Community Trust ScoreVerified
Bitcoin developers have put forward a detailed proposal aimed at securing the network against the growing threat posed by quantum computers. A draft Bitcoin Improvement Proposal (BIP), authored by Casa co-founder Jameson Lopp and five collaborators, outlines a structured plan to gradually phase out the use of quantum-vulnerable addresses. The proposal, titled “Post-Quantum Migration and Legacy Signature Sunset,” was published on GitHub on July 14 and emphasizes the need for proactive defense.
Why This Matters for Bitcoin
The proposal stems from a growing concern: quantum computers could eventually break the cryptographic systems that secure Bitcoin transactions. The two signature algorithms currently protecting Bitcoin—ECDSA and Schnorr—are vulnerable to quantum attacks. Once a sufficiently powerful quantum computer becomes available, it could theoretically derive private keys from public keys exposed on the blockchain, enabling the theft of funds.
Around 25% of all existing Bitcoin—approximately 4.9 million BTC—have public keys already exposed on-chain. This includes early outputs such as Pay-to-PubKey (P2PK) addresses and the one million BTC believed to be held by Bitcoin’s mysterious creator, Satoshi Nakamoto.
Three-Phase Migration Plan
The proposal lays out a phased migration to post-quantum secure cryptographic schemes. The plan hinges on the adoption of the P2QRH output type defined in BIP-360.
-
Phase A (3 years post-P2QRH activation): New transactions to quantum-vulnerable addresses would be disallowed. This would push all future coin movements toward quantum-safe scripts.
-
Phase B (2 years after Phase A): All nodes would reject transactions signed using ECDSA or Schnorr, effectively rendering legacy outputs unspendable.
-
Phase C (Optional): For users who miss the migration deadline, this phase may allow recovery of funds using a zero-knowledge proof of their BIP-39 seed phrase. However, this remains under research.
This gradual timeline is designed to give users, exchanges, miners, and institutions ample time to upgrade. But it also sets a firm deadline, turning a theoretical quantum threat into a practical concern.
The Urgency of Quantum Resistance
Quantum computing is advancing rapidly. The U.S. National Institute of Standards and Technology (NIST) finalized three post-quantum cryptographic algorithms in 2024. Some academic estimates suggest a cryptographically relevant quantum computer could be ready between 2027 and 2030. As quantum algorithms improve—by as much as 20×—Bitcoin’s current defenses look increasingly fragile.
The authors of the proposal argue that waiting until a quantum attack occurs would cause widespread economic disruption. Instead, they call for immediate preparation: “Fail to upgrade and you will certainly lose access to your funds.”
Risks for Stakeholders
Each group in the Bitcoin ecosystem faces distinct consequences if they fail to act:
-
Miners who don’t update after Phase B risk producing invalid blocks and wasting resources.
-
Exchanges could lose access to custodial wallets, facing instant insolvency in the event of an attack.
-
Institutions may be held legally liable for ignoring a known risk.
-
Users must move their coins before the deadline, or risk their funds becoming permanently unspendable.
The plan also raises questions about abandoned coins. If quantum-vulnerable coins are left untouched, they would be frozen forever. But if quantum hackers recover them, it would be “a theft from everyone,” as the proposal puts it.
Bigger Than SegWit or Taproot
If implemented, this migration would be the largest protocol upgrade in Bitcoin’s history—bigger even than SegWit or Taproot. It would affect an estimated 25% of all Bitcoin in existence and force sweeping changes across the ecosystem. For now, the proposal remains in draft form and has not been assigned a BIP number or formal activation method.
Still, it sets the stage for what could be one of Bitcoin’s most significant debates. Developers, businesses, and users must now decide: act now, or react later after the first quantum breach?
Conclusion
The Bitcoin community has long prided itself on decentralization and security. But quantum computing could upend that foundation unless proactive measures are taken. This new proposal may seem drastic, but it reflects the reality that defending against future threats starts today. As the developers warn, the cost of inaction could be the loss of billions in value and trust.
