Bitcoin's Quantum Conundrum: Can the Network Mitigate the Looming Threat?
Not all aspects of bitcoin are vulnerable to quantum computer attacks. The process of bitcoin mining, which utilizes a type of math known as hashing, is resistant to quantum computing's capabilities. Additionally, the ledger itself and the rule governing the creation of new bitcoins through mining would remain intact in the face of a quantum attack, ensuring the continued production of blocks and the integrity of the chain. However, ownership is a different story. Bitcoin wallets rely on a distinct type of math that converts a private key into a public address, and this math is susceptible to quantum computing's power. A quantum algorithm known as Shor's can potentially breach this math, and a recent paper by Google has demonstrated that such an attack could be executed with fewer resources than previously thought, racing against bitcoin's block times. This article explores the potential risks, the current state of bitcoin's defenses, and the challenges of implementing a security upgrade in a network that is inherently resistant to coordinated change. Approximately 6.9 million bitcoins, roughly one-third of the total amount mined, are stored in wallets with publicly visible keys, making them vulnerable to quantum attacks. This includes early bitcoins and any wallet that has been spent from, as spending reveals the key. Bitcoin's pseudonymous creator, Satoshi Nakamoto, holds around 1 million bitcoins that are now at risk. The 2021 Taproot upgrade inadvertently expanded the problem by publishing the key protecting the remaining balance at an address after a transaction. While other blockchains, such as Ethereum, are actively preparing for the quantum threat with formal programs and dedicated teams, bitcoin's approach remains unclear. Ethereum has had a quantum-resistant program in place since 2018 and has made significant progress, including launching a website to track its advancements. In contrast, bitcoin's core developers have yet to propose a unified strategy, although there are individual efforts, such as BIP-360, which suggests introducing new quantum-safe address types, and a proposal by BitMEX Research for a detection system to trigger defensive actions in case of a quantum attack. However, these proposals lack broad support and address different aspects of the problem. The lack of a coordinated response stems from bitcoin's governance culture, which prioritizes decentralization and resistance to change. This culture has kept the network stable but makes it challenging to implement significant upgrades, such as the migration of 6.9 million exposed coins to quantum-safe addresses. The migration requires decisions that the network has historically avoided, such as freezing old address formats or allowing exposed coins to move to new addresses using their original keys. Each option has significant implications for bitcoin's character and stability. The question remains whether bitcoin can overcome its governance challenges to implement a timely and effective response to the quantum threat, or if it will wait until the threat becomes more apparent, potentially leaving it vulnerable to attack.