The a16z Show - How Bitcoin Rewired a Classic Computer Science Problem

Episode Date: July 10, 2026

We're excited to share a special feed drop from The a16z Crypto Show. In the first episode of First Principles: The Scientific Roots of Blockchain Technology, Tim Roughgarden and Ittai Abraham trace the decades of computer science research that laid the foundation for modern blockchains. Long before Bitcoin, researchers were studying one of distributed computing's hardest challenges: how independent machines can reliably agree on a shared state, even when some participants are faulty or malicious. Bitcoin didn't invent that problem, but it introduced a breakthrough solution in a radically different, permissionless setting. The conversation explores Byzantine agreement, state machine replication, proof of work, proof of stake, Tendermint, Casper, DAG-based protocols, and why concepts developed decades ago continue to shape the design of today's fastest and most secure blockchain networks.   Resources: Follow Tim Roughgarden on X: https://x.com/Tim_Roughgarden Follow Ittai Abraham on X: https://x.com/ittaia Follow a16z Crypto on X: https://x.com/a16zcrypto Subscribe to The a16z Crypto Show: https://a16zcrypto.substack.com/subscribe/ Stay Updated:Find a16z on YouTube: YouTubeFind a16z on XFind a16z on LinkedInListen to the a16z Show on SpotifyListen to the a16z Show on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

So this was in 2007. I was at a workshop, and the goal of the workshop is to kind of see whether Byzantine Falterans is practical or not. But there was actually two big complaints. One is that maybe nobody needs it, and the other was that the performance was horrible. So the question wasn't whether consensus protocols are practical. The question was, did you really need to be robust to potentially very unpredictable failures as opposed to just crash? Satoshi Nakamoto, he kind of realized that. He said the core technical aspect of Bitcoin is solving Byzantine agreement. I would say de facto, all the major chains that we know are running some version of visiting plot tolerance. The early proof of stake protocols, they were not very efficient. They had blocks every 10 minutes. And so really, if you're thinking about serving billions of people or systems that really manage large economies,

you want to have kind of a wartime mode and a peace time mode. So in peacetime, there's no failures. And the thing is that you do want to be able to switch to wartime. So if you are under attack, then you do have a way to kind of overcome a massive attempt to corrupt your system. People often tell the story of Bitcoin as if it appeared out of nowhere. But the ideas behind Bitcoin stretch back decades, drawing on foundational work in computer science, cryptography, and distributed systems. In this episode, Tim Roughgarden and Dutai Abraham explore the scientific roots of blockchain

consensus, explain why Bitcoin represented a breakthrough in Byzantine fault tolerance, and discuss how decades of academic research continue to influence the design of modern blockchain protocols. Whether you're new to crypto or have been following the space for years, this conversation offers a deeper look at the scientific ideas that underpin modern blockchains. If you enjoy this episode, be sure to subscribe to the A16Z Crypto Show for more conversations like this. Hi, everyone. I'm Tim Roughgardin, head of research at A16Z Crypto and professor of computer science at Columbia University. And today, we're kicking off a new series called First

Principles, the Scientific Roots of Blockchain Technologies. that explores one of the most exciting areas of research at the intersection of theory and practice today, blockchains and where the ideas that make them possible come from. At their core are decades of work across computer science, economics, and mathematics, ideas about how distributed systems reach agreement, how trust can emerge without central authority, and how computation can be verified across networks of strangers. So we'll trace these ideas from their origins to the systems running. in production today. And we'll talk with the scientists and the scholars whose breakthroughs

made it all possible. To start, we're going to focus on one of the deepest threads, which is distributed consensus, how many machines can agree on a shared state, even in the presence of failures and adversarial behavior. Concepts like Byzantine Agreement and state machine replication developed decades ago now, sits at the heart of modern blockchain technology. So to begin, I'm joined by A16Z Crypto Research Partner, Etai, Abraham. Etai is one of the world's leading researchers in Byzantine Agreement and Consensus protocols. He's a founding member of VMware's blockchain project. He's also the founder of decentralized thoughts, one of the fields most respected and long-running technical blogs.

