Bitcoin Faces Quantum Threat: Can It Upgrade Security Before It's Too Late?

Not all aspects of bitcoin are vulnerable to quantum computers. The process of mining, which involves adding new blocks to the blockchain, relies on a type of mathematics called hashing that quantum computers are unable to break. As a result, the ledger and the rule that new bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership would be compromised. Bitcoin wallets are secured by a different type of mathematics that converts a private key into a public address. This math works in one direction but not the other, preventing unauthorized individuals from spending coins. A quantum algorithm known as Shor's algorithm can bridge this gap. A recent paper by Google demonstrated that this attack could be carried out with fewer resources than previously thought, and within a time frame that competes with bitcoin's block times. This article, the final installment in a series, discusses the potential consequences and the response of the bitcoin network. Approximately 6.9 million bitcoins, equivalent to one-third of all mined coins, are stored in wallets with publicly visible keys. A quantum attacker would not need to rush against an ongoing transaction; instead, they could systematically target wallets with exposed keys at their own pace. This includes the approximately 1 million bitcoins held by bitcoin's pseudonymous creator, Satoshi Nakamoto, which have remained untouched since the network's early days. The 2021 Taproot upgrade inadvertently exacerbated the issue by making bitcoin addresses more efficient and private, but also publishing the key protecting any remaining balance at an address. While the quantum threat has sparked intense debate, bitcoin developers have yet to propose a concrete plan. In contrast, Ethereum has had a formal quantum-resistant program in place since 2018, with four teams working full-time on the migration and multiple independent developer groups testing networks weekly. Bitcoin has no equivalent strategy, although there are proposals, such as BIP-360, which would introduce new quantum-safe address types, and a competing proposal from BitMEX Research, which would implement a detection system to trigger defensive action in the event of a quantum attack. However, neither proposal has broad support from bitcoin's core developers, and they address different aspects of the problem. The biggest challenge in implementing effective solutions is the coordination problem. Bitcoin's migration is more complex than Ethereum's due to its lack of a central authority and governance process. The network's development culture treats any central authority as a failure mode, and its social consensus holds that changes to the protocol should be rare and difficult. This has kept the network stable for nearly two decades but makes the quantum problem structurally harder to solve. Migrating the 6.9 million exposed coins requires decisions that the network has avoided for twenty years. The Google paper's conclusion is that a successful attack on bitcoin's math should not be seen as a wake-up call to adopt post-quantum cryptography, but rather as a potential signal that adoption has already failed. This means that by the time the threat becomes apparent, the window to respond may have already closed. Developers are now faced with the question of whether a network built to resist coordinated change can coordinate the biggest security upgrade in its history before the hardware catches up to the theory.