Time is Running Out for Bitcoin to Mitigate Quantum Computing Threat

Not all aspects of bitcoin are vulnerable to quantum computers. The process of bitcoin mining, which utilizes a type of math known as hashing, is secure against quantum attacks. The blockchain ledger and the rule that new bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership of bitcoins is at risk. Bitcoin wallets rely on a different type of math that converts a private key into a public address. This math is easy to perform in one direction but virtually impossible in the other, making it the primary barrier against unauthorized access to coins. A quantum algorithm known as Shor's algorithm can bypass this barrier. Recently, Google released a paper demonstrating that this attack could be executed with fewer resources than previously thought, and within a time frame that competes with bitcoin's block times. This article explores the potential consequences and the response of the bitcoin community. Approximately 6.9 million bitcoins, roughly one-third of all mined coins, are stored in wallets with publicly visible keys, making them susceptible to quantum attacks. This includes early bitcoins and any wallet that has been used for a transaction, as spending reveals the public key. The 2021 Taproot upgrade inadvertently expanded the problem by making bitcoin addresses more efficient and private, but also publishing the key protecting any remaining balance at an address. While there is ongoing debate and some proposed solutions, such as BIP-360 and a detection system by BitMEX Research, there is currently no concrete plan from Bitcoin developers to address the quantum threat. In contrast, Ethereum has had a formal quantum-resistant program in place since 2018 and is actively working on migrating its security to quantum-resistant math. The challenge for bitcoin lies in its governance structure, which is designed to resist coordinated change, making it difficult to implement the necessary upgrades to mitigate the quantum threat. The lack of a central authority and the emphasis on rare and hard protocol changes have kept the network stable but also make it harder to solve the quantum problem. Migrating the exposed coins requires making decisions that the network has historically avoided, such as whether to freeze old address formats or allow exposed coins to move to new quantum-safe addresses. Every option would alter the character of bitcoin in ways it has refused to change. The future of bitcoin's security depends on whether the network can coordinate a significant upgrade before quantum computers become powerful enough to exploit the current vulnerabilities.