Together, we unpack the work of two pioneers, Barbara Lyskoff and Leslie Lamport, whom you'll hear directly from in the episodes ahead. All right. So it's high, very, very cool. We get to interview both Leslie Lamport and Barbara Liskoff. It's a great honor. Really, really cool. We get to do this.

Maybe for the audience benefit, we should talk a little bit about how the pioneering work that they did connects to blockchain technology. You know, so the first blockchain that came out, Bitcoin 2008, 2009, you know, part of what it is is a consensus protocol. And so the question is like, what does that mean? a lot of the work that Lamport and Lyskopf both did, it's way before Bitcoin, right? It's from the 90s, from the 80s, even earlier.

What's the connection? Bitcoin is a consensus protocol, but there's also this classic working consensus protocols. Was Bitcoin reinventing the wheel, or how should we think about that? Bitcoin, well, it's not just a whole disruption in distributed computing. It also has innovation in economics and cryptography, but here we're going to focus on the distributing part. It actually took quite a few years for people to realize that this is kind of solving a Byzantine agreement problem. So a Byzantine agreement problem was kind of this very core

academic problem that has been studied for 14 years. And that sense, Bitcoin is kind of this huge revolution in how to solve Byzantine agreement. In fact, if you look at early emails from Satoshi Nakamoto, he kind of realized that. So he said, you know, the core technical aspect of Bitcoin is solving Byzantine agreement. So Nakamoto apparently knew that this was a well-known problem that should be computing. So what's the connection then between the Bitcoin protocol and, you know, the protocols we're going to hear about. Yeah. So in a sense, both the protocols that we're going to hear about from Barbara Liskoff and

Lepard are Byzantine Agreement Protocols or Agreement Protocols in general. So Bitcoin solved this in a much different setting, permissionless with a much smaller setup, much more kind of gear towards cryptocurrency and crypto economics. But if you kind of think about this from the foundational perspective, they're both solving the same agreement problem. So agreement is kind of this problem where you have multiple different parties and they might have different types of inputs and they need to reach agreement, even though a fraction of the participants are behaving maliciously or in a corrupt manner. So like in the Bitcoin protocol,

who are the parties that have to agree and what is it that they're agreeing on? Right. So you have minors, right? And the miners are trying to kind of push the protocol forward by generating new blocks, solving proof of work. And it might be that not all the miners are trying to do the right thing. Some of them may try to subvert the protocol or they're behaving in a corrupt manner. Maybe they're trying to create some sort of double spend attack or some attack that will basically cause different people to see different views on the blockchain. And what this protocol basically does, Nakamoto Consendos it's called, right, the Consendous Protocol of Bitcoin is a kind of guarantee that even if a fraction of the miners are corrupt, this protocol still gives you a single,

consistent view of the ledger. And in a sense, that's exactly the thing that has been studied 40 years ago, right, in state machine replication and Byzantine fault tolerance. And so stay machine replication, how does that compare to agreement? So in a sense, the core problem is just reaching an agreement on the content of the log. So now you have kind of a log that has different commands on them. So a log would be an abstraction of a blockchain in this case. Yeah. So you could think about every block in your blockchain as just a set of commands.

And then you have kind of a chain of commands that would be kind of a log or a chain. It's kind of the same thing. But really what you want to do is not just record things, but you want to try to see what is the outcome of executing them. So this is where you had some sort of smart contract language or some scripting language like BitcoinScript. And in this case, you know, maybe you want to verify some signatures or run some sort of contract.

So this is the execution part of it. And so the very powerful abstraction, this is an abstraction that we'll hear about from left to lampboard is what's called the state machine representation. It's that clients are basically thinking as if they are interacting with a single state machine. So what is a state machine? It's simply a single system that you've sent it commands.

And through that commands, it updates its state from one state to the other to the next. And each time you kind of run the command, the state updates to the next state of the system. And I guess in a blockchain context, that state would include, for example, everybody's balances in a native cryptocurrency, plus, I guess maybe like local storage and smart contracts. That would all be kind of part of this state, right? Exactly. So for example, in Bitcoin, maybe the state of the system is that I have a token. and maybe if I send a payment to you,

then the way the state would change is that now my token is erased and there's a new token that forms that's under your public key. So now you can use that token. So the state is kind of recording what are all the unspent tokens or transactions that are on the chain.

