Bitcoin's Quantum Conundrum: A Race Against Time to Safeguard 6.9 Million Coins

Not all aspects of bitcoin are vulnerable to quantum computer attacks. The process of bitcoin mining, which involves adding new blocks to the blockchain, utilizes a type of mathematics called hashing that is resistant to quantum computing. Consequently, the ledger and the rule governing bitcoin creation through mining would remain intact in the event of a quantum attack, with blocks continuing to be produced and the chain remaining operational. However, ownership is a different matter. Bitcoin wallets rely on a distinct mathematical concept that converts a private key into a public address. This math functions effortlessly in one direction but is impractical in the other, serving as the sole barrier preventing unauthorized individuals from spending coins. A quantum algorithm known as Shor's algorithm can bridge this gap. A recent paper by Google demonstrated that this attack could be executed with significantly fewer resources than previously estimated, and within a timeframe that competes with bitcoin's block times. This article, the final installment in a series, focuses on the response to this threat. It examines what is at risk, the measures bitcoin has taken, and whether a network designed to resist coordinated change can implement the most substantial security upgrade in its history before quantum hardware becomes a reality. Approximately 6.9 million bitcoin, equivalent to one-third of all mined coins, are stored in wallets with publicly visible keys on the blockchain. This includes early bitcoin and any wallet that has been spent from, as spending reveals the key for any remaining balance. A quantum attacker would not need to compete with an ongoing transaction; instead, they could systematically target wallets with exposed keys at their leisure. Bitcoin's pseudonymous creator, Satoshi Nakamoto, holds around 1 million bitcoin that has remained untouched since the network's inception and now falls into the exposed category. The 2021 Taproot upgrade inadvertently expanded the problem by making bitcoin addresses more efficient and private, but also publishing the key protecting any remaining balance at an address. While the quantum threat has sparked intense debate, no concrete solution has emerged from bitcoin developers. In contrast, Ethereum has had a formal quantum-resistant program in place since 2018, with four teams working full-time on the migration and a dedicated website to track progress. Bitcoin lacks a comparable strategy, although there are proposals, such as BIP-360, which suggests introducing new quantum-safe address types, and a competing proposal from BitMEX Research to implement a detection system that triggers defensive action in the event of a quantum attack. Neither proposal has garnered broad support from bitcoin's core developers, and they address different aspects of the problem. The biggest challenge in implementing effective solutions lies in bitcoin's governance structure, which treats central authority as a failure mode and emphasizes rare and difficult protocol changes. This has kept the network stable for nearly two decades but makes addressing the quantum problem more difficult. Migrating the 6.9 million exposed coins requires decisions that the network has historically avoided, such as whether to freeze old address formats or allow exposed coins to move to new quantum-safe addresses. Every option would alter bitcoin's character in ways the network has traditionally refused to change. The future of bitcoin's quantum resistance hangs in the balance, with developers facing the question of whether the network can coordinate a significant security upgrade before the threat becomes a reality.