Bitcoin Faces Quantum Computing Threat: Can It Upgrade in Time to Protect 6.9 Million Coins?
The security of the bitcoin network is under threat from quantum computers, which could potentially drain 6.9 million BTC, including those held by the network's pseudonymous creator, Satoshi Nakamoto. While not all aspects of bitcoin are vulnerable to quantum attacks, the ownership of coins is at risk due to the use of a specific type of math that can be broken by quantum computers. A quantum algorithm known as Shor's algorithm can collapse the gap between the time it takes to turn a secret private key into a public address and the time it takes to go the other way, allowing attackers to access coins. Approximately 6.9 million bitcoin are at risk, including those held in wallets whose public keys are already visible on the blockchain. The 2021 Taproot upgrade has also expanded the problem by publishing the key protecting any remaining bitcoin at an address after a transaction. To address this issue, bitcoin developers must coordinate a major security upgrade, but the network's lack of formal governance and its culture of resisting coordinated change may hinder the process. Ethereum, a competing blockchain, has already begun preparing for the quantum threat with a formal quantum-resistant program. Bitcoin developers have proposed various solutions, including the addition of new quantum-safe address types and a detection system to trigger defensive action in the event of a quantum attack. However, these proposals have not yet gained broad support from the bitcoin community. The coordination problem is the biggest challenge in implementing effective solutions, as bitcoin's development culture treats any central authority as a failure mode, and its social consensus holds that changes to the protocol should be rare and hard. Migrating the 6.9 million exposed coins requires decisions that the network has spent twenty years avoiding, such as freezing old address formats or allowing exposed coins to move to new quantum-safe addresses. The window to respond to the quantum threat may already be closing, and developers must decide whether to start preparing now or wait until the threat is demonstrated.