Bitcoin Faces Quantum Computing Threat: Can It Adapt to Prevent Catastrophic Losses?

Not all aspects of bitcoin are vulnerable to quantum computer attacks. The process of mining, which involves adding new blocks to the blockchain, uses a type of mathematics called hashing that quantum computers are unable to break. Consequently, the ledger itself and the rule that new bitcoins can only be created through mining would survive a quantum attack. However, ownership is a different matter. Bitcoin wallets are protected by a distinct kind of mathematics that converts a secret private key into a public address that anyone can see. This math works effortlessly in one direction but is impractical in the other, and it is the sole barrier preventing a stranger from spending your coins. A quantum algorithm known as Shor's collapses this gap, and Google's recent paper demonstrated that the attack could be executed with far fewer resources than previously estimated, within a timeframe that competes with bitcoin's own block times. Approximately 6.9 million bitcoins, roughly one-third of all mined coins, are stored in wallets whose public keys are already permanently visible on the blockchain. This includes early bitcoins from the network's first years, stored in an address format that published the public key by default, as well as any wallet that has ever been spent from, since spending reveals the key for any remaining balance. A quantum attacker would not need to compete with an ongoing transaction; instead, they could work through the wallets with exposed keys at their own pace, one by one. Bitcoin's pseudonymous creator, Satoshi Nakamoto, holds roughly 1 million bitcoins, untouched since the network's early days, and this stack now falls into the exposed category. The 2021 Taproot upgrade expanded the problem by making any bitcoin spent since its activation publish the key protecting the remaining balance at that address. While the quantum threat has sparked intense debate in recent months, and other blockchains are preparing, nothing concrete has emerged from Bitcoin developers yet. Ethereum, a major competitor, has had a formal quantum-resistant program in place since 2018, with four teams working full-time on the migration and more than ten independent developer groups shipping weekly test networks. Bitcoin has no equivalent strategy so far, although there are efforts to solve the problem, such as the BIP-360 proposal, which would add new quantum-safe address types, and a competing proposal from BitMEX Research, which would install a detection system to trigger defensive action if a quantum attack is observed. However, neither proposal has broad support from bitcoin's core developers, and they address different aspects of the problem. The biggest challenge in implementing effective solutions is the coordination problem. Bitcoin's migration is harder than Ethereum's due to its lack of a central authority and governance process. The network's development culture treats any central authority as a failure mode, and its social consensus holds that changes to the protocol should be rare and difficult. This has kept the network stable for nearly two decades but makes the quantum problem structurally harder for bitcoin to solve. Migrating the 6.9 million exposed coins requires decisions the network has spent twenty years avoiding, such as whether old address formats should be frozen after a certain date to protect coins from future theft, or whether exposed coins should be allowed to move to new quantum-safe addresses using their original keys. Every option changes bitcoin's character in ways the network has historically refused to change it. The Google paper's framing suggests that a successful attack on bitcoin's math should not be seen as a wake-up call to adopt post-quantum cryptography but as a potential signal that adoption has already failed. This means that by the time the threat becomes visible, the window to respond may already have closed. Developers now face the question of whether a network built to resist coordinated change can coordinate the biggest security upgrade in its history before the hardware catches up to the theory. Ethereum's eight-year head start suggests that starting now is the correct answer, but bitcoin's governance culture suggests that waiting until the threat is demonstrated may be the likely approach. Only one of these answers will work if the timeline turns out to be shorter than estimated.