“Filecoin: A Decentralized Storage Network” was published in July 2017 by Protocol Labs, with primary authorship from Juan Benet (also creator of IPFS) and Nicola Greco. The paper describes a decentralized storage marketplace where clients pay miners to store data, and miners prove they are actually storing data through two novel cryptographic proofs: Proof of Replication (PoRep) and Proof of Spacetime (PoSt). These proofs transform storage capacity into a blockchain-compatible resource for consensus, analogous to what hash rate is for Bitcoin.

> PDF hosting: The whitepaper is available at filecoin.io/filecoin.pdf and mirrored at Protocol Labs’ GitHub. It is distributed under CC BY 4.0.

---

Publication and Context

IPFS (InterPlanetary File System), also from Protocol Labs, solved content-addressable data distribution but had no economic incentive layer: nodes could go offline without consequence, making it unsuitable for data persistence. Filecoin was designed to be IPFS’s incentive layer — a cryptocurrency that economically rewards nodes for actually storing data long-term.

The project conducted a $257 million token sale (SAFT/ICO) in August 2017 — at the time the largest legal token sale in history. The mainnet launched in October 2020, roughly three years after the whitepaper.

Key facts:

• Whitepaper: July 2017
• Token sale: August 2017 ($257M)
• Mainnet launch: October 31, 2020
• FIL total supply: 2 billion FIL (decreasing issuance)
• Founder: Juan Benet (also founded Protocol Labs in 2014 and authored IPFS)

---

The Core Problem: Proving Storage Without Trust

Cloud storage (Amazon S3, Google Cloud) proves storage through contractual SLAs enforced by law. Decentralized storage needs cryptographic proof: how can a storage provider prove to a verifier, with near-certainty, that they are actually storing a specific piece of data continuously?

The two subproblems:

1. Proof of Replication: How can a miner prove they stored a unique physical copy of the data (not just that they know the hash, which they could reconstruct from someone else’s copy on demand)?
2. Proof of Spacetime: How can a miner prove they stored data continuously over a period of time, not just at the moment of verification?

Filecoin’s two proofs address each of these.

---

Proof of Replication (PoRep)

PoRep proves that a miner has sealed (encoded) client data into a unique physical representation tied to the miner’s identity. The sealing process is designed to be:

• Slow to produce: Sealing requires sequential computation (a verifiable delay function), taking hours on current hardware. A miner cannot fake storage by computing the seal on-demand when challenged.
• Fast to verify: The verifier checks a short proof (a zk-SNARK) in milliseconds.
• Unique to the miner: The seal encodes the miner’s public key and the data, so a miner cannot share storage across clients.

In production, Filecoin uses Groth16 (a pairing-based zk-SNARK proving system) to produce compact proofs for the PoRep circuits.

---

Proof of Spacetime (PoSt)

PoSt extends PoRep over time: miners must periodically (every 24 hours in production) submit PoSt proofs proving they are still storing all their sealed sectors. Missing a PoSt causes:

• Fee burn: Small ongoing penalties
• Sector faulting: Larger penalty; miner cannot earn block rewards from faulted sectors
• Sector termination: If sustained, the miner’s collateral (FIL) is slashed

There are two variants:

• WindowPoSt: Checks all of a miner’s sectors in 24-hour windows; used for ongoing verification
• WinningPoSt: Used in block production — a miner is eligible to produce a block proportional to their locked storage (storage power)

---

The Storage and Retrieval Markets

Storage Market:

• Clients and miners negotiate deals off-chain; the deal parameters (price, duration, replication factor) are committed on-chain
• Miners must post FIL collateral before accepting storage deals
• After completing a deal, miners periodically submit PoSt to earn block rewards + deal fees

Retrieval Market:

• Separate from storage; miners who serve data retrievals earn FIL micropayments
• Retrieval payments use payment channels (streaming micropayments) rather than on-chain transactions
• In practice, many retrievals happen over IPFS (free) rather than the paid retrieval market

---

Filecoin’s Expected Consensus

Filecoin uses Expected Consensus (EC) for block production:

• Block producers are elected probabilistically based on their fraction of total network storage power
• Each epoch (30 seconds) produces a tipset — a set of valid blocks from the previous epoch — rather than a single block (multiple miners can produce blocks simultaneously)
• The heaviest tipset (by total weight) wins — analogous to the longest chain in Bitcoin

---

Sections of the Whitepaper

Section	Content
1. Introduction	The need for decentralized storage; IPFS as the foundation
2. The Filecoin Network	High-level network architecture; actors and roles
3. Proof of Storage	PoRep and PoSt constructions
4. The Filecoin Blockchain	Expected consensus; tipsets; state machine
5. Storage Market	Deal negotiation, commitment, verification
6. Retrieval Market	Micropayment channels; delivery proofs
7. FIL Token	Token economics; miner collateral; block rewards

---

Reality Check

Filecoin launched as the world’s largest decentralized storage network by capacity but faced significant challenges:

• Low utilization: Despite 10+ EiB of total storage capacity (more than any cloud provider), utilization in the first two years was under 10%. Most “storage” was miners sealing empty sectors for block rewards.
• Deal complexity: The sealing/PoRep pipeline required significant hardware investment; many miners optimized for block rewards rather than actual client storage.
• Retrieval market: Largely unused; IPFS provides free retrieval for most use cases.

By 2024–2025, more legitimate dataset vendors (including large scientific datasets from research institutions) began using Filecoin for archival storage.

---

Legacy

Filecoin’s PoRep construction became the academic foundation for subsequent proof-of-storage research. The Groth16 zk-SNARK circuits used in PoRep were among the first large-scale ZK proof deployments in production. Protocol Labs’ research on SNARKs, data structures, and peer-to-peer networking (including contributions to libp2p) influenced Ethereum, Polkadot, and many other chains.

---

Related Terms

• Filecoin
• IPFS Whitepaper
• Arweave Whitepaper
• Storj Whitepaper
• Groth16 Whitepaper

---

Research

• Protocol Labs. (2017). Filecoin: A Decentralized Storage Network. Protocol Labs.

— Primary source. Sections 3–4 (PoRep/PoSt constructions) are the novel technical contribution.

• Benet, J. (2014). IPFS — Content Addressed, Versioned, P2P File System. arXiv:1407.3561.

— The IPFS paper; Filecoin is its economic layer.

• Fisch, B. (2019). Tight Proofs of Space and Replication. EUROCRYPT 2019.

— Follow-up academic work tightening the security proofs for PoRep constructions.