This paper is also available on SSRN as a PDF.1 An earlier version was titled “Bitcoin and the Denationalization of Money”. This paper assumes a working knowledge of monetarism and unfamiliarity with Bitcoin. For a summary which assumes a working knowledge of Bitcoin and unfamiliarity with monetarism, see “How ‘Bitbanks’ Could Solve Bitcoin’s Volatility Problem” on Coindesk.
All theories aim at predicting the unknown, but there are few better tests of a theory’s mettle than its ability to accommodate the totally unexpected. Such has been the effect of the advent of crypto-currency on the various answers to the question, “What is money?” No economist before the dawn of the computer age could have predicted its emergence, and given the tiny overlap between economics and computer science, few could have predicted it even afterward. The novel form these monies take sheds clear light on certain aspects of the problem which hitherto were able to be evaded by clever economists – in particular the process by which a currency comes into widespread use, and the question of what, if any, monetary arrangements might come to pass in a laissez-faire setting.
To the common objection that crypto-currency has no “intrinsic value,” little more needs to be said than that this fact is true of every economic good, including gold. ‘Unique cryptographic hash’ has no more or less intrinsic value than ‘shiny metal rock’: the value of each is determined by familiar forces of supply and demand. Indeed, though it has no representation in physical space, many crypto-currencies (Bitcoin among them) exhibit properties more similar to gold than to similarly abstract fiat currency. This connection will be used to illuminate potential paths forward for Bitcoin, the current crop of “alt-coins”, and crypto-currencies in general.
The paper will begin with a brief technical overview of crypto-currency which will be necessary to understand its economically relevant properties. From there, drawing on the historical experience of gold, it will explore the technical, legal, and economic hurdles which crypto-currencies face in the future, focusing on the unique problems of financial intermediation for these currencies. Finally, some protocol-level alternatives to intermediation are considered, which might be able to mimic the salutary effects of financial intermediation on the money supply.
A crypto-currency is a method of constituting virtual “coins”, and providing for their secure ownership and transaction using a cryptographic problem. This problem is designed to be easy to verify, but computationally difficult to arrive at a solution. Various crypto-currencies use different functions for this purpose, the most common being a hash-target, by which hashes are calculated so as to come in below a certain value.2 This hash target (i.e. the difficulty of the problem) is adjusted every so often based on the total computing power on the network. This has the advantage of keeping the time between solutions more or less constant. Other protocols, such as Primecoin, provide for the problem by the calculation of large prime numbers. In theory any hard-to-calculate but easy-to-verify function with easily adjustable difficulty would do.3
This “proof-of-work”, though computationally intensive, is the method by which transactions are verified as unique and trustworthy. To incentivize participation, transactors can include a transaction fee which goes to the first user to successfully verify it. This fee is optional in Bitcoin, but mandatory in some others.
In addition, verifiers are rewarded by the network with a certain number of coins after successfully verifying a block of transactions. This process, called mining, is the means by which the supply of coins on a network is expanded, and the adjustable difficulty ensures that computing advances will not affect the rate of expansion. As might be expected, the marginal cost of mining (mainly electricity) tends to equilibrate to the marginal benefit.4 That this comes to a very large amount of electricity is illustrated by the 2011 police raid of a Canadian Bitcoin miner’s home because his energy usage was consistent with the high-powered lamps used for growing marijuana. In Bitcoin’s case, the reward for mining halves every 210,000 blocks verified, leading to a supply path over time with a positive first derivative which diminishes discontinuously to zero.5 A great variety of alternative supply schemes have been implemented, some of which will be discussed in the following sections.
