LibraryConsensus2020Historical documentCorpus record
The Diem Blockchain
Diem. Diem Association engineering group.
The technical paper for the Libra, later Diem, payment chain: a permissioned BFT ledger, a Move language for resources, and a reserve-backed currency proposal. The project was wound down in 2022. The paper still matters because Move, and the account model Aptos and Sui started from, was specified here.
The Diem Association wound the project down in 2022. This page is a reading of the paper, not a claim that the network operates.
The Diem paper specifies a permissioned Byzantine chain for a payment system, with a stated validator set, a Move-based language, and upgrades and compliance hooks designed in rather than denied.
The five-minute read
The set is known because it is supposed to be known
Validators are members. Membership changes by governance. This is not a failed attempt at a public chain. It is a different goal: identifiable operators for a payment network.
Payments are the workload
The paper optimises for a currency-like flow among wallets and custodians, not for an open arena of arbitrary contracts. Later public chains that reused the technology changed the workload.
Move appears here as the safe asset language
The resource model is specified so a coin cannot be duplicated by a buggy module. That contribution outlived the network.
Compliance is a feature in the text
Travel-rule style controls, freezing, and upgrade roles are discussed as part of the system. A reader looking for a censorship-resistant cash system is in the wrong paper.
The project stopped
Diem did not become the global payment network the association described. The paper remains a design. It is not evidence that the design was forbidden, nor that it works at retail scale.
One action, walked through
- A governed set of validators is configured, with voting power and stated identities.
- A client submits a payment transaction authenticated by an account key.
- Validators order it with a Byzantine protocol derived from the HotStuff line and execute the Move module that defines the currency.
- A quorum signature on the ledger state lets a client accept the payment without asking one operator.
- A governance action can upgrade a module or change membership. That action is a transaction with its own authority, not an invisible edit.
The argument, unpacked
Permissioned is a security model
Safety is 'two thirds of these named parties are honest', not 'an anonymous majority of hash power'. Removing a validator is possible because you know who they are. That is the point. It is also why the governance of the list is the real root of trust.
Programmable does not mean open
Move modules can define assets and rules. Who may publish a module is a policy. The paper should not be summarised as 'Facebook made Ethereum'. The publication policy is the opposite of an unpermissioned deployment.
Failure of the institution is not a bug in the BFT proof
The association's end tells you about regulators, members and distribution. It does not, by itself, refute HotStuff-style finality. Keep the two judgements in separate sentences.
What has to be true
- The validator list is the one users think it is. A quiet change to the list is a quiet change to the trust model.
- More than two thirds of voting power follows the protocol and stays online.
- Currency modules do not grant a hidden admin a right the user did not notice.
- Clients actually verify quorum signatures rather than trusting a single endpoint.
What happened after the paper
The Diem association wound the project down. Move, the BFT lineage and several engineers continued into Aptos, Sui and other efforts. Those networks are not Diem. The 2020 paper is the permissioned payment design, including its compliance posture.
What to check before you use the idea
- Who can change the validator set, and how is that change published?
- Can an asset be frozen, and which module states that?
- Do clients check a quorum certificate or a company's API?
- Is this paper being cited for a public chain that no longer has a permissioned set?
Terms
- Permissioned validators
- A known set of operators whose identities and voting power are part of the protocol configuration.
- Move module
- The code that defines an asset and the operations on it, subject to the language's resource rules.
- Quorum certificate
- A set of validator signatures large enough to establish a ledger state under the BFT assumption.
- Governance action
- A privileged transaction that upgrades code or membership, itself supposed to be visible on the ledger.
The problem the paper names
A global payment system that puts every transfer on an anonymous proof-of-work chain inherits that chain's fee market, finality profile and open membership. Diem's paper proposes the opposite defaults: identified validators, a BFT commit, and a programming model where a coin cannot be copied.
What the design proposes
- Validators are members. Safety is a BFT assumption about that set.
- Move treats assets as resources. The type system is supposed to stop a module from duplicating them.
- The currency section describes a basket reserve. That is a legal and custody design, not a consensus theorem.
How the mechanism is specified
- The consensus chapter specifies a HotStuff-style commit pipeline among the members.
- Transactions are scripts that call published modules. The paper separates the language from the ledger.
- On-chain accounts, gas and events are specified as part of one system.
What this page does not treat as proven
- The association wound the project down in 2022. There is no Diem network to 'use' on the back of this paper.
- A reserve and a validator set are institutions. The paper does not create the licences they would have needed.
- Aptos and Sui are not Diem with a new logo. Read their papers for what they changed, including open membership.
Why a venture studio still reads it
Still the right primary source when a venture says 'Move-based' or 'reserve-backed settlement' and cannot name the document those phrases come from. Read it as a design that did not ship, which is information, not a reason to ignore the specification.
This is Blockchain Lab's reading of a public design paper. It is not the paper, not a copy of it, and not an offer of tokens, equity, custody or a partnership. Later network behaviour can diverge from the text. Nothing here is investment, legal or technical advice.
Research status: Historical document. Last reviewed: 1 October 2026. This is a reading of a public paper, not investment, legal or security advice.
