What are Bitcoin days destroyed and other Bitcoin security risks?

GlobalPublished 6 October 2026 · Written by BuyMeWhiskey Editorial Team · How we check facts

Bitcoin Days Destroyed, often called Coin Days Destroyed, weights spent Bitcoin by how long it had been held. It can highlight older coins moving, but it is a context metric rather than proof of an attack or a reliable standalone trading signal.

Next question: What are Bitcoin miners actually solving? →

Use age-weighted on-chain data alongside transaction and custody information; do not treat a single spike as a stand-alone trading or security conclusion.

See the Coin Days Destroyed definition

Run your own numbers: Compound interest and savings calculator.

What “days destroyed” is actually counting

Coin Days Destroyed, commonly abbreviated CDD, is an age-weighted measure of spent coins. When a quantity of Bitcoin moves after sitting untouched for a long period, the event contributes more CDD than the same quantity would contribute after a short holding period. Glassnode defines the calculation by multiplying the amount spent by the number of days since those coins were previously spent.

The word “destroyed” can sound alarming, but no Bitcoin is destroyed by this metric. The label means that the stored “coin days” attached to those outputs are reset when the coins are spent. The Bitcoin itself continues to exist, subject to the normal rules of the transaction and the recipient’s control of the resulting output.

What a spike might tell you

A sudden rise in CDD can indicate that older coins are being spent. Researchers may compare that movement with exchange flows, long-term holder behaviour, miner activity or other on-chain indicators. The useful question is not simply “did CDD rise?” but “what type of coins moved, where did they go, and what other evidence changed at the same time?”

Because the metric weights age and size together, one large movement of old coins can produce a much bigger reading than many small transfers made by recently active wallets. That makes CDD informative for studying dormancy, but it also means an aggregate chart can hide the identity and motive of the owner.

What secp256k1 has to do with Bitcoin

Bitcoin’s keys use elliptic-curve cryptography based on secp256k1. The curve is part of the system that lets a holder prove control of a private key without revealing that private key to the network. Bitcoin Core’s libsecp256k1 library provides high-performance operations for key generation and signatures on that curve.

The curve is not the same thing as proof of work. Secp256k1 protects ownership and transaction authorisation, whereas mining uses hashing to create the proof that consumes computational effort. Confusing those roles makes it harder to understand which attack belongs to which layer.

What a majority-hash attack can and cannot do

A majority-hash attack is usually described as a 51% attack, although the exact threshold is a probability and game-theory issue rather than a switch that flips at one precise percentage. An attacker with a large majority of mining power can make it easier to build an alternative chain and can attempt to reorganise recent history or double-spend their own payments.

That does not give the attacker a magic button for stealing every coin. They still do not gain another user’s private key, cannot simply create valid signatures for someone else’s UTXOs, and do not get to ignore all consensus rules accepted by nodes. The attack is about rewriting ordering and confirmation history with sufficient proof of work.

Why Bitcoin cannot simply be “counterfeited” like cash

Bitcoin has no physical note that can be photocopied. A valid transaction spends outputs that exist under the rules of the network and provides the required cryptographic authorisation. A node rejects an invalid attempt to create or spend coins that do not satisfy those rules.

There are still frauds that feel like counterfeiting to the user, such as a fake wallet interface or a payment that the recipient assumes is final before confirmation. Those are different problems. The protocol’s validity rules are not the same thing as the honesty of every website, merchant or wallet application.

What a sufficiently powerful quantum computer could change

A large fault-tolerant quantum computer could create a serious cryptographic problem for systems that depend on elliptic-curve signatures, because Shor’s algorithm provides a way to attack the mathematical structure behind those signatures. That is a different threat from a conventional brute-force attack against the curve.

The practical question is scale and timing. A quantum computer capable of breaking widely used Bitcoin keys is not the same as a small experimental quantum processor. Any future protocol response would also have to address how users move funds from older key types to new cryptographic schemes. It is therefore better described as a long-term cryptographic transition problem than as a present-day way to reverse ordinary Bitcoin transactions.

The security issue most users control today

For an individual holder, private-key theft remains much more concrete than the theoretical quantum scenario. If someone obtains the private key or seed phrase, the blockchain sees the resulting signature as valid even if the owner was deceived. Strong wallet security therefore matters independently of what on-chain metrics are doing.

Use a wallet you understand, keep recovery material offline where appropriate, verify receiving addresses before signing and do not disclose seed phrases to support staff, investment “managers” or callers. An on-chain dashboard can tell you what happened on the public ledger; it cannot repair a compromised private key.

Worked example

Illustrative CDD example: imagine 5 BTC have remained untouched for 200 days before being spent. Using the simple age-weighting idea behind CDD:

Coin amount: 5 BTC
Dormancy: 200 days
Illustrative coin-days measure: 5 × 200 = 1,000 coin-days

Now suppose another transaction spends 5 BTC after only 20 days. Its equivalent contribution would be 5 × 20 = 100 coin-days. The first movement is therefore 10 times as large on this simplified age-weighted measure, even though the BTC amount is identical.

This does not tell you whether either holder sold, moved coins to a new wallet, reorganised custody or acted maliciously. The metric records age-weighted spending, not intent.

The age-weighted reading changes because the holding period changes, not because the protocol destroyed part of the balance. Analysts normally pair the metric with other information before assigning any market interpretation.

Does Bitcoin Days Destroyed mean Bitcoin was destroyed?#

No. “Destroyed” refers to the stored coin-days attached to an output being reset when the coins move. The Bitcoin itself remains part of the transaction system. CDD is an analytical metric for measuring age-weighted spending, so a large reading should not be interpreted as coins disappearing from the blockchain.

Is Coin Days Destroyed the same as Bitcoin Days Destroyed?#

They are commonly used for the same type of age-weighted on-chain measure. The calculation takes the amount of coins spent and the time since those coins last moved. Different data providers may use slightly different naming or aggregation conventions, so check the provider’s methodology before comparing charts.

Can a 51% attack steal Bitcoin from my wallet?#

A majority-hash attacker does not acquire your private key simply by controlling mining power. The main risk is manipulation of recent transaction history, including attempts to double-spend the attacker’s own coins. Ownership secured by valid signatures remains a different layer of the Bitcoin protocol.

Can Bitcoin be counterfeited?#

Not in the ordinary sense of copying a physical currency note. Nodes validate transactions against the protocol rules, including the availability of the outputs being spent and the required cryptographic authorisation. Scams can still imitate wallets, balances or payment confirmations, but those are separate from creating valid counterfeit BTC on the network.

What does secp256k1 do in Bitcoin?#

secp256k1 is the elliptic curve used for Bitcoin’s key and signature system. A private key is used to create a valid signature and the corresponding public information lets nodes verify it. This cryptographic layer helps prove that a transaction was authorised without revealing the private key itself.

Will quantum computers break Bitcoin?#

A sufficiently powerful fault-tolerant quantum computer could threaten the elliptic-curve cryptography used by Bitcoin, but that is different from saying current quantum computers can take coins today. The eventual response would likely involve moving funds to quantum-resistant cryptography before an attacker could exploit vulnerable key types.

Keep reading

Next question →What are Bitcoin miners actually solving?

Sources

Figures were checked against these sources before publication. If a rule changes, we update the page and show the new date.

General information, not personal financial advice. Rules depend on your circumstances; check the official source or speak to a regulated adviser before acting.