Metaplanet’s Real Smart Contract Is Its Cap Table — and It Has an Unpatched Bug

Simon Gerovich stood in front of shareholders and admitted what a security audit would have flagged months earlier: disclosure around the company’s incentive structure has been insufficient. Metaplanet’s stock dropped 7% on that statement. That single-day move is not the story. The story is the divergence between two numbers every Bitcoin treasury investor should track: Bitcoin bought and shares issued. Since adopting a Bitcoin Treasury Strategy in April 2024, Metaplanet has watched its share price fall 43% year to date while the Nikkei 225 has risen 31% and Bitcoin has posted positive returns. That is not a market problem. That is a state-transition bug in corporate governance. Metaplanet is not a blockchain protocol. It has no consensus mechanism, no smart contract, no code audit. But it occupies the same economic space as one: a listed Japanese company whose treasury strategy is to issue equity, convert that equity into yen, and convert the yen into Bitcoin. The template is MicroStrategy, and the idea is not innovative. It is a corporate balance-sheet trade, not a technical advance. What makes the trade interesting is not BTC acquisition. It is the silent expansion of the denominator. The mechanics are standard equity finance. A management incentive pool was created in December 2022 at 20% of fully diluted shares. In August 2024, that pool was fixed at 319.464 million shares. The CEO, Simon Gerovich, exercised rights tied to that pool and ended up with approximately 79.5875 million shares, or nearly 6.2% of the company. A group of dissident shareholders reacted by demanding two things: full disclosure of the ownership structure connecting management to an entity called MMXX Ventures, and cancellation of 273 million new shares from the compensation pool. That demand is not a nuisance complaint. It is a shareholder-led attempt to patch a backdoor mint function before more dilution hits the market. I have spent years reading smart-contract code, starting with Gnosis Safe in 2018 and moving through the liquidity mining experiments of 2020. One discipline carried over from that work: verify the invariant before trusting the narrative. In an AMM, the invariant is the product of reserves. In a Bitcoin treasury company, the invariant is BTC held per share outstanding. Management can announce billions of yen in BTC purchases, but if total shares expand at a faster rate, each existing share represents a smaller claim on the treasury. The market eventually notices. Metaplanet’s share price has already delivered its verdict. The meaningful denominator is not total Bitcoin, and it is not total market capitalization. It is Bitcoin divided by fully diluted shares. Consider a simplified sequence. Suppose the company issues 10 million new shares to buy 100 Bitcoin. If total shares were previously 90 million and total Bitcoin was 700, the pre-issuance BTC-per-share value was 700 divided by 90 million, or about 0.00000778 BTC per share. After issuance, total Bitcoin stands at 800 and shares stand at 100 million, so BTC per share equals 0.000008. The acquisition adds value because Bitcoin per share rises. Now suppose the CEO exercises 20 million options alongside the same treasury purchase. Shares rise to 120 million and Bitcoin per share drops to 0.00000667. The treasury added real Bitcoin, but existing shareholders own less of it. This is the core tradeoff that Metaplanet has not presented with enough clarity. The incentive structure makes the problem worse. Management rewards are tied to the total number of shares, not to the stability of BTC per share. In 2022, the 20% pool was anchored to a pre-BTC-treasury share count. In 2024, after the BTC strategy had already expanded the share base, the pool was fixed at 319.464 million shares. The arithmetic is uncomfortable. If shareholders are asking to cancel 273 million of those shares, the older pool was roughly 46 million shares. Fixing the absolute number at 319.464 million would make the incentive pool approximately seven times larger than its 2022 scale. Whether by design or by drift, the pool grew when the base was inflated. From the perspective of an existing shareholder, this is indistinguishable from a governance exploit. This is where the analogy to DeFi risk becomes precise. Smart-contract auditors do not judge a project by its marketing. They read the state transitions, look for privileged roles, and ask whether admin keys can drain funds. The equivalent audit for Metaplanet is simple: can the CEO issue new shares without binding constraints that preserve BTC per share? The answer today is yes. The only security assumption is management self-restraint. That is not an assumption I am willing to call an invariant. When an investor trusts a treasury strategy, that investor is effectively lending balance-sheet credibility to a management team that retains unlimited capacity to expand the share count. That is a centralization risk with the same mathematical effect as an admin backdoor in a token contract. Based on my audit experience, the most dangerous vulnerabilities are not the ones hidden in exotic code. They are the ones that everyone sees but nobody encodes into a rule. Gnosis Safe taught me that signature malleability can break a contract if the validity checks are insufficient. The equivalent mistake here is relying on a CEO to announce when dilution is unhealthy. Gerovich’s public admission of insufficient disclosure is useful, but it is not a patch. A patch would include a hard cap on dilution per BTC purchase, a public schedule of option exercises, and a clear separation between the treasury’s capital allocation and the compensation pool. None of those patches have been announced. Zero knowledge isn’t a privacy feature in this context. It is a disclosure standard. When a CEO refuses to reveal the ownership details of a related entity like MMXX Ventures, investors are being asked to run a protocol without seeing its full state. The evidence suggests the entity may be connected to management, but no verifiable proof has been presented. The AMM model hides its truth in the invariant; a Bitcoin treasury hides its truth in the share-count trajectory. Without transparent data on that trajectory, every bullish argument for Metaplanet is an argument about faith in the balance-sheet operator. Faith is not math you can verify. Let me be clear about what Metaplanet is not. It is not a Ponzi scheme. The company buys real Bitcoin with proceeds from equity issuance, and investors can eventually sell their shares or benefit from Bitcoin appreciation. But a Ponzi comparison misses a subtler failure mode. The model can deteriorate into a share-issuance treadmill if Bitcoin enters a prolonged bear market. Management would still want to buy Bitcoin at lower prices, would still issue shares to fund those purchases, and would still see the option pool expand. Existing shareholders would face a choice: sell at a discount or watch their claim on BTC shrink. The structure does not need to be fraudulent to destroy shareholder value. It only needs the cost of new shares to exceed the expected return on newly purchased Bitcoin. This is not a defect that a code audit can catch, because there is no code. But the absence of code is itself the risk. A decentralized protocol can be forked. A management team cannot be forked without a shareholder vote. For Metaplanet, shareholders are trying to perform that fork by demanding cancellation of the new incentive shares. That is the only meaningful governance transaction in sight. Without cancellation, the option pool remains overhanging the market. Each subsequent announcement of a new share issuance will be interpreted as another hidden tax on existing holders, regardless of how many Bitcoin are purchased alongside it. The market signals are already visible. Metaplanet’s year-to-date decline of 43% happened while the Nikkei rose 31%. This is not a macro story; Japanese equities have been strong. Bitcoin, as the treasury asset, has also been positive over the same period. The only structural explanation for Metaplanet’s underperformance is an equity story: a governance discount, a dilution discount, or both. If the company were merely a flawed call option on Bitcoin, the correlation with BTC would be much tighter. Instead, the stock is trading as though its management team is the risk factor. That is precisely what a shareholder audit would conclude if the cap table were treated as executable code. Metaplanet’s competitive position is delicate. MicroStrategy has a much larger balance sheet, longer track record, and more mature performance metric around Bitcoin yield. Metaplanet’s original advantage was geographic: Japanese retail investors seeking Bitcoin exposure without leaving the yen system. But when investors can buy Bitcoin directly, or buy a more transparent vehicle like MicroStrategy, Metaplanet must justify its existence through clean capital structure and reliable disclosure. It has not done so. Instead, it has created a situation where dissident shareholders are publicly demanding that management cancel shares and describe related-party structures. That is not an advertisement for the next Bitcoin treasury company in Tokyo. I don’t trust treasury strategies because they buy Bitcoin. I trust them when the share count is mathematically bounded. The correct mental model for Metaplanet is not a Bitcoin proxy. It is an actively managed, closed-end vehicle that charges its management fee in future dilution rather than cash. That fee is invisible at first. It appears when option exercises are announced, when the pool is re-fixed, or when a shareholder group realizes that 273 million new shares have been loaded into the system. By then, the dilution has already been priced into the stock. This is why the market’s response to Gerovich’s admission matters. A 7% drop after a confession of imperfect disclosure is mild. The deeper risk is the next phase. If management continues to issue shares without tying each issuance to a measurable increase in BTC per share, the stock will continue to decouple from Bitcoin in the wrong direction. If MMXX Ventures is ultimately shown to be more than a passive related entity, the governance issue will transform into a related-party scandal. Investors should treat that possibility as an unpatched vulnerability until management publishes enough data to disprove it. What would a secure version of Metaplanet look like? It would disclose total Bitcoin, fully diluted shares, and the exact BTC-per-share metric on a weekly basis. It would publish a schedule of future option exercises and commit that the compensation pool cannot exceed a fixed percentage of the current share count without a shareholder vote. It would separate the Bitcoin treasury from any affiliated venture capital activity and require all related-party transactions to be public within 48 hours. Those are not onerous standards. They are the same standards an auditor applies to a smart contract when privileged roles exist. The privileged role in this system is the CEO, and the current cap table gives him the ability to expand his own potential upside alongside every treasury purchase. For forward-looking investors, the question is not whether Bitcoin will appreciate. It is whether Metaplanet’s management can exercise the same discipline toward its own compensation pool that it expects from the market. The current evidence points the other way. The stock trades down, the incentive pool trades up, and the shareholders are left asking for visibility. That is not a market inefficiency. It is a missing invariant. The next financing round will reveal more than any interview. Watch the announced share count. Calculate the implied BTC-per-share change. If the CEO announces a $50 million raise at the same time he announces an option exercise, the story is not Bitcoin adoption. It is rent extraction from a moving base. I don’t need another statement of belief in Bitcoin from Simon Gerovich. I need the share ledger to prove that existing holders survive the next page of the cap table. Until that proof is published, Metaplanet is best classified as a high-risk governance experiment. The underlying asset is sound. The wrapper is not. In a protocol, we would call this a vulnerable admin key. In a Bitcoin treasury, we should call it what it is: a disclosure deficit with a 319.464 million share backstop standing behind it. Sell the story, keep the math, and wait for the cancellation vote.