New Proposal Offers Solution for Bitcoin's Quantum Conundrum, Potentially Protecting Satoshi's Holdings

The specter of quantum computing has long posed a challenge for Bitcoin, particularly with regards to the vast sums held in older wallets with exposed public keys. An estimated 1.1 million bitcoin, valued at approximately $84 billion and attributed to the pseudonymous creator Satoshi Nakamoto, are potentially at risk. A proposed soft fork, put forth by prominent developer Jameson Lopp and five other developers through BIP-361, aims to phase out quantum-vulnerable addresses over a five-year period, effectively freezing any coins that fail to migrate to more secure formats. However, this solution presents a new dilemma: dormant holders, including Satoshi, would be forced to publicly reclaim their assets or risk losing access. In response, Dan Robinson of Paradigm has introduced an alternative solution, revolving around the concept of Provable Address-Control Timestamps, or PACTs. This approach allows holders to generate a proof of ownership, utilizing a random salt and BIP-322, without actually spending any coins. The proof and salt are then bundled into an on-chain commitment and timestamped via OpenTimestamps, with all relevant files remaining private. If a soft fork is implemented to freeze quantum-vulnerable coins, the protocol could incorporate a rescue path, accepting a STARK proof that demonstrates the holder created their commitment prior to the existence of quantum hardware. This proof can be submitted when the holder wishes to spend their coins, with the network subsequently releasing the funds without revealing any sensitive information. PACTs also address a critical gap in BIP-361, providing a rescue path for wallets derived through BIP-32, the deterministic key generation standard introduced in 2012. However, this solution requires the eventual adoption of a STARK verification protocol, necessitating a separate soft fork with broad community consensus. The success of PACTs hinges on the commitment being made by the holder, in this case, Satoshi or whoever currently controls those keys. If Satoshi is indeed no longer involved, no PACT can be retroactively created, leaving the coins vulnerable to either quantum theft or community freeze. Ultimately, PACTs offer a means to mitigate the binary choice between protecting against quantum theft and respecting dormant property rights, as presented in the BIP-361 debate. However, the question remains as to whether Satoshi will utilize this solution.