → 12.5 → 6.25 → 3.125 → …
- Why it caps at 21 million
- 210,000 × 50 × (1 + 1/2 + 1/4 + …)
- The series converges to 2 → total = 21,000,000
- Enforced by every node, not a promise
- Units & scarcity
- 1 BTC = 100,000,000 satoshis → 2.1 quadrillion sats
- Disinflationary: issuance rate falls toward zero
- Digital-gold narrative — but demand still sets value
- After ~2140
- Subsidy rounds to zero — no new coins
- Miners paid only by transaction fees
- Whether fees fund enough security is an open question
- How coins are issued
A mixed recap — it pulls from the whole lesson:
What was the block subsidy at launch in 2009, and what is it after two halvings?
Check your answer to continue.
Key Takeaways
What to remember
- The 21-million cap is real and rule-enforced. It’s a consequence of the issuance schedule that every node validates — not a promise any person or company can override.
- The block subsidy halves every 210,000 blocks (~4 years): 50 → 25 → 12.5 → 6.25 → 3.125 → … about 33 times, until it rounds to zero around 2140.
- It sums to 21 million because the series converges: 210,000 × 50 × (1 + 1/2 + 1/4 + …) = 210,000 × 50 × 2 = 21,000,000.
- One BTC = 100,000,000 satoshis, so 21 million coins is 2.1 quadrillion sats. “Few coins” never meant “few usable units” — bitcoin is highly divisible.
- Issuance is disinflationary: the new-supply rate keeps falling toward zero, unlike discretionary fiat. This underpins the “digital gold” narrative — but scarcity isn’t value; demand still decides price.
- After ~2140, miners earn only fees. Whether the fee market alone funds enough security is a genuine, open economic question.
- Myths busted: mining doesn’t stop at 21 million (the cap is on issuance, not transactions), 21 million isn’t “too few” (sats), a halving doesn’t guarantee a price rise, and the cap can’t be quietly raised.
You now know exactly how many coins exist and how they come into being. But a ledger that says “this address owns 0.5 BTC” raises the obvious question: what is an address, and what stops anyone from spending coins that aren’t theirs? Next up: keys, addresses, and wallets — the cryptography that proves ownership.