Bitcoin Faces Quantum Computing Threat: Can It Adapt to Prevent Catastrophic Losses?

The bitcoin network is not entirely vulnerable to quantum computer attacks. The process of bitcoin mining, which involves adding new blocks to the blockchain, utilizes a type of mathematics called hashing that quantum computers are unable to break. As a result, the blockchain ledger and the rule that new bitcoins can only be created through mining would survive a quantum attack. However, what is at risk is ownership. Bitcoin wallets rely on a different type of mathematics that converts a secret private key into a public address that can be seen by anyone. This math works easily in one direction but not the other, which is the only thing preventing a stranger from spending someone else's coins. A quantum algorithm known as Shor's algorithm can collapse this gap, and a recent paper by Google demonstrated that the attack could be carried out with far fewer resources than previously estimated. This article explores the potential risks, what bitcoin has done to address them, and whether the network can coordinate a massive security upgrade before quantum computers become powerful enough to launch an attack. Approximately 6.9 million bitcoins, or about one-third of all mined bitcoins, are stored in wallets whose public keys are already visible on the blockchain. This includes early bitcoins from the network's first years, which were stored in an address format that published the public key by default, as well as any wallet that has ever been spent from, as spending reveals the key for whatever remains. A quantum attacker would not need to compete with a transaction in progress but could instead work through the wallets with already exposed keys at their own pace. The 2021 Taproot upgrade expanded the problem by making any bitcoin spent since its activation publish the key protecting whatever remains at that address. While the quantum threat has sparked a heated debate, nothing concrete has emerged from bitcoin developers yet. Ethereum, on the other hand, has had a formal quantum-resistant program since 2018 and is working on migrating its security to new mathematics that quantum computers cannot break. Bitcoin has no equivalent strategy, although there are efforts to solve the problem, such as a formal proposal to add new quantum-safe address types and a competing proposal to install a detection system that triggers defensive action if a quantum attack is observed. However, neither proposal has broad support from bitcoin's core developers, and they solve different halves of the problem. The biggest challenge in implementing effective solutions is bitcoin's migration, which is harder than Ethereum's due to its lack of a central authority and governance process. Bitcoin's development culture treats any central authority as a failure mode, and its social consensus holds that changes to the protocol should be rare and difficult. This makes it structurally harder for bitcoin to solve the quantum problem. Migrating the 6.9 million exposed coins requires decisions that the network has spent twenty years avoiding, such as freezing old address formats or allowing exposed coins to move to new quantum-safe addresses. The fate of Satoshi's coins, which are part of the exposed category, is a sharp example of the challenge. Freezing old formats protects the coins from theft but makes them permanently inaccessible, including to Satoshi. Leaving the old formats open means those coins sit as a standing prize for whoever builds the first working quantum computer or has access to a quantum computer and wants to attack. Setting a migration deadline forces Satoshi to either move the coins, revealing their ownership, or lose them. Every option changes bitcoin's character in ways the network has historically refused to change it. The question now is whether a network built to resist coordinated change can coordinate the biggest security upgrade in its history before the hardware catches up to the theory. Ethereum's eight-year head start suggests that the correct answer is to start now, while bitcoin's governance culture suggests that the likely answer is to wait until the threat is demonstrated, then move. However, only one of those answers works if the timeline turns out to be shorter than the optimists' estimate.