The Satoshi investigation · All candidates · All measurements · One board

SATOSHI MASTER FILE

"Everything measured, everyone compared, nothing fragmented."

This file consolidates the published Code DNA forensics (real source code pulled from bitcoin v0.1, bitcoinj, rippled, and stellar-core), the classic suspect board, and the Michael Peirce inquiry (232-page thesis stylometry + the book test + the code hunt) into one comparison. Companion file: the-michael-file.html (full dossier, v3).

Ⅰ · The Grand Matrix — every candidate, every measured dimension

MATCH PARTIAL MISMATCH? UNKNOWN— NOT MEASURED
CandidateBritish
English
Timezone
fit
Windows-
first
C++
hands
Formatting
fingerprint
"double-
spending"
hyphen
Formal
register
Knowledge
canon /
blind spots
PoW
philosophy
E-cash
prereqs
Opsec /
invisibility
Behavior vs
the silence
SATOSHIthe reference British ("optimise", "bloody hard") quiet 05–11 UTC Windows-first client C++98, self-contained 4-space · Allman · spaced ops · error() hyphenated, always zero contractions, "we" academic-side blind spots: had to be told of hashcash & b-money PoW is the heart total command of prior failures absolute, 15+ yrs 1.1M BTC never moved
MICHAEL PEIRCEDublin academic measured: optimise 53:2, behaviour 7:0, favour 2:0 Dublin UTC+0 — the GMT night-owl reading 2000 thesis rig: Windows NT 4.0 (Linux ×0). BUT 1995 PayMe: C++/Unix on Sun cluster. Platform follows available infrastructure — signal weaker than first scored VERIFIED (TCD-CS-96-21, verbatim): 1995 PayMe "prototype was implemented in a C++/Unix environment" — coins, wallets, banks, signed receipts, double-spend DB, PgpTools/RSA/IDEA. Plus Crypto++ benchmarking 2000. Thirteen years of e-cash implementation history pre-whitepaper ?no source located — UML only measured: "double spending" 26:0 unhyphenated measured: contractions 0; "We" 193 : "I" 7 ●●measured: Chaum/Rivest canon; hashcash ×0, b-money ×0 in thesis AND 2001 book (control verified). Knew only the published layer (Dai's library, Szabo's essay) — Satoshi's exact boundary hash chain ×109 — the substrate, pre-PoW ●●co-wrote the standard e-payments reference ?CORRECTED: low public footprint is cohort-normal for era academics — not a distinctive Satoshi-like pattern. Prior "suggestive" scoring was an over-read ?2008–11 professional life unknown
SCHWARTZRipple CTO · public board American US elite C++ (rippled) measured 2012: TABS; braces ● but while(!x), node=stack.top() compression prolific, playful public voice cypherpunk-adjacent, knew the scene built the anti-mining ledger 1988 distributed-computing patent very public figure JoelKatz learns Bitcoin in public, 2011
HEARNbitcoinj · public board British Zurich + Google day job Java-native measured 2011: tabs, K&R, if(x)return null; learned Bitcoin from outside, 2009 true PoW believer fully public EXCULPATED BY INBOX — dozens of emails FROM Satoshi; sold at $400 and quit
McCALEBeDonkey/Mt.Gox · public board American C++ (eDonkey, stellar-core) measured 2015: 4-space/Allman (clang-format caveat), if(x) compression commit voice: "better log msgs", "- to _" left PoW behind twice shipped planet-scale P2P pre-2008 ran Mt. Gox during the Satoshi window; sells publicly
BRITTOXRPL co-architect · public board ??? ??no public corpus exists — confirmed ?? anti-mining ledger the only public-board candidate with Satoshi-grade invisibility ?

Michael is the only candidate with a double-column strength (knowledge blind-spots + e-cash prerequisites) AND a measured Windows match — and the only one whose weakest column is "unknown" rather than "mismatch." That asymmetry is why he stays interesting: the others fail tests; he mostly hasn't taken them yet. The hyphen tell is his one taken-and-failed test.

