Skip to content
Degrees of SatoshiFollow the connections.

Degrees of SatoshiWallet libraryAddress dossier

Bitcoin mainnet · Bitcoin culture · 2011–present (published 14 June 2011)

On-chain record · high source confidence

WikiLeaks' 2011 Bitcoin address, published over Satoshi's objection

WikiLeaks published donation address (2011)

After payment processors cut it off in December 2010, WikiLeaks waited six months and published a Bitcoin donation address on 14 June 2011 — despite Satoshi Nakamoto having argued against exactly that a week before he stopped posting. The address had no history at all before that day.

Research author: · Group author: · Published 2026-08-06 · Internal review: · Corrections

Bitcoin ancestry star map for WikiLeaks published dona… (2011), 2 degrees from the first bitcoin 1°2°SATOSHITHE BITCOIN FAUCET…2010WIKILEAKS PUBLISHED DON…1HB5XM…Y36v2° FROM THE FIRST BITCOIN
2 hops from the working origin.
1 of 3 documented addresses
1HB5XMLmzFVj8ALj6mfBsbifRoD4miY36v

WikiLeaks' publicly advertised donation address, announced June 2011

Era
2011–present (published 14 June 2011)
Script
P2PKH
First seen
June 2011
Connected
February 2012
Evidence
15 sources
First seen
June 2011
Connected
February 2012
Route display ID
2°-5AEF-7850Display identifier only — not proof of ownership.
2 additional population comparisons
Same-era contextCloser than 99.4% of scored addresses first seen in 2011
Connection contextConnected earlier than 14.7% of scored 2° addresses

The story

The record

WikiLeaks dates the launch of Cablegate to 29 November 2010 and says the blockade "came into force within ten days". Its own account lists PayPal discontinuing service on 3 December, Visa and MasterCard stopping payments on 7 December, Bank of America on 18 December, and Western Union adding it to an "Interdiction List" on 21 December. WikiLeaks dates the blockade as a whole to 7 December 2010, says it destroyed 95% of its revenue, and says the organisation ran on cash reserves for eleven months. The same page records that on 13 January 2011 the US Treasury found no grounds to blacklist WikiLeaks. The money stayed blocked.

Bitcoin's creator did not want the association. On 5 December 2010, in a bitcointalk thread about contacting WikiLeaks, Satoshi Nakamoto wrote: "No, don't 'bring it on'." He argued the project needed to grow gradually, called Bitcoin "a small beta community in its infancy", said WikiLeaks would not stand to get more than pocket change, and warned that the resulting heat would likely destroy the project at that stage. Six days later, replying to a PC World article that had already linked the two, he wrote that WikiLeaks "has kicked the hornet's nest, and the swarm is headed towards us." That was 11 December 2010 at 23:39 UTC. It was not his final word: he posted once more the next day, a routine release note about DoS limits and the 0.3.19 build, and then stopped.

WikiLeaks published 1HB5XMLmzFVj8ALj6mfBsbifRoD4miY36v as a donation address on 14 June 2011. The chain shows no prior history whatsoever. The address's two oldest transactions — payments of 0.44 BTC and 0.05 BTC — both confirmed in block 130,863, mined at 23:23 UTC the same day.

The address has since appeared in 26,717 transactions, with cumulative receipts of about 4,043 BTC. Bitcoin Magazine reported it took delivery of its 4,000th bitcoin on 12 November 2016, across more than 25,000 incoming transactions over five years. That understates total giving, because WikiLeaks also let donors generate one-off addresses. Academic work reflects the same split: the UCSD team behind "A Fistful of Bitcoins" tagged the organisation by donating both to the public address and to two one-time addresses generated for them via WikiLeaks' IRC channel.

The address then acquired a second life it did not choose. In April 2013 an anonymous party pushed the 2.5 MB Cablegate archive into the blockchain across 130 transactions, running from block 230,010 on 6 April to block 230,136 on 7 April. Ken Shirriff, who catalogued the episode, found each of those transactions carried a 0.00000001 BTC payment to the donation address; both endpoint transactions confirm it. The published donation address is therefore wired into one of the earliest large data-embedding episodes on Bitcoin, connected in the transaction graph to material nobody at WikiLeaks chose to put there.

On 14 October 2017 a tweet from the Defend Assange Campaign account thanked the US government and Senators McCain and Lieberman for the blockade, saying it "caused us to invest in Bitcoin — with > 50000% return". Fortune reported it. The figure is Assange's own claim and has never been independently audited; a year earlier he had told Bitcoin Magazine the return was more than 8,000 percent over three years. WikiLeaks has since published a message at wikileaks.org/btc-proof.txt asking donors not to use the 2011 address, directing them to 36EEHh9ME3kU7AZ3rUxBCyKR5FhR3RbqVo instead.

