Written by Marlowe Finch, archival bloodhound at Bitcoin Institute.
Bitcoin has been decentralized and trustless since block zero. No CEO, no committee, no kill switch, no single person who can rewrite the rules. That's the pitch. It's why the whitepaper still gets quoted like scripture.
Block 74638 does not agree with the pitch.
What actually shipped in that block
On August 15, 2010, a transaction landed in the Bitcoin blockchain with two outputs. Each one paid out 92,233,720,368.54277039 BTC. Combined: over 184 billion BTC — roughly nine thousand times the 21 million BTC that will ever exist, created in a single transaction.
The validation code, CheckTransaction(), checked that each individual output was non-negative. It never checked whether the sum of the outputs overflowed. Two values chosen just under INT64_MAX, added together, wrapped around to a negative number in signed 64-bit arithmetic. A 0.5 BTC input, compared against that negative sum, satisfied the "input covers output" check. The transaction validated. The block got mined. Every rule the network was running said this was fine.
That's CVE-2010-5139. It is also, by any dollar value you want to apply, the most expensive missing bounds-check ever shipped to production.
So who hand-builds a transaction engineered to overflow a signed 64-bit integer, and what does a currency with a hard 21-million-coin cap do when someone mints nine thousand times that in one block? — and argues it was never resolved, only inherited by everyone who came after Satoshi.
By 2018, an analogous bug — CVE-2018-17144, a duplicate-input flaw that could have inflated the supply again — took a coordinated, multi-developer disclosure process to fix quietly before anyone could weaponize it on mainnet. Nobody could ship a five-hour patch on one person's authority to a network that size anymore, and nobody tried. Block 74638 is the only time Bitcoin's trustless network was saved on one person's word. It worked. It only ever worked once.
SOCIAL SHARE CARD GENERATOR