Ⅱ · The Classic Seven — original board, summary verdicts

CandidateCore case forCore case againstStanding verdict
NICK SZABObit gold; closest stylometric match; law+CS registerdenies; bit gold uncited; no code artifacts; American EnglishPRIME STYLOMETRIC MATCH — UNPROVEN
ADAM BACKhashcash cited in whitepaper; British; NYT named him (Apr 2026)the Aug 2008 emails are theater if he's Satoshi; Unix C style; denies (again, 2026)INFLUENCE, NOT AUTHORSHIP
HAL FINNEYfirst tx recipient; RPOW; Temple City coincidencedenied before death; race alibi; genuine-user emailsFIRST BELIEVER, NOT FOUNDER
WEI DAIb-money cited firstlearned of citation via Back; deniesUNLIKELY
CRAIG WRIGHTclaimed itUK High Court 2024: not Satoshi; forgery at scaleRULED OUT BY COURT
LEN SASSAMANtimeline of his 2011 deathBelgian clock; no artifact matchTIMELINE POETRY
DORIAN NAKAMOTOthe nameeverything else; "I am not Dorian Nakamoto"DEBUNKED — AND THE CAUTIONARY TALE THIS FILE OBEYS

Ⅲ · The Code Exhibits — measured fingerprints on file

SATOSHI — reference

bitcoin v0.1 · main.cpp · jan 2009
bool CTransaction::AddToMemoryPool()
{
    CRITICAL_BLOCK(cs_mapTransactions)
    {
        for (int i = 0; i < vin.size(); i++)
            ...
return error("AcceptTransaction() : ...");

4 spaces · Allman · spaced operators · Hungarian · error()

SCHWARTZ — feb 2012 (tightest era)

rippled SHAMap rewrite · commit 30c9bf0
void SHAMap::dirtyUp(...)
{
	while(!stack.empty())
	{
		SHAMapTreeNode::pointer node=stack.top();
		assert(branch>=0);

TABS ✕ · Allman ● · compressed ops ✕ · mSeq dialect ◐ · assert-heavy ✕ · boost ✕

HEARN — jun 2011

bitcoinj SeedPeers.java · commit f6fd61a
private InetSocketAddress nextPeer() throws ... {
	if(pnseedIndex >= seedAddrs.length)return null;
	return new InetSocketAddress(...);

tabs ✕ · K&R ✕ · compressed ✕ · camelCase ✕ · pnseedIndex borrowed from Satoshi's pnSeed

McCALEB — oct 2015 (earliest attributable)

stellar-core Config.cpp · commit f2cd877
void Config::parseNodeID(std::string configStr, ...)
{
    if(configStr.size()<2) throw std::invalid_argument(...);
    retKey= PubKeyUtils::fromStrKey(v.first);

4-space/Allman ◐ (clang-format) · compressed ✕ · commit voice "- to _" ✕

MICHAEL PEIRCE — oct 2000 (prose exhibits; no source located)

phd thesis · tcd-cs-2001-26 · 794,162 chars measured
1995, PayMe (TCD-CS-96-21), age ~21, verbatim:
"A prototype was implemented in a C++/Unix
environment on a Sun workstation cluster."
— coins · wallets · banks · signed receipts ·
double-spend DB · PgpTools/RSA/IDEA

2000, thesis:
"The bank maintains a database of the serial numbers
of all spent coins, to prevent double spending..."

[Dai99] W. Dai. Crypto++: a C++ class library...
[Sza96] N. Szabo. The mental accounting barrier...

British ● · no contractions ● · "we" ● · Windows NT rig ● · hash chain ×109 · "double spending" unhyphenated ✕ · protocol classes: BuyRequest, PayEndorse, ChainCore

BRITTO

searched: everything
            ∅

   NO PUBLIC CORPUS EXISTS

The unfalsifiable column. One cryptic X post, June 2025.