A coin itself is constituted by its transaction history on the network, going back to the block from which it was mined. Each input into a transaction points to the output of a previous transaction. This history is kept track of by every computer on the network in a continuously updating record called the block chain – literally, a chain of transaction blocks to which newly verified blocks are added. As transaction records are public, anonymity is maintained only by keeping the account owners private. If there are competing block chains among different users – for example if two transactions are received in a different order by different users, or if someone attempts to forge a transaction – the protocol defines rules by which only one is accepted. This method is quite secure, the more so as the protocol gains wider currency. Bitcoin and its close relatives will prefer the longest block chain – that is, the one with the most computing power behind it. Thus, to forge a Bitcoin transaction, an attacker would have to make sure that his own block chain was longer than the legitimate one, requiring him to have at his disposal more computing power than the total of the honest nodes. This is known as a 51% attack. But unless significant economies of scale develop in mining, this is a challenge to which only a Batman villain could plausibly rise.
Here we may briefly put to rest several recurring fears surrounding crypto-currencies. First, the proliferation of copycat currencies (“altcoins”) cannot be inflationary unless any protocol is a perfect substitute for any other.6 Whether or not they are substitutable in some technical sense, entrenched network benefits mean that copycat protocols will not displace or rival existing protocols without clear feature advantages. Where physical notes from one bank or another may fit equally well in a wallet (and might even both be Dollars), holding multiple crypto-currencies involves the technical inconvenience of operating on multiple disjunct protocols, plus the additional calculational inconvenience that the currencies float against one another in value.7
Second, though the protocol is indeed defined arbitrarily in software, it cannot be changed arbitrarily once created. Once a protocol comes into use, the control of its constitution depends entirely on continued trust in the developers: each user must be persuaded to upgrade. And given the precedent of open-source protocols, a malicious update will be easily spotted and ignored.
Even with a high degree of trust, only certain types of changes can be made without the upgrade becoming a new, backward-incompatible crypto-currency. Parameters can be added to transactions which older clients can simply ignore. Mastercoin and Colored Coins, for example, are layers on top of Bitcoin’s block chain whose extra transaction parameters enable additional features for clients who understand them. Thus Mastercoins can still be used as Bitcoins, but a Bitcoin must first be converted to a Mastercoin by adding another parameter to it, and the additional features can only be used with other Mastercoin users. But more drastic changes, such as would be required to lift the supply cap, require changes to what clients consider to be valid blocks. Users of the new and old protocols will find it difficult to coexist on the same block chain: each would ignore the other’s contributions as if it were a malicious attack, and only the protocol currently controlling a majority of the network’s computing power would prevail. In short, the only practical way to change important parameters is to fork the currency – that is, to create a new block chain, and thus a new currency.
What makes crypto-currency money? Mises’ regression theorem (1996, pp. 408ff) explaining the emergence of money, by which a particular commodity gradually overcomes network hurdles and becomes accepted as money by virtue of its increasing liquidity, has lately been taken by some armchair Austrians to imply that crypto-currency cannot be money, because it was never accepted as something useful of its own account. This is a curious argument, considering Mises saw money as a category of human action. In other words, something is money when people use it as money – that is, as a medium of indirect exchange. And in this sense, crypto-currency clearly qualifies. The regression theorem begins with the fact of a money and reconstructs the history by which it became such. It cannot be used in the other direction, starting with the observed history of a commodity and passing judgement on its moneyness.
If the theorem is interpreted strictly so as to demand some non-monetary terminus at the end of the regression, we could say that the anti-authoritarian quality of a decentralized currency was a consumption good for its initial adopters. It would be less of a stretch, however, to say that non-monetary (industrial) use is a possible (and so far the most historically significant) terminus, but not the only conceivable one. There are many ways that a commodity might gain wide enough initial acceptance to function as money. History, in this case, rules out any theory which denies to crypto-currencies the possibility of being money.
As for why crypto-currencies might be used as money, it is easy to see how they fit the textbook qualities of a useful commodity for indirect exchange:
In addition to these “intrinsic” characteristics, money commodities will tend to possess some economic characteristics as well, such as liquidity (ready acceptance), saleability (wide acceptance), and stability of value. It is on these points, rather than the first four, that crypto-currencies have borne the most criticism.
