Bitcoin Whitepaper — Annotated Guide

# 9. Combining and Splitting Value

Although it would be possible to handle coins individually, it would be unwieldy to make a separate transaction for every cent in a transfer. To allow value to be split and combined, transactions contain multiple inputs and outputs. Normally there will be either a single input from a larger previous transaction or multiple inputs combining smaller amounts, and at most two outputs: one for the payment, and one returning the change, if any, back to the sender.

> 💡 In plain terms
> Bitcoin doesn't work like physical coins or bills that you hand over.
> It works more like checks — or more precisely, like a ledger of IOUs.
>
> Every transaction consumes previous transaction outputs (called "UTXOs" — 
> Unspent Transaction Outputs) as inputs, and creates new outputs.
>
> A simple example:
> - You received 1 BTC from Alice in a previous transaction.
> - You want to pay Bob 0.3 BTC.
> - Your transaction has:
>   - Input: that 1 BTC you received from Alice
>   - Output 1: 0.3 BTC → Bob
>   - Output 2: 0.7 BTC → yourself (your "change address")
>
> The 1 BTC input is fully consumed. The two outputs represent the new state of ownership.
> There's no such thing as "spending part of a coin" — you always spend the full UTXO and create new outputs for the recipient and yourself.
>
> You can also combine multiple small UTXOs as inputs to make one larger payment — the digital equivalent of handing over a pile of coins to pay for something expensive.

It should be noted that fan-out, where a transaction depends on several transactions, and those transactions depend on many more, is not a problem here. There is never the need to extract a complete standalone copy of a transaction's history.

> 💡 In plain terms
> "Fan-out" just means that the history of a bitcoin can branch out across many previous transactions. For example, your 1 BTC might have passed through dozens of hands before reaching you, each transaction splitting or combining value.
>
> Satoshi is pointing out this complexity is not a problem — you never need to trace or store the entire history of a coin's journey.
> The Merkle Tree and the blockchain structure handle verification efficiently, regardless of how many prior transactions are involved.

> ⚡ Why It Works vs. Traditional Finance
> Traditional bank transfers operate in round numbers and fixed denominations.
> Splitting or combining bank balances across accounts requires wire transfers, fees, and minimum amounts — making micropayments and flexible denomination combinations impractical.
>
> Bitcoin's UTXO model is inherently flexible:
> - Combine hundreds of tiny UTXOs into one payment
> - Split a single large UTXO to pay multiple recipients
> - No minimum transaction amount at the protocol level
> - No bank account, no routing number, no settlement delay
>
> Every bitcoin transaction is self-contained and immediately verifiable.
> The math works the same whether you're sending $0.001 or $1,000,000.

Bitcoin Combining and Splitting Value

// COMMENTS

ON THIS PAGE