A prominent Bitcoin developer has created a solution to a long-debated issue: a method to rescue standard wallets in the event the network must defend against a quantum computer. This solution has been a topic of discussion within the community for years but had not been successfully developed until now. In the face of a quantum adversary, a commonly proposed emergency soft fork for Bitcoin involves disabling the Taproot key spend path, which would essentially render it similar to BIP-360, assuming a precautionary soft fork to add post-quantum cryptography has been implemented.
Olaoluwa 'Roasbeef' Osuntokun, Lightning Labs' Chief Technology Officer, unveiled the functional prototype in an April 8 post to the Bitcoin developer mailing list. The tool addresses a specific vulnerability in Bitcoin's long-term defense strategy - a widely discussed 'emergency brake' upgrade designed to protect the network from quantum attacks, which could also inadvertently lock millions of users out of their funds. Osuntokun's proposal serves as a safety net.
Bitcoin relies on a form of encryption that could theoretically be compromised by powerful quantum computers. If this were to happen, publicly available data on the blockchain could be used to obtain private keys, enabling attackers to steal funds. One leading proposal, known as BIP-360, was merged into Bitcoin's improvement-proposal repository in February as a draft.
It would provide users with a new, quantum-resistant type of wallet to transfer their funds into before any potential threat. However, migration takes time, and not all users will make the transition in time. This is why developers have also been discussing a more drastic backup plan - the 'emergency brake.' Every Bitcoin transaction currently requires a digital signature, a piece of cryptographic math that verifies the sender owns the coins. These signatures are precisely what a quantum computer could forge.
The emergency brake would shut off Bitcoin's current signature system network-wide before an attacker could start draining wallets. The issue arises with what happens to users who have not migrated.
Most modern wallets, especially the single-user Taproot wallets introduced to Bitcoin in 2021 and now prevalent across the ecosystem, rely solely on the signature system to authorize spending. If this system is disabled, those wallets would have no alternative method to prove ownership. The coins within them would be stranded, inaccessible even to their rightful owners.
The same upgrade designed to protect users could also permanently freeze them out. Osuntokun's prototype is designed to provide those wallets with an alternative. Instead of using a digital signature - the mechanism a quantum attack would break and the emergency upgrade would disable - his system allows a user to mathematically prove they were the original creator of the wallet, using the secret 'seed' from which every Bitcoin wallet is generated.
Crucially, the proof does not require revealing the seed itself, so using it to rescue one wallet does not compromise any other wallets derived from the same seed. In effect, it replaces 'I can sign this transaction' with 'I can prove this wallet came from me.' The prototype is already functional.
On a high-end consumer MacBook, generating the proof took approximately 55 seconds, while verification took less than two seconds. The resulting proof file was roughly 1.7 MB, about the size of a high-resolution image.
Osuntokun stated that the system was built as a side project and remains unoptimized. Currently, there is no formal proposal to integrate it into the Bitcoin blockchain, no deployment timeline, and developers remain divided on the urgency of the quantum threat.
Academic researchers note that many widely cited quantum 'breakthroughs' rely on simplified test conditions, and large-scale attacks on Bitcoin's mining system would encounter physical limits. However, the risk to exposed wallets is considered real enough that developers have been designing defensive upgrades for years. Markets reflect this uncertainty. On Polymarket, traders currently assign roughly a 28% chance that BIP-360 will be implemented by 2027.
The prototype closes a theoretical gap: how to protect Bitcoin from a future threat without the collateral damage of locking users out of their wallets.