The ledger remembers what the marketing forgets. On July 12, 2026, Eli Ben-Sasson—co-inventor of STARK proofs and founding scientist of Zcash—published a thread that cut through the noise of a sideways market. His thesis was surgical: Bitcoin’s fixed 21 million supply is not a technical law but a policy choice, and one that is increasingly incompatible with the network’s long-term security budget. The immediate reaction from the Bitcoin maximalist camp was swift and predictable: ‘Code is law.’ But Ben-Sasson wasn’t proposing a fork. He was stress-testing a belief system that has gone unchallenged for over a decade. And as someone who has spent the last 40 hours simulating the DAO hack in a local Geth node, I know that the most dangerous assumptions are the ones no one dares to audit.
Context: The Security Budget Paradox Bitcoin’s security model relies on miners expending real-world energy to secure the chain. This energy is paid for by two revenue streams: the block subsidy (newly minted coins) and transaction fees. The block subsidy halves every four years, asymptotically approaching zero by 2140. The assumption is that by then, transaction fees will be sufficient to maintain the same level of hash power. But in 2026, transaction fees account for only about 2% of total miner revenue—a figure that has hovered near 2019 lows. The gap is filled by the subsidy, but that subsidy is on a one-way trajectory to zero. Ben-Sasson’s argument is stark: if fees remain low, Bitcoin’s security budget will collapse to a fraction of its current level, making the network vulnerable to 51% attacks. His proposed solution? A permanent annual inflation rate of 4%—a number he chose because it approximates the annual rate of population growth, effectively turning Bitcoin into a ‘monetary nation’ that issues new coins to maintain its defense budget.
The response from the Zcash community was equally revealing. Zooko Wilcox, Zcash’s founder, offered a counter-proposal that preserves the 21 million cap through a mechanism of voluntary coin destruction and periodic reminting. The idea is that users can choose to burn a small percentage of their holdings (about 210 ZEC per year, based on a 60% fee-burn model) to fund the network, while the cap remains intact. Meanwhile, Monero, another privacy coin, already implemented a permanent tail emission of 0.6 XMR per block in 2022, proving that a soft supply cap is viable in practice. These three projects—Bitcoin, Zcash, and Monero—are now living laboratories for different monetary policies, and Ben-Sasson’s challenge forces the market to confront the trade-off between scarcity and survivability.
Core: A Systematic Teardown of the Fixed-Supply Doctrine Let’s start with the numbers. Bitcoin’s current block subsidy is 3.125 BTC per block. At a price of roughly $60,000 per BTC (mid-2026 estimate), that’s $187,500 per block, or about $1.35 billion per year in new issuance. Transaction fees add roughly $27 million per year. Total miner revenue: ~$1.38 billion annually. Now, consider the security budget required to maintain the current hash rate of 600 EH/s. The cost of electricity alone for the Bitcoin network is estimated at $1.2 billion per year at $0.05/kWh. That means miner profit margins are thin—around $180 million annually. If the block subsidy halves again in 2028 (to 1.5625 BTC/block), that profit margin disappears entirely unless fees rise dramatically. But fees have not risen proportionally with transaction volume; the average fee per transaction is still under $2. This is not a bullish scenario; it is a ticking clock.
Based on my audit experience—specifically, when I modeled the Imperfect Finance token emission algorithm in 2020 and predicted a 40% dilution within six months—I know that tokenomics designed on linear extrapolations are dangerous. Bitcoin’s fixed supply model assumes that future transaction demand will scale with adoption. But what if adoption plateaus? What if Layer 2 solutions like Lightning Network siphon fee revenue away from the base layer? The fixed supply model has no feedback loop. It is a static target in a dynamic system.
Ben-Sasson’s 4% inflation rate is not arbitrary. He argues that lost private keys reduce the effective circulating supply by roughly 3-4% per year (based on estimates from early Bitcoin wallets and inactive addresses). Therefore, a 4% annual issuance would offset losses, keeping the effective supply stable. This is mathematically elegant but politically toxic. The Bitcoin community has built its entire value proposition on digital scarcity. Even the slightest hint of inflation is seen as a betrayal of Nakamoto’s vision. But let’s be honest: Nakamoto’s whitepaper did not include a thermostatic supply rule. It included a linear block subsidy schedule. The 21 million cap is a parameter, not a fundamental law of physics. The real question is: can the Bitcoin community unite to change a parameter if it means saving the network from a catastrophic security failure? History suggests no. In 2017, the SegWit2x scaling debate nearly split the chain. Changing the monetary policy would be a magnitude greater.
