WikiLeaks' 2011 Bitcoin address, published over Satoshi's objection

WikiLeaks published donation address (2011)

2°

this address's ancestry traces 2 degrees to the earliest coins

After payment processors cut it off in December 2010, WikiLeaks waited six months and published a Bitcoin donation address on 14 June 2011 — despite Satoshi Nakamoto having argued against exactly that a week before he stopped posting. The address had no history at all before that day.

WikiLeaks dates the launch of Cablegate to 29 November 2010 and says the blockade "came into force within ten days". Its own account lists PayPal discontinuing service on 3 December, Visa and MasterCard stopping payments on 7 December, Bank of America on 18 December, and Western Union adding it to an "Interdiction List" on 21 December. WikiLeaks dates the blockade as a whole to 7 December 2010, says it destroyed 95% of its revenue, and says the organisation ran on cash reserves for eleven months. The same page records that on 13 January 2011 the US Treasury found no grounds to blacklist WikiLeaks. The money stayed blocked.

Bitcoin's creator did not want the association. On 5 December 2010, in a bitcointalk thread about contacting WikiLeaks, Satoshi Nakamoto wrote: "No, don't 'bring it on'." He argued the project needed to grow gradually, called Bitcoin "a small beta community in its infancy", said WikiLeaks would not stand to get more than pocket change, and warned that the resulting heat would likely destroy the project at that stage. Six days later, replying to a PC World article that had already linked the two, he wrote that WikiLeaks "has kicked the hornet's nest, and the swarm is headed towards us." That was 11 December 2010 at 23:39 UTC. It was not his final word: he posted once more the next day, a routine release note about DoS limits and the 0.3.19 build, and then stopped.

WikiLeaks published 1HB5XMLmzFVj8ALj6mfBsbifRoD4miY36v as a donation address on 14 June 2011. The chain shows no prior history whatsoever. The address's two oldest transactions — payments of 0.44 BTC and 0.05 BTC — both confirmed in block 130,863, mined at 23:23 UTC the same day.

The address has since appeared in 26,717 transactions, with cumulative receipts of about 4,043 BTC. Bitcoin Magazine reported it took delivery of its 4,000th bitcoin on 12 November 2016, across more than 25,000 incoming transactions over five years. That understates total giving, because WikiLeaks also let donors generate one-off addresses. Academic work reflects the same split: the UCSD team behind "A Fistful of Bitcoins" tagged the organisation by donating both to the public address and to two one-time addresses generated for them via WikiLeaks' IRC channel.

The address then acquired a second life it did not choose. In April 2013 an anonymous party pushed the 2.5 MB Cablegate archive into the blockchain across 130 transactions, running from block 230,010 on 6 April to block 230,136 on 7 April. Ken Shirriff, who catalogued the episode, found each of those transactions carried a 0.00000001 BTC payment to the donation address; both endpoint transactions confirm it. The published donation address is therefore wired into one of the earliest large data-embedding episodes on Bitcoin, connected in the transaction graph to material nobody at WikiLeaks chose to put there.

On 14 October 2017 a tweet from the Defend Assange Campaign account thanked the US government and Senators McCain and Lieberman for the blockade, saying it "caused us to invest in Bitcoin — with > 50000% return". Fortune reported it. The figure is Assange's own claim and has never been independently audited; a year earlier he had told Bitcoin Magazine the return was more than 8,000 percent over three years. WikiLeaks has since published a message at wikileaks.org/btc-proof.txt asking donors not to use the 2011 address, directing them to 36EEHh9ME3kU7AZ3rUxBCyKR5FhR3RbqVo instead.

Timeline

Details

The address had no history before the announcement

Its two oldest transactions — payments of 0.44 BTC and 0.05 BTC — both confirmed in block 130,863, mined 14 June 2011 at 23:23 UTC. Nothing preceded them.

Satoshi objected a week before he stopped posting

His 5 December 2010 appeal against WikiLeaks using Bitcoin and his 11 December 'hornet's nest' remark are near the end of the archive, but his final archived forum post is a 0.3.19 release note dated 12 December 2010.

The Cablegate archive was wired to the address

Ken Shirriff found the 2.5 MB archive was embedded across 130 transactions, blocks 230,010 to 230,136, each including a 0.00000001 BTC payment to 1HB5XMLmzFVj8ALj6mfBsbifRoD4miY36v.

Researchers deliberately transacted with it

The UCSD 'A Fistful of Bitcoins' team tagged WikiLeaks by donating to its public address and to two one-time addresses generated for them via the organisation's IRC channel.

WikiLeaks has since retired the address

A message published at wikileaks.org/btc-proof.txt asks donors not to use the 2011 address and points to 36EEHh9ME3kU7AZ3rUxBCyKR5FhR3RbqVo.

What is and is not established. Corrected from an earlier draft: the 11 December 'hornet's nest' post was NOT Satoshi's last public forum message. The Nakamoto Institute archive shows one later post, 12 December 2010 at 18:22 UTC, announcing the 0.3.19 build. Any page saying otherwise is wrong. The causal story is weaker than it is usually told. It is frequently claimed that WikiLeaks read Satoshi's post, agreed, and deliberately postponed its Bitcoin launch for that reason; no primary source establishing that was found, and the six-month gap is consistent with several explanations. The blockade dates, the 95%-of-revenue figure, the eleven-months-on-reserves claim and the Treasury finding are all WikiLeaks' own account, not independently audited. The >50,000% return was posted from the Defend Assange Campaign account and is an unverified claim attributed to Assange about WikiLeaks' overall position, not about this address; he gave a different figure (over 8,000% in three years) to Bitcoin Magazine in 2016. Cumulative donation totals differ between sources because WikiLeaks also issued per-donor addresses and because on-chain receipt totals include change returning to an address. Transaction counts and receipt totals cited here were read on 7 August 2026 and keep growing. Nothing here states or implies what any address holds now, and no claim is made that any specific coins moved from one party to another.

Address

1HB5XMLmzFVj8ALj6mfBsbifRoD4miY36v

Era

2011–present (published 14 June 2011)

Sources

Trace your own address →