Time is Running Out for Bitcoin to Address Quantum Computing Threat, Putting 6.9 Million BTC at Risk
Not all aspects of bitcoin are vulnerable to quantum computers. The process of mining, which involves adding new blocks to the blockchain, uses a type of mathematics called hashing that quantum computers cannot effectively break. As a result, the blockchain itself and the rule that new bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership of bitcoins is a different story. Bitcoin wallets rely on a specific type of mathematics that converts a private key into a public address. This math works in one direction but not the other, preventing unauthorized individuals from spending someone else's coins. A quantum algorithm known as Shor's algorithm can bypass this limitation, and a recent paper by Google demonstrated that such an attack could be carried out with fewer resources than previously thought. This article explores the potential risks and the response of the bitcoin community to the quantum threat. Approximately 6.9 million bitcoins, or about one-third of all mined bitcoins, are stored in wallets with publicly visible keys, making them vulnerable to quantum attacks. This includes early bitcoins stored in outdated address formats and any wallet that has been used for transactions, as spending reveals the public key. A quantum attacker would not need to compete with ongoing transactions but could instead target these exposed wallets one by one. Even Satoshi Nakamoto's estimated 1 million untouched bitcoins are at risk. The 2021 Taproot upgrade inadvertently expanded the problem by publishing the key protecting any remaining balance at an address after a transaction. While the quantum threat has sparked debate, no concrete plan has emerged from bitcoin developers. In contrast, Ethereum has had a formal quantum-resistant program since 2018 and is actively working on migrating its security to quantum-resistant mathematics. Bitcoin has proposals like BIP-360 for new quantum-safe address types and a detection system to trigger defensive actions in case of a quantum attack, but these lack broad support from core developers. The challenge for bitcoin lies in its governance culture, which resists coordinated changes and treats central authority as a failure mode. This makes implementing effective solutions against the quantum threat more difficult. The migration of 6.9 million exposed coins requires decisions that the network has historically avoided, such as freezing old address formats or allowing exposed coins to move to new quantum-safe addresses. Every option changes the character of bitcoin in ways it has refused to change in the past. The question now is whether the network can coordinate the biggest security upgrade in its history before the threat becomes real.