Now, let’s examine Zcash’s alternative. Wilcox’s proposal involves a voluntary burn of transaction fees (60% of fees are currently burned) and a network-wide reminting of that burned value through a shielded pool. The technical challenge is significant: the logic must prevent double-spends and replay attacks across the burn and remint steps. Sean Bowe, the lead engineer at Zcash, is currently formalizing this mechanism as part of the Ironwood pool upgrade, using formal verification tools from the Tachyon project. This is genuine engineering work, not just a tweet. But the socio-economic challenge is even harder: asking users to voluntarily destroy their coins in exchange for future security is a form of altruism that has historically failed on-chain (see: Bitcoin’s OP_RETURN fee-burning experiments). The market has not shown a willingness to subsidize infrastructure unless there is a direct profit incentive.
Monero, by contrast, simply prints new coins forever. This is the least elegant but most robust solution. Its permanent tail emission is a fixed amount per block (0.6 XMR), not a percentage. Over time, this means the inflation rate approaches zero asymptotically. In 2026, Monero’s annual inflation is roughly 1.5% and falling. The market has not punished Monero for this; its price has been stable relative to Bitcoin. Ben-Sasson’s implicit endorsement of Monero’s model is a signal that the privacy coin community has already solved the security budget problem. The question is why Bitcoin hasn’t learned from it.
Contrarian: What the Bulls Got Right A fair analysis must acknowledge the counter-arguments. Michael Saylor and other Bitcoin bulls argue that the network’s security is not solely dependent on miner revenue. The social consensus—the millions of users who run full nodes—is the ultimate defense. A 51% attack can be mitigated by a user-activated soft fork that rewrites the history. Furthermore, the Lightning Network and other Layer 2s are expected to generate far more on-chain activity as they mature, driving fees higher. The recent boom in Ordinals and inscriptions in 2023-2025 proved that even a small amount of non-financial use cases can push fees to $10 per transaction. If Ordinals-scale adoption continues, fee revenue could cover the security budget within two halvings.
There is also the issue of credibility. Bitcoin’s value as a store of value is rooted in its predictability. Changing the supply cap would destroy the very narrative that has made it a trillion-dollar asset. The market would price in the risk of future changes, effectively collapsing Bitcoin’s premium as a sound money. Even if the change is theoretically optimal, the loss of trust would outweigh any security gain. This is the same reason why Ethereum’s transition to proof-of-stake eliminated the need for massive hash power but still required a decade of community consensus. Bitcoin is not ready for such a shift.
But here is the blind spot: the bulls assume that transaction demand will always grow faster than the subsidy decay. They ignore the possibility of a fee market that is supressed by second-layer solutions, regulatory crackdowns on mining, or a prolonged bear market. I have seen this pattern before—in 2020, every DeFi project claimed their emissions were sustainable. Six months later, they were dead. Greed optimizes for yield, not for survival. Bitcoin’s security budget is a yield in terms of miner profit, and if that yield declines, miners will leave. Hashtag power will drop, and with it, the cost of a 51% attack. The attack cost, which is currently about $20 billion per hour, could fall to $2 billion or less by 2040. That is within the budget of a nation-state.
Takeaway: Accountability Calls The 21 million cap is not a law of nature. It is a governance parameter, and like all parameters, it should be stress-tested. Ben-Sasson’s proposal is unlikely to be adopted, but it serves a purpose: it forces the Bitcoin community to articulate why they are so confident that the current model will work forever. The ledger remembers what the marketing forgets. Until Bitcoin’s fee market demonstrates sustained growth of at least 10x per halving, the debate over a permanent tail emission is not theoretical—it is a hedge against failure. Code does not lie, but developers do. And the only way to verify a security budget is to run the math, not recite the gospel.
In the end, the most valuable insight from this discussion is not about Bitcoin at all. It is about Zcash’s willingness to experiment with monetary policy. Trace every byte back to the genesis block—Zcash’s genesis block had a different supply schedule than it does today. They have already changed their policy once (reducing the initial funding rate). They are considering changing it again. This flexibility may be their greatest strength, or their undoing. But one thing is certain: the market will decide which model is sustainable. And when Bitcoin’s security budget finally becomes a crisis, the world will have three case studies to examine. The only question is whether we will learn from them in time.