On acceptance, though Bitcoins cannot yet be spent at the grocery store, there is a significant and increasing number of online merchants who do accept them, and they have already broken into the physical world with the advent of Bitcoin ATM kiosks in various large cities in Canada and the US. A vibrant and growing niche ensures that Bitcoins remain quite liquid. With large Bitcoin exchanges accessible online, Bitcoins can be bought and sold nearly instantly at the market exchange rate from anywhere with internet access.
On stability of value, however, crypto-currencies reveal their inadequacy as day-to-day currency. Bitcoin, despite the advantage of size, has suffered from frequent jumps and crashes since its inception in 2010.
The daily change in the USD/BTC exchange rate has reached nearly 50% in both directions, and frequently hits 20%. By contrast, the daily change in the USD/EUR exchange rate over the same period never exceeded 2.5% in either direction. This is not simply a problem of scale which can be expected to diminish as the volume of transactions grows: the volatility during Bitcoin’s time in the $100-$1,000 range (roughly the right third) is hardly less than its volatility in the range of a few cents (roughly the left third).
Milton Friedman (1951, p. 207) characterized the countercyclical effects of a strict commodity currency (i.e. a system, like the Bitcoin ecosystem currently, in which only the commodity itself is used as money) as depending primarily on an elastic supply of the money commodity. The supply of Bitcoins, however, is very nearly invariant to anything except time.9 In terms of the equation of exchange MV=PT,10 M is perfectly exogenous and predictable. Changes in the demand for cash balances, then, having no outlet in the money supply, must affect nominal spending until prices adjust. As this demand increases (i.e. V falls), nominal spending will likewise fall, hence the much-lamented “deflationary” aspect of Bitcoin.
In addition to a secular upward trend as the ecosystem grows, the demand for Bitcoins is also highly volatile. Though difficult to measure, it is well accepted that a very large portion of all Bitcoin transactions are made for speculative purposes – up to 90% by some estimates. It is true that investment spending is inherently more volatile than consumption spending, but more importantly in this case, demand shocks are self-reinforcing. Hayek (1937, p. 64) observed the same sort of forces operating on national currencies without a credible anchor, and contrasted them against the speculative forces operating on those with a fixed exchange rate: where speculators expect the value to fluctuate around a certain point, speculation will tend to be a stabilizing force, pushing the actual value back toward that target. But on the other hand, where such an expectation does not exist, “the variability of exchanges will tend to multiply its magnitude and may turn what originally might have been a minor inconvenience into a major disturbance.” More prescient words could hardly have been spoken of Bitcoin’s current situation.
For this reason, very few things are now priced in Bitcoins. Merchants who accept Bitcoin generally price in their local currency and charge the number of coins which exchange for that amount, a practice well documented in economies undergoing monetary paroxysms. This allows prices to adjust very quickly to changes in the exchange rate, and spares the volume of transactions much of the brunt of the fluctuations. Should merchants start abandoning dollars for Bitcoins as their unit of account, however, prices will not be able to adjust as quickly to changes in nominal spending, and the familiar output effects of monetary disturbances will manifest themselves. The extant crop of crypto-currencies, then, will hardly be able to supplant the currencies on which they depend as an anchor for the speedy adjustment of prices.
This is, however, no death knell for crypto-currency. It will be illuminating to consider the historical development of another successful money commodity with a mostly exogenous global supply: gold. It is true that fluctuations the price of gold did sometimes spur prospecting and more intensive output from gold mining, but this effect was both unpredictable and slow.11 Likewise, a jump in the price of Bitcoins brings more computing power to bear on the network, but because of the adjustable hash target, this affects only the distribution of coins, not the long-term rate of coin generation.
To answer how Bitcoin and other crypto-currencies with a rigidly capped nominal supply might overcome the problems associated with it, we ask then: how did gold (and other metals) overcome these problems?
Before the explosion of economic growth in the West, rigidity of the supply of precious metals was not a serious problem,12 and people could get by carrying actual metal coins with which to transact. Much local trade was in barter, and without well-integrated international markets, those money prices that did exist did not vary much from day to day in normal circumstances. Economic growth was slow and mining not all that productive, so “natural” inflation and deflation occurred over very long periods when they occurred at all. Even the so-called Price Revolution, during which prices in Europe more than doubled following the discovery and importation of New World silver and gold, took place over such a long period that the annualized inflation rate stayed in the low-by-modern-standards range of 1 to 1.5% (Kugler & Bernholz 2007).
