Key Takeaways
- Charles Hoskinson, founder of Cardano, argues that BIP-361—Bitcoin’s proposed quantum protection mechanism—is wrongly classified as a soft fork when it actually demands a hard fork implementation.
- The BIP-361 framework suggests locking down quantum-exposed Bitcoin wallets and forcing holders to transition to quantum-resistant addresses.
- BIP-361’s zero-knowledge proof recovery mechanism fails to assist owners of approximately 1.7 million Bitcoin minted before the 2013 BIP-39 seed phrase standard was established.
- Roughly 1.1 million of these coins allegedly belong to Bitcoin creator Satoshi Nakamoto and would face permanent lockdown under this proposal.
- Data shows that by March 1, 2026, over 34% of circulating Bitcoin will have publicly exposed keys, making them susceptible to quantum computing threats.
Cardano’s creator, Charles Hoskinson, has unleashed sharp criticism against Bitcoin’s planned quantum computing countermeasure, claiming the proposal is technically miscategorized and fails to safeguard the blockchain’s earliest coins.
At the center of this controversy sits BIP-361, a framework co-created by Bitcoin developer Jameson Lopp alongside other contributors. The plan seeks to eliminate Bitcoin addresses vulnerable to quantum attacks by locking those holdings and prompting users to transfer assets to quantum-resistant addresses.
During a recent livestream, Hoskinson referenced data indicating that by March 1, 2026, more than 34% of all circulating Bitcoin will feature exposed public keys recorded on the blockchain. This translates to approximately 8 million Bitcoin sitting exposed to potential exploitation by advanced quantum computers.
BIP-361 incorporates a zero-knowledge proof verification mechanism designed to enable owners with standard wallet seed phrases to demonstrate ownership and recover any locked assets following migration.
However, Hoskinson contends this recovery framework fails for roughly 1.7 million Bitcoin stored in wallets created before the BIP-39 seed phrase specification gained widespread adoption around 2013.
These legacy wallets operated using a distinct key generation method from Bitcoin’s original client software. They depended on locally stored key pools instead of recoverable seed phrases. Without seed phrases, constructing the zero-knowledge proof necessary for coin recovery becomes impossible.
“1.7 million coins can’t do that. It’s not possible. 1.1 million of which belong to Satoshi,” Hoskinson stated.
Classification Controversy: Soft Fork or Hard Fork?
Aside from recovery concerns, Hoskinson disputed BIP-361’s technical classification. He maintains the proposal labels itself a soft fork but would operationally necessitate a hard fork since it invalidates signature schemes currently in active circulation.
“To actually do this, you need a hard fork,” Hoskinson explained. Bitcoin has never implemented a hard fork, and the development community has traditionally resisted such measures.
Lopp, one of the proposal’s co-authors, conceded on X this week that he personally dislikes the plan, characterizing it as “a rough idea for a contingency plan” instead of a finalized specification.
Lopp has maintained that freezing inactive coins—which he calculates at 5.6 million Bitcoin—would be superior to allowing future quantum attackers to recover and dump them into markets.
Governance Structures and Institutional Influence
Hoskinson further contended that Bitcoin’s absence of formal on-chain governance mechanisms leaves it without proper procedures for adjudicating such critical decisions. He referenced Cardano, Polkadot, and Tezos as blockchain networks equipped with structured governance frameworks capable of resolving these matters through community-driven voting.
He predicted that major institutional stakeholders, including asset management firms that have accumulated substantial Bitcoin positions recently, will ultimately exert pressure on Bitcoin developers to implement changes despite grassroots opposition.
Should BIP-361 advance in its present configuration, the estimated 1.7 million pre-2013 coins would remain indefinitely frozen without any recovery mechanism.
