---

Charles Hoskinson, the co-founder of Cardano, argued in April that Bitcoin could lose its position as the world's leading cryptocurrency if its informal governance structure proves unable to coordinate a timely response to quantum computing threats. Hoskinson made the case in a remote keynote at the Tech for Impact Summit 2026 in Tokyo on April 26, and reiterated the argument in interviews published that same month, citing a specific technical flaw in Bitcoin's quantum defense plan proposed in April.

The debate centers on two Bitcoin Improvement Proposals submitted this year. BIP-360, published in February 2026, introduced a new quantum-resistant address format that prevents a future quantum attacker from deriving a user's private key from data visible on the blockchain. In legacy P2PKH and SegWit addresses, this exposure occurs at spend-time, while older P2PK addresses expose the public key permanently. BIP-361, proposed in April by Jameson Lopp, a security engineer at Casa, goes further: it outlines a plan to eventually freeze legacy addresses where public keys are already exposed. Roughly 6.5 to 6.9 million BTC, approximately 34 percent of the total bitcoin supply, currently sit in addresses with this vulnerability.

Hoskinson's critique of BIP-361 is technical and direct. He argues the proposal is mislabeled as a soft fork, meaning a backward-compatible upgrade, when it actually invalidates existing signature schemes. That distinction matters because invalidating signature schemes meets Bitcoin's own definition of a hard fork, a more disruptive and contentious change. He also identifies a structural hole in the proposal's recovery mechanism. BIP-361 would use zero-knowledge proofs tied to BIP-39 seed phrases, a wallet backup standard introduced in 2013. Zero-knowledge proofs are a cryptographic method that allows someone to prove ownership of funds without disclosing the underlying private key at all. The problem is that roughly 1.7 million BTC in pre-2013 P2PK addresses, including approximately 1.1 million BTC attributed to Satoshi Nakamoto, predate that standard entirely. "There's no zero-knowledge proof that I can construct for a system like that," Hoskinson said. Lopp has since walked back the proposal's urgency, describing BIP-361 as "a rough idea for a contingency plan" rather than a finalized specification.

The skepticism is not limited to Hoskinson. Marty Bent, founder of TFTC, called BIP-361 "laughable" and described its core mechanism as "highly authoritarian and confiscatory," reflecting a broader current of resistance within the Bitcoin community itself.

The harder question Hoskinson raises is whether Bitcoin's community can agree on any fix in time, regardless of which technical approach is chosen. Bitcoin has no formal on-chain governance mechanism. Protocol changes move through informal developer consensus, a process that has been slow and contentious historically. The 2017 block size dispute illustrates how difficult coordinated upgrades can be under social pressure. Hoskinson also noted that large institutional holders such as BlackRock now control enough bitcoin to influence the outcome of any governance dispute regardless of developer opposition, saying: "They own you now." Separately, he has argued: "If you had on-chain governance, you could solve it," summarizing his central thesis.

The timeline pressure he describes is not theoretical. A 2026 paper from Google Quantum AI reduced the estimated computing resources needed to break Bitcoin's cryptography by a factor of 20, compressing earlier projections, though current hardware still falls roughly 400 to 500 times short of the qubit stability needed to execute an attack. Hoskinson puts the probability of commercially viable quantum systems capable of compromising existing cryptography at greater than 50 percent before 2033.

Cardano's response to the same threat illustrates the contrast Hoskinson is drawing. The network completed its Voltaire governance phase, which established a formal on-chain voting system where community representatives, including delegated representatives known as DReps, stake pool operators, and a constitutional committee, can propose and ratify protocol changes, including hard forks. Cardano currently has an active governance vote on its own quantum security strategy, with a formal research proposal published in May 2026. "It's very easy for us to facilitate that migration path. It's just a hard fork, we do them every year," Hoskinson said. Cardano's on-chain metrics remain modest relative to larger competitors: its DeFi ecosystem holds roughly $132 million in total value locked as of early April 2026 and generates around $2,800 in weekly fee revenue. The network's market-cap-to-TVL ratio stands at approximately 66.49x, one of the highest among major blockchains, a figure that highlights the gap between its current utility metrics and its market valuation. The governance argument Hoskinson is making rests on architectural resilience, not current market share. That case is supported by a separate data point: Cardano leads all major blockchains, including Ethereum and Solana, in weekly developer commits at approximately 680 per week, indicating sustained protocol development activity underlying its governance claims.

What this means outside the United States

For developers in Nigeria, Kenya, Ethiopia, and other African nations building financial tools on Cardano, the governance debate carries direct practical weight. Cardano's treasury distributed $30 million in developer grants across 14 African nations in March 2026, drawing more than 180 project submissions within one week. Applications covering supply-chain transparency, cross-border remittances, digital identity, and microfinance for mobile-first users are now tied to Cardano's long-term technical roadmap. A clear quantum upgrade path through on-chain governance gives those projects a degree of infrastructure certainty that is harder to claim on networks without formal upgrade coordination.

The on-the-ground footprint behind those grants is already substantial. In Ethiopia, a partnership between IOG and Atala PRISM created tamper-proof digital education records for five million students, arguably the largest real-world blockchain deployment on the African continent. In Tanzania, a separate initiative is using Cardano to support digital identity and ADA payment infrastructure delivered through local telecom providers. These deployments make the governance-stakes argument concrete: a failed or delayed quantum upgrade would affect not just investors but functioning public services.

In South Asia, where Indian retail markets show sustained interest in both Bitcoin and ADA, the practical implication is more immediate for Bitcoin holders specifically. Anyone still using addresses created before 2013, particularly pre-2013 P2PK addresses where the public key is permanently visible on the blockchain, or who has spent from a P2PKH or SegWit address and therefore exposed their public key at the time of that transaction, should monitor BIP-360 adoption and consider migrating funds to newer address formats before any BIP-361-style phase-in could begin. Holders can identify their address type by checking whether the address begins with "1" (P2PKH), "3" (P2SH), or "bc1" (SegWit/Bech32). P2PK addresses from Bitcoin's earliest years predate this labeling convention and require additional verification through block explorer tools. As a broader standards reference point: in August 2024, NIST finalized three post-quantum cryptographic standards, ML-KEM, ML-DSA, and SLH-DSA, providing the baseline framework that blockchain networks, including Cardano, are actively working toward.

BIP-361 is not close to activation, and Ethereum, XRP Ledger, and other major networks are running their own parallel quantum resistance programs. Ethereum formed a post-quantum working group in January 2026, and XRP Ledger announced a four-phase roadmap targeting 2028. No major blockchain has publicly announced a completed post-quantum migration at scale, as of mid-2026. The competitive pressure on Bitcoin's governance process, however, is now quantifiable. The Google Quantum AI paper alone shifted what many researchers considered a decade-long timeline closer to a seven-year planning horizon. Hoskinson's pre-BIP-39 coin critique, in particular, has been acknowledged as technically valid by neutral analysts even where they disagree with his broader governance framing, lending the technical argument credibility well beyond the Cardano ecosystem.