research-analyst

Satoshi Nakamoto - OSINT Candidate Profile Report Stream: Biography, Location & Behavioral Overlap Research ID: b2d37a75-1523-4f95-b4e6-afe406b6a0d8 Date: 2026-05-06 | Analyst: Research Analyst (Inteldo) --- Scope Note This stream covers: (1) geographic location 2007-2010, (2) life events Apr 2010-May 2011 that could explain Satoshi's withdrawal, (3) public Bitcoin commentary 2009-2011, (4) conference attendance and social ties, (5) deleted/edited online content signals, (6) net worth signals, (7) documented correspondence with Satoshi by name, and (8) Wright/COPA 2024 ruling implications. Six parallel streams handle stylometry, code, network forensics, timezone, and citation graph separately. Confidence tags: VERIFIED = confirmed from tool output; REPORTED = seen in data, not cross-checked; INFERRED = deduced. --- Section A: Per-Candidate Profiles --- 1. Nick Szabo Biographical base Nick Szabo holds a computer science degree from the University of Southern California and a law degree; he has held positions as a visiting law professor at George Washington University (Washington DC) - commonly misattributed to George Mason in secondary sources. He coined the term "smart contracts" (1996), described Bit Gold in a 2005 blog post, and elaborated on it through 2008. [VERIFIED: Wikipedia, gwern.net Satoshi-email analysis] Geographic location 2007-2010 Washington DC area / occasional travel. No confirmed employer during 2007-2010 beyond GWU visiting appointment. Maintains blog unenumerated.blogspot.com, active during this entire period. [REPORTED] Critical alibi - December 27, 2008 On December 27, 2008 - one week before Satoshi launched the Bitcoin genesis block - Szabo published a post titled "Bit Gold markets" on Unenumerated. He was discussing the non-fungibility problem in Bit Gold and proposing pooled-tranche solutions. This is the behaviour of someone working on a separate, parallel project, not someone who already had a finished, superior system launching in seven days. [VERIFIED: Jina read of unenumerated.blogspot.com/2008/] Satoshi's own email evidence (against) Satoshi's August 2008 pre-publication email to Wei Dai says Bitcoin "expands on your ideas into a complete working system" and "achieves nearly all the goals you set out to solve in your b-money paper." Satoshi was apparently unaware of Bit Gold until Wei Dai mentioned it. If Szabo were Satoshi, citing b-money but not his own Bit Gold to Wei Dai in private would be bizarre misdirection. Wei Dai's direct assessment: "Satoshi's writings just don't read like Nick's to me" and "Nick isn't known for being a C++ programmer." [VERIFIED: gwern.net Wei Dai/Satoshi emails] Post-Bitcoin launch By 2011, Szabo was actively blogging in defence of Bitcoin, noting improvements on Bit Gold's design - consistent with a peer who discovered Bitcoin as an outsider, not the author. He was NOT a known subscriber to the cryptography mailing list where Satoshi announced Bitcoin. [REPORTED] Satoshi correspondence No direct correspondence documented. Satoshi never named Szabo; the Bitcoin whitepaper cites b-money but not Bit Gold. [VERIFIED] Assessment The Dec 27, 2008 Unenumerated post is the strongest single disconfirmation in the field: Szabo was working on Bit Gold improvements while Satoshi was days away from launching a superior system. Stylometric analyses (Skye Grey, 2013) pointed to Szabo as author of the whitepaper based on phrase overlap - but the content-level evidence here cuts the other way. Szabo remains a long-discussed candidate whose technical profile matches Satoshi's but whose documented activity in Dec 2008 is inconsistent with being Satoshi. Withdrawal explanation: No known life event Apr 2010-May 2011 that explains Satoshi's withdrawal. Szabo continued blogging throughout. [REPORTED] --- 2. Hal Finney Biographical base Harold Thomas Finney II (May 4, 1956 - August 28, 2014). Born Coalinga CA, raised Arcadia CA. BS Electrical Engineering, Caltech 1979. Lead developer on console video games; later worked for PGP Corporation from its founding. Built RPOW (Reusable Proof of Work, 2004) - a direct precursor to Bitcoin. Active cypherpunk; ran the first cryptographically based anonymous remailer. [VERIFIED: Wikipedia] Geographic location 2007-2010 Santa Barbara / Temple City area, Southern California. Worked at PGP Corporation until retirement (retirement tied to ALS diagnosis). PGP Corporation was headquartered in Menlo Park, CA - Finney worked remotely or on-site. His home was in the greater LA area (Temple City / Santa Barbara noted in Forbes). [VERIFIED: Forbes Greenberg 2014 article] ALS and retirement timeline ALS symptoms first appeared around 2009. His March 2013 Bitcointalk essay "Bitcoin and me" covers "the last four years" (2009-2013), describing ALS progression and retirement from PGP. He retired from PGP Corporation due to the disease. By 2014 (Forbes interview, March 2014) he was confined to a wheelchair with severely restricted communication. Died August 28, 2014; cryopreserved at Alcor Life Extension Foundation in Scottsdale, AZ. [VERIFIED: Wikipedia, Forbes Greenberg, Bitcointalk] Bitcoin involvement and