But the explosion of economic growth starting with the industrial revolution was accompanied by a banking revolution as well. Moneylending lost its stigma, and with the development of financial and actuarial innovations, trade and industry were able to flourish. The observation that financial development generally precedes industrialization can, at least for this era, be explained by the happy circumstance that these financial innovations – fractional reserve banking in particular – were able to overcome gold’s nominal supply problem. As Mises (1953, p. 298f) noted of this time period,
The development of the clearing system and of fiduciary media [i.e. circulating bank liabilities] has at least kept pace with the potential increase of the demand for money brought about by the extension of the money economy, so that the tremendous increase in the exchange value of money, which otherwise would have occurred as a consequence of the extension of the use of money, has been completely avoided.
Rather than affecting prices in the long run and the volume of transactions in the meantime, changes in the demand for cash balances, which were for the first time rapidly growing, could for the first time be accommodated by changes in the money supply. By using loans and credit to pyramid a larger stock of banknotes and deposits on top of a smaller and fixed supply of physical gold, the money supply was, to varying extents across different countries, able to roughly stabilize nominal spending even in the face of wide variations in the demand for money.13
We might expect similar financial innovations to precede an explosion in the use of crypto-currencies. They face, however, a number of unique hurdles for which the history of gold provides little guidance.
At this point it will be useful to distinguish the currency itself from its method of exchange. For most of the world’s monetary history, the method of exchange was generally hand-to-hand. The currency transition from gold coins (base money) to paper banknotes (inside money)14 that marked the advent of fractional-reserve banking was much facilitated by the fact that the same method of exchange that was suitable for one was just as suitable for the other. The two are, of course, wholly different commodities, each entailing a different sort of claim, even if they are denominated equivalently and exchangeable one for the other at a fixed rate. But besides the usually small risk of bank collapse, accepting and spending gold-backed banknotes had no serious drawbacks compared to gold, and required no special investment to begin. Indeed, an important advantage of banknotes is that they were less costly (more convenient) to use than gold coins with the same method.
The more recent advent of electronic payment, on the other hand, was a method of exchange transition. Though a similar process had existed for centuries with checks, electronic payment no longer involved the hand-to-hand transfer of an asset (such as a check). Telephone lines and bank software were now the method of exchange. Even though the currency was the same as before (dollar-denominated deposit balances), the change in method entailed a network hurdle and a fixed cost to join the network, as merchants had to install card readers next to their cash registers. Nevertheless, the benefits were clear enough that by now most merchants have joined the network: as of 2011, nearly two thirds of sales in the US were made with a credit or debit card.
In both cases, the transition was much aided by being limited to one aspect or the other. Those deciding whether to accept a new currency faced no initial cost to joining the network, and those deciding whether to change their method of exchange did not have to worry about whether to accept a new currency. Crypto-currencies had the misfortune of having to effect both transitions at once, and a unit of account transition on top of it all! The success of Bitcoin in spite of this triple hurdle is remarkable. But the hurdles are not all behind: the establishment of bank liabilities redeemable in crypto-currency will again have to make both transitions at once.
The necessity of a currency transition is implied in the establishment of fractional-reserve banking, in exactly the same way as the original transition from coins to banknotes. The essential problem here is trust. The necessity of a method transition, however, deserves a few more words. Because a crypto-currency protocol defines both the coinage and exchange of the base money, issuing banknotes on a fractional reserve basis requires more than simply adding parameters to coins. This would enable at best the establishment of a 100% reserve bank (which is somewhat the idea behind Open Transactions’ voting pools). A bank that wanted to vary its issue with demand would need to create its own (centralized) coinage and exchange mechanism – a new protocol – which would not be compatible with the original, even if its processing took place on the same block chain.15 Nor would one issuer’s notes be compatible with another’s. Merchants would need to implement the new protocol, facing a similar sort of cost to those merchants installing PIN pads to accept credit cards.
