Code Was Never Law: BIP-361, Mythos, and the End of Bitcoin's Founding Promise
For sixteen years, Bitcoin's value proposition rested on a single sentence: your keys, your coins. The promise was unconditional. Whoever held the private keys controlled the corresponding bitcoin. No government, no bank, no protocol developer, no consensus body could override this. The cryptographic guarantee was the foundation; everything else was implementation detail.
In 2026, that sentence is no longer unconditional. Three events arriving in close sequence have brought the foundational promise to its first genuine structural test. On March 31, 2026, Google Quantum AI published research showing Bitcoin's secp256k1 elliptic curve could be broken with fewer than 500,000 physical qubits — a twentyfold downward revision from prior estimates and a fundamental shortening of the timeline for Q Day. On April 7, 2026, Anthropic announced Project Glasswing, deploying its frontier Claude Mythos Preview model to a partner cartel that includes Apple, Google, Microsoft, AWS, Nvidia, and JPMorgan, for the explicit purpose of finding and patching cryptographic vulnerabilities in critical infrastructure. On April 15, 2026, Bitcoin developer Jameson Lopp and collaborators published BIP-361, "Post Quantum Migration and Legacy Signature Sunset" — a proposed soft-fork mechanism to permanently freeze approximately 5.6 million dormant Bitcoin worth over $420 billion in quantum-vulnerable addresses, including approximately 1.1 million BTC associated with Satoshi Nakamoto. On May 1, 2026, Paradigm researcher Dan Robinson countered with PACTs (Provable Address-Control Timestamps), a privacy-preserving alternative that would let dormant holders prove ownership without moving their coins.
These four events, taken as a sequence, constitute the largest single Mengerian inflection in cryptocurrency history. The framework anticipated this moment in Essay 6 of this series, which defined the Cryptographic Marketability Premium (CMP) and argued that frontier AI labs were becoming de facto issuers of the digital trust layer. The CMP is now becoming visible — not as a theoretical concept, but as a $420 billion mass of Bitcoin whose saleability is being actively renegotiated by the developer community in response to a threat being co-managed by the same private cartel the Glasswing analysis identified.
This essay walks through what the inflection actually is, why the framework treats it as the predicted manifestation of CMP, what the three plausible outcomes look like, and what each outcome implies for Bitcoin's Mengerian saleability profile going forward. The maximalist response to BIP-361 has been emphatic and largely critical; the framework's response is more structural. The maximalist objection that BIP-361 is "protocol-level confiscation dressed up as a contingency plan" is correct as a description of what the proposal does. The framework's observation is that the structural conditions producing BIP-361 are external to Bitcoin and irreducible by Bitcoin's own mechanisms — meaning that even if BIP-361 itself fails, an analogous proposal will return, repeatedly, until one of three stable equilibria is reached.
What BIP-361 actually proposes
The proposal is technically precise and worth understanding directly rather than through the heated rhetoric that has surrounded it. BIP-361 envisions a multi-phase soft fork:
Phase A: Sunset window. A period of multiple years during which holders are given clear notice that legacy ECDSA-based signatures (the cryptographic mechanism currently securing all Bitcoin) will eventually be deprecated. Holders are encouraged to migrate their funds to new quantum-resistant address types, which would be introduced in parallel under a separate BIP (BIP-360, by Hunter Beast).
Phase B: Legacy signature invalidation. At a defined block height following the sunset, the network ceases to accept transactions signed using the legacy ECDSA scheme on quantum-vulnerable address types. The specific addresses targeted are Pay-to-Public-Key (P2PK) outputs and Pay-to-Public-Key-Hash (P2PKH) addresses where the public key has been revealed through a previous spend, plus Taproot outputs which expose their public keys directly. Coins held in these addresses become permanently un-spendable. The holder still nominally "owns" the coins in the sense that the on-chain ledger records them at their address, but the holder cannot move them, sell them, or otherwise exercise economic control. They are, for all practical purposes, frozen.
Phase C: Optional rescue. A still-research-stage extension that would allow holders to recover frozen coins by submitting a zero-knowledge proof — specifically, a STARK proof that demonstrates knowledge of the private key without revealing it. This is the mechanism that PACTs are designed to make possible. A holder who has timestamped a PACT commitment before quantum computers became capable of breaking ECDSA could later submit the STARK proof to unlock their coins under Phase C.
The entire proposal is framed by Lopp himself as "a contingency plan" rather than an imminent change. He has been explicit that he hopes it never needs to be activated. The proposal exists, in his framing, primarily to force the community to confront the migration problem before quantum computing arrives, and secondarily to provide a deployable response if the threat materializes faster than voluntary migration can complete.
What is actually being proposed, structurally
The framework's reading is sharper than the technical description. BIP-361 proposes that Bitcoin's protocol-level commitment to unconditional cryptographic ownership has an expiry date, and that the expiry will be set by the developer community in response to an external technological threat. This is structurally identical to the 1909 legal-tender decision that Fekete identified as the most consequential pre-1914 monetary event — a privatized monopoly on a foundational monetary function, granted in response to a specific operational pressure, with structural consequences that compound regardless of the intent of the participants.
Three observations follow.
First, the Lopp position is structurally rational. If a quantum computer becomes capable of deriving private keys from exposed public keys, the 5.6 million dormant Bitcoin in vulnerable addresses are at risk of being swept by whichever quantum-capable actor reaches the capability first. Whether that actor is a state intelligence agency, a private research lab, or a criminal organization, the result is the same: a massive transfer of Bitcoin from its original holders to the attacker, executed through a cryptographic backdoor the original holders did not know existed when they generated their keys. Lopp's argument is that protocol-level freezing is a lesser harm than allowing this transfer to occur. The framework cannot dismiss this argument as irrational. It is structurally rational on its own terms.
Second, the maximalist objection is structurally correct. The critics of BIP-361 — including Mati Greenspan, Khushboo Khullar, and many others — argue that the proposal "directly undermines Bitcoin's core principles of immutability, permissionlessness, and no central enforcement." This is correct as a description of what the proposal does. The framework agrees: protocol-level freezing of holder coins, even under extraordinary circumstances, is a confiscatory mechanism. It does not become non-confiscatory because the confiscator is the network rather than a state actor. Khullar's framing — that BIP-361 represents "a contentious hard fork, violating the network's decentralized ethos where no one can unilaterally seize or freeze anyone's coins" — is structurally accurate. The Lopp counter-framing that it is a defense against an external attacker rather than a seizure by the network does not survive close analysis: from the perspective of a holder whose coins are frozen, the experience of the freeze is identical regardless of whether the network's intent was defensive or extractive.
Third, both sides are operating inside the same Mengerian decay. This is the framework's most important contribution to the analysis. The Bitcoin developer community in 2026 is being forced to choose between two unattractive options because the structural foundation of the original promise has been compromised by external forces neither side can control. Quantum computing is being developed by state actors and private labs whose incentives are independent of Bitcoin's interests. The cryptographic algorithms that secured Bitcoin in 2009 were chosen at a time when the timeline to quantum-relevant computers was assumed to be 50+ years; that assumption is no longer credible in 2026. The framework's CMP observation in Essay 6 was that the saleability of every digital claim depends on a cryptographic substrate, and that the substrate's integrity is not a permanent property of the digital system — it is a property of the broader technological environment, which is now changing rapidly and in ways the developer community cannot offset by choices internal to the protocol.
This is what it looks like when CMP becomes visible at scale. The premium is not appearing as a yield spread between PQC-secured and legacy-secured instruments (the form Essay 6 anticipated). It is appearing as a binary option: migrate or be frozen. The economic loss to holders in the legacy category is the CMP, made manifest. For dormant holders who cannot or do not migrate — including, definitionally, the 1.1 million BTC associated with Satoshi Nakamoto, plus an unknown number of deceased holders, lost-key holders, and holders who simply do not see the migration notices in time — the CMP is approaching 100% of their holdings' value.
The Mythos / Glasswing dimension
The chronology of the inflection matters. Glasswing was announced on April 7. BIP-361 was published on April 15. The Google Quantum AI paper appeared on March 31. The PACTs counter-proposal on May 1. This is not a coincidental clustering. It is a coordinated phase change.
The Glasswing partner list — Apple, Google, Microsoft, AWS, Nvidia, Cisco, Palo Alto Networks, Broadcom, Cato Networks, JPMorgan Chase, Linux Foundation, plus Anthropic itself — is precisely the set of institutions best positioned to both identify the cryptographic vulnerabilities that quantum computing will exploit and manage the migration to post-quantum cryptography across the broader infrastructure stack. Mythos Preview, Anthropic's frontier model deployed inside the partnership, has already found thousands of high-severity vulnerabilities in every major operating system and browser. The model is explicitly not being released publicly, on the grounds that the offensive capability it would confer if it escaped the controlled partnership is too dangerous.
