Key Takeaways
- Charles Hoskinson, founder of Cardano, argues that Bitcoin’s quantum protection measure BIP-361 is misleadingly classified as a soft fork while functioning as a hard fork.
- The BIP-361 plan would freeze addresses vulnerable to quantum attacks and force holders to transfer funds to quantum-resistant addresses.
- Approximately 1.7 million Bitcoin minted before 2013 cannot be recovered through BIP-361’s zero-knowledge proof mechanism due to outdated wallet technology.
- Satoshi Nakamoto’s estimated holdings of 1.1 million Bitcoin would face permanent lockdown under this framework.
- Data indicates that over 34% of circulating Bitcoin supply has publicly exposed keys vulnerable to quantum computing threats as of March 1, 2026.
Charles Hoskinson, the creator of Cardano, has launched a sharp critique of Bitcoin’s quantum computing protection strategy, claiming the proposal is fundamentally mischaracterized and fails to safeguard the network’s earliest holdings.
The controversial measure is BIP-361, developed by Bitcoin core contributor Jameson Lopp alongside other developers. The plan seeks to retire Bitcoin addresses susceptible to quantum computer exploitation by locking those holdings and requiring owners to transfer assets to quantum-secure addresses.
During a livestream broadcast this week, Hoskinson referenced statistics demonstrating that by March 1, 2026, over 34% of the entire Bitcoin supply in active circulation features exposed public keys recorded on the blockchain. This represents approximately 8 million Bitcoin vulnerable to assault from sufficiently advanced quantum computing systems.
BIP-361 incorporates a zero-knowledge proof authentication framework designed to enable owners possessing standard wallet recovery phrases to verify ownership and retrieve frozen assets following the migration process.
However, Hoskinson contends this recovery mechanism fails completely for an estimated 1.7 million Bitcoin stored in wallets created before BIP-39 seed phrase standards gained widespread adoption around 2013.
These legacy wallets employed an alternative key generation approach from Bitcoin’s original client software. They depended on locally stored key pools instead of recoverable seed phrases. In the absence of seed phrases, users cannot generate the zero-knowledge proofs required for coin recovery.
“1.7 million coins can’t do that. It’s not possible. 1.1 million of which belong to Satoshi,” Hoskinson stated.
The Hard Fork Debate
Beyond concerns about recovery mechanisms, Hoskinson disputed BIP-361’s technical classification. He maintains the proposal presents itself as a soft fork while actually demanding a hard fork implementation because it renders existing signature validation methods obsolete even though they remain actively deployed.
“To actually do this, you need a hard fork,” Hoskinson explained. Bitcoin has never implemented a hard fork, and the development community has traditionally resisted such changes.
Lopp, who co-created the proposal, conceded on X this week that he personally dislikes the approach and characterized it as “a rough idea for a contingency plan” instead of a finalized technical specification.
Lopp has maintained that freezing inactive coins — which he calculates at 5.6 million Bitcoin — represents a better outcome than allowing future quantum attackers to recover and liquidate those holdings in public markets.
Governance and Institutional Pressure
Hoskinson further criticized Bitcoin’s absence of formalized on-chain governance structures, arguing it lacks clear mechanisms for resolving decisions of this magnitude. He referenced Cardano, Polkadot, and Tezos as blockchain platforms with established governance frameworks capable of processing such proposals through democratic community voting.
He predicted that major institutional stakeholders, including asset management firms that have accumulated substantial Bitcoin positions in recent years, will ultimately compel Bitcoin developers to implement changes despite grassroots opposition.
Should BIP-361 be approved in its present configuration, the approximately 1.7 million pre-2013 coins would become permanently inaccessible with zero recovery options available.