So one thing that I think I find fascinating is you had for a while two parallel threads of research that at least, it seems to me, have converged to a large degree over the last five years. But I'm curious about your thoughts. So you have distributed computing dates back, again, at this point, you know, 45 years or more. And we'll hear from, you know, both doctors, Lamport and Lyskoff about that early work.

And then separately, you know, Bitcoin launched kind of blockchain technology and sort of a research community around that, thinking about how to build better and better blockchain protocols. And that was in 2009. So that was maybe about 30 years after some of the earliest, you know, pioneering work on the distributed computing side. And so in addition to being 30 years later, I feel like it was kind of a parallel thread for a while there. But now it seems to me that those two threads have been coming together over the past maybe five years or so. So I guess do you sort of share that view? And if so, like, what do you think has been driving that sort of convergence recently? Yeah, absolutely.

First of all, I really think that, you know, Bitcoin is just kind of huge revolution. We're probably going to spend a lot of time talking about that. But in a way, when it happened, people didn't really understand what it's doing. It actually took quite a few years for the research community and for everybody to understand that this is solving kind of a very hard academic problem. Once it was clear that that is the problem that Bitcoin solves, there was this effort to try to connect that to this classical work.

It took quite a few years. Around 2017 or 16 was when this change. I think the first protocols were to tenderment as an example. These were the protocols that kind of were using the classical Byzantine photonal protocols, but applying them on proof of stake. So really, I think that this is this transition from proof of work-based protocols to proof-of-stake ones, and the realization that you can kind of mimic the same effect that Bitcoin obtained in proof-of-work using proof-of-stake protocols.

So I think that was kind of this first wave of 2016-17. Maybe the next one to mention is Casper. This is the Ethereum fanality gadget appeared around 2017. That's a great point. I mean, now even the theories at the point where we understand is a formal sense in which you kind of can't do the traditional consensus protocols in a proof of work context, which is an interesting interaction between kind of the type of civil resistance, right? So if you don't know who people are, and you can't do one vote per person because you don't know who the people are, so you have to do one vote per some scarce resource,

that's what I mean about civil resistance mechanism. And Bitcoin famously uses proof of work. In some sense, that's incompatible with the types of techniques that Dr. Lampor and Laskoff will be talking about. Whereas proof of stake civil resistance, well, there's a lot of other reasons you might want to use that as well. You know, maybe you're concerned about environmental reasons or, you know, scalability, what have you. It also actually unlocks those techniques that doctors Lamport and Lyskof will tell us about. So that's a great point. And it was not trivial at the time.

So I remember 2015, people were saying, oh, there's this idea of proof of stake, but how do we do it? It seems impossible. You know, there were a lot of people that says that, you know, there's no way to kind of do something similar. So it was a non-trivial advance during those years. Absolutely. So, for example, you know, Ethereum, I know was already talking about proof of stake before they even launched. their original main net in 2015, and then the actual transition to proof of stake wasn't until 2022, right? Seven, seven, eight years later. So I agree. It seems like that turned out to be a much

more difficult problem than, you know, just the initial idea. So you mentioned Tendermint, which may be familiar to listeners from the cosmos ecosystem, among other places. You mentioned Casper, which is used in today's Ethereum. So today's Ethereum has sort of two layers. It has like a longest chain, sort of lower layer, and then a finology gadget based on top Casper. And as you say, the techniques in Casper are going to be very related to the techniques that our guests tell us about today. I actually, you know, on a personal note, I think I first became aware of this interesting interplay, the idea that the Bitcoin Protocol on the one hand was sort of solving a well-established academic problem, but then doing so in a way no one had ever thought about.

It was a survey you read, I think, with Dahlia Malki that sort of first pointed that out. So that was maybe 2017 or something like that. They made a big impression on me at the time. Yeah. So it actually took, I think, quite a few years. for this kind of prevailing, I guess, community understanding, right? That Byzantine Falterans is the core thing that blockchains are doing. But that actually wasn't obvious.

