A prominent Bitcoin developer has created a long-debated solution to rescue standard wallets in the event of the network being forced to defend against a quantum computer. The proposed emergency soft fork for Bitcoin involves disabling the Taproot key spend path, effectively transforming it into a mechanism resembling BIP-360, assuming a precautionary soft fork to add a post-quantum extension has been implemented. Olaoluwa 'Roasbeef' Osuntokun, Chief Technology Officer at Lightning Labs, unveiled the working prototype in a post to the Bitcoin developer mailing list on April 8. The tool addresses a significant flaw in Bitcoin's long-term defense plan, where an 'emergency brake' upgrade intended to protect the network from quantum attacks could also lock millions of users out of their funds.
Osuntokun's proposal provides an escape mechanism. Bitcoin relies on a form of encryption that could theoretically be broken by powerful quantum computers, allowing attackers to seize funds by turning public data into private keys.
A leading proposal, BIP-360, was merged into Bitcoin's improvement-proposal repository in February as a draft, offering users a new, quantum-resistant wallet type to migrate their funds into before any threat arises. However, migration takes time, and not everyone will move in time, prompting discussions about a more drastic backstop – the 'emergency brake.' Every Bitcoin transaction is authorized by a digital signature, which is exactly what a quantum computer could forge.
The emergency brake would shut off Bitcoin's current signature system network-wide before an attacker could start draining wallets. The problem lies in what happens to users still using the old system. Most modern wallets, especially single-user Taproot wallets introduced in 2021, rely solely on the signature system to authorize spending.
If it is disabled, those wallets have no alternative way to prove ownership, leaving the coins inside them stranded and untouchable even by their rightful owners. Osuntokun's prototype is designed to give those wallets an alternative. Instead of proving ownership with a digital signature, his system lets a user mathematically prove they were the one who originally created the wallet using the secret 'seed' that every Bitcoin wallet is generated from. The proof does not require revealing the seed itself, so using it to rescue one wallet does not compromise any others derived from the same seed.
In effect, it replaces 'I can sign this transaction' with 'I can prove this wallet came from me.' The prototype is already functional, with the proof generation taking about 55 seconds and verification under two seconds on a high-end consumer MacBook. The resulting proof file was roughly 1.7 MB, similar in size to a high-resolution image.
Osuntokun built the system as a side project, and it remains unoptimized. Currently, there is no formal proposal to add it to the Bitcoin blockchain, no deployment timeline, and developers remain divided on the urgency of the quantum threat. Academic researchers note that many quantum 'breakthroughs' rely on simplified test conditions, and large-scale attacks on Bitcoin's mining system would run into physical limits. However, the risk to exposed wallets is considered real enough that developers have been sketching defensive upgrades for years.
Markets reflect this uncertainty, with traders currently assigning a roughly 28% chance that BIP-360 is implemented by 2027. The prototype closes a gap that had lingered in theory: how to protect Bitcoin from a future threat without locking users out of their wallets.