correspondence with Satoshi - Jan 9, 2009: downloaded Bitcoin software immediately on release - Jan 12, 2009: received first Bitcoin transaction (Satoshi sent 10 BTC as a test); mined block 70-something - Corresponded with Satoshi over "the next few days" bug-reporting - Finney's own account: "After a few months, Satoshi and I corresponded less. He moved on to other things, and I turned back to my own projects." [VERIFIED: Bitcointalk "Bitcoin and me"] Geographic coincidence with Dorian Nakamoto In March 2014, Newsweek named Dorian Nakamoto (a Japanese-American engineer in Temple City, CA) as Satoshi. Andy Greenberg (Forbes) investigated and found that Hal Finney lived blocks away from Dorian Nakamoto in Temple City - an unlikely coincidence. Greenberg's hypothesis: perhaps Finney, living nearby, used the name "Satoshi Nakamoto" pseudonymously from his neighbor's actual name. Finney directly denied this via eye-tracking communication. [VERIFIED: Forbes Greenberg 2014] Withdrawal window - Apr 2010-May 2011 Finney's ALS was progressing significantly during this period. His physical deterioration would plausibly have made sustained technical work increasingly difficult by mid-2010. This is the most credible organic explanation in the candidate field for Satoshi's gradual withdrawal - if Finney is Satoshi or a key co-author, worsening health explains the fade. [INFERRED] Public commentary on Bitcoin Active and positive early on (Jan 2009), then quiet for about two years. Returned to Bitcoin community in March 2013 with the famous essay. His commentary was always about Bitcoin, never as an insider - consistent with either someone who genuinely was an outsider or with maintaining a persona. [REPORTED] Deleted/edited content No evidence of website deletions. His blog finney.org/~hal/ went static but was not scrubbed. [REPORTED] Key tension Finney simultaneously claimed to have received Bitcoin from Satoshi as if from a third party, and Satoshi simultaneously corresponded with Finney as if from a distance. If Finney IS Satoshi, this represents one of the most elaborate misdirections in the story - emailing himself, then claiming to have received coins. The alternative: Finney is genuinely a separate person who happened to be ideally positioned, geographically proximate to Dorian Nakamoto. Assessment Finney's profile matches Satoshi's better than almost any other candidate: PGP/cryptography background, RPOW builder, cypherpunk pioneer, first Bitcoin user. The ALS timeline plausibly explains withdrawal. The Dorian Nakamoto geographic coincidence is real but Greenberg found no operational connection. The strongest counter-argument: Finney's name and reputation were well-known - Satoshi would have been taking a significant risk using a pseudonym in a community where Finney was an instantly recognizable figure. --- 3. Adam Back Biographical base Adam Back (born July 1970, London). PhD in distributed systems, University of Exeter, 1995. Invented Hashcash (1997) - the proof-of-work scheme cited directly in the Bitcoin whitepaper. Active cypherpunk since the mid-1990s. Worked at Zero-Knowledge Systems (Montreal), then Pi Corporation (independent research). Co-founded Blockstream in 2014. [VERIFIED: Wikipedia] Geographic location 2007-2010 Sliema, Malta. LinkedIn profile shows location as "Sliema, Sliema, Malta." [VERIFIED: LinkedIn public profile via Jina] Malta is UTC+1 (winter) / UTC+2 (summer). This is significant for the timezone analysis stream - Malta's timezone is broadly consistent with published analyses of Satoshi's posting patterns, which cluster around European working hours. Bitcoin correspondence Satoshi's first known pre-publication email (August 2008) was sent to Adam Back - before even Wei Dai. Satoshi asked Back about Hashcash and linked to a draft of the Bitcoin paper. Back replied and directed Satoshi to Wei Dai's b-money. Complete email exchange was published by Bitcoin Magazine in February 2024. [VERIFIED: Bitcoin Magazine, Feb 2024] This means: Satoshi contacted Back as if he was a separate person. If Back IS Satoshi, this email exchange was constructed as cover - directing "himself" to b-money to create a paper trail. This is an argument both for and against: it could be deliberate misdirection, or it could be evidence of genuine separation. NYT Carreyrou investigation (April 2026) The most significant recent development in the Satoshi identification field. John Carreyrou - the Pulitzer Prize-winning journalist who broke the Theranos fraud - published a year-long investigation in The New York Times on April 8, 2026, naming Adam Back as Satoshi Nakamoto. The piece ran under the headline "My Quest to Solve Bitcoin's Great Mystery." Wikipedia has been updated to reflect this as the most prominent identification attempt to date. [VERIFIED: NYT April 8, 2026, Wikipedia Adam Back article updated] Carreyrou's stated evidence includes: - Back's body language in HBO's Money Electric: he "tensed up, strenuously denied he was Satoshi and asked that the conversation be kept off the record" - which Carreyrou found behaviorally inconsistent with an innocent denial - Technical depth: Back is one of very few