There were early protocols that kind of did things that were not consent to those protocols or didn't solve the Byzantine agreement. And it took quite a while until kind of things settled, I would say. And today, or at least, you know, even from 2017 to the 2020s, there was kind of an explosion of research in Byzantine Falterans. And I would say de facto, you know, all the... the major change that we know are running some version of Byzantine fault tolerance. One thing that's been wild, I'd say, about blockchain technology is it sort of breathed a lot of

new life and also, frankly, a lot of new resources into a lot of areas of beauty science that have been around for quite a while, right? So, like, another example would be, say, the development of snarks, which for many decades was viewed as a purely theoretical construct. It was kind of, you know, something magical, which you'd never hope to implement. And, you know, now we're really seeing very concretely efficient snarks come into production. And while consensus protocols, they were always sort of meant to be practical, as I think we'll hear about today, they've been supercharged as well by having, you know, blockchain technology as a sort of extremely high value application of better consensus

protocols. But let me even tell you another story. So this was in 2007. So 2007, I was at a workshop. And the goal of the workshop is to kind of see whether Byzantine Falterids is practical or not. This was really a few years after Google and Yahoo and Microsoft were using kind of the non-B Byzantine version of agreement. This is kind of Paxos-type protocols. So the question wasn't whether consensus protocols are practical.

The question was, did you really need to be robust to potentially very adversarial or very unpredictable failures as opposed to just crashing? Is that right? Right. But there was actually two big complaints. One is that maybe nobody needs it. And the other was that the performance was horrible. So people kind of didn't believe that it's possible to do it any better, right? They said, oh, this is going to be very slow.

We now have these very efficient axos like algorithms. Those are practical, right? Those are used by a lot of these cloud service providers. But, yeah, Byzantine Paltar is, oh, that's not practical, that that's too expensive. So, yeah, I think we've seen this arc of a lot of work in a space kind of really exponentially improve it. Say, like, last five years, are there some sort of innovations in consensus, but originating from the blockchain community that, you know, you find particularly

So we are seeing, you know, not just a lot of systems are using Byzantine Faltaics, but we're also kind of seeing a lot of innovations in this space. A lot of it is focused on getting much higher throughput and much lower latency. And it's just to make that concrete. So from the user perspective, you want high throughput because you want there to be space for your transactions and even sort of you want it to be cheap to send your transactions. A lot of latency just means whatever you ask the blockchain to do, like do a transfer, whatever you want it to happen, ideally close to instantaneously, right?

that would be the latency, right? Yeah, and maybe, you know, we can go back to Bitcoin in 2009, right, or even 2017, the early proof of state protocols. They were not very efficient. They had blocks every 10 minutes, if it's Bitcoin, or every kind of tens of seconds. And the throughput was actually quite small. And so really, if you're thinking about serving, you know, billions of people or systems that really manage large economies, then that wouldn't be enough for some types of use cases.

So you want to have something that can serve many, many users. And not only that, they can give them a real-time experience. So serving a lot of users, that's going to be high throughput, and giving people kind of real-time experience, that would be kind of low latency. One type of innovation is these DAG-based protocols. These are protocols that have two different layers, and they really push the throughput of these systems quite a bit.

We've seen this, for example, in Sway and protocols like Mississippi. That's kind of one family of major improvements. And the other one was a focus on trying to reduce latency. Can you kind of reach Byzantine agreement with very, very few round trips. And we've seen these new protocols that kind of have two different modes. So a regular mode that maybe has three message delays and a fast path that has just two message delays. And this is the optimal thing that you could expect. Even in a non-visiting setting, right, you could just think about this. It's really just a server sends it to all the replicas and gets a response back and the

transaction is committed. So really you get the smallest latency that you could possibly imagine. Yeah. And I think this is a very cool approach. This is basically just optimizing the common case, right, which is just usually a good idea. And this itself has precursors in the academic literature that predate blockchain technology, you know, maybe most famously with Alpin Glow, which is the proposed new version of Solana's Consensus Protocol, which I think will be rolled out in 2026.

