A prominent Bitcoin developer has successfully created a long-debated solution to rescue standard wallets in the event of a quantum computer attack on the network. The proposed emergency soft fork for Bitcoin involves disabling the Taproot keyspend path, effectively transforming it into a form resembling BIP-360. Olaoluwa 'Roasbeef' Osuntokun, chief technology officer at Lightning Labs, introduced the functional prototype in a post to the Bitcoin developer mailing list on April 8. The tool addresses a significant flaw in Bitcoin's long-term defense strategy, where a widely discussed 'emergency brake' upgrade designed to protect the network from quantum attacks could also lock millions of users out of their funds.
Osuntokun's proposal provides a potential escape route. Bitcoin's current encryption method could be compromised by powerful quantum computers, allowing attackers to seize funds by exploiting public data on the blockchain to obtain private keys.
One proposed solution, BIP-360, was drafted into Bitcoin's improvement-proposal repository in February, offering users a new, quantum-resistant wallet type to migrate their funds into before any potential threat. However, migration takes time, and not all users will move their funds in time. This is where the 'emergency brake' comes into play. The emergency brake would shut off Bitcoin's current signature system network-wide to prevent an attacker from draining wallets.
The issue arises when considering the impact on users still using the current system. Most modern wallets, especially Taproot wallets introduced in 2021, rely solely on the signature system to authorize spending. If this system is disabled, those wallets would have no alternative method to prove ownership, resulting in stranded coins that even the rightful owners could not access.
Osuntokun's prototype offers a solution by providing a secondary method for wallets to prove ownership. Instead of using a digital signature, which a quantum attack would compromise and the emergency upgrade would disable, the system allows a user to mathematically prove they were the original creator of the wallet using the secret 'seed' that every Bitcoin wallet is generated from. This proof does not require revealing the seed itself, ensuring that using it to rescue one wallet does not compromise any others derived from the same seed.
The prototype is already functional, with the proof generation taking approximately 55 seconds and verification taking under two seconds on a high-end consumer MacBook. The resulting proof file is roughly 1.7 MB in size. Although the system was built as a side project and remains unoptimized, it closes a significant gap in theory by providing a potential means to protect Bitcoin from future threats without causing collateral damage to users' wallets.