Bitcoin's Quantum Conundrum: Can It Overcome the Looming Threat?
Not all aspects of bitcoin are vulnerable to quantum computer attacks. The process of bitcoin mining, which utilizes a type of mathematics called hashing, is resistant to quantum computing. The blockchain itself and the rule that new bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership of bitcoins is a different story. Bitcoin wallets rely on a specific type of mathematics that converts a private key into a public address. This math works in one direction but not the other, preventing unauthorized access to one's coins. A quantum algorithm known as Shor's algorithm can bypass this security measure. Google recently published a paper demonstrating that such an attack could be carried out with fewer resources than previously thought, highlighting the urgency of the situation. Approximately 6.9 million bitcoins, roughly one-third of all mined coins, are at risk due to exposed public keys. This includes early bitcoins stored in outdated address formats and any wallet that has been spent from, as spending reveals the public key. A quantum attacker wouldn't need to rush, as they could systematically target wallets with exposed keys at their leisure. Even Satoshi Nakamoto's estimated 1 million untouched bitcoins are vulnerable. The 2021 Taproot upgrade inadvertently expanded the problem by publishing keys for any spent bitcoin, making them susceptible to quantum attacks. While there are ongoing debates and proposals, such as BIP-360 and a detection system from BitMEX Research, none have gained broad support from bitcoin's core developers. Nic Carter, a prominent bitcoin advocate, has criticized the community's approach, labeling it 'worst in class' compared to Ethereum's proactive stance. Adam Back, CEO of Blockstream, agrees on the need for preparation but disagrees on the urgency. The main challenge lies in bitcoin's governance structure, which lacks a central authority and emphasizes rare, hard-won changes. This makes it difficult to implement necessary solutions, such as freezing old address formats or allowing exposed coins to migrate to quantum-safe addresses. The fate of Satoshi's coins serves as a prime example of the conundrum. With the Google paper suggesting that the window for response may already be closing, developers must decide whether to act now or wait until the threat materializes.