The Bitcoin developer community is not in this partnership. Bitcoin Core is not on the Glasswing list. Bitcoin's specific cryptographic stack (secp256k1 ECDSA, SHA-256) is not being audited or migrated by the Glasswing infrastructure. When Q Day arrives — and the framework's reading of the Google Quantum AI paper is that it now likely arrives before 2030 — the institutions that will have access to first-class defensive capabilities are the Glasswing cartel and its downstream beneficiaries. Bitcoin's holders will have whatever the open-source community has produced in the meantime, deployed through whatever consensus mechanism the protocol can mobilize within the available timeline.
This is the asymmetric defense gap that the CMP framework predicted. JPMorgan's depositors will be migrated to post-quantum cryptographic standards through Glasswing-tier infrastructure. JPMorgan itself, as a Glasswing partner, has direct visibility into Mythos's capabilities and into the vulnerability landscape. The household holding self-custodied Bitcoin in 2026 has none of this. The migration burden is borne by individual holders, with no equivalent institutional support, on a timeline determined by an external threat rather than by the holder's own readiness.
The framework's observation here is uncomfortable but unavoidable. The same private cartel that the CMP analysis identified as the emerging issuer of the digital trust layer is, structurally, the cartel best positioned to thrive through the post-quantum transition while less-supported alternatives — including Bitcoin — face higher relative costs and risks. This is not a claim that Anthropic, Google, or any specific Glasswing participant intends to disadvantage Bitcoin. It is a claim that the structural position of the participants is such that they will weather the transition with substantially more resilience than the alternatives, and that the differential outcome will compound across the next several years of crypto-vs-legacy-finance trajectory.
Three plausible outcomes
The framework can identify three structurally distinct equilibria for Bitcoin's response to the Q Day pressure. The probabilities are uncertain; the structural shapes are not.
Outcome 1: Successful migration with PACTs preservation. The community converges on a hybrid solution: BIP-360 (Hunter Beast's quantum-resistant address types) is activated, providing a migration target. PACTs (or an equivalent privacy-preserving timestamp mechanism) is standardized, allowing dormant holders to commit cryptographic proof of ownership today and redeem coins later via STARK verification. BIP-361 either passes in modified form (with Phase C explicitly required before Phase B activates) or is rendered unnecessary by sufficient voluntary migration. Bitcoin emerges from the transition with its core promise intact in spirit: most holders who wanted to preserve their coins were able to do so, and the protocol-level freezing of remaining vulnerable coins is treated as a defensive necessity rather than a confiscation.
The framework treats this as the desired outcome but not the most probable. It requires high coordination across a fractured developer community, requires the STARK verification infrastructure to be implemented and adopted on a tight timeline, and requires Satoshi (or whoever controls those keys) to actively engage with the PACT system before Q Day arrives — a condition that may simply not be satisfiable.
Outcome 2: Hard split into "frozen" and "rescued" Bitcoin. A meaningful portion of the community refuses to accept the BIP-361 freeze and forks the chain. Bitcoin Classic-style. The fork preserves the legacy address types, accepts the quantum vulnerability as the holder's problem, and continues to recognize all coins as transferable regardless of address type. The other fork (BIP-361 Bitcoin) implements the freeze and proceeds with quantum-resistant migration. Two competing chains exist, with overlapping holder bases who must choose which to support, which to spend on, which to value.
The framework treats this as a plausible outcome and the one with the most structural ambiguity. Hard forks have happened before (Bitcoin Cash in 2017, Ethereum Classic in 2016) and the historical pattern is that one chain inherits most of the economic activity while the other persists at a much smaller scale. The question is which fork inherits dominance. The framework's reading is that the BIP-361-implementing chain would likely inherit institutional and regulated-exchange support (because of compliance and risk concerns about handling quantum-vulnerable assets), while the legacy-preserving chain would attract maximalist holders and those most committed to the original promise. Over time, the chains would diverge in price, in development priorities, and in user base. Neither would be the Bitcoin of 2024.
Outcome 3: Protocol-level confiscation that fundamentally redefines what Bitcoin is. BIP-361 passes substantially as proposed, without meaningful PACT integration, and the freeze is implemented. Approximately 5.6 million BTC are permanently frozen, including the Satoshi-associated holdings. The Bitcoin protocol now contains, by precedent, a mechanism by which the developer community can freeze holder coins under specified circumstances. Future emergencies — whether quantum-related or otherwise — produce additional applications of the same mechanism. The "your keys, your coins" promise is replaced, in practice, by your keys, your coins, conditional on the protocol's ongoing willingness to recognize them. Bitcoin becomes structurally similar to a privately-administered legal-tender system: still rules-based, still transparent, but no longer unconditional in the way the original promise asserted.
