How well can a cryptocurrency serve as a means of payment? Cryptocurrencies need to overcome double spending by using costly mining and by delaying settlement. We formalize this insight through an incentive constraint that rules out double spending and pins down the welfare costs of a cryptocurrency. We find that it is optimal to use seignorage rather than transaction fees to finance costly mining. We estimate that Bitcoin generates a large welfare loss that is about 500 times as large as a monetary economy with 2% inflation. This welfare loss can be lowered in an optimal design to the equivalent of a monetary economy with moderate inflation of about 45%.
Bank topics: Digital currencies and fintech; Monetary policy; Payment clearing and settlement systems JEL codes: E4, E5, L5How well can a cryptocurrency serve as a means of payment? Since the creation of Bitcoin in 2009, many critics have denounced cryptocurrencies as fraud or outright bubbles. Others have argued that such currencies are only there to support payments for illegal activities or simply waste resources. Advocates point out, however, that -based on cryptographic principles to ensure security -these new currencies can support payments without the need to designate a third party that controls the currency or payment instrument, possibly for its own profit. 1We take up this discussion and develop a general equilibrium model of a cryptocurrency that uses a blockchain as a record-keeping device for payments. Many existing models of cryptocurrencies are built by computer scientists who focus mainly on the feasibility and security of these systems.Crucial issues, such as the incentives of participants to cheat, and the endogenous nature of some key variables, such as the real value of a cryptocurrency in exchange, have been largely ignored.Such considerations, however, are pivotal for understanding the optimal design and, hence, the economic value of cryptocurrency as a means of payment.Our focus is thus primarily on understanding how the design of a cryptocurrency influences the interactions among participants and their incentives to cheat. These incentives arise from a so-called double-spending problem. Cryptocurrencies are based on digital records that can be duplicated easily and costlessly and, thus, that can potentially be used multiple times in transactions.Our first contribution is to formalize this double-spending problem and show how it is addressed by (i) a resource-intensive competition for updating the records of transactions -a process commonly referred to as mining; and (ii) by introducing confirmation lags for settling transactions. 2 Double spending with a cryptocurrency requires one to change the record of transactions after the transactions have been recorded and confirmed in the blockchain. Since a blockchain builds records based on previous records, to revoke past transactions, one must create an alternative history of transaction records in order to double spend successfully. More intensive competition to update the chain and longer c...