people in 2008 with the specific combination of proof-of-work, distributed systems, and cryptographic cash knowledge needed - Being the first person Satoshi contacted (Aug 2008) - Location in Malta, consistent with timezone analyses - Deep analysis of "thousands of decades-old internet postings" Withdrawal explanation No known major life event Apr 2010-May 2011 that independently explains a withdrawal. Back continued his professional life (Pi Corporation, then Blockstream 2014). If Back is Satoshi, the withdrawal motive is unclear - unless tied to personal concerns about law enforcement or the project's increasing visibility. [REPORTED] Public commentary on Bitcoin Back was an early vocal supporter of Bitcoin - but notably, he never claimed to have been the first person Satoshi contacted until the emails were published in 2024. He occupied a peculiar dual position: famous Hashcash inventor whose work was explicitly cited, yet maintaining he only learned of Bitcoin after launch. [REPORTED] Assessment The strongest candidate in the field as of the evidence available to this stream. The 2026 NYT Carreyrou investigation represents the most credentialed journalism yet applied to this question. Key tensions: (1) Why would Satoshi email himself? (2) No withdrawal life event. The behavioral tell captured on camera (HBO documentary) is suggestive but not probative. The Malta timezone is a structural match. The fact that Satoshi's first contact was Back, combined with Hashcash being the only cited prior work in the whitepaper, is a significant structural link. --- 4. Wei Dai Biographical base Wei Dai, Chinese-American computer engineer. BS Computer Science, University of Washington. Created b-money (1998, published on cypherpunks mailing list), Crypto++ (open-source cryptographic library), co-proposed VMAC authentication algorithm. Described as "intensely private" by multiple sources. Active on Cypherpunks, Extropians, and SL4 mailing lists in the 1990s. Has connections to the Less Wrong/rationalist community (the name "LessWrong" comes from his rationality-related writings). [VERIFIED: Wikipedia] Geographic location 2007-2010 Washington State, likely employed at Microsoft. Specific employer during 2007-2010 not confirmed in public sources but Microsoft affiliation is widely reported. [REPORTED] Satoshi contact Satoshi emailed Dai in August 2008, using the address satoshi@anonymousspeech.com. The emails discuss Bitcoin as a system that "expands on your ideas into a complete working system." Dai subsequently published these emails publicly. Satoshi was apparently unaware of Szabo's Bit Gold until Dai mentioned it. [VERIFIED: gwern.net email archive] Dai's own statements - "No, I'm pretty sure it's not [Szabo]" and "When I said just Nick and me, I meant before Satoshi" - Wei Dai described himself as one of only two people working on ideas like b-money and Bit Gold before Bitcoin - Suggested Satoshi could be "someone young, with energy and time, and that isn't obligated to publish papers under their real name" - He himself denies being Satoshi Conference attendance and social ties Active on cryptography and rationality mailing lists. Connections to Nick Szabo (via cypherpunks), Eliezer Yudkowsky, Robin Hanson. No confirmed Financial Cryptography or CRYPTO conference attendance on record. [REPORTED] Withdrawal explanation No known life event Apr 2010-May 2011. Dai withdrew from public participation in the Bitcoin project very early. [REPORTED] Assessment Dai's technical background (Crypto++, b-money) gives him the cryptographic foundations. His "intensely private" nature, Washington State location (timezone mismatch with most Satoshi analyses), and his own characterization of Satoshi as "someone young" that "isn't obligated to publish papers" suggests he views Satoshi as a peer or junior - not himself. His sharing of the Satoshi emails publicly is a credible move to redirect suspicion from Szabo (and perhaps himself). No strong affirmative evidence. --- 5. Dave Kleiman Biographical base David Allen Kleiman (January 22, 1967 - April 26, 2013). Born and died in Florida. US Army Soldier of the Year, 1988. Palm Beach County Sheriff's Office detective. Motorcycle accident 1995 left him paralyzed (wheelchair user). Computer forensics expert, authored/co-authored multiple security books, frequent SANS speaker. Worked in Computer Crimes Division, PBSO; later founded a computer forensics business. [VERIFIED: Wikipedia] Geographic location 2007-2013 Palm Beach Gardens, Florida. Remained there throughout his life due to disability. [VERIFIED: Wikipedia] Relationship to Bitcoin and Craig Wright Craig Wright publicly claimed Kleiman was his co-creator of Bitcoin, and that Wright himself is Satoshi. The UK High Court (COPA v Wright, May 2024) definitively found Wright is NOT Satoshi Nakamoto. The forensic findings in the case (see Section C) demonstrate Wright fabricated documents supporting this claim. The Kleiman estate sued Wright for ~$143 billion in a Florida federal case (Ira Kleiman v. Craig Wright), settled in 2022. [VERIFIED: Wikipedia, COPA judgment] Technical background Kleiman was a computer forensics expert