Chronology

Timeline

  1. WikiLeaks begins publishing the US diplomatic cables (Cablegate). Source ↗ §

  2. Satoshi Nakamoto argues against WikiLeaks using Bitcoin, calling it a small beta community in its infancy. Source ↗ §

  3. The date WikiLeaks gives for the imposition of the banking blockade by Bank of America, Visa, MasterCard, PayPal and Western Union. Source ↗ §

  4. Satoshi's 'hornet's nest' reply to a PC World article, 23:39 UTC. Source ↗ §

  5. Satoshi's last archived forum post: a 0.3.19 release note on DoS limits, 18:22 UTC. Source ↗ §

  6. By WikiLeaks' account, the US Treasury finds no grounds to blacklist the organisation; the blockade continues. Source ↗ §

  7. WikiLeaks publishes its Bitcoin donation address; the first two payments (0.44 and 0.05 BTC) confirm in block 130,863. Source ↗ §

  8. Cablegate archive embedding begins in block 230,010; each of the 130 chunk transactions carries a one-satoshi payment to the donation address. Source ↗ §

  9. Bitcoin Magazine reports the public address has received its 4,000th bitcoin. Source ↗ §

  10. A tweet from the Defend Assange Campaign account thanks the US government for the blockade, claiming a return above 50,000%. Source ↗ §

Evidence notes

Case notes

The address had no history before the announcement §
Its two oldest transactions — payments of 0.44 BTC and 0.05 BTC — both confirmed in block 130,863, mined 14 June 2011 at 23:23 UTC. Nothing preceded them. Source ↗
Satoshi objected a week before he stopped posting §
His 5 December 2010 appeal against WikiLeaks using Bitcoin and his 11 December 'hornet's nest' remark are near the end of the archive, but his final archived forum post is a 0.3.19 release note dated 12 December 2010. Source ↗
The Cablegate archive was wired to the address §
Ken Shirriff found the 2.5 MB archive was embedded across 130 transactions, blocks 230,010 to 230,136, each including a 0.00000001 BTC payment to 1HB5XMLmzFVj8ALj6mfBsbifRoD4miY36v. Source ↗
Researchers deliberately transacted with it §
The UCSD 'A Fistful of Bitcoins' team tagged WikiLeaks by donating to its public address and to two one-time addresses generated for them via the organisation's IRC channel. Source ↗
WikiLeaks has since retired the address §
A message published at wikileaks.org/btc-proof.txt asks donors not to use the 2011 address and points to 36EEHh9ME3kU7AZ3rUxBCyKR5FhR3RbqVo. Source ↗

Evidence boundary

What is — and is not — established

Corrected from an earlier draft: the 11 December 'hornet's nest' post was NOT Satoshi's last public forum message. The Nakamoto Institute archive shows one later post, 12 December 2010 at 18:22 UTC, announcing the 0.3.19 build. Any page saying otherwise is wrong.

The causal story is weaker than it is usually told. It is frequently claimed that WikiLeaks read Satoshi's post, agreed, and deliberately postponed its Bitcoin launch for that reason; no primary source establishing that was found, and the six-month gap is consistent with several explanations. The blockade dates, the 95%-of-revenue figure, the eleven-months-on-reserves claim and the Treasury finding are all WikiLeaks' own account, not independently audited. The >50,000% return was posted from the Defend Assange Campaign account and is an unverified claim attributed to Assange about WikiLeaks' overall position, not about this address; he gave a different figure (over 8,000% in three years) to Bitcoin Magazine in 2016. Cumulative donation totals differ between sources because WikiLeaks also issued per-donor addresses and because on-chain receipt totals include change returning to an address. Transaction counts and receipt totals cited here were read on 7 August 2026 and keep growing. Nothing here states or implies what any address holds now, and no claim is made that any specific coins moved from one party to another.

The dossier

Evidence record

Address record

Role
WikiLeaks' publicly advertised donation address, announced June 2011
Script
P2PKH
Category
Bitcoin culture
Source confidence
high
Catalog reviewed
2026-08-06
View all 3 documented addresses
  1. 011HB5XMLmzFVj8ALj6mfBsbifRoD4miY36vP2PKH · representative
  2. 021HB5XMLmzFVj8ALj6mfBsbifRoD4miY36vP2PKH
  3. 031HB5XMLmzFVj8ALj6mfBsbifRoD4miY36vP2PKH

Source ledger

15 cited
  1. wikileaks.org/Banking-Blockade.html
  2. satoshi.nakamotoinstitute.org/…/523
  3. satoshi.nakamotoinstitute.org/…/542
  4. satoshi.nakamotoinstitute.org/…/543
  5. satoshi.nakamotoinstitute.org/…/bitcointalk
  6. x.com/…/80774521350668288
  7. bitcoinmagazine.com/…/wikileaks-…629241
  8. fortune.com/…/bitcoin-pr…ileaks
  9. righto.com/…/ascii-bern…s.html
  10. cseweb.ucsd.edu/…/imc13.pdf
  11. blockchain.info/…/1HB5XMLmzF…miY36v
  12. mempool.space/…/1HB5XMLmzF…miY36v
  13. wikileaks.org/btc-proof.txt
  14. thedailybeast.com/where-did-…une-go
  15. news.bitcoin.com/bitcoin-hi…s-nest
Trace another address