The framework treats this as a possible outcome but not the most probable. The community resistance to BIP-361 has been substantial and the political-economy of forcing a freeze through against vocal opposition is genuinely difficult. But the framework cannot rule it out, particularly if the quantum threat materializes faster than the migration alternatives can be implemented. Under extreme time pressure, the community may accept the freeze as the lesser evil even with full awareness of its precedent-setting consequences.
What each outcome means for Mengerian saleability
The framework can score Bitcoin's post-inflection saleability profile under each scenario.
Under Outcome 1 (successful migration), Bitcoin's saleability profile is preserved approximately at its 2024 level, with some modest decay on the durability criterion (the migration itself reveals that the protocol's substrate properties are dependent on community coordination, which is informative for future-period saleability assessments). The freedom-from-weaponization score is partially restored: PACTs demonstrates that the community can defend the original promise even under technological pressure. The Mengerian outcome is broadly favorable; Bitcoin remains a strong but not dominant monetary good.
Under Outcome 2 (hard split), the saleability profile fragments. Each fork inherits a partial saleability profile — the BIP-361 chain has stronger institutional support and likely higher near-term liquidity but a permanently compromised "code is law" promise; the legacy chain has weaker institutional support but a preserved philosophical foundation, with elevated quantum-attack risk. The aggregate Mengerian saleability of "Bitcoin" as a category declines because the category itself has split. Holders must make active choices about which Bitcoin to value, which carries its own saleability cost. The framework treats this as a meaningful net decline relative to 2024.
Under Outcome 3 (protocol-level confiscation), the saleability profile is structurally compromised on the freedom-from-weaponization criterion in a way that is difficult to reverse. Bitcoin remains a usable monetary good with strong properties on most criteria, but the unconditional promise has been broken, and any future technology pressure could produce a similar response. The framework's reading is that Bitcoin under this outcome would still be a strong monetary good — better than fiat on multiple criteria — but would have lost the specific saleability advantage that made it structurally distinct from existing alternatives. The Mengerian outcome is unfavorable.
The chain-analysis dimension, revisited
Essay 13 in this trilogy noted that Bitcoin's pseudonymity has been substantially compromised by surveillance infrastructure. The BIP-361 inflection compounds this observation in a specific way.
A holder who must migrate their coins from a quantum-vulnerable address to a quantum-resistant one is, in the act of migration, creating a chain-analysis breadcrumb. The migration transaction reveals which old address corresponds to which new address, and the migration itself can be linked to time-of-migration patterns that may correlate with other identifying information about the holder. Pre-migration, a long-dormant address held by a holder whose identity was unknown to chain-analysis firms was effectively anonymous. Post-migration, the same holder has revealed both the existence of an active controller of the address and a new address controlled by the same entity. The privacy properties of the holding have decayed by the migration itself.
PACTs are designed to mitigate this. The PACT mechanism allows ownership to be proven without revealing which specific address corresponds to which specific holder. But PACTs require a STARK verification protocol that doesn't yet exist in Bitcoin and would require its own soft fork. The interim state — between BIP-361 activation and PACT availability — creates a forced choice between migrate and lose privacy or don't migrate and risk being frozen. Either choice is a saleability cost. The framework's observation is that this is a cost that did not exist in the pre-2026 Bitcoin saleability profile and that arrives specifically as a consequence of the Q Day inflection.
What this is, in framework terms
The BIP-361 / Mythos / Q Day convergence is, in the framework's vocabulary, a substrate-layer event. Bitcoin's value as a monetary good depends on the cryptographic substrate functioning as advertised. The substrate is now under threat from technologies developed entirely outside the Bitcoin ecosystem, by institutions whose incentives have nothing to do with Bitcoin's success or failure. The defensive response — BIP-361, BIP-360, PACTs, voluntary migration, soft forks — is being assembled from inside the ecosystem under time pressure that the ecosystem did not create and cannot ultimately control.
This is the empirical manifestation of the Cryptographic Marketability Premium that Essay 6 defined. The CMP was previously a theoretical concept observable through indirect proxies. It is now visible as a $420 billion mass of Bitcoin whose saleability is being actively renegotiated under the constraint imposed by external technological reality. The negotiation will produce one of the three outcomes above (or, possibly, an outcome the framework has not anticipated). Each outcome implies a different post-inflection saleability profile. None of the outcomes restores the pre-2026 profile fully, because the substrate has changed and the substrate-layer event has occurred regardless of how it is resolved.