That's really kind of an in-production implementation of this idea, like maybe, you know, 90-some-odd percent of the time, you can be super fast while losing little, if any, in the remaining percent from what you had before. Yeah. The way I like to think about this is from a systems design perspective, right, is that you want to have kind of a wartime mode and a peace time mode. So in peacetime, if there's no failures, everything is good, you want to be super fast and super efficient. And that's going to be most of the time. And we now empirically can be just watching all these blockchains and production. Empirically, we know that's most of the time. Exactly. I mean, there's kind of crypto economic incentives, right? So once you make attacking it not efficient, then people will attack it less and so on. And the thing is that you do want to be able to switch to wartime. Right? So if you are under attack, then you do have a way to kind of overcome, again, a massive attempt to corrupt your system. So I think these kind of dual mode protocols are fascinating and I think make a lot of sense in this world. One final thought on the influence, you know, of the academic literature and consensus protocols to modern blockchain protocols.

I'd also say like even just the language people use to talk about blockchain protocols and the guarantees they have, I'd say is, you know, deeply, deeply informed by the foundations that were laid kind of on the on the, on the, the research side, right? Like, even if it's just meant to be a purely practical blockchain protocol, still is an expectation that you would have, for example, optimal fault tolerance in partial synchrony, which is a bunch of, you know, academic words. I mean, it all translates to precise mathematical statements, you know, about sort of a mathematical abstraction of the practical protocol. But yet, that has almost become sort of table stakes for new generations of blockchain protocols. And so to me, just the whole way people think about what makes a protocol good or sort of state of the art, you know, that is, I think, very deeply shaped by the last, you know, now almost

half century of work in this field. Yeah, I mean, you know, for us, this is extremely exciting, because we come from kind of a theoretical computer science. And here we have something that's extremely practical. As you said, the language and the way to think about these, to reason about these protocols is actually using theory and mathematical abstraction. And this is a non-trivial idea, right, that you have a real world system and you're actually using abstract mathematical thinking and, you know, You're using proofs and you're using that language in order to reason about your system. And what's to me even more exciting is that this is not a new idea. This is an idea that, as we're going to see, has been studied for 40 years in distributed systems.

So there's kind of this very deep and successful connection between relatively theoretical notions and mathematical models and things that are just kind of in, I guess, in theory and practical systems that are deployed in real world, both in kind of clouds in the 2000s and today and basically all blockchain protocols. Yeah, right. The famous quote is that the gap between theory and practice is always smaller in theory than in practice. But I will say, I really feel like this gap has been getting narrower, thanks to the efforts of sort of lots of smart people, both on the research side and on the sort of engineering side. I mean, you know, it's not perfect convergence. But, you know, like you said, I mean, really, the theory being developed right now really is intended to usefully inform the next generation of in-production blockchain protocols. It's just very exciting to sort of, you know, see that synergy between them. Very much.

And for me, I think it's because it's a two-way streak, right? So it's not that, oh, there's somebody sitting in every tower and kind of, you know, writing theorists. It's actually, you see what's happening in practice and you analyze that. And then you realize, oh, you can. So there's two-way connections is extremely important and was very fruitful, I think, for both sides. And, you know, I would guess for both, you know, as a landlord and Barberliskoff, right? I mean, there is, you know, anyone can see there's a really major loop between kind of the theoretical innovations and sort of the practical the practical solution.

So I'm sure we'll hear more about that from them as well. Thanks for listening to this episode of the A16Z podcast. If you like this episode, be sure to like, comment, subscribe, leave us a rating or review and share it with your friends and family.

For more episodes, go to YouTube, Apple Podcast, and Spotify. Follow us on X at A16Z and subscribe to our substack at A16Z.com. Thanks again for listening, and I'll see you in the next episode. As a reminder, the content here is for informational purposes only.

Should not be taken as legal business, tax, or investment advice, or be used to evaluate any investment or security, and is not directed at any investors or potential investors in any A16Z fund. Please note that A16Z and its affiliates may also maintain investments in the companies discussed in this podcast. For more details, including a link to our investments, please see A16Z.com forward slash disclosures.