Extrinsic - Wiki Parity Tech Documentation

Extrinsic is a Substrate specific generalization which includes transactions (a normal term from the blockchain world) as well as inherents (also Substrate-specific).

Extrinsic types

In classic blockchains, blocks usually contain pieces of information called transactions that give instructions from “the outside world” (i.e. you and me) to the blockchain logic. For crypto-currency blockchains such instructions are generally confined to variations on the theme of transferring funds from one account to another. Substrate generalises this by removing the assumption that this piece of information be signed, instead merely characterising it on the fact that it “comes from the outside world” and is thus “extrinsic” to the blockchain and its state.

Extrinsics fall into two broad categories, of which only one is conventional transactions. The other is known as inherents. The difference between these two is that transactions are signed and gossiped on the network and can be deemed useful per se. This fits the mould of what you would call transactions in Bitcoin or Ethereum.

Inherents, meanwhile, are not passed on the network and are not signed. They represent data which describes the environment but which cannot call upon anything to prove it per se such as a signature. Rather they are assumed to be “true” simply because a sufficiently large number of validators have agreed on them being reasonable.

This is reminiscent of the timestamp field in the header of classical chains, which is true simply because enough of the network maintainers (miners or validators) accepted it as being reasonable. In Substrate, there is the timestamp inherent which sets the current timestamp of the block. This is not a fixed part of Substrate, but does come as part of the Substrate Runtime Module Library to be used as desired. No signature could fundamentally prove that a block were authored at a given time in quite the same way that a signature can “prove” the desire to spend some particular funds. Rather, it is the business of each validator to ensure that they believe the timestamp is set to something reasonable before they agree that the block candidate is valid.

Other examples include the parachain-heads extrinsic in Polkadot and the “note-missed-proposal” extrinsic used in the Substrate Runtime Module Library to determine and punish or deactivate offline validators.

Practical Notes

Inherents go into the block and are not written in the header. The default header format in Substrate includes only the hash of a parent block, a block number, a digest of the data in the block, and a storage root (representation of the state after execute_block). Note that timestamps are not in the header of Substrate chains, but in the block as an inherent.

Normally, only the block author would add inherents. The mempool only stores transactions (in the context of Substrate, anything that is signed), so there is no queue for non-authors to submit inherents. Of course, Substrate is customizable and you could define a runtime that allows anyone to submit inherents.

Inherents change the state and the block must pass execute_block before the author can propagate it. This has implications for light clients, which only download the block headers: they cannot see the inherents and trust full nodes to validate them. For example, timestamps are used to punish inactive validators in Aura, so full nodes need to inspect inherents and ensure they follow protocol rules.


Substrate makes almost no assumptions about the extrinsic format: rather it is up to the runtime to determine whether an extrinsic is valid, and if so what to do about it. The only requirement is that it is prefixed with a 4-byte LE-encoded length of the extrinsic (not including the 4-bytes itself) (making it compatible with Vec<u8> in terms of the general Parity Codec). This allows it to be opaquely encoded and decoded and thus be sent around the network and included in transaction pools easily.

Despite Substrate not caring about the extrinsic format at its core, the Substrate Runtime Module Library (SRML) does provide generic implementations of extrinsics that imply their transaction format. Currently two are provided: UncheckedExtrinsic and UncheckedMortalExtrinsic. The Substrate Node implementation uses the latter. Do note: it’s not the only possible option. Other chains, for example a UTXO chain, may define a wildly different format more suitable for their needs.

Extrinsics are expected to be encodable and decodable. See the Encode and Decode traits.

Note: It may seem strange, but currently, Substrate does not define how extrinsics should be encoded. In the case of Polkadot, extrinsics are formed and encoded in the JS part of the code, so you would not find this in the Rust codebase.


In Polkadot runtime, extrinsics are said to be future-proof. Basically, that means that the actual details of the extrinsic are defined by the runtime, whereas external logic, such as network or storage, treats and handles them as opaque byte vectors.

This allows us to update or extend an extrinsic definition by changing the runtime only, without forcing clients to update their software.

The Extrinsic format for Node

Substrate Node, as of genesis, defines a specific Extrinsic format, based around the generic UncheckedMortalExtrinsic with a standard Era format, a Node-specific function format, a 64-bit block number, 64-bit transaction index, a standard Address format combining 256-bit AccountId with a variable-width 64-bit enumerated AccountIndex, and Ed25519 crypto.


Address, Account Index and Account ID

An account in Node may be identified in several ways: either directly through its 32-byte public key or AccountId; or alternatively through a 64-bit index into an account lookup table stored on-chain known as an AccountIndex. If either may be used, then there is an Address type which can encode to either of them. This is the type that is used in transactions.

The AccountId should be considered the canonical means to identify an account. However, at a difficult-to-compress 32-bytes, it is very heavyweight for a system that has well-under a million accounts. The idea of account indices lets us use a much smaller number to identify accounts provided we are happy that the account will still be in existence when the index comes to be used.

To get maximum efficiency with on-chain storage, Addresses are encoded as variable length quantities: if it’s an index whose value is small enough, the value is encoded as a single byte. If it’s an index that fits into 2, 4 or 8 bytes, then it’ll be encoded into 3, 5 and 9 bytes respectively. If it’s a straight 32-byte identifier, then it’ll be encoded into 33 bytes.

The translation from AccountIndex to AccountId, if necessary, is done through a on-chain query provided by the Balances module. Account Indexes can be reused if the account becomes dead, implying that any transaction which refers to the account using an Index must be executed in a timely fashion, i.e. while the account is still alive. If the account holder keeps ample funds in it, then it’ll be fine, but if they spend it all, then the transaction could become invalid since the Account ID that it is signed with could no longer match the account to which the index later refers.

Signing Payload

The signing payload is a simple concatenation of four fields, three from the transaction and one derived:

Transaction Era

The Transaction Era is a data structure that, with the help of the Signing Payload, restricts a transaction’s validity to a particular period of blocks in a specific blockchain.

Given a Transaction Era instance and a block number from a time recent to when the transaction was authored, it can be used to calculate the exact block number at which the transaction was authored. Crucially, if the block number provided is not sufficiently recent (or is before the block that the transaction was authored), then it will provide the wrong answer, which helps make an “out of date” transaction invalid. The level of recent-ness required before the transaction becomes invalid can be configured from 4 blocks through to 65536 blocks, or can be disabled entirely.

It is defined as a 16-bit quantity:

More formally, given low4 and hi12, we can define enabled:

enabled := low4 > 0

Assuming enabled then we can define:

period := 2 ** (low4 + 1)

phase := hi12 * factor


factor := MAX(1, period / (2 ** 12))

To determine phase, given an authoring block number current, then:

calculate_phase(period, current) := Q(current, factor) % period


Q(n, d) := FLOOR(n / d) * d

And, given a sufficiently recent block number recent, then we can reverse it and get the original authoring block as:

calculate_current(period, phase, recent) := Q(current - phase, period) + phase