and law enforcement professional - NOT a cryptographer, economist, or cypherpunk. There is no documented evidence of him participating in cryptographic cash discussions, the cypherpunks mailing list, or any precursor to Bitcoin technology. He was not a programmer in the cryptographic sense. [REPORTED] Withdrawal explanation If Kleiman were involved in Bitcoin creation, his death (April 26, 2013) would prevent any further action - but Satoshi's last communication was April 2011, two years before Kleiman's death. If Kleiman was "Satoshi," this timeline is inconsistent. [INFERRED] Assessment Effectively eliminated. The COPA ruling destroyed the credibility of Wright's narrative, which is the only source linking Kleiman to Bitcoin creation. Kleiman's professional background (forensics, law enforcement) does not match the cypherpunk/cryptographer profile of Satoshi. No independent evidence connects Kleiman to Bitcoin development. He deserves continued tracking only insofar as Wright's evolving legal narratives may generate new (potentially fabricated) evidence. --- 6. Michael Clear Biographical base Irish computer scientist and cryptographer. Named top computer science undergraduate at Trinity College Dublin in 2008 - the same year Bitcoin was developed. Graduate student at TCD 2008-2011 in cryptography and distributed systems. Interned at Goldman Sachs (financial cryptography project). [VERIFIED: CoinMarketCap academy article, New Yorker] Geographic location 2009-2011 Dublin, Ireland (Trinity College Dublin). Ireland is UTC+0 (winter) / UTC+1 (summer) - broadly consistent with timezone analyses of Satoshi's posting patterns. [VERIFIED: New Yorker 2011] Named by New Yorker (October 2011) Joshua Davis's landmark New Yorker article "The Crypto-Currency" (October 10, 2011) identified Clear as a candidate based on: (1) top TCD undergraduate 2008, (2) work on distributed systems and cryptographic cash, (3) Goldman Sachs financial cryptography background, (4) Irish-born (GMT timezone), (5) matching skills profile. [VERIFIED: New Yorker URL confirmed] Clear's response Clear denied being Satoshi in a written letter to The New Yorker while also suggesting Davis investigate Vili Lehdonvirta. His denial was polite and specific. He later confirmed he is not Satoshi in subsequent years. [REPORTED] Satoshi correspondence No documented correspondence. Clear was not a known correspondent with Satoshi. [REPORTED] Assessment Clear was a media moment rather than a serious sustained investigation. He was 21-22 years old in 2008 and was at the start of his academic career. His Goldman Sachs internship and distributed-systems work gave him the raw skills, but: no cypherpunk history, no prior publications in anonymous money or digital cash, and no mailing list presence predating Bitcoin. Timezone fits. But the age-and-profile mismatch with Satoshi's apparent depth (a decade of cryptographic and economic synthesis) is significant. Essentially eliminated from serious consideration after 2011. --- 7. Vili Lehdonvirta Biographical base Finnish sociologist and economist. Studied virtual economies and online games (major work: Virtual Economies, MIT Press). At time of New Yorker article (2011), was affiliated with Tokyo and Helsinki. Later became Professor of Economic Sociology at the Oxford Internet Institute. Has since led European Research Council-funded research on digital platforms, cloud infrastructure, and AI compute geopolitics. [VERIFIED: OII Oxford profile] Geographic location 2009-2011 Tokyo and Helsinki (Tokyo Institute of Technology, Finland). UTC+9 and UTC+2 - the Tokyo location is deeply inconsistent with Satoshi's posting timezone (most analyses place Satoshi in European or North American hours). [VERIFIED] Response to candidacy Explicitly denied: "I don't even know enough mathematics to develop something like Bitcoin." He was named by Clear in the New Yorker investigation and promptly and publicly rejected the suggestion. His academic publication record is in sociology/economics, not cryptography. [REPORTED] Assessment Fully eliminated. Wrong technical background (sociologist, not cryptographer), wrong timezone (Tokyo), public denial, no cypherpunk or cryptographic-cash publication history. Was named as a candidate as part of a media chain (Davis → Clear → Lehdonvirta) rather than from primary evidence. --- 8. Paul Le Roux Biographical base Paul Calder Le Roux (born December 24, 1972, Bulawayo, Rhodesia/Zimbabwe). Raised and educated in South Africa; moved to UK, then Australia (citizenship 1995). Created E4M disk encryption software (1999, open source for Windows). Disputed connection to TrueCrypt (E4M code base was forked; Le Roux denies TrueCrypt involvement). Built a massive criminal empire from ~2004: online pharmacy scam (RX Limited), then weapons trafficking (Somalia, North Korea), then drug trafficking (methamphetamine). [VERIFIED: Wikipedia Paul Le Roux] Geographic location 2007-2010 Philippines (Manila area), Hong Kong, and throughout Southeast Asia and Africa. Le Roux ran his empire from the Philippines, rarely appearing in the West. [VERIFIED: Wikipedia, general reporting] Criminal timeline 2007-2012 - 2007-2010: Scaling RX Limited pharmacy empire to hundreds of millions in revenue; ordering murders of employees who stole from him; beginning arms trafficking to Somalia - 2010-2012: Methamphetamine operations in Liberia, North Korea connection, arms to Iran - September 26, 2012: Arrested by DEA in Liberia via sting operation; agreed to become a government informant - June 2020: Sentenced to 25 years after cooperating with prosecutors Bitcoin withdrawal window Le Roux was arrested in September 2012 - over a year AFTER Satoshi's last known communication (April 2011). This timing means his arrest cannot explain the withdrawal. If Le Roux created Bitcoin and abandoned it, the abandonment predates his arrest by ~18 months with no known triggering event. [VERIFIED] Cypherpunk / cryptographic cash history None documented. E4M/TrueCrypt is disk encryption - technically impressive but not related to digital cash, zero-knowledge proofs, or decentralized consensus. Le Roux was not a known participant in the cryptography mailing list or cypherpunks community. [REPORTED] The "Le Roux is Satoshi" theory Advanced by journalist Evan Ratliff ("The Mastermind") and others: Le Roux's skills (C++, encryption, pseudonymous infrastructure, financial motivation) fit a superficial profile. The theory suggests he created Bitcoin as a money-laundering infrastructure. Counter-arguments: (1) Bitcoin's design is anti-inflationary and deflationary - optimized for scarcity, not laundering; (2) No cypherpunk connection; (3) Philippines timezone (UTC+8) is inconsistent with most Satoshi timezone analyses; (4) Satoshi's whitepaper prose is academic and measured, inconsistent with Le Roux's operational style; (5) Le Roux never moved or spent Bitcoin if he had the stash. [INFERRED] Assessment Colorful dark-horse candidate appealing for narrative reasons (criminal genius, encryption background, pseudonymity motivation) but lacking substantive forensic connections. The timezone, philosophy, and community-participation mismatches are substantial. The arrest post-dates the withdrawal. He has not denied being Satoshi publicly (he's in prison), which creates a vacuum some interpret as ambiguous - but absence of denial from a convicted criminal is not evidence. --- 9. Peter Todd Biographical base Canadian software developer. Wikipedia does not provide a birth year, but the research brief cites 1985 (age ~23 in 2008). Began communicating with cypherpunks like Adam Back and Hal Finney at age 15 (approximately 2000 if born 1985). Attended Ontario College of Art and Design in Toronto - not a computer science program. Known for: OpenTimestamps, Bitcoin Core contributions, replace-by-fee advocacy. Early-to-mid 2010s Bitcoin developer. [VERIFIED: Wikipedia Peter Todd] Geographic location 2008 Toronto, Canada. UTC-5 (winter). Canadian timezone is broadly inconsistent with Satoshi's posting pattern analyses, which cluster around European/North American east coast hours. [REPORTED] HBO Money Electric evidence (October 2024) Documentary "Money Electric: The Bitcoin Mystery" (Cullen Hoback, HBO, October 8, 2024) named Todd as Satoshi. The evidence presented: 1. A Bitcointalk forum post that Hoback claimed "looked to be a continuation of one from Satoshi" - implying Todd was continuing as Satoshi under his own name 2. Todd allegedly said online he had "destroyed" a large number of coins, which Hoback linked to the theory that Satoshi deliberately made his stash inaccessible 3. Todd's early involvement in the Bitcoin community Todd's response "I am not Satoshi Nakamoto. When I first read the Bitcoin whitepaper, my reaction was 'Dammit! I should have thought of that.'" He described Hoback's evidence as "based only on coincidence and misinterprets his online activity." [VERIFIED: BBC article, Oct 2024] Age problem If born 1985, Todd was approximately 23 years old in 2008. The Bitcoin whitepaper demonstrates synthesis of: digital cash theory (DigiCash, b-money, Bit Gold, HashCash), Byzantine fault tolerance, distributed peer-to-peer networking, game-theoretic incentive design, and applied cryptography. This represents a decade-level research synthesis. While not impossible for a 23-year-old, Todd's educational background (art school, not CS) makes this extremely unlikely. By Wikipedia's own account, Todd became a Bitcoin developer in the "early 2010s" - after Satoshi had already withdrawn. [INFERRED] Mailing list presence Todd communicated with cypherpunks from age ~15 (c. 2000), but was not a participant in the cryptography mailing list where Bitcoin was announced in 2008. He is not known to have been present in pre-2009 cryptographic cash discussions. [REPORTED] Assessment The HBO evidence is among the weakest candidate-identification claims in the Satoshi literature. The crypto/Bitcoin community broadly and immediately rejected the conclusion. Carreyrou's 2026 NYT piece described the HBO conclusion as "unconvincing" and explicitly pivoted to a different candidate. The "forum post continuation" is the thinnest kind of circumstantial coincidence. Todd's art school background, age, Toronto timezone, and absence from pre-Bitcoin communities collectively