The maximalist response that "BIP-361 will never pass" or "the quantum threat is overblown" is, on the framework's reading, failing to engage with the structural inflection. Even if BIP-361 is rejected, the structural pressure does not disappear. Quantum computing development continues. Mythos and successor models continue to find vulnerabilities in cryptographic stacks. Migration pressure compounds. The next BIP, or the BIP after that, will arrive carrying the same structural concerns. The community can repeatedly reject specific proposals, but it cannot reject the structural reality that produced them.
The skeptical response that "Bitcoin was always going to fail at the cryptographic substrate level" is, similarly, missing the structural specifics. Bitcoin's cryptographic foundations have actually held remarkably well for sixteen years. The current pressure is not a long-anticipated terminal failure; it is the result of specific recent technological developments (the Google Willow 2 advance, the Mythos-class AI capability) that compressed previously decade-scale timelines. The framework treats this as a real and substantial threat, but not as evidence that Bitcoin was always doomed.
What this means for the household
The framework's diagnostic value for the individual holder of Bitcoin in 2026 is straightforward.
First: any Bitcoin held in a quantum-vulnerable address type (P2PK, P2PKH with revealed public keys, Taproot outputs) is exposed to the BIP-361 trajectory and to the underlying quantum threat. The framework strongly recommends migration to BIP-360 quantum-resistant addresses as soon as those addresses are available, even if the user has reservations about BIP-361 specifically. The migration reduces both the protocol-freezing risk and the quantum-attack risk, with privacy costs that PACTs may eventually mitigate but that are real in the interim.
Second: the long-term Mengerian saleability of Bitcoin in 2026 is meaningfully lower than it was in 2024, regardless of which of the three outcomes ultimately occurs. The framework does not predict Bitcoin's price, but it does observe that the substrate-layer pressure has reduced the structural certainty of the asset's properties going forward. A rational allocator should reflect this in their position sizing relative to other monetary goods (gold, stablecoins with strong reserves, equities of high-quality businesses, etc.).
Third: the maximalist arguments for continued, increased, or undiminished Bitcoin allocation in 2026 are not engaging seriously with the framework's analysis of the substrate-layer event. The framework does not advise the reader to abandon Bitcoin. It advises the reader to understand that Bitcoin in 2026 is a different monetary instrument than Bitcoin in 2024, and to position accordingly. The reader who understands the framework holds a real advantage over the reader who is consuming maximalist or skeptical content uncritically.
What "code is law" actually was
Bitcoin's "code is law" slogan was always a partial description of the system rather than a complete one. The code defines the rules; the network's consent to the code is what gives it force. When the network consents to a new version of the code, the rules change. This is true of every blockchain that has ever existed and is structurally inseparable from the consensus mechanism that makes the system function at all.
What was actually unique about Bitcoin's first sixteen years was the political-economy condition that the network would not consent to changes that compromised holder ownership. This condition held through multiple stress tests: the block size wars, the SegWit/UASF episode, the various proposed forks. The community defended the principle that holder coins were sacrosanct, even at substantial cost in coordination friction.
The 2026 inflection is the first time the political-economy condition itself is being seriously contested by core developers, in good faith, in response to a technological threat that genuinely complicates the simple principle. Code is law was never a metaphysical guarantee; it was a description of what the community had repeatedly chosen to defend. The choice is now, for the first time, a hard one.
The framework's reading is that the choice will be made in the next 24–36 months and that the result will define Bitcoin's monetary character for the following decade. The household holding Bitcoin in this period should understand that they are not passively holding an asset whose nature is fixed. They are active participants in an ongoing political-economy decision about what Bitcoin will become. The maximalists are correct that this decision matters enormously. The skeptics are correct that the decision's outcome is genuinely uncertain. The framework's contribution is to make both of these things visible while the decision is still in progress.
The Mengerian framework does not produce optimism or pessimism about the outcome. It produces clarity about the nature of the choice being made. That clarity is what readers of this series can take into their own decisions, both about Bitcoin specifically and about the broader monetary architecture in which Bitcoin sits. The next essay turns to that broader architecture: stablecoins, CBDCs, and the surprising emergence of dollar-pegged tokens as the dominant crypto-monetary instrument of 2026, with implications that neither the maximalist nor the Austrian tradition has internalized.
This is the second essay of the Cryptocurrency Trilogy. The third essay turns to the broader monetary architecture — specifically, the surprising 2026 reality that the dominant crypto-monetary instruments globally are dollar-pegged stablecoins rather than Bitcoin, and the structural implications of this for the dollar, the Federal Reserve, and the monetary architecture more broadly.