Ⅳ · The Shared Tell — one habit, whole field

Every measurable candidate — Hearn, Schwartz, McCaleb — compresses keywords and operators (if(x), node=stack.top()). Satoshi spaces them, every time, without one exception. Michael's code formatting is untested — meaning he is the only live candidate who hasn't failed this test yet. Finding one page of his source settles more than everything else combined.

Ⅴ · Consolidated Standing — the honest ranking

  1. MICHAEL PEIRCE — HIGH-INTEREST UNRESOLVED — the classification must separate two evidence classes. Capability evidence (strong): a VERIFIED 1995 C++ e-cash implementation — PayMe: coins, wallets, banks, signed receipts, double-spend detection, "implemented in a C++/Unix environment" (TCD-CS-96-21, verbatim) — plus a full multi-party micropayment system in Java, the encyclopedic survey work, measured British English, and the exact knowledge blind-spot boundary. That is genuine implementation history in the precise problem domain, not just theory. Calling the artifact record "zero" was an overstatement — corrected. Individualized forensics (thin): no attributable personal source corpus to style-match; no 2008-era artifact; the prose round mismatched (sentence rhythm, semicolons, "as long as", "however"); the hyphen tell now stable across THREE of his documents (1995: 5:0 · 1999: 3:0 · 2000: 26:0 unhyphenated) vs Satoshi's hyphenated habit; the Java-era naming and RMI-level serialization read weak-negative. Capability match ≠ identification — profile fit of this quality has produced false positives throughout this case's history. Verdict: high-interest unresolved, not probable. The 1995 PayMe C++ source (or full project report) is the single highest-value artifact that could move this either way.
  2. SZABO — best public-board candidate; stylometry + bit gold; blocked by American English and the missing-citation paradox.
  3. BRITTO — matches only the silence; unfalsifiable by construction.
  4. SCHWARTZ — best C++ caliber; blocked by tabs, philosophy, voice, nationality.
  5. BACK — the influence; the 2008 emails and the 2026 denial hold.
  6. FINNEY — the first believer; the record reads witness, not author.
  7. WHEELER · J. DONALD (added 8 Aug 2026) — the metzdowd room. Lynn Wheeler: domain-perfect payments veteran (IBM, X9.59/AADS) whose garlic.com voice — lowercase, ellipsis-chained, self-citing — and unbroken public posting through the Satoshi window rule him out on style and calendar. James A. Donald: the first public reply to the whitepaper announcement, digital-money toolsmith (Crypto Kong, echeque.com) — but the reply attacks the design's scaling, his prose is Satoshi's opposite, and his cypherpunks pedigree collides with the blind spot. Both: interesting, thin.
  8. LE ROUX (added 8 Aug 2026) — the mastermind theory, via a Kleiman v. Wright filing. E4M gives him the only Windows-C++ crypto pedigree among alternative suspects — and the RX Limited empire calendar, the 2012 arrest with untouched coins through every year he needed leverage, and a life of ruthless monetization make Satoshi's fifteen-year restraint unrecognizable in him. Capability yes; character no.
  9. McCALEB · HEARN · DAI · SASSAMAN — each cleanly exculpated on behavior, inbox, citation trail, or clock.
  10. WRIGHT · DORIAN — closed by court and by facts respectively.
The unifying read: every public candidate comes from the cypherpunk world, where Satoshi's documented ignorance of hashcash and b-money makes no sense. The measured evidence keeps pointing at a profile nobody famous fits: a British-English, academically-trained electronic-payments specialist outside the mailing-list scene — someone who had already built digital cash, not just read about it. Michael is the first candidate examined who matches that profile because of measurements rather than vibes, and the 1995 PayMe C++ prototype makes the capability half of the case real, not hypothetical. But capability evidence and identification evidence are different things: he remains a profile, not a person-with-evidence, until source code or a 2008-era artifact says otherwise. (The platform column is scored softer than before — his era's academic work ran on the department's Unix machines regardless of personal preference.) The next fact that matters is one page of his code.

