Time Running Out for Bitcoin to Mitigate Quantum Computing Threat
Not all aspects of bitcoin are vulnerable to quantum computer attacks. The process of bitcoin mining, which utilizes a type of math known as hashing, is secure against quantum computers. The blockchain itself and the rule that new bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership of bitcoins is at risk due to the use of a different kind of math to protect wallets. This math, which converts a secret private key into a public address, can be broken by a quantum computer using an algorithm called Shor's, potentially allowing an attacker to drain 6.9 million bitcoins, including those owned by Satoshi Nakamoto. The exposed pool of bitcoins includes early coins stored in addresses that published public keys by default, as well as any wallet that has been spent from, revealing the key for the remaining balance. A quantum attacker could work through these wallets at their own pace, without needing to race against transactions in progress. The 2021 Taproot upgrade has expanded the problem by publishing the key protecting remaining bitcoin at an address after a transaction. While other blockchains, such as Ethereum, are preparing for the quantum threat with formal programs and dedicated teams, Bitcoin developers have yet to propose a concrete strategy. There are some formal proposals, such as BIP-360, which would add new quantum-safe address types, and a competing proposal from BitMEX Research for a detection system to trigger defensive action in case of a quantum attack. However, these proposals lack broad support and solve different parts of the problem. The main challenge in implementing effective solutions is Bitcoin's governance culture, which treats any central authority as a failure mode and makes changes to the protocol rare and hard. Migrating the exposed coins requires decisions that the network has spent years avoiding, such as freezing old address formats or allowing exposed coins to move to new quantum-safe addresses. Every option changes Bitcoin's character in ways the network has historically refused to change. The question now is whether the network can coordinate the biggest security upgrade in its history before the threat becomes a reality.