Technical innovations can, however, collapse the two method transitions. Issuers would find it in their interest to provide an abstraction layer which allowed the same apparatus to transact in both base money and banknotes. Open Transactions (OT) already facilitates secure cross-block-chain exchange of different crypto-currencies. If the issuer’s protocol can be administered on a block chain, OT can provide a framework for the relatively transparent use of multiple inside monies and base monies, and even the issue of notes backed by and denominated in a basket of crypto-currencies.
In fact, such issues could be denominated in any unit at all. Again, credit card networks are an illuminating precedent. These perform a similar function to our abstraction layer: merchants do not have to implement separate pads to accept Visa and Master Card, because there is a network that transparently routes the transaction to the appropriate firm. Merchants can even choose which cards they are willing to accept (Many refuse American Express, for example, which charges the merchant more per transaction in order to fund its rewards program). And the process is rendered transparent to consumers by being denominationally agnostic: each network routes Dollars just as well as Euros, and even automatically exchanges them, based on what the merchant takes.
Nonetheless, though an abstraction layer can lower the network costs of adopting crypto-notes, even if the transition can successfully be made, important qualities of the base money are inevitably lost by using inside money. OT can minimize the trust users have to put in the bank – for example, the possibility of absconding with deposits can be ruled out. But users must still trust it:
Considering the ethos of crypto-currency as a trustless ecosystem, the banknotes of a crypto-intermediary will succeed in the market only by sacrificing those qualities to which crypto-currencies owed their initial success.
In addition to the intrinsic network hurdles of establishing crypto-intermediaries, regulatory uncertainty and hostility also constitute an extrinsic hurdle in a way that they do not for the protocols themselves. Though governments around the world have targeted crypto-currency users (often under money-laundering regulations for individuals, and financial regulations for would-be intermediaries), their success has been mixed. The protocols cannot be targeted or shut down; the best that can be done is to pinpoint prominent individual users, a drawn-out and expensive process. This is the reason that Bitcoin has not succumbed to the same fate as the Liberty Dollar, and it is precisely the protection that will vanish with the rise of financial intermediation. OT can prevent the seizure of users’ assets, but it cannot prevent the forcible closure of any intermediary that becomes large enough to attract attention.
No doubt some degree of intermediation and crypto-note distribution could survive anonymously, even under the harshest of legal climates. But legal hostility severely limits the scale of such an undertaking. This highlights another potential economic hurdle, the closest parallel to which might be the “free-banking” era in the United States, where legal restrictions on branch banking limited the capitalization and diversification of the numerous note-issuing intermediaries (Dowd 1992). This left the banks highly vulnerable to seasonal fluctuations, and made the system as a whole notoriously unstable. Should concerted legal hostility lead to a similar market structure of crypto-intermediaries, the crypto-currency market could well become even more unstable than it is at present.
Finally, should a crypto-currency come to serve primarily as a reserve currency on top of which banknotes are pyramided, the centralization of transactions that would accompany this development increases the risk of protocol fraud. As noted earlier, the protocol’s security lies in the assumption that an attacker will never be able to out-work all the honest computers on the network. The use of notes has the effect of taking people off the original network and putting them on the bank’s own services, a process helped along by diminishing rewards to mining over time. If the majority of computing power on the base currency’s protocol comes to be controlled by a few banks, the generation of a fraudulent block chain would require only the hijacking of the servers of a few major intermediaries, or collusion among them – still a tall order, but an order of magnitude easier than hijacking enough individual miners to reach 50%.
