Bitcoin’s latest security debate has moved from theory to governance. The Bitcoin quantum proposal known as BIP-361 is now drawing sharp criticism from Cardano founder Charles Hoskinson, who argues the plan cannot protect every vulnerable coin on the network. His main objection is not that the idea lacks purpose. It is that the final recovery path may fail for a large share of the oldest Bitcoin.
The proposal, published in the Bitcoin Improvement Proposals repository, outlines a staged migration away from legacy ECDSA and Schnorr exposure. Its design starts by discouraging use of vulnerable addresses, then moves toward invalidating spends from quantum-exposed outputs after a long notice period.
A later recovery stage remains tentative and is described as pending further research, with one likely path involving proof tied to a corresponding BIP-39 seed phrase
Why the Bitcoin quantum proposal matters now
The Bitcoin quantum proposal arrives at a time when post-quantum planning is no longer confined to academic circles. Google said on March 25, 2026 that it is targeting 2029 for its own migration to post-quantum cryptography, citing a faster-than-expected timeline for the quantum era. In a separate research post published on March 31, Google also said future quantum machines may be able to break elliptic curve cryptography with fewer resources than earlier estimates suggested.
That matters for Bitcoin because many older coins sit in address types where public keys are already exposed. If a cryptographically relevant quantum computer arrives before those coins move, attackers could in theory derive private keys and sweep funds. BIP-361 tries to prevent that scenario by forcing a migration path before the threat becomes practical.
Supporters of the plan see it as a defensive measure. Their argument is simple: doing nothing could leave millions of BTC open to theft if quantum attacks become viable. Even some critics of the proposal agree that the underlying risk is serious enough to warrant planning now rather than later.
Charles Hoskinson says BIP-361 has a hard limit
Charles Hoskinson does not reject the need for a response. His criticism targets how the plan handles the oldest coins. According to recent reporting on his comments, he argued that the recovery phase cannot work for roughly 1.7 million BTC created before modern wallet standards became common. He specifically pointed to coins from 2013 and earlier, saying those holdings would not fit the proposal’s assumed recovery logic.
That criticism goes to the heart of BIP-361’s most controversial section. The proposal itself says Phase C is still to be determined and only “likely” to rely on zero-knowledge proof of possession of a corresponding BIP-39 seed phrase. In other words, the recovery design is not final. Hoskinson’s point is that many early holders, including Satoshi-era wallets, may never be able to satisfy such a standard.
He also argued that calling the change a soft fork understates how disruptive it could become in practice. That matters because Bitcoin culture has long favored minimalism and backward compatibility. Any proposal that can freeze old coins, even for security reasons, is certain to trigger strong resistance from users who see property rights and social consensus as core to the network.
Satoshi coins sit at the center of the dispute
The most sensitive issue in the Bitcoin quantum proposal debate is Satoshi Nakamoto’s untouched stash. Arkham says addresses attributed to Satoshi hold about 1.1 million BTC. Recent coverage has used that figure to show why the proposal could affect far more than dormant retail wallets.
If Hoskinson is right, those coins may not be recoverable under the fallback path that has been discussed so far. That would mean the network could freeze them in the name of security without a credible way to restore access later. For some Bitcoiners, that tradeoff may still be preferable to leaving the coins exposed to future theft. For others, it crosses a line Bitcoin should not cross.
The debate also exposes a wider governance issue. Hoskinson used the moment to criticize Bitcoin’s limited on-chain governance compared with systems like Cardano, Polkadot, and Tezos. Whether or not one agrees with that comparison, the core tension is real: Bitcoin must weigh long-term security against its deep resistance to sweeping protocol change.
Bitcoin quantum proposal leaves open questions
What happens next depends on whether BIP-361 gains momentum beyond the draft stage. The proposal is still informational and no post-quantum code has been merged into Bitcoin Core, according to discussion summarized in the Bitcoin repository. That means the debate is still early, even if the stakes are already large.
The immediate takeaway is that the Bitcoin quantum proposal has forced a difficult question into public view. Bitcoin may need a credible post-quantum migration path, but any plan that can freeze old coins will face fierce scrutiny.
Hoskinson’s intervention does not kill the idea. It does, however, sharpen the hardest question around BIP-361: how do you secure ancient Bitcoin without rewriting the rules that made Bitcoin valuable in the first place?
Meanwhile, BTC is holding near $75,117, after trading between $73,513 and $75,434 today, which shows that buyers are still defending higher levels even as the market weighs the quantum-security debate.
ADA is trading near $0.256, after moving between $0.246 and $0.260, suggesting that price remains sensitive but stable enough for Cardano to stay in focus whenever Hoskinson’s comments pull attention back to the project.