Bitcoin Faces Urgent Need to Counter Quantum Computing Threat

Unlike other aspects of bitcoin, not all components are vulnerable to quantum computer attacks. The process of bitcoin mining, which involves adding new blocks to the blockchain, utilizes a type of mathematics known as hashing that quantum computers are currently unable to breach. As a result, the blockchain itself and the rule that new bitcoins can only be created through mining would survive an attack from a quantum computer. The production of blocks and the continuity of the chain would remain unaffected. However, ownership of bitcoins would be severely compromised. Bitcoin wallets rely on a different form of mathematics, converting a private key into a public address that can be seen by anyone. This mathematics functions easily in one direction but is extremely difficult to reverse, which is the primary obstacle preventing unauthorized individuals from spending someone else's coins. The first part of this series on quantum computing delved into the physics behind it, explaining how a quantum computer is fundamentally different from a regular computer, operating at extremely low temperatures and small scales where particles exhibit unique behaviors not observed elsewhere on Earth. The second part explored the implications of quantum computing on bitcoin, highlighting how bitcoin wallets depend on a one-way mathematical problem. While converting a private key into a public address takes milliseconds, reversing the process would take a conventional computer longer than the age of the universe. A quantum algorithm known as Shor's algorithm significantly reduces this time gap. A recent paper by Google demonstrated that such an attack could be executed with fewer resources than previously estimated, and within a timeframe that competes with bitcoin's block times. This final piece in the series focuses on the response to this threat, examining what is at risk, the actions bitcoin has taken, and whether a network designed to resist coordinated changes can implement the largest security upgrade in its history before quantum hardware becomes a reality. The vulnerable pool of bitcoins is substantial, with approximately 6.9 million bitcoins, roughly one-third of all mined bitcoins, stored in wallets with publicly visible keys on the blockchain. This includes early bitcoins from the network's initial years, stored in an address format that published the public key by default, as well as any wallet that has been spent from, as spending reveals the key for the remaining balance. A quantum attacker would not need to rush against an ongoing transaction but could instead work through the wallets with exposed keys at their leisure. This includes the roughly 1 million bitcoins held by Satoshi Nakamoto, bitcoin's pseudonymous creator, which have remained untouched since the network's early days and are now in the exposed category. The 2021 Taproot upgrade inadvertently expanded the problem by changing how bitcoin addresses work, aiming to make transactions more efficient and private. However, this change had the side effect of publishing the key that protects the remaining balance at an address whenever bitcoin is spent, a tradeoff considered reasonable at the time due to the perceived longer timeline for quantum threats. Currently, there are efforts underway to address the quantum threat, although nothing concrete has emerged from Bitcoin developers. In contrast, Ethereum, a major competitor, has had a formal quantum-resistant program in place since 2018, with the Ethereum Foundation supporting four full-time teams working on migration and over ten independent developer groups testing networks weekly. Ethereum has outlined specific upgrades across four upcoming network-wide changes to transition its security to quantum-resistant mathematics and has even launched a dedicated website to track progress. Bitcoin lacks a comparable strategy, although there are proposals, such as BIP-360, which suggests adding new quantum-safe address types that holders could migrate to voluntarily, and a proposal from BitMEX Research to implement a detection system that triggers defensive actions upon observing a quantum attack on the network. Neither proposal has gained broad support from bitcoin's core developers, and they address different aspects of the problem. Prominent bitcoin advocate Nic Carter has highlighted the urgency, stating that the elliptic curve cryptography securing bitcoin wallets is on the verge of obsolescence and praising Ethereum's approach as 'best in class' while criticizing bitcoin's as 'worst in class'. Adam Back, CEO of Blockstream and an early bitcoin contributor, agrees on the need for preparation but disagrees on the immediacy of the threat, suggesting that bitcoin should prepare with optional upgrades in advance rather than waiting for a crisis. The main challenge in implementing effective solutions against the quantum threat is not the mathematics itself but the coordination within the bitcoin network. Bitcoin's development culture, which treats any central authority as a failure and emphasizes rare and difficult protocol changes, has kept the network stable but makes addressing the quantum problem structurally harder. Migrating the exposed 6.9 million coins requires decisions that the network has historically avoided, such as whether to freeze old address formats to protect coins from future theft, allow exposed coins to move to new quantum-safe addresses, or determine the fate of coins whose owners cannot or will not migrate. The situation with Satoshi's coins is particularly poignant, as freezing old formats would protect the coins but make them inaccessible, including to Satoshi, while leaving them open means they remain a potential target for quantum attackers. Setting a migration deadline would force Satoshi to either move the coins, revealing ownership, or risk losing them. Every option would change bitcoin's character in ways the network has refused to alter. The recent Google paper frames the industry's stance, suggesting that a successful attack on bitcoin's mathematics should not be seen as a wake-up call but potentially as a signal that the window for adopting post-quantum cryptography has already closed. This implies that by the time the threat becomes apparent, it may be too late to respond. Developers face the question of whether a network built to resist change can coordinate the largest security upgrade in its history before quantum hardware becomes a reality. Ethereum's head start suggests the importance of starting now, while bitcoin's governance culture indicates a likelihood of waiting until the threat is demonstrated before acting. Only one of these approaches will be effective if the timeline proves shorter than estimated.