Time Runs Out for Bitcoin to Counter Quantum Threat as 6.9 Million BTC, Including Satoshi's, Are at Risk
Not all aspects of bitcoin are vulnerable to quantum computers. The process of bitcoin mining, which utilizes a type of mathematics known as hashing, is secure against quantum attacks. The blockchain itself and the rule that new bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership of bitcoins is a different story. Bitcoin wallets rely on a specific type of mathematics that converts a private key into a public address. This math allows for easy conversion in one direction but is virtually impossible in the other, preventing unauthorized access to coins. A quantum algorithm known as Shor's algorithm can bypass this security measure, and recent research has shown that such an attack could be carried out with fewer resources than previously thought. This piece explores the potential risks, the current state of bitcoin's response, and whether the network can coordinate a significant security upgrade before quantum computing technology advances. Approximately 6.9 million bitcoins, roughly one-third of all mined coins, are stored in wallets with publicly visible keys, making them susceptible to quantum attacks. This includes early bitcoins and any wallet that has been used for transactions, as spending reveals the public key. Bitcoin's creator, Satoshi Nakamoto, holds around 1 million bitcoins that are also at risk. The 2021 Taproot upgrade inadvertently increased the problem by making bitcoin addresses more efficient and private but also publishing the key protecting remaining coins at an address. While there is ongoing debate and some proposals, such as BIP-360 and a detection system from BitMEX Research, bitcoin developers have yet to agree on a concrete plan. In contrast, Ethereum has been working on a formal quantum-resistant program since 2018, with multiple teams and developer groups involved. The challenge for bitcoin lies in its governance structure, which is designed to resist coordinated change, making it difficult to implement the necessary upgrades. The question remains whether bitcoin can overcome its structural hurdles to migrate to quantum-safe addresses before it's too late.