argue strongly against him being Satoshi. --- Section B: Comparative Matrix | Candidate | Location 2008-2011 | Timezone | Mid-2010 Life Event | Prior Crypto-Cash Work | Response to Bitcoin | Cypherpunk History | Probability Assessment | |---|---|---|---|---|---|---|---| | Nick Szabo | Washington DC | UTC-5 | None known | Bit Gold (2005), Smart Contracts (1996) | Blogging Bit Gold Dec 27, 2008; later defended Bitcoin | Active cypherpunk | Low-medium (alibi Dec 2008) | | Hal Finney | Santa Barbara/LA area | UTC-8 | ALS diagnosis 2009, progressing 2010-2011 | RPOW (2004), PGP, anonymous remailer | First Bitcoin user, correspondent with Satoshi | Seminal cypherpunk | Medium-high | | Adam Back | Sliema, Malta | UTC+1/+2 | None known | Hashcash (1997) - cited in whitepaper | First pre-publication contact; supporter | Seminal cypherpunk | High (NYT 2026) | | Wei Dai | Washington State | UTC-8 | None known | b-money (1998), Crypto++ | Pre-publication email recipient; denied being Satoshi | Active cypherpunk (1990s) | Low-medium | | Dave Kleiman | Palm Beach Gardens FL | UTC-5 | Health declining (wheelchair) | None (forensics/law enforcement) | No documented commentary | None | Eliminated (Wright fabrication) | | Michael Clear | Dublin, Ireland | UTC+0/+1 | None known | None | Named by New Yorker 2011; denied | None | Low (media moment) | | Vili Lehdonvirta | Tokyo / Helsinki | UTC+9/+2 | None known | None (virtual economy sociology) | Explicitly denied | None | Eliminated | | Paul Le Roux | Philippines / Asia | UTC+8 | Criminal empire expanding | E4M encryption (1999) | No commentary; in prison | None | Low (timezone, philosophy mismatch) | | Peter Todd | Toronto, Canada | UTC-5 | None known | None pre-2009 | Named by HBO 2024; denied | Contact from age ~15, not central | Very low (HBO evidence rejected) | --- Section C: COPA 2024 Ruling - Implications for the Candidate Field Case: Crypto Open Patent Alliance v. Craig Steven Wright, [2024] EWHC 1198 (Ch), High Court of Justice, England and Wales. Judge: Mr. Justice Mellor Decided: May 20, 2024 Key Findings The verdict: Justice Mellor ruled that Craig Wright is NOT Satoshi Nakamoto, did not write the Bitcoin whitepaper, and did not create the Bitcoin software. Forensic forgery findings (from judgment appendix) The 150-page appendix documents a systematic pattern of document fabrication: 1. LaTeX files (main.tex and E-Cash-main.tex) Wright submitted two LaTeX documents as alleged working drafts of the Bitcoin whitepaper, claiming they originated in 2007-2009. Forensic analysis showed the documents contained LaTeX packages and commands that were not created until 2015-2016 - impossibly postdating the claimed creation. The documents were fabricated using Overleaf (online LaTeX tool) after the fact and backdated. 2. BDO "Time Capsule" (BDOPC.raw) Wright submitted a forensic disk image allegedly showing his computer hard drive containing early Bitcoin development work from 2007-2009. Experts found the image was manipulated: files had been inserted with backdated timestamps. The manipulation was evident from filesystem artifacts inconsistent with natural aging. 3. BlackNet Abstract and other reliance documents Multiple documents Wright submitted as evidence of his early cryptographic work were found to contain anachronistic features - fonts, formatting styles, metadata - inconsistent with their claimed creation dates. 4. Mellor's characterisation The judge described Wright as "a serial liar" who "produced false documents in support of his claim" and had "deliberately misled" the court. Wright "gave deliberately false evidence" throughout the trial. Implications for the candidate field 1. Kleiman eliminated as co-creator: Wright's narrative collapses, and with it, any claim about Kleiman's role. The Florida lawsuit settlement (2022) was prior to COPA, but the underlying factual basis (Wright as Satoshi) is now judicially negated. 2. The field remains genuinely open: Mellor's ruling didn't name the real Satoshi - it only closed the false path. This should focus attention on candidates with positive evidence rather than candidates benefiting from Wright's false claims. 3. Significance for forgery detection as methodology: The COPA case demonstrated that forged documents can be detected even years later through metadata analysis, package versioning, and filesystem forensics. This methodology is relevant to any candidate attempting to fabricate provenance. 