The 21 Million Cap & Supply Schedule

The single most repeated fact about Bitcoin is “there will only ever be 21 million.” This page asks the why behind it: where the number comes from, how the rule is actually enforced, and what “digital scarcity” really means once you stop taking the phrase on faith.

The schedule, not the number

The 21 million cap is not written anywhere as a target. Nobody coded MAX_COINS = 21000000. Instead, the cap is an emergent consequence of two simpler rules:

1. New coins are created only in the block subsidy — the reward paid to whoever mines a block.
2. That subsidy halves every 210,000 blocks (roughly every four years).

Run those two rules forward and the total supply converges. The subsidy began at 50 BTC per block and steps down geometrically:

Era   Blocks (start)   Subsidy/block   New BTC this era
 0          0          50              10,500,000
 1     210,000         25               5,250,000
 2     420,000         12.5             2,625,000
 3     630,000          6.25            1,312,500
 4     840,000          3.125             656,250
 ...        ...          ...                 ...
                                       ───────────
                            total →    ≈ 21,000,000

Each era mints exactly half of the one before. That is a geometric series: 210,000 × 50 × (1 + ½ + ¼ + ⅛ + …). The sum in parentheses converges to 2, so the whole thing converges to 210,000 × 50 × 2 = 21,000,000. The cap is just arithmetic.

Why “approximately” 21 million

The true total is slightly under 21M, for a humble reason: the subsidy is stored as an integer number of satoshis and is computed with integer division. Each halving rounds down, shaving off fractional satoshis. After 33 halvings the subsidy rounds to zero and issuance stops. The final figure is about 20,999,999.97 BTC — close enough that everyone says “21 million,” but a nice reminder that the rule, not a round number, is what’s real.

For the block-by-block mechanics of the subsidy and the halving cadence, see halving & issuance.

”Digital scarcity” — enforced by consensus, not decree

Here is the part that matters and is most often glossed over. Scarcity in the physical world is enforced by physics: there is only so much gold in the crust, and digging more is hard. Scarcity in fiat is enforced by decree — a central bank promises to be disciplined, and you trust the promise.

Bitcoin’s scarcity is enforced by neither. It is enforced by every full node independently checking the rules. When a block arrives, each node verifies that the coinbase transaction pays no more than the subsidy the schedule currently allows, plus the fees in that block. A miner who tries to pay themselves 60 BTC when the rules say 6.25 produces a block that honest nodes simply reject as invalid. It never becomes part of the ledger anyone agrees on.

This is the recurring thread of the whole textbook in one sentence: the cap is how untrusting strangers agree on one ledger’s monetary policy. No one has to trust a mint, because anyone can run the arithmetic and refuse coins that break it. Scarcity here is a social fact maintained by software, replicated across thousands of machines that have no reason to trust each other.

Could the cap ever change?

In principle, yes — if a supermajority of users, miners, and businesses all chose to run software that allowed more coins. In practice this is wildly unlikely: holders of a scarce asset have every incentive to reject a change that would dilute them. The cap is protected less by code than by the aligned self-interest of everyone holding it. We pull this thread further in game theory.

Divisibility: scarcity without clumsiness

A fixed supply only works as money if you can split it finely enough. Bitcoin’s base unit is the satoshi: 1 BTC = 100,000,000 sats. So the real ledger isn’t denominated in 21 million units — it’s denominated in about 2.1 × 10¹⁵ satoshis. As purchasing power per coin rises, ordinary payments simply move down into smaller sat amounts. You never run out of room to make change. This is why a hard cap doesn’t doom Bitcoin to deflationary paralysis at the unit level — the unit can always shrink. (Recall the divisibility row in what money actually is; Bitcoin scores excellently precisely because a digital ledger can divide without limit.)

Lost coins: the supply is even tighter than 21M

Coins are controlled by private keys. Lose the key — a discarded hard drive, a forgotten password, a death with no heir who knows the seed — and those coins are provably unspendable but still counted. They sit on the ledger forever, visible, frozen, gone.

Nobody knows the exact figure, but credible estimates put millions of BTC as likely lost, including a large early stash widely believed to belong to Satoshi and never moved. The economic effect is subtle but real: lost coins make the effective circulating supply smaller than the issued supply, and they do so unpredictably. In a fiat system, a central bank can replace lost notes. In Bitcoin, loss is permanent — a quiet, ongoing tax that makes the remaining coins slightly scarcer.

Contrast: discretionary fiat issuance

The cleanest way to see what Bitcoin is for is to put the two policies side by side.

	Bitcoin	Discretionary fiat
Who sets supply	A fixed algorithm everyone verifies	A committee using judgment
How much exists	Knowable decades in advance	Decided meeting to meeting
Can it be expanded?	Only by near-universal agreement	Yes, by policy
Enforcement	Every node rejects rule-breakers	Trust in the institution
Failure mode	Rigidity (can’t respond to crises)	Debasement (can over-issue)

Neither column is strictly “better” — this is a genuine tradeoff, and a textbook should say so. Fiat’s discretion lets central banks fight recessions and act as lenders of last resort; Bitcoin’s rigidity removes that flexibility entirely. What Bitcoin offers instead is credible predictability: a monetary policy that cannot be quietly changed by anyone, because changing it would require persuading a global, adversarial, self-interested crowd to vote against their own holdings. That credibility is the product.

Check your understanding

1. The 21M cap isn’t a hardcoded target. What two simpler rules produce it, and why does the total converge to ~21 million?
2. Why is the real cap slightly under 21 million BTC?
3. What does it actually mean to say Bitcoin’s scarcity is “enforced by consensus, not decree”? Who does the enforcing?
4. How does divisibility to satoshis keep a fixed supply from becoming unusable as prices rise?
5. Give one genuine advantage of discretionary fiat issuance that a fixed cap gives up.