CoinDesk
Bitcoin's developer community should stop waiting for certainty about quantum-computing timelines and shift post-quantum signature work from research into production, Alex Pruden, CEO of Project Eