A leading Bitcoin developer has created a solution that the community has long discussed but never implemented: a method to rescue standard wallets in the event that the network must defend itself against a quantum computer. In the face of a quantum adversary, a commonly proposed emergency soft fork for Bitcoin involves disabling the Taproot key spend path, effectively transforming it into something resembling BIP-360, assuming an existing precautionary soft fork to add a post-quantum cryptographic scheme. Olaoluwa 'Roasbeef' Osuntokun, chief technology officer at Lightning Labs, unveiled the working prototype in an April 8 post to the Bitcoin developer mailing list. The tool addresses a specific vulnerability in Bitcoin's long-term defense strategy, a widely discussed 'emergency brake' upgrade intended to safeguard the network from quantum attacks, which could also inadvertently lock millions of users out of their funds.
Osuntokun's proposal offers an escape route. Bitcoin relies on a form of encryption that could theoretically be compromised by sufficiently powerful quantum computers. If this occurs, publicly visible data on the blockchain could be converted into private keys, allowing attackers to seize funds. One prominent proposal, known as BIP-360, was incorporated into Bitcoin's improvement proposal repository in February as a draft.
It would provide users with a new, quantum-resistant type of wallet to migrate their funds into ahead of any potential threat. However, migration takes time, and not everyone will make the transition in time.
This is why developers have also been exploring a more drastic backup plan — the 'emergency brake.' Every Bitcoin transaction is currently authorized by a digital signature, a piece of cryptographic math that verifies the sender owns the coins. These signatures are precisely what a quantum computer could forge.
The emergency brake would shut off Bitcoin's current signature system network-wide before an attacker could begin draining wallets. The issue arises when considering what happens to everyone still using the old system.
Most modern wallets, especially the single-user Taproot wallets introduced to Bitcoin in 2021 and now prevalent across the ecosystem, rely solely on that signature system to authorize spending. If it is disabled, those wallets have no alternative method to prove ownership. The coins within them would be stranded, inaccessible even to their rightful owners.
The same upgrade designed to protect users could also permanently freeze them out. Osuntokun's prototype is designed to provide those wallets with an alternative.
Instead of proving ownership through a digital signature — the mechanism a quantum attack would break and the emergency upgrade would disable — his system allows a user to mathematically prove they were the original creator of the wallet, using the secret 'seed' from which every Bitcoin wallet is generated. Crucially, the proof does not require revealing the seed itself, so using it to rescue one wallet does not compromise any other wallets derived from the same seed. In effect, it replaces 'I can sign this transaction' with 'I can prove this wallet came from me.' The prototype is already functional.
Running on a high-end consumer MacBook, generating the proof took approximately 55 seconds, while verification took less than two seconds. The resulting proof file was roughly 1.7 MB, about the size of a high-resolution image. Osuntokun stated that the system was built as a side project and remains unoptimized.
Currently, there is no formal proposal to integrate it into the Bitcoin blockchain, no deployment timeline, and developers remain divided on the urgency of the quantum threat. Academic researchers note that many widely cited quantum 'breakthroughs' rely on simplified test conditions, and large-scale attacks on Bitcoin's mining system would encounter hard physical limits. However, the risk to exposed wallets is considered significant enough that developers have been outlining defensive upgrades for years. Markets reflect this uncertainty.
On Polymarket, traders currently assign approximately a 28% chance that BIP-360 will be implemented by 2027. The prototype closes a gap that had lingered in theory: how to safeguard Bitcoin from a future threat without the collateral damage of locking users out of their wallets.