4. Peter Todd was a defendant (Defendant #11, BTC Core Claim) - Todd was sued by Wright as one of the Bitcoin Core developers. His inclusion as a defendant is independent of the HBO identification claim, but underscores that Wright and Todd are adversaries, not co-conspirators. --- Section D: HBO "Money Electric" - Peter Todd Assessment Documentary: Money Electric: The Bitcoin Mystery (HBO, October 8, 2024), directed by Cullen Hoback. The evidence Hoback presented Evidence 1: The "continuation post" Hoback identified a Bitcointalk post by Todd that he characterised as a continuation of a Satoshi post - implying Todd had slipped back into the Satoshi persona. Todd has stated this is a fundamental misreading: he was responding to Satoshi, not continuing as Satoshi. The posts were in the same thread, not structurally linked as author-continuation. Evidence 2: Destroyed coins Hoback cited Todd saying he "destroyed" a large number of coins. Hoback connected this to the theory that Satoshi deliberately inaccessible his ~1.1 million BTC stash. However, Todd's explanation is that he burned coins in a specific technical demonstration (a "provably unspendable" output), not that he had access to Satoshi's stash. Evidence 3: Early community involvement Todd was indeed an early Bitcoin developer. However, per Wikipedia, his involvement began in the "early 2010s" - after Satoshi's last communication in April 2011. Critical assessment of Hoback's methodology Hoback previously directed Q: Into the Storm (2021), which identified Ron Watkins as the Q-Anon figure - an identification that remains disputed and was never legally established. His methodology relies heavily on on-camera confrontation and circumstantial behavioural signals rather than forensic documentation or corroboration. The Bitcoin/cryptography community response was near-unanimous rejection. Leading Bitcoin developers, cryptographers, and journalists (including Carreyrou in his subsequent NYT investigation) found the Todd identification unconvincing. Age recalculation The research brief notes Todd was born ~1985, making him approximately 23 years old in 2008 when the Bitcoin whitepaper was published. This is not impossible - but the whitepaper represents: - Synthesis of 10+ years of cypherpunk literature (DigiCash, b-money, Bit Gold, Hashcash) - Deep C++ programming capability (Bitcoin's source code is technically sophisticated) - Nuanced understanding of Byzantine fault tolerance and Merkle tree structures - Economic reasoning about incentive design and deflation For a 23-year-old enrolled at an art school (Ontario College of Art and Design), producing this synthesis in 2007-2008 is implausible on its face. Todd's cypherpunk correspondence from age 15 (c. 2000) demonstrates early interest, but interest ≠ authorship. Verdict on HBO evidence The Todd identification is not credible. The evidence is circumstantial, misread, or extrapolated beyond what the underlying facts support. The film's entertainment value significantly exceeded its evidentiary value. The 2026 NYT investigation (Carreyrou) explicitly rejected the HBO conclusion and pivoted to Adam Back as the more credible candidate. --- Section E: Novel Findings 1. The December 27, 2008 Szabo alibi Szabo's Unenumerated blog post "Bit Gold markets" (December 27, 2008) is posted to widen fungibility options for Bit Gold - one week before the Bitcoin genesis block. This is the strongest single piece of disconfirming evidence in the case against Szabo. A person who was Satoshi would not be publicly refining a predecessor system days before launching the superior successor. This finding is under-weighted in most Satoshi analyses. 2. Satoshi's first email was to Adam Back - not Wei Dai The pre-publication email to Back (August 2008) predated the email to Wei Dai. Satoshi sought Hashcash's inventor's blessing first. If this was Satoshi constructing a cover story, he was building the paper trail to Back before building it to Dai. If it was genuine outreach, it shows Satoshi saw Hashcash as the most direct technical ancestor worth crediting (b-money influenced the concept, but Hashcash influenced the mechanism). Back is the only person whose work is directly cited in the whitepaper. 3. Wei Dai's characterisation of Satoshi Dai described the hypothetical Satoshi as "someone young, with energy and time, and that isn't obligated to publish papers under their real name." This directly excludes Back (established researcher, real-name publications in the area), Szabo (same), and Finney (same). It fits a younger or more obscure developer - potentially someone who worked in relative anonymity. However, this is Dai's opinion, not verified evidence. 4. Hal Finney's geographic co-location with Dorian Nakamoto Finney lived within walking distance of Dorian Nakamoto in the Temple City/Santa Barbara area of Southern California. The Greenberg hypothesis (2014) - that Finney chose the pseudonym from his neighbor's real name - remains unverified but structurally elegant. Finney denied it; however, his communication was severely compromised by ALS at that point. 5. The Malta timezone signal Adam Back's LinkedIn-confirmed location in Sliema, Malta is UTC+1/+2 - the timezone zone that some Satoshi posting-pattern analyses identify as consistent with the author's apparent working hours. Malta is a small jurisdiction with limited cryptocurrency regulatory oversight, which would also be relevant to a person wishing to operate pseudonymously. 6. Paul Le Roux's timing problem Le Roux's arrest (September 2012) comes 17 months after Satoshi's last known communication (April 2011). The gap makes arrest an impossible explanation for withdrawal. The theory requires Le Roux to have voluntarily abandoned Bitcoin in April 2011 for unspecified reasons - which, if he had the stash (~1.1M BTC now worth >$100B), is not credible unless the stash was always deliberately inaccessible. 