Ⅵ · Prose Round Two — thesis vs whitepaper, with co-author controls (7 Aug 2026)

Four documents, machine-measured: the thesis (113,099 words, solo), the whitepaper (3,518 words), the 1999 joint Peirce–O'Mahony paper (2,554 words), and a 2021 Tewari-group arXiv paper (4,958 words). Burrows-style delta on 48 function words, plus sentence architecture, punctuation, and discourse markers.

MeasureWhitepaper (Satoshi)Thesis (Michael Peirce)Joint-99Tewari-21Read
BURROWS Δ TO WHITEPAPER
lower = closer
1.1741.5011.664 Thesis is nominally the closest of the three lab documents — directionally favorable, statistically fragile (tiny comparison set, unequal sizes)
SENTENCE ARCHITECTURE mean 28 words · 29% run >30wmean 20.8 · 12% >30w20.8 · 17%19.7 · 10% Satoshi builds long compound sentences; Michael writes short. Different rhythm
SEMICOLONS /1k 3.70 — a semicolon user0.69 — nearly semicolon-free in 113k words0.001.41 a genuine, stable habit difference
"AS LONG AS" /10k
the whitepaper's signature conditional
14.20.502.0 Satoshi's load-bearing phrase is absent from Michael's idiom
"HOWEVER" /10k 0 — never16.4 — heavy user (×171)3.922.2 opposite connective habits
HYPHEN TELL, REPLICATED "double-spend(ing)" hyphenated 6:1unhyphenated 59:0unhyphenated 3:00 uses Michael's unhyphenated habit is stable across THREE documents spanning five years — 1995 PayMe 5:0, 1999 joint 3:0, 2000 thesis 59:0 — the mismatch is authorial, not accidental
BRITISH MARKERS 1:0111:100:00:14 (American) still matches — and the 2021 lab paper going American shows the thesis's spelling was authorial choice, not house style
Round-two verdict — the prose does not corroborate. The nominal delta ordering puts the thesis closest to the whitepaper among lab documents, but every individualized discourse habit measured — sentence length, semicolon use, "as long as", "however", and the now-replicated hyphen tell — diverges. What survives is what was already known: nationality and formal register, which millions share. Confounds keep this short of disqualifying (eight years, genre gap, a whitepaper revised after mailing-list feedback, a 3.5k-word sample) — but a theory should get stronger when tested, and this one didn't. The knowledge/capability profile stands — anchored by the verified 1995 PayMe C++ implementation — while the writing-fingerprint case is now negative-to-neutral and the platform column is read softer (department Unix infrastructure, not personal choice). If Michael is still alive as a hypothesis, it lives on capability + blind-spot columns and dies or survives on source code — with one more failed prose test on the ledger, honestly recorded.

Ⅶ · Ian Goldberg — the ingredients without the bridge (11 Aug 2026)

A new falsification-first dossier tests Goldberg's pre-Bitcoin record through 31 October 2008. The primary record now confirms the HINDE collaboration with Ryan Lackey, deep DigiCash protocol work, direct exposure to Hashcash, a distributed pseudonymous-network design, and a 2007 C++ implementation that tolerates incorrect database replies. The same record is also unusually clear about the missing piece: e-cash and client puzzles remain separate anti-abuse tokens; the mint or organizational trust root remains authoritative; and no recovered design uses accumulated work to order conflicting spends or choose a canonical transaction history.

Standing read: high capability and strong network proximity, but no individualized identity evidence. HINDE's unrecovered internals remain the major archive gap. Until a contemporaneous artifact supplies the PoW-to-shared-history bridge, the dossier weighs more strongly as a documented near-miss than as a Satoshi identification theory. Read the full Ian Goldberg file →

Ⅷ · Open Actions