More worryingly, if a bank were to at any point constitute more than 50% of the computing power on the network, it could in principle “manage” the currency by a combination of double spending and rejection of legitimate transactions. To this fear, two comforts may be offered. First, in historical situations where intermediaries were allowed most freely to compete, “there was no evidence of natural monopoly in [note] issue, nor even of a natural number of firms that could be called ‘small’” (White 1995, p. 146; cf. Selgin 1988, pp. 150ff). Nevertheless, history also shows that incautious or malevolent regulation, especially if coordinated globally, might easily create a situation in which one reserve bank held enough power to monopolize the block chain’s computing power. Here, though, the ease with which new protocols can be created works as a safety valve. When the original protocol is attended with such disadvantages as a rogue reserve bank, dissatisfied users can always flock not only to a new bank, but to a new protocol. And if the rise of intermediation had by this point been accompanied by the development of an abstraction layer, the costs of switching will be very low indeed.
Intermediation will determine the value of base money more than vice versa. Thus Hayek (1979) notes,
[I]t is an erroneous belief that the value of gold or any metallic basis determines directly the value of money. The gold standard is a mechanism which was intended and for a long time did successfully force governments to control the quantity of money in an appropriate manner so as to keep its value equal with that of gold. But there are many historical instances which prove that it is certainly possible, if it is in the self-interest of the issuer, to control the quantity even of a token money in such a manner as to keep its value constant.
Similarly with crypto-currency as base money, intermediation will tend to stabilize the its day-to-day value by stabilizing the demand for it, allowing fluctuations to be borne by changes in the supply of banknotes rather than by the volume of transactions in base money.16 The base money, on the other hand, influences the value of the banknotes only so far as convertibility (as, we presume, will be demanded of private intermediaries) disciplines them to maintain such a quantity of notes that the two values stay roughly on par.
What this means is that we might be able to design a protocol so that the total supply of coins behaves similarly to competitive coin-backed banknotes, without intermediation at all. In other words, a crypto-currency might be designed so as to mimic a monetary base other than gold. Bitcoin’s periodic halving of the mining reward is arbitrary, and several alternative mining schemes have already been devised. Given the hurdles discussed above – at least some of which are likely to be permanently intractable – it will be worth considering alternatives by which the flexibility of intermediation might be baked into the protocol, thereby evading the legal hurdles.
One idea which has been suggested is linking the proliferation of coins to some macroeconomic variable – for example unemployment or an exchange rate – as a central bank might target these variables. The relative ease with which new crypto-currencies can be created might suggest a wide scope for experimentation here. However, to link the proliferation of coins to some exogenous macroeconomic variable would be to give up decentralization and subject it to somebody’s will. Its dependence on data entered from outside means that in principle it can be modified arbitrarily, and targeted easily by hostile or well-intentioned governments.17 Such an arrangement would not differ essentially from rule-based central banking: the rule can be broken, as it has been in every historical example.
The transactions velocity of money, however – VT in the equation of exchange – could be calculated endogenously. Coins exchanged per hour, reckoned either as a rolling or a cumulative-decay average, would be very close to the textbook definition, and would involve little more than a series of queries on the block chain. We need not concern ourselves with the Sisyphean econometrics and data collection which central banks find necessary to guide their behavior, and without the financial sophistication which we are trying to obviate, there is no worry about different velocities corresponding to M0, M1, etc.18 The only problem will be to set the optimal period over which the average is calculated. Too long and the monetary base will be rigid in supply; too short and M will fluctuate chaotically with transient changes in V.
Having a protocol-endogenous value for velocity would allow us to target MV at the protocol level, a money-supply norm with growing support (e.g. Selgin 1997, McCallum & Nelson 1998).19 Though in principle any behavior of the money stock is compatible with monetary equilibrium so long as it is perfectly anticipated and adjusted for in prices (Gilbert 1957), Selgin argues that an MV target will require the fewest discrete price adjustments, and for this reason is best suited to engender monetary equilibrium in a world where adjustment is piecemeal and discontinuous.
Thus we set our sights on the elusive goal of a neutral money, one in which changes in the money supply cause no relative price changes. The problem, then, will be to set the net rate of proliferation of coins (ΔM) to offset changes in velocity. This can be done easily enough by a protocol that provides both for the proliferation and deletion of coins,20 varying the rates of each to match the ΔM implied by the current measure of velocity, in a mechanism similar to the dynamic adjustment of Bitcoin’s hash target to computing power on the network.
