
Tech • IA • Crypto
Debate is intensifying over whether quantum computing poses an existential threat to Bitcoin, with no consensus on urgency but growing agreement on preparing mitigations.
Quantum computers could theoretically break Bitcoin’s cryptography by solving the elliptic curve discrete logarithm problem using Shor’s algorithm, allowing attackers to derive private keys from public keys. This would undermine the core concept of ownership in Bitcoin by enabling unauthorized transactions.
Despite concern, no quantum computer has demonstrated the ability to run Shor’s algorithm at a scale relevant to Bitcoin. Researchers highlight limitations in qubit stability, error correction, and circuit depth, suggesting practical attacks remain unproven and potentially distant.
Opinions vary widely. Some argue cryptographically relevant quantum machines are still speculative, while others cite recent advances in error correction and academic research suggesting meaningful progress. Estimates for required resources include tens of millions of Toffoli gates, indicating extreme technical complexity.
Several experts frame the issue as a risk-management problem: even a small probability of a breakthrough could justify action. Others warn that overstating the threat could mislead investors and divert attention from more immediate challenges like scaling and network security.
A leading proposal, BIP 360, introduces a new optional Bitcoin output type that enables future migration to post-quantum cryptography. It allows users to commit to multiple spending paths, including current elliptic curve methods and future quantum-resistant schemes, without weakening current security.
Complementary changes such as BIP 54 aim to clean up consensus rules and address broader vulnerabilities. These proposals are described as conservative, incremental steps that improve resilience without committing prematurely to unproven cryptographic systems.
Around 6.9 to 7 million BTC—roughly 35% of supply—have exposed public keys through older address formats or reuse. However, estimates suggest only about 2.66 million BTC may be realistically vulnerable due to inactivity, including early holdings such as those attributed to Satoshi Nakamoto.
Proposed responses range from doing nothing to freezing or burning exposed coins via protocol changes. Most participants reject intervention, arguing that altering ownership rules would violate Bitcoin’s core principle that valid signatures determine control.
Even if quantum attacks become feasible, their cost may initially limit impact. If breaking a key costs tens of thousands of dollars, only high-value wallets would be targeted, leaving smaller holdings effectively safe in the short term.
Rising concern has created opportunities for questionable products and claims, including opaque “quantum-secure” solutions. Experts warn that fear-driven adoption of unverified cryptography could introduce greater risks than the threat itself.
Other networks, including Ethereum and Solana, are exploring quantum-resistance roadmaps. Some analysts suggest faster or more centralized governance could allow rivals to act more quickly, potentially influencing institutional adoption.
Post-quantum cryptographic schemes often involve significantly larger signatures, raising concerns about block space efficiency. Developers emphasize the need for careful evaluation to avoid degrading Bitcoin’s performance or introducing new vulnerabilities.
While no immediate quantum threat to Bitcoin has been proven, the combination of uncertainty and potential impact is pushing developers toward cautious, incremental preparation rather than urgent overhaul.