7. The self-referential email problem for Back If Back is Satoshi, the pre-publication email to "Adam Back" is the most extraordinary self-reference in the case - Satoshi emailing a persona that is "himself" to establish a credible third-party contact. This would be sophisticated misdirection, but it also created the paper trail (published 2024) that Carreyrou identified as part of his evidence chain. The very act of "contacting Back first" may be the tell. --- Section F: Confidence and Limitations Research confidence High confidence (VERIFIED findings): - Adam Back confirmed located in Sliema, Malta (LinkedIn) - Adam Back's Wikipedia article updated to reflect NYT 2026 identification - Hal Finney died August 28, 2014; ALS affected him from ~2009 - Nick Szabo published Bit Gold markets post December 27, 2008 (one week before genesis block) - COPA ruling: Wright not Satoshi, documents fabricated (LaTeX anachronisms, BDO image manipulation) - Satoshi's first known pre-publication email was to Adam Back (August 2008) - Satoshi's second pre-publication email was to Wei Dai (August 2008) - Financial Cryptography 2009 was held in Barbados, February 23-26 - Dave Kleiman died April 26, 2013, Palm Beach Gardens FL; was in wheelchair since 1995 - Vili Lehdonvirta now at Oxford Internet Institute; explicitly denied being Satoshi - Peter Todd attended Ontario College of Art and Design; Wikipedia gives no birth year Medium confidence (REPORTED): - Hal Finney's exact ALS diagnosis date (~2009, from "last four years" framing in 2013 post) - Hal Finney's retirement date from PGP Corporation (linked to ALS progression) - Nick Szabo's employment at George Washington University during 2007-2010 - Adam Back's specific employer between Zero-Knowledge Systems departure and Blockstream (Pi Corporation) - Wei Dai employed at Microsoft during 2007-2010 - Paul Le Roux's specific Philippines address and movements 2007-2010 Lower confidence (INFERRED): - That Hal Finney's health deterioration explains Satoshi's withdrawal - That Adam Back emailed "himself" as part of a cover strategy - That the Malta timezone is materially significant to the identification (timezone stream handles this separately) - That Szabo's Dec 27, 2008 post constitutes an "alibi" (it could be cover) - Peter Todd's birth year of 1985 (not confirmed in public sources reviewed) Methodological limitations 1. NYT Carreyrou article paywall: The full April 8, 2026 Carreyrou article could not be read past the truncation point. The complete evidentiary basis for naming Back is not fully accessible. The findings here are based on the article's summary and Wikipedia's updated coverage. This is the most significant gap in this research stream. 2. No Wayback Machine access: The brief requested archived diff-mining of candidate websites between 2007 and 2012. This stream did not access web.archive.org snapshots directly. Any page deletions or content changes during this period are not examined here. 3. Patent filings not searched: The brief requested patent filing searches (2005-2010) for distributed ledgers, timestamping, chained signatures. This was not conducted in this stream. 4. Mailing list gaps not quantified: The brief asked whether any candidate went conspicuously silent on cryptography lists during Satoshi's active period. This analysis was not conducted quantitatively - it would require systematic analysis of mailing list archives. 5. Financial signals: No candidate showed obvious sudden wealth signals in 2010+ that were traceable to a source outside known employment, given that Satoshi's original stash is unmoved. This analysis was not conducted. 6. Conference attendance: Financial Cryptography 2009 (Barbados, Feb 23-26) and CRYPTO (Santa Barbara) schedules were identified. Confirmed attendee lists for Back, Szabo, or Finney were not located. --- Summary Assessment | Rank | Candidate | Strength of Case | Key Factor | |---|---|---|---| | 1 | Adam Back | Strong | NYT Carreyrou 2026; first Satoshi contact; Malta timezone; Hashcash the only cited prior work; behavioral tell on camera | | 2 | Hal Finney | Medium-strong | First Bitcoin recipient; ALS withdrawal explanation; RPOW precursor; Temple City proximity to Dorian Nakamoto | | 3 | Nick Szabo | Medium | Technical depth match; stylometry (Grey 2013); but Dec 27 2008 Unenumerated post argues against; not a C++ programmer | | 4 | Wei Dai | Low-medium | Technically capable; Satoshi contacted him pre-publication; "intensely private"; but self-excludes via Satoshi characterisation | | 5 | Paul Le Roux | Low | Encryption background; motivation for pseudonymity; but Philippines timezone, arrest timing, no cypherpunk history | | 6 | Michael Clear | Very low | Media moment (2011); timezone fits; young; no prior crypto-cash work | | 7 | Peter Todd | Very low | HBO evidence rejected; art school background; age mismatch; "early 2010s" Bitcoin involvement | | 8 | Vili Lehdonvirta | Eliminated | Wrong technical background; wrong timezone; explicit denial | | 9 | Dave Kleiman | Eliminated | Wright fabrication; COPA ruling; forensics/law-enforcement profile not matching Satoshi |