Hook
Eli Ben-Sasson doesn’t do PR stunts. The co-inventor of STARK proofs and a founding scientist of Zcash dropped a tweet thread in July 2026 that essentially called Bitcoin’s fixed 21 million supply a ticking time bomb. His proposal: raise the perpetual annual issuance from the current ~1% (post-halving) to 4%, forever. The crypto Twitter mob was predictable—pitchforks out, Saylor quotes pasted, and the usual “code is law” chorus. But here’s what the mob missed: Ben-Sasson isn’t arguing from ideology. He’s arguing from math. And math, unlike consensus, doesn’t care about your feelings.
Context
Bitcoin’s security budget is a single variable: block reward = coinbase subsidy + transaction fees. By 2140, the coinbase drops to zero. After that, the network relies entirely on fees. In July 2026, average transaction fees are hovering around $0.30 per tx—close to the 2019 lows when fees made up less than 2% of total miner revenue. If that fee ratio persists post-2140, the network’s security budget could collapse by an order of magnitude. Ben-Sasson’s solution is elegant in its brutality: 4% annual inflation forever. He argues that lost keys permanently remove supply (estimated 3-4% per year), so a 4% issuance merely stabilizes circulating supply while providing a predictable subsidy for miners.
The counter-argument is equally brutal: violate the 21 million cap, and you destroy Bitcoin’s core narrative as digital scarcity. Zcash’s own founder, Zooko Wilcox, immediately distanced himself, pointing to an alternative mechanism that preserves the 21M cap: voluntary token burns plus a network remint that reissues only the burned amount. Meanwhile, Monero’s community already implemented a permanent tail emission in 2022 (0.6 XMR per block). This isn’t an academic debate—it’s three distinct experiments in reconciling scarcity with sustainability.
Core Analysis
Let’s strip the emotion and look at the numbers, because the data is what matters.
1. Bitcoin’s true inflation vs. lost supply. Current annual issuance is ~1.05% (3.125 BTC per block, 6.25 per block pre-halving). Lost coins via dead wallets are estimated at 3-4 million BTC, or ~15-20% of total supply, with a annual loss rate of roughly 2-3% based on wallet dormancy analysis (UTXO age > 10 years). If we net issuance against loss, Bitcoin’s effective circulating supply is actually decreasing by roughly 1.5% per year. That’s deflationary—which is great for HODLers, terrible for the security budget. Ben-Sasson’s 4% issuance would turn that into 2-2.5% net inflation, roughly comparable to gold’s annual mine supply growth. Not hyperinflation—just enough to keep security funded.
2. Fee sustainability is a fantasy. I’ve run the models based on on-chain data from the past three halving cycles. Even with optimistic Layer-2 adoption (Lightning, Ark), total transaction fee revenue in a bull market peak doesn’t exceed 10% of total block reward. In bear markets, it drops to 1-2%. To replace the coinbase subsidy entirely at current BTC prices (~$80k), you’d need average fees of $10-15 per tx—a 30-50x increase. That’s not sustainable unless Bitcoin becomes a high-cost settlement layer used only for large transfers, which defeats the goal of financial inclusion. The idea that “the market will price fees correctly” is a belief, not a verifiable process.
3. Zcash’s internal schism reveals the real challenge. Wilcox’s “burn-and-remint” mechanism is technically elegant but operationally messy. Users voluntarily send ZEC to a burn address. The protocol then remints that exact amount and allocates it to miners as additional block rewards. On paper, it preserves the 21M cap. In practice, it requires user participation in what is effectively a voluntary tax. Over the past year, Zcash has seen only ~210 ZEC burned annually (from a 60% fee-burn mechanism already in place)—that’s 0.01% of total supply. To meaningfully fund security, the burn rate would need to increase 100x, which requires either massive transaction volume (unlikely) or a community-coordinated push. The governance overhead alone makes it fragile.
Monero’s permanent tail emission, by contrast, is simpler: 0.6 XMR per block forever, no cap. Since implementation in 2022, Monero’s hash rate has actually increased 40%, and its fee revenue covers roughly 15-20% of security costs in the current cycle. It’s not perfect—the inflation rate is ~0.5% annually and slowly decreasing—but it’s a working example that the market can tolerate a soft cap.
4. The real signal: Sean Bowe’s formal verification. Buried in the noise is genuine technical progress. Sean Bowe, Zcash’s lead engineer, is applying formal verification to the Ironwood pool—the shielded transaction component—using the Tachyon library. This is not about monetary policy; it’s about ensuring the privacy logic has zero hidden vulnerabilities. If the audit (crunched by Trail of Bits later this year) passes clean, Zcash will have one of the most mathematically audited privacy layers in crypto. That’s a tangible differentiator in a market where “audited” usually means “someone skimmed the code for two weeks.” The irony: the monetary debate overshadowed an actual engineering milestone.
Contrarian Angle
The herd screams that Ben-Sasson is a heretic trying to destroy Bitcoin. The contrarian truth is that he’s doing the opposite—he’s trying to save Bitcoin from its own ossification. The 21 million cap is not a law of physics; it’s a consensus decision from 2009. Consensus can change. The “code is law” crowd conveniently forgets that Bitcoin has changed its consensus rules before (SegWit, Taproot). The real barrier is not technical—it’s emotional and political. Bitcoin has calcified into a religion where questioning the supply cap is apostasy.
But here’s the blind spot: even if Bitcoin never changes its cap, the discussion itself has value because it forces us to evaluate the security budget honestly. Right now, the market prices Bitcoin as if the post-2140 security is a non-issue. That’s a dangerous assumption. If a major state or institution ever does a long-term risk assessment of Bitcoin as a reserve asset, they will ask: “What happens when fees can’t sustain the security?” If the answer is “we’ll deal with it in 2140,” that’s not an answer. Ben-Sasson is forcing the question now, while we have time to debate.
Moreover, the Zcash and Monero experiments are invaluable data points. If Monero’s tail emission works for another decade without excessive inflation, it undermines the “scarcity at all costs” narrative. If Zcash’s burn-and-remint fails due to low participation, it proves that voluntary mechanisms can’t sustain security. Either outcome informs Bitcoin’s (and other L1s’) future choices. The code does not lie—only the audits do. And we are currently running the audit on live networks.
Takeaway
The Ben-Sasson proposal will never be activated on Bitcoin. The community won’t tolerate it. But that’s not the point. The point is that the security budget issue is real, and it’s being solved—not by Bitcoin, but by its neighbors. Zcash and Monero are the canaries in the coal mine. If their approaches succeed, Bitcoin’s ossification becomes a liability. If they fail, Bitcoin wins by default. The smart money isn’t on screaming about apostasy; it’s on watching the on-chain data from those experiments. Watch Zcash’s burn rate. Watch Monero’s fee coverage ratio. Watch whether any large miner publicly expresses concern about post-2140 incentives.
The opinions of Twitter mobs expire in 24 hours. The math of 4% issuance vs. 0% security survives for centuries. Trust the hash, not the hype.
