Skip to content

LibraryConsensus2020Historical documentCorpus record

The Diem Blockchain

Diem. Diem Association engineering group.

The technical paper for the Libra, later Diem, payment chain: a permissioned BFT ledger, a Move language for resources, and a reserve-backed currency proposal. The project was wound down in 2022. The paper still matters because Move, and the account model Aptos and Sui started from, was specified here.

The Diem Association wound the project down in 2022. This page is a reading of the paper, not a claim that the network operates.

The Diem paper specifies a permissioned Byzantine chain for a payment system, with a stated validator set, a Move-based language, and upgrades and compliance hooks designed in rather than denied.
Evidence
Primary paper
Re-measured
No
Assumptions
4
Records linked
15

Code

Source, repository, and what is actually hosted

  • Diem technical paperhttps://developers.diem.com/docs/technical-papers/the-diem-blockchain-paper/
  • The source URL is not a GitHub repository. No code remote is invented.
  • Full text is not mirrored. Public availability is not a licence to copy the file onto this site.
  • Add to a reading list

01 Claim ledger

What the paper is allowed to say

Each row is a sentence already in the study. The status is the same on every row: a model claim, not a live measurement.

  1. Claim 01 · Paper model

    The set is known because it is supposed to be known

    Validators are members. Membership changes by governance. This is not a failed attempt at a public chain. It is a different goal: identifiable operators for a payment network.

  2. Claim 02 · Paper model

    Payments are the workload

    The paper optimises for a currency-like flow among wallets and custodians, not for an open arena of arbitrary contracts. Later public chains that reused the technology changed the workload.

  3. Claim 03 · Paper model

    Move appears here as the safe asset language

    The resource model is specified so a coin cannot be duplicated by a buggy module. That contribution outlived the network.

  4. Claim 04 · Paper model

    Compliance is a feature in the text

    Travel-rule style controls, freezing, and upgrade roles are discussed as part of the system. A reader looking for a censorship-resistant cash system is in the wrong paper.

  5. Claim 05 · Paper model

    The project stopped

    Diem did not become the global payment network the association described. The paper remains a design. It is not evidence that the design was forbidden, nor that it works at retail scale.

02 Three cuts

Observation, model, falsifier

A desk does not stop at the summary. Each claim is cut three ways, using only this study's own assumptions and checks. Nothing here is a new figure.

  1. 01 The set is known because it is supposed to be known

    Observation

    What the study says

    Validators are members. Membership changes by governance. This is not a failed attempt at a public chain. It is a different goal: identifiable operators for a payment network.

    Model

    What has to hold

    The validator list is the one users think it is. A quiet change to the list is a quiet change to the trust model.

    Falsifier

    What would retire it

    Is this paper being cited for a public chain that no longer has a permissioned set?

  2. 02 Payments are the workload

    Observation

    What the study says

    The paper optimises for a currency-like flow among wallets and custodians, not for an open arena of arbitrary contracts. Later public chains that reused the technology changed the workload.

    Model

    What has to hold

    Currency modules do not grant a hidden admin a right the user did not notice.

    Falsifier

    What would retire it

    Is this paper being cited for a public chain that no longer has a permissioned set?

  3. 03 Move appears here as the safe asset language

    Observation

    What the study says

    The resource model is specified so a coin cannot be duplicated by a buggy module. That contribution outlived the network.

    Model

    What has to hold

    The validator list is the one users think it is. A quiet change to the list is a quiet change to the trust model.

    Falsifier

    What would retire it

    Can an asset be frozen, and which module states that?

  4. 04 Compliance is a feature in the text

    Observation

    What the study says

    Travel-rule style controls, freezing, and upgrade roles are discussed as part of the system. A reader looking for a censorship-resistant cash system is in the wrong paper.

    Model

    What has to hold

    Clients actually verify quorum signatures rather than trusting a single endpoint.

    Falsifier

    What would retire it

    Is this paper being cited for a public chain that no longer has a permissioned set?

  5. 05 The project stopped

    Observation

    What the study says

    Diem did not become the global payment network the association described. The paper remains a design. It is not evidence that the design was forbidden, nor that it works at retail scale.

    Model

    What has to hold

    The validator list is the one users think it is. A quiet change to the list is a quiet change to the trust model.

    Falsifier

    What would retire it

    Is this paper being cited for a public chain that no longer has a permissioned set?

03 Sequence

One action, as an operating tape

  1. 01A governed set of validators is configured, with voting power and stated identities.
  2. 02A client submits a payment transaction authenticated by an account key.
  3. 03Validators order it with a Byzantine protocol derived from the HotStuff line and execute the Move module that defines the currency.
  4. 04A quorum signature on the ledger state lets a client accept the payment without asking one operator.
  5. 05A governance action can upgrade a module or change membership. That action is a transaction with its own authority, not an invisible edit.

