Bitcoin's Quantum Conundrum: Racing Against Time to Prevent a 6.9 Million BTC Heist

Not all aspects of bitcoin are vulnerable to quantum attacks. The process of bitcoin mining, which utilizes a type of math known as hashing, is resistant to quantum computer breaches. The bitcoin ledger and the rule that new bitcoins can only be created through mining would remain intact in the event of a quantum attack. However, ownership is a different story. Bitcoin wallets rely on a distinct kind of math that converts a private key into a public address. This math is straightforward in one direction but virtually impossible in the other, which is the primary obstacle preventing unauthorized individuals from spending someone else's coins. A quantum algorithm known as Shor's algorithm can bridge this gap. A recent paper by Google demonstrated that this attack could be executed with significantly fewer resources than previously estimated, and within a timeframe that competes with bitcoin's block times. This article, the final installment in a series, focuses on the response to this threat. It examines what is at risk, the measures bitcoin has taken so far, and whether a network designed to resist coordinated change can orchestrate the most substantial security upgrade in its history before quantum hardware becomes a reality. Roughly 6.9 million bitcoin, equivalent to one-third of all mined bitcoin, is stored in wallets with publicly visible keys on the blockchain. This includes early bitcoin from the network's inaugural years, stored in an address format that published the public key by default, as well as any wallet that has been spent from, as spending reveals the key for the remaining balance. A quantum attacker would not need to contend with an ongoing transaction; instead, they could methodically work through wallets with exposed keys at their own pace. Bitcoin's pseudonymous creator, Satoshi Nakamoto, possesses approximately 1 million bitcoin, which has remained untouched since the network's early days and is now classified as exposed. The 2021 Taproot upgrade inadvertently expanded the problem. Taproot is a modification to how bitcoin addresses function, intended to enhance transaction efficiency and privacy. A side effect of Taproot was that any bitcoin spent after its activation has published the key protecting the remaining balance at that address. Although this was not an error, it was a reasonable trade-off at the time, given the perceived quantum timelines. Currently, there are no concrete plans from Bitcoin developers to address the quantum threat. In contrast, Ethereum, a major competitor, has had a formal quantum-resistant program in place since 2018. The Ethereum Foundation operates four full-time teams working on the migration, with over ten independent developer groups releasing weekly test networks. Ethereum's plan entails specific upgrades across four upcoming network-wide changes, transitioning its security to new math that quantum computers cannot breach. Bitcoin, on the other hand, lacks a comparable strategy. There are, however, efforts to resolve the issue. One formal proposal, BIP-360, put forth by a group of developers and researchers, suggests introducing new quantum-safe address types that holders could voluntarily migrate to. Another proposal from BitMEX Research recommends implementing a detection system that triggers defensive action if a quantum attack is observed on the network. Neither proposal has garnered broad support from bitcoin's core developers, and they address different aspects of the problem. Prominent bitcoin advocate Nic Carter has emphasized the urgency of the situation, stating that the math securing bitcoin wallets is on the verge of obsolescence. He praised Ethereum's approach as 'best in class' and criticized bitcoin's as 'worst in class,' citing developers who deny, downplay, or ignore the problem rather than engaging with it. Adam Back, the CEO of Blockstream and a notable early bitcoin contributor, disagrees on the urgency but concurs on the direction, suggesting that bitcoin should prepare now with optional upgrades to facilitate a smooth migration when needed. The primary challenge in implementing effective solutions against the quantum threat lies in bitcoin's migration being more complicated than Ethereum's due to reasons unrelated to the math itself. Ethereum has a foundation that funds engineering work and a governance process that regularly passes significant upgrades. In contrast, bitcoin lacks a central authority and treats any such entity as a potential failure mode, with a development culture that views changes to the protocol as rare and difficult. These principles have maintained the network's stability for nearly two decades but also make the quantum problem structurally harder for bitcoin to address. Migrating the 6.9 million exposed coins requires decisions that the network has avoided for twenty years. The Google paper's framing serves as a summary of the industry's current stance, warning that a successful attack on bitcoin's math should not be seen as a wake-up call to adopt post-quantum cryptography but rather as a potential signal that the adoption of post-quantum cryptography has already failed. This implies that by the time the threat becomes apparent, the window to respond may have already closed. Developers are now faced with the question of whether a network built to resist coordinated change can coordinate the most substantial security upgrade in its history before the hardware catches up with the theory. Ethereum's eight-year head start suggests that the correct approach is to start now, while bitcoin's governance culture indicates that the likely response will be to wait until the threat is demonstrated before taking action. Only one of these approaches will be effective if the timeline proves to be shorter than estimated.