I elide the details of implementation, however, because the focus on macroeconomic aggregates gets us in fact no closer to a solution. Such a scheme would be form without substance – a macroeconomic cargo cult, lacking the cardinal function of intermediation: the channeling of liquidity to its most valued uses. Intermediation ensures a relatively quick diffusion of new money through the economy – otherwise we are left with the transmission mechanism of the idiosyncratic spending habits of the miners to whom the new money goes as a reward. This will necessitate spurious and self-reversing price adjustments as miners spend their funds.
This, of course, vitiates completely the vaunted neutrality of our currency. Historically, equilibrating changes in the quantity of money have propagated through financial intermediaries. A currency which adjusts the quantity without intermediation, by contrast, highlights the fact that money approaches neutrality only when quantity changes are borne through a loanable funds market, and only to the extent of the depth of that market. And, on the other hand, where changes in the quantity of money enter elsewhere than through a loanable funds market, transitional disequilibria will arise with greater severity, even if the quantity change is in the equilibrating direction.
A loanable funds market, where intermediaries can take bids from those most willing to bear those monetary changes, is more than a merely automatic act of channelling funds. Even if the protocol should also provide for a central clearinghouse to channel savings to those who might bid for it, individual to individual, the specialization and economies of scale that constitute the chief functional justification of banking as a separate industry is still lost. Individual entrepreneurs would scarce be able to take on the administrative functions of an intermediary, and still less miners, who are by no means the same sort of person who would excel as an entrepreneur.
Intermediation, then – and in particular, intermediation carried out by large-scale specialists – is not merely a means to achieve MV stability in pursuit of monetary equilibrium. Rather, intermediation appears to be necessary to take advantage of any benefits that MV stability ostensibly offers.
Perhaps then, rather than mimicking the supply effects of intermediation at the protocol level, we could mimic intermediation itself at the protocol level. A number of protocols are capable of “smart contracts”, virtual addresses that can operate automatically based code written in this language.21 Such platforms are flexible enough to accommodate numerous concurrent uses, both monetary and non, including sophisticated financial instruments such as futures contracts, allowing a wide area for experimentation without forking the protocol. To what extent, then, could smart contracts facilitate or mimic financial intermediation?
The most straightforward method would be to build our economy as an application within the existing ecosystem of such a protocol. Coins would be colored by adding various parameters to it (as with the Mastercoin extension discussed above) to indicate its use in our particular application. The supply of such coins would be managed according to nominal spending stability by a privileged smart contract – let us call it the “decental bank”. In addition to the code embodied in the bank itself as a smart contract, the protocol would also need two additional features for its successful operation:
The decentral bank would then stand as if overseeing a “small open economy” with a fixed exchange rate. It would have to hold reserves of uncolored coins, coloring and lending them (more on which below), or on the other hand purchasing colored with uncolored coins, as it aimed for its monetary target.
This, of course, is problematic without the unconstrained ability to “mint” coins. As colored coins are literally converted (and not merely exchanged) from the “foreign market” of uncolored coins, there is no seignorage, and in a growing economy, the maintenance of nominal spending would require the continual drawing down of reserves.
Thus, a more practical solution is to dispense with the idea of reserves and to have users maintain a nominal balance with the decentral bank, which may or may not be composed of actual coins (the decentralized maintenance of transferrable ownership records, as for example with Namecoin, is not fundamentally different in a technical sense than the decentralized constitution of spendable coins). This is similar to the approach taken with Zerocoin, which in the interest of enhanced anonymity has users spend from a system-wide pool of coins, rather than spend particular, traceable coins. This obviates the second (and more onerous) required feature above, and gives the decentral bank the ability to stabilize nominal spending without worrying about reserve balances.