04 Load-bearing

The argument, and where a pitch drops it

  1. Permissioned is a security model

    The cut

    Safety is 'two thirds of these named parties are honest', not 'an anonymous majority of hash power'. Removing a validator is possible because you know who they are. That is the point. It is also why the governance of the list is the real root of trust.

    Why it carries weight

    If this cut is skipped, the paper's name is being used without the mechanism that makes the name mean anything.

    Where it is dropped

    A reserve and a validator set are institutions. The paper does not create the licences they would have needed.

  2. Programmable does not mean open

    The cut

    Move modules can define assets and rules. Who may publish a module is a policy. The paper should not be summarised as 'Facebook made Ethereum'. The publication policy is the opposite of an unpermissioned deployment.

    Why it carries weight

    If this cut is skipped, the paper's name is being used without the mechanism that makes the name mean anything.

    Where it is dropped

    The association wound the project down in 2022. There is no Diem network to 'use' on the back of this paper.

  3. Failure of the institution is not a bug in the BFT proof

    The cut

    The association's end tells you about regulators, members and distribution. It does not, by itself, refute HotStuff-style finality. Keep the two judgements in separate sentences.

    Why it carries weight

    If this cut is skipped, the paper's name is being used without the mechanism that makes the name mean anything.

    Where it is dropped

    The association wound the project down in 2022. There is no Diem network to 'use' on the back of this paper.

05 Register

What has to be true

  • Model · Not re-measured

    The validator list is the one users think it is. A quiet change to the list is a quiet change to the trust model.

  • Network · Not re-measured

    More than two thirds of voting power follows the protocol and stays online.

  • Model · Not re-measured

    Currency modules do not grant a hidden admin a right the user did not notice.

  • Stake and threshold · Not re-measured

    Clients actually verify quorum signatures rather than trusting a single endpoint.

06 Divergence

What happened after the paper

The Diem association wound the project down. Move, the BFT lineage and several engineers continued into Aptos, Sui and other efforts. Those networks are not Diem. The 2020 paper is the permissioned payment design, including its compliance posture.

A later client, parameter set, or reward formula is a different object. Cite this paper for the mechanism. Cite a primary release for the network. This desk has not re-run the proof.

07 Pre-mortem

What to check before you use the idea

  1. 0 of 4 marked on this browser. A mark is a reading note, not a pass, a rating, or a recommendation.

08 Anatomy

The paper, in the order a builder needs

The problem it names

A global payment system that puts every transfer on an anonymous proof-of-work chain inherits that chain's fee market, finality profile and open membership. Diem's paper proposes the opposite defaults: identified validators, a BFT commit, and a programming model where a coin cannot be copied.

What the design proposes

  • Validators are members. Safety is a BFT assumption about that set.
  • Move treats assets as resources. The type system is supposed to stop a module from duplicating them.
  • The currency section describes a basket reserve. That is a legal and custody design, not a consensus theorem.

How the mechanism is specified

  • The consensus chapter specifies a HotStuff-style commit pipeline among the members.
  • Transactions are scripts that call published modules. The paper separates the language from the ledger.
  • On-chain accounts, gas and events are specified as part of one system.

What this page does not treat as proven

  • The association wound the project down in 2022. There is no Diem network to 'use' on the back of this paper.
  • A reserve and a validator set are institutions. The paper does not create the licences they would have needed.
  • Aptos and Sui are not Diem with a new logo. Read their papers for what they changed, including open membership.

Why the desk still reads it

Still the right primary source when a venture says 'Move-based' or 'reserve-backed settlement' and cannot name the document those phrases come from. Read it as a design that did not ship, which is information, not a reason to ignore the specification.

09 Lexicon

Terms, opened into the record

Permissioned validators
A known set of operators whose identities and voting power are part of the protocol configuration.
Move module
The code that defines an asset and the operations on it, subject to the language's resource rules.
Quorum certificate
A set of validator signatures large enough to establish a ledger state under the BFT assumption.
Governance action
A privileged transaction that upgrades code or membership, itself supposed to be visible on the ledger.

10 Repository

Every linked record on this page

Underlined words open a page that already exists: a concept, a protocol profile, a failure record, or another paper. If a word is not underlined, this desk does not have a record for it.

This is Blockchain Lab's reading of a public design paper. It is not the paper, not a copy of it, and not an offer of tokens, equity, custody or a partnership. Later network behaviour can diverge from the text. Nothing here is investment, legal or technical advice.

Research status: Historical document. Last reviewed: 1 October 2026. This is a reading of a public paper, not investment, legal or security advice.