Time Is Running Out for Bitcoin to Counter Quantum Computing Threats
Not all aspects of bitcoin are vulnerable to quantum computers. The process of bitcoin mining, which involves the addition of new blocks to the blockchain, utilizes a type of mathematics known as hashing that quantum computers are unable to breach meaningfully. The blockchain itself and the rule that new bitcoins can only be created through mining would survive a quantum attack. However, ownership would be severely compromised. Bitcoin wallets are secured by a different mathematical approach that transforms a private key into a public address that can be seen by anyone. This math functions effortlessly in one direction but not the other, and it is the sole barrier preventing a stranger from spending your coins. A significant portion of bitcoin, approximately 6.9 million, is at risk due to exposed public keys. This includes early bitcoin stored in an address format that published the public key by default, as well as any wallet that has been spent from, as spending reveals the key for the remaining balance. A quantum attacker would not need to compete with an ongoing transaction; instead, they could systematically work through wallets with exposed keys at their own pace. Bitcoin's pseudonymous creator, Satoshi Nakamoto, holds about 1 million bitcoin that has been untouched since the network's early days and is now in the exposed category. The 2021 Taproot upgrade inadvertently expanded the issue. Taproot is a modification to how bitcoin addresses function, intended to make transactions more efficient and private. A side effect was that any bitcoin spent after Taproot's activation has published the key protecting the remaining balance at that address. While the quantum threat has sparked intense debate and other blockchains are preparing, no concrete plan has emerged from Bitcoin developers yet. Ethereum, a major competitor, has had a formal quantum-resistant program in place since 2018. The Ethereum Foundation runs multiple teams working full-time on the migration, with numerous independent developer groups releasing weekly test networks. Bitcoin, however, lacks a comparable strategy. There are efforts to address the issue, including a formal proposal known as BIP-360, which would introduce new quantum-safe address types that holders could voluntarily migrate to. Another proposal from BitMEX Research suggests installing a detection system that triggers defensive action if a quantum attack is observed on the network. Neither proposal has broad support from bitcoin's core developers, and they solve different parts of the problem. The biggest challenge in implementing effective solutions against the quantum threat is coordination. Bitcoin's migration is more complex than Ethereum's due to its lack of a central authority and governance process. The network's development culture treats any central authority as a potential failure mode, and its social consensus maintains that changes to the protocol should be rare and difficult. This has kept the network stable for nearly two decades but makes the quantum problem harder for bitcoin to solve. Migrating the exposed coins requires decisions that the network has avoided for twenty years. The question of what happens next is critical. Developers face the challenge of whether a network designed to resist coordinated change can coordinate the largest security upgrade in its history before quantum computers become a reality.