Unspent Transaction Output (UTXO)

Intermediate

Key Takeaways

A UTXO (unspent transaction output) is a discrete unit of cryptocurrency that has been received but not yet spent. It represents the "coins" a wallet holds, rather than a single running balance.
Every Bitcoin transaction consumes existing UTXOs as inputs and creates new UTXOs as outputs. Any leftover amount is returned to the sender as a "change" output.
Unlike Ethereum's account-based model, the UTXO model does not maintain a global account balance. Ownership is tracked by the chain of unspent outputs, which makes parallel transaction validation more efficient.
UTXOs prevent double spending at the protocol level: once a UTXO is consumed as an input in a transaction, it is permanently marked as spent and cannot be reused.

What Is a UTXO?

An unspent transaction output (UTXO) refers to a transaction output that can be used as an input in a new transaction. UTXOs define where each blockchain transaction starts and finishes. The UTXO model is a fundamental element of Bitcoin and many other cryptocurrencies.

In other words, cryptocurrency transactions are made of inputs and outputs. When a transaction is made, a user takes one or more UTXOs to serve as inputs. The user provides their digital signature to confirm ownership of the inputs, which produce outputs. The UTXOs consumed are now considered "spent" and can no longer be reused. The outputs from the transaction become new UTXOs that can be spent in a future transaction.

How UTXOs Work

Each UTXO is associated with a public address and can only be spent by the holder of the corresponding digital signature. When a transaction is broadcast to the network, nodes verify that:

The referenced input UTXOs exist and are unspent.
The total value of inputs equals or exceeds the total value of outputs (any difference goes to miners as a fee).
The sender's digital signature is valid for each input UTXO.

If all conditions are met, the input UTXOs are marked as spent and the new output UTXOs are added to the UTXO set, the global database of all spendable outputs.

Example: Alice Pays Bob

Alice has 0.45 BTC in her wallet. This is not a fraction of a single coin but a collection of UTXOs: specifically, one UTXO worth 0.4 BTC and one worth 0.05 BTC, both outputs from past transactions.

Alice needs to send Bob 0.3 BTC. Her only option is to consume the 0.4 BTC UTXO as an input, send 0.3 BTC to Bob as one output, and return 0.1 BTC to herself as a "change" output. In practice, Alice would receive slightly less than 0.1 BTC after mining fees, but the principle is the same.

The 0.4 BTC UTXO is now permanently spent. Two new UTXOs have been created: one for 0.3 BTC (Bob's) and one for the change returned to Alice.

If Alice instead needed to send 0.42 BTC, she could combine both her UTXOs (0.4 + 0.05 = 0.45 BTC) to cover the amount, with 0.03 BTC returned to herself as change.

UTXOs cannot be spent partially. Instead, they are consumed in full, and new outputs are created from the remainder. This is analogous to paying with a banknote: you hand over the whole note and receive change back.

UTXO vs. Account Model

The UTXO model contrasts with the account-based model used by Ethereum. The key differences are:

Balance representation: UTXO chains track individual unspent outputs; account chains maintain a running balance per address (e.g., "Alice: 4.2 ETH").
State management: UTXOs are stateless and independent of each other; the account model uses a shared global state that must be updated sequentially.
Parallel validation: because UTXOs are independent, multiple transactions spending different UTXOs can be validated in parallel. Account-based transactions affecting the same address must be processed in order.
Privacy: the UTXO model allows wallets to generate a fresh address for every transaction, making it harder to link transaction history to a single identity.
Smart contracts: the account model is better suited to complex smart contract logic (as used in Ethereum's DeFi ecosystem). Standard UTXO chains are more limited in programmability, though extended UTXO variants (such as Cardano's eUTXO) address this.

Advantages of the UTXO Model

Double-spend prevention: each UTXO can only be consumed once. This is enforced at the protocol level and is one of the primary mechanisms by which Bitcoin prevents double spending.
Privacy: wallets can use a new address for each incoming transaction, breaking the link between different payments and making it harder to trace full transaction history.
Scalability through Layer 2: the Lightning Network uses Bitcoin UTXOs to open off-chain payment channels. Many transactions can settle off-chain, reducing on-chain load without changing the underlying UTXO accounting model.
Verifiability: any node can independently verify the full UTXO set without needing to trust any other party, supporting Bitcoin's trustless security model.

Which Cryptocurrencies Use the UTXO Model?

Beyond Bitcoin, several major cryptocurrencies use the UTXO model:

Bitcoin Cash (BCH)
Litecoin (LTC)
Dogecoin (DOGE)
Zcash (ZEC)
Cardano (ADA) uses an extended UTXO (eUTXO) model that adds smart contract support while preserving UTXO accounting.

Ethereum and most EVM-compatible chains use the account model instead.

FAQ

What does UTXO stand for?

UTXO stands for unspent transaction output. It refers to a unit of cryptocurrency that has been received in a transaction and has not yet been spent. A wallet's balance is the sum of all UTXOs associated with its addresses.

What is the difference between the UTXO model and the account model?

In the UTXO model (used by Bitcoin), balances are represented as a collection of discrete unspent outputs. There is no global account ledger; ownership is proven by spending UTXOs with a valid digital signature. In the account model (used by Ethereum), each address has a balance that is updated directly when transactions occur. The UTXO model offers stronger privacy and easier parallel validation; the account model is more flexible for complex smart contract logic.

What is UTXO dust?

UTXO dust refers to very small UTXOs whose value is so low that the cost to spend them (in mining fees) exceeds their actual value. These outputs accumulate in wallets over time and contribute to bloat in the global UTXO set. Wallets often consolidate dust UTXOs during periods of low transaction fees to keep the wallet manageable.

Does Ethereum use the UTXO model?

No. Ethereum uses an account-based model rather than the UTXO model. In Ethereum, each account holds a balance that is updated directly by transactions. This design is better suited to Ethereum's smart contract architecture but differs fundamentally from how Bitcoin and other UTXO-based chains handle ownership and state.

Closing Thoughts

The UTXO model is one of the foundational design decisions behind Bitcoin and many other cryptocurrencies. By tracking ownership through a chain of unspent outputs rather than account balances, it provides a clean mechanism for preventing double spending, enabling parallel validation, and supporting user privacy. Understanding UTXOs is useful for anyone working with Bitcoin transactions, wallet development, or Layer 2 payment channels.