Our decentral bank might be seen, then, as a central bank with a mechanical rule: though its rule is more complex than Friedman’s proposed k-percent rule, it will literally be, as he proposed, replacing the central bank with a computer (or more accurately, an algorithm, executed across many computers), and with the added advantage of an accurate and up-to-date parameter for transaction velocity. The bank would “lend” by distributing any positive target ΔM in return for bids, i.e. future commitments to pay. The simplest rule would be to publicly broadcast some interest rate schedule (the price of loanable funds), which would then adjust based on demand in order to reach the target ΔM calculated as a rolling average over some period of time – perhaps a week, in order to prevent interest rates from reacting too violently to individual borrowers.
The purpose of the decentral bank is to overcome the limitation that additions to the money stock must go to miners. Miners in this system must still be incentivized to keep the gears of the protocol turning, but there is no reason the sums accruing to miners couldn’t be dwarfed entirely by sums lent out to bidders, and the aforementioned injection effects largely avoided. Any price changes brought about by their spending will be sustainable; they will not need to be undone as their effects work their way through the economy. And second, our intermediary will not have to create a new and incompatible inside money to pyramid on top of the coins themselves (the monetary base; “outside money”). Because the protocol itself is highly abstract, the aforementioned abstraction layer is rendered largely unnecessary.
Nevertheless, an automated system lacks the ability to evaluate the profitability of projects for which loans are to be made. Accordingly there exists a tradeoff between usefulness and vulnerability: the more impossible default becomes, the less useful intermediation becomes. The decentral bank can take measures to ensure repayment using auxiliary smart contracts, or (since it maintains the balances itself) enforce payment absolutely. Ideally the bank would constitute only a pure intertemporal market, leaving risk unintermediated in order to protect itself from default risk, which could be systematically exploited by malicious debtors. But because risk is an inextricable part of any intertemporal transaction, it is unclear that automated intertemporal trade could (in conjunction with freedom of account creation) exist at all without commensurate vulnerability to exploitation. Control of balances can eliminate default risk to the bank, but beyond some margin, it can do this only by shifting the risk onto some other party, for example the recipients of borrowed funds, or to the economy at large.
This situation may seem similar to the problem of futures contracts and other financial instruments which are accomplished easily enough through smart-contracts. The differences will be instructive. Financial instruments are created and enforced through multi-signature transactions. The instrument is essentially a smart contract that holds a definite number of coins in escrow until some number of the initial signatories vouch that such and such state of the world has indeed come to pass, at which point the coins are disbursed appropriately. The contract allows for a trusted third (or fourth, or…) party to enforce the terms of the contract.
There are two important differences here. First, in these financial instruments, the coins are held in escrow, thus there is no default risk. At the end of the transaction somebody gets the coins. At no point are coins created or destroyed, in contrast to the gratuity with which a true bank must be able to create and liquidate money through loans. Second, and more important given the fact of default risk, is that the third signatory must be trusted by both parties to the transaction. This only pushes the problem back one step for the decentral bank, for how will it know which third parties to trust?
Financial instruments, as important as they are, do not constitute financial intermediation in the sense necessary to stabilize the value of the currency. Ultimately, formal anonymity removes any tool by which the decentral bank might prevent the market from unravelling.
The problem of automated, protocol-level intermediation, like all those considered heretofore, is a technical problem, and by no means insurmountable. Nevertheless, borrowing and lending introduces risk – and thus moral hazard – which cannot be mitigated without personal judgement, something that an automatic protocol would find it difficult, if not impossible, to emulate. This appears to put an upper limit on the financial sophistication a crypto-currency can support without supportive legal institutions. As it is, true intermediation on a scale sufficient to stabilize the value of the currency will have to fight not only in the marketplace for general acceptance separately from the base money, but also in the political realm for the privilege of operating unmolested.
While a case can be made that crypto-currencies will be able to alter political dynamics enough to gain the requisite freedoms, that analysis is far outside the scope of this paper. As it stands, though it would be an utterly quixotic task for governments to try to stamp out crypto-currencies, they are well-positioned to prevent the emergence of stabilizing financial institutions around crypto-currency ecosystems. Without these institutions, crypto-currencies will no doubt continue to innovate on a technical level, but will not be able to supersede more legally privileged and centrally issued currencies.