Time Running Out for Bitcoin to Mitigate Quantum Threat

Not all aspects of Bitcoin are vulnerable to quantum computers. The process of mining, which involves adding new blocks to the blockchain, utilizes a type of mathematics called hashing that quantum computers are unable to break. As a result, the ledger and the rule that new Bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership would be severely compromised. Bitcoin wallets are secured by a different kind of mathematics that converts a private key into a public address. This math functions effortlessly in one direction but is extremely challenging in the other, making it the primary barrier preventing unauthorized individuals from spending coins. A quantum algorithm known as Shor's algorithm can bridge this gap, and a recent paper by Google demonstrated that this attack could be executed with far fewer resources than previously estimated. This article, the final installment in a series, explores the potential consequences and Bitcoin's response to the quantum threat. Approximately 6.9 million Bitcoins, equivalent to one-third of all mined coins, are stored in wallets with publicly visible keys, making them susceptible to quantum attacks. This includes early Bitcoins from the network's inception, which were stored in an address format that published the public key by default, as well as any wallet that has been spent from, as spending reveals the key for the remaining balance. A quantum attacker would not need to compete with an ongoing transaction; instead, they could systematically target wallets with exposed keys at their own pace. Bitcoin's pseudonymous creator, Satoshi Nakamoto, holds around 1 million Bitcoins that have remained untouched since the network's early days and are now categorized as exposed. The 2021 Taproot upgrade inadvertently expanded the problem by making transactions more efficient and private. As a result, any Bitcoin spent since Taproot's activation has published the key protecting the remaining balance at that address. While the quantum threat has sparked intense debate in recent months, and other blockchains are preparing, Bitcoin developers have yet to propose a concrete plan. Ethereum, a major competitor, has had a formal quantum-resistant program in place since 2018, with four teams working full-time on the migration and multiple independent developer groups creating weekly test networks. In contrast, Bitcoin lacks a equivalent strategy. There are, however, efforts to address the issue, including a formal proposal called BIP-360, which would introduce new quantum-safe address types, and a competing proposal from BitMEX Research that would implement a detection system to trigger defensive action in the event of a quantum attack. Neither proposal has garnered broad support from Bitcoin's core developers, and they only address half of the problem. The biggest challenge in implementing effective solutions is Bitcoin's coordination problem. The network's migration is more complex than Ethereum's due to the lack of a central authority and a governance process. Bitcoin's development culture emphasizes decentralization and treats any central authority as a failure mode, making it structurally harder to solve the quantum problem. Migrating the 6.9 million exposed coins requires decisions that the network has avoided for twenty years. The Google paper's framing suggests that a successful attack on Bitcoin's math should not be seen as a wake-up call to adopt post-quantum cryptography but rather as a potential signal that adoption has already failed. This implies that by the time the threat becomes apparent, the window to respond may have already closed. Developers are now faced with the question of whether a network built to resist coordinated change can coordinate the biggest security upgrade in its history before the hardware catches up to the theory.