Accidental Spending of Inscribed Satoshis as Transaction Fees

Accidental spending of inscribed satoshis as transaction fees is the dominant loss vector for Ordinals and Runes assets. The root cause is a fundamental mismatch between Bitcoin's UTXO model and the off-chain indexing logic that assigns ownership of these assets. Bitcoin Core and most wallet software treat all satoshis as fungible, selecting UTXOs for fees based on heuristics like coin age, value, and confirmation count. Without explicit UTXO control features, a wallet can silently select an inscribed satoshi—or a UTXO carrying Runes tokens—as part of a fee payment, broadcasting a transaction that permanently burns the asset. The miner receives the satoshi as revenue, but the inscription data in the witness is not preserved in the coinbase transaction, making recovery impossible.

The operational impact falls disproportionately on users who hold both inscribed satoshis and fungible Bitcoin in the same wallet. Standard wallet hygiene practices—such as dust consolidation, automatic coin selection, or 'send max' functions—become destructive operations. Several high-profile losses have been traced to wallets that displayed a correct Bitcoin balance but provided no visual indicator that specific UTXOs carried non-fungible assets. The problem extends to Runes, where a UTXO containing a token balance can be swept into a fee payment, destroying the tokens. Custody providers face a compounded risk: a single automated consolidation routine can destroy dozens of assets in one transaction. The fix requires ordinal-aware coin selection algorithms that lock or exclude tagged UTXOs from automatic spending, a feature now implemented in purpose-built wallets but still absent from many general-purpose Bitcoin wallets and exchange infrastructure.

For wallet developers, exchange operators, and custody providers, the remediation path is clear but non-trivial. UTXO management systems must be upgraded to recognize and protect inscribed satoshis and Runes-bearing outputs. This requires integration with an indexer to tag UTXOs, modification of coin selection logic to exclude protected outputs from automatic fee selection, and user interface changes to surface asset-bearing UTXOs distinctly from fungible Bitcoin. Teams that have not conducted a UTXO management review should assume their current coin selection logic is destructive to Ordinals and Runes assets. Chainscore Labs provides protocol-level review of UTXO management implementations, coin selection algorithms, and custody workflows to identify and remediate accidental spending risks before they result in irreversible asset loss.

The accidental spending of inscribed satoshis as transaction fees is not a single bug but a systemic failure mode arising from a design mismatch. Bitcoin Core's wallet and coin selection algorithms treat all satoshis within a UTXO as perfectly fungible. The protocol selects inputs to minimize fees and maximize privacy without any native concept of a 'colored' or 'inscribed' satoshi. The Ordinals protocol, operating as an off-chain indexing layer, assigns non-fungible value to specific satoshis based on their ordinal number. When a standard Bitcoin wallet builds a transaction, it has no mechanism to recognize this off-chain value and will freely select an inscribed UTXO as a fee input, permanently burning the digital artifact.

This vulnerability is exacerbated by the operational reality that most wallets default to aggressive UTXO consolidation and change management. A user holding an inscribed satoshi in a wallet that also contains other bitcoin will find that any outgoing transaction—even one unrelated to the Ordinals ecosystem—can trigger the selection of the inscribed UTXO. The risk is not limited to novice users; it is a latent threat in any custody architecture that does not implement ordinal-aware UTXO locking, tagging, or exclusion logic. The problem extends to Runes, where a UTXO holding a token balance is equally fungible from the perspective of the base-layer Bitcoin protocol and can be inadvertently destroyed by a standard sendmany RPC call.

For wallet developers, exchange operators, and custody providers, the operational requirement is clear: coin selection algorithms must be augmented with an awareness layer that queries an Ordinals indexer before constructing a transaction. This requires implementing UTXO freezing, a segregated vault architecture for inscribed assets, or a pre-spend check that warns or blocks transactions consuming non-fungible satoshis. Chainscore Labs can conduct a protocol impact assessment and integration review for teams building or operating Bitcoin wallets, ensuring that their coin selection logic and PSBT construction pipelines are hardened against this class of accidental asset destruction.