UTxO vs
Account Model
Bitcoin pioneered UTxO. Ethereum chose accounts. Both work, but they make fundamentally different trade-offs.
Like Cash
Your “balance” is the sum of individual outputs you control. Each transaction destroys old outputs and creates new ones.
- ◆ Inherently parallel, no shared mutable state
- ◆ Deterministic, outcome known before submission
- ◆ Privacy-friendly. Outputs can use different addresses
- ◆ Transaction fees are predictable
- ◆ Used by: Bitcoin, Cardano, Ergo, Nervos
Like a Bank Account
Each address holds a running balance. Transactions directly modify the global state by updating sender and receiver balances.
- ◆ Intuitive, works like banking
- ◆ Simpler smart contract state management
- ◆ Shared mutable state, can cause contention
- ◆ Transactions can fail after submission
- ◆ Used by: Ethereum, Solana, Polkadot, Algorand
| Property | UTxO | Account |
|---|---|---|
| State model | Immutable outputs | Mutable balances |
| Parallelism | Native | Requires ordering |
| Determinism | Fully deterministic | Depends on global state |
| Failed transactions | Rejected pre-chain | Can fail on-chain |
| Privacy | New address per tx | Single address reuse |
| Contract patterns | State machines / CEM | Direct state mutation |
| Formal verification | Easier (local reasoning) | Harder (global effects) |
Same Transfer, Two Models
See how the same 20 ₳ transfer from Alice to Bob plays out in each paradigm.
Where the Model Hits Reality
The choice between accounts and outputs isn’t only architectural — it shapes how wallets can be drained.
The ‘approve’ Attack Surface
Wallet drainers exploit exactly this. Phishing convinces a user to sign ‘approve’ on a malicious contract; afterwards ‘transferFrom’ can empty the wallet at the attacker’s pace. Most users forget the permission is even active.
- ◆ Persistent allowances, no per-transaction signing
- ◆ Permissions accumulate quietly across dApps
- ◆ Revocation is the user’s problem
Nothing to Approve
Each UTxO is consumed once, in full. There is no ‘approve’ equivalent, because there are no balances to grant access to. Every spend is a fresh signature on an explicit transaction.
- ◆ No reusable permissions handed to contracts
- ◆ Every spend is locally and explicitly signed
- ◆ Validators authorize this spend, not future ones
Subscription vs. Cash
An ‘approve’ is the crypto version of a standing direct debit: convenient until you forget who can still pull from your account. eUTXO is closer to paying with cash — every transfer is an act, not a permission.
Three quick questions
Optional. Score 3/3 to earn mastery badges. Your first attempt counts for the Polymath badge.
