A prominent Bitcoin developer has created a solution to a long-debated issue: a method to retrieve funds from ordinary wallets in the event of a network upgrade to defend against quantum computer attacks. This solution comes in the form of a working prototype. In the face of a quantum threat, a proposed emergency soft fork for Bitcoin involves disabling the Taproot key spend path, essentially converting it into a form similar to BIP-360, assuming a precautionary soft fork to add a post-quantum cryptographic mechanism has been implemented.
Olaoluwa "Roasbeef" Osuntokun, chief technology officer at Lightning Labs, introduced the working prototype to the Bitcoin developer mailing list on April 8. The tool addresses a significant vulnerability in Bitcoin's long-term defense strategy, where an "emergency brake" upgrade designed to protect the network from quantum attacks could inadvertently lock millions of users out of their funds.
Osuntokun's proposal serves as a potential escape route. Bitcoin relies on encryption that could theoretically be compromised by powerful quantum computers, allowing attackers to seize funds by exploiting public data on the blockchain to obtain private keys.
A leading proposal, BIP-360, was merged into Bitcoin's improvement repository in February as a draft, offering users a new, quantum-resistant wallet type to migrate their funds into before any potential threat arises. However, migration is time-consuming, and not all users will make the transition in time.
This is why developers have been exploring a more drastic backup plan — the "emergency brake." Every Bitcoin transaction is currently authorized by a digital signature, a piece of cryptographic math that proves the sender owns the coins. These signatures are precisely what a quantum computer could forge. The emergency brake would shut off Bitcoin's current signature system network-wide before an attacker could start draining wallets, essentially cutting power to the locks when the keys have been copied. The issue arises with users still inside the system.
Most modern wallets, particularly the single-user Taproot wallets introduced to Bitcoin in 2021 and now prevalent across the ecosystem, rely solely on the signature system to authorize spending. If this system is disabled, those wallets would have no alternative method to prove ownership, leaving the coins inside them stranded and inaccessible even to their rightful owners.
The same upgrade intended to protect users could permanently freeze them out. Osuntokun's prototype is designed to provide those wallets with an alternative. Instead of using a digital signature to prove ownership — the mechanism a quantum attack would break and the emergency upgrade would disable — his system allows a user to mathematically prove they were the original creator of the wallet, using the secret "seed" from which every Bitcoin wallet is generated.
Crucially, the proof does not require revealing the seed itself, so using it to rescue one wallet does not compromise any others derived from the same seed. In effect, it replaces the need to sign a transaction with the ability to prove the wallet's origin.
The prototype is already functional, with a proof generation time of about 55 seconds and verification taking under two seconds on a high-end consumer MacBook. The resulting proof file is roughly 1.7 MB, similar in size to a high-resolution image. Osuntokun built the system as a side project, and it remains unoptimized.
Currently, there is no formal proposal to integrate it into the Bitcoin blockchain, no deployment timeline, and developers are divided on the urgency of the quantum threat. Academic researchers note that many quantum "breakthroughs" rely on simplified test conditions, and large-scale attacks on Bitcoin's mining system would face significant physical limitations. However, the risk to exposed wallets is considered real enough that developers have been planning defensive upgrades for years.
Market uncertainty reflects this, with traders on Polymarket assigning a roughly 28% chance that BIP-360 will be implemented by 2027. The prototype fills a theoretical gap by providing a means to protect Bitcoin from future threats without the collateral damage of locking users out of their wallets.