On December 14, 2022, a developer named Casey Rodarmor minted the first Bitcoin inscription, an image of a skull, embedded permanently in the witness data of a Taproot spend. Five weeks later, on January 20, 2023, he released ord 0.4.0 and declared inscriptions ready for mainnet. Within months, inscriptions had become one of the most controversial uses of Bitcoin block space in years, and one of the largest sources of fee revenue miners had ever seen.
The protocol leans on two features its designers never intended for this: SegWit's witness-data discount (2017) and Tapscript's removal of the 10,000-byte script-size limit (2021), which together make large payloads cheap and valid. Whether that makes inscriptions clever or abusive was the loudest debate in Bitcoin culture in 2023. By October 2025 the same fight over data on chain had moved to Bitcoin Core's OP_RETURN relay policy. The chain itself is neutral. Let's look.
Two ideas in one
Ordinal theory has two distinct components:
- Sat numbering. Every satoshi (the smallest unit of bitcoin) gets a deterministic index based on the order in which it was mined. Sat 0 is the first satoshi of the genesis coinbase. Sat 5,000,000,000 is the first satoshi of block 1's coinbase. And so on. The numbering is implicit; bitcoind doesn't track it, but anyone tracing inputs and outputs can compute it.
- Inscriptions. Arbitrary data (text, images, JSON, etc.) embedded in the witness of a Taproot spend, attached to a specific sat by convention. The data lives on chain forever and is byte-identical across every node that has the block.
The two pieces compose: an inscription on sat N is, by ordinal-theory convention, "owned" by whoever currently controls the UTXO containing sat N. Trade the UTXO, you trade the inscription. NFTs, but built on a deterministic numbering scheme rather than a separate token contract.
The first inscription
Casey Rodarmor minted Inscription #0 on December 14, 2022, in block 767,430. The inscription is a small image of a skull, embedded in the witness of a P2TR script-path spend.
To see the inscription itself, fetch the block at verbose=2
and look for the transaction with a large witness containing the
OP_FALSE OP_IF "ord" ... envelope. The data inside is the
raw image bytes (around 800 bytes for inscription zero).
How it works mechanically
A Tapscript can contain a branch that is parsed but never executed. Inscriptions exploit this: the inscription content sits inside a never-executed script branch of a Taproot output, structured as:
<pubkey> OP_CHECKSIG // the part that actually runs
OP_FALSE
OP_IF
"ord" // the protocol identifier
OP_PUSH 0x01 // content-type tag (a one-byte data push, not OP_1)
"image/png" // content-type
OP_0
<raw payload bytes>
OP_ENDIF
Because OP_FALSE OP_IF ... OP_ENDIF never executes, the bytes
in the middle don't have to be valid script; they can be anything. And
because witness data gets a 4x discount in weight-unit accounting, large
inscriptions cost roughly 1/4 what the same bytes would cost as
non-witness data.
The fee revenue impact
Inscriptions filled blocks. By mid-2023, Bitcoin's mempool had hundreds of thousands of pending transactions, fee rates spiked dramatically, and miners earned more in fees than they had since January 2018. Some blocks had fee revenue exceeding their subsidy.
The totalfee reported is in satoshis. Compare to
subsidy (also in satoshis) for the fee-vs-subsidy ratio.
During peak inscription activity, this ratio crossed 1.0 multiple times,
a glimpse of what the post-subsidy economy might look like.
The debate
Inscriptions are controversial because:
- Pro: They generate fees, which secure the network long-term. They're a legitimate use of paid block space (you're paying for the bytes). They preserve interesting cultural artifacts on the most permanent ledger ever built.
- Con: They congest the mempool for users sending small peer-to-peer payments. They consume disk space at every node forever. They re-introduce the kind of speculative mania (cf. NFTs) that Bitcoin was supposed to be the antidote to. The witness-discount math encourages bloat that wasn't intended.
There's no resolution. Bitcoin's design accepts both views: anyone willing to pay can use the bytes. Filtering inscription transactions at the mempool layer (which some node operators do) is a per-node policy decision, not a consensus rule. The chain you're querying right now contains well over a hundred million inscriptions (128 million as of October 2026). They're not going anywhere.
What it means
Inscriptions are an empirical answer to a long-running question: can Bitcoin sustain itself on fees alone? For a year and a half, from early 2023 to mid-2024, the answer occasionally became "yes, today it can" (the April 2024 post-halving spike was Runes, not inscriptions). That's the most important data point Bitcoin has ever produced about its post-subsidy future.
Whether the inscriptions themselves are art, gambling instruments, or just permanent jpegs, for a stretch in 2023 and 2024 they paid miners in a way the protocol's authors didn't anticipate; by October 2026 fees were back under 1% of the subsidy. The chain rewards block space; inscriptions taught the market what block space is worth when somebody's willing to pay for it.
Sources
- How Ordinals Came to Be, Casey Rodarmor, September 5, 2024. His own timeline: first mainnet inscription on December 14, 2022, public launch announced January 20, 2023.
- Inscribing Mainnet, Casey Rodarmor, January 20, 2023. The ord 0.4.0 announcement declaring inscriptions ready for mainnet.
- Inscription 0, ordinals.com (ord explorer), December 14, 2022. The index record for inscription 0: block 767,430, image/png, 793 bytes.
- Ordinal Numbers (BIP draft), Casey Rodarmor, February 2, 2022. Every sat is serially numbered from 0 in the order it is mined and transfers first-in-first-out; never merged into bitcoin/bips.
- Ordinal Theory Handbook: Overview, ordinals/ord maintainers, undated page (added December 8, 2022). Ownership follows the UTXO holding the sat; the scheme needs no changes to Bitcoin.
- BIP 141: Segregated Witness, Eric Lombrozo, Johnson Lau, Pieter Wuille, December 21, 2015. Defines block weight, the rule behind the witness-data discount.
- BIP 342: Validation of Taproot Scripts, Pieter Wuille, Jonas Nick, Anthony Towns, January 19, 2020. Lifts the 10,000-byte script-size limit for Tapscript while keeping 520-byte pushes.
- Ordinal Theory Handbook: Inscriptions, ordinals/ord maintainers, December 16, 2022. The envelope spec: OP_FALSE OP_IF ... OP_ENDIF as a no-op branch, 520-byte pushes, witness discount.
- ord commit 03f68677: OP_PUSH instead of OP_1 in inscription docs, raphjaph (ordinals/ord), May 31, 2023. The content-type tag is a one-byte data push, not the OP_1 opcode.
- Ordinals Upend Bitcoin Mining, Pushing Transaction Fees Above Mining Reward for First Time in Years, Sage D. Young (CoinDesk), May 8, 2023. The May 2023 fee spike, attributed to Ordinals and BRC-20, with fees above subsidy for the first time since 2017.
- Binance Briefly Halted Bitcoin Withdrawals Amid Network Congestion, Samyuktha Sriram (Unchained), May 8, 2023. Around 488,000 unconfirmed transactions in the mempool during the BRC-20 surge.
- filter-ordinals.patch ("Ordisrespector"), Luke Dashjr, February 1, 2023. A relay-policy patch that rejects OP_FALSE OP_IF envelopes; the per-node filtering some operators run.
- Bitcoin Core 30.0 release notes, Bitcoin Core project, October 10, 2025. OP_RETURN relay policy uncapped by default, where the data-on-chain fight moved.
- ordinals.com index status, ordinals.com (ord explorer), October 5, 2026. 128,009,203 inscriptions indexed at height 970,097.
- mempool.space mining reward stats API (1,008 blocks), mempool.space, October 5, 2026. Blocks 969,090 to 970,097: 22.96 BTC in fees against 3,172.96 BTC of total block reward, a 0.72% fee share, behind the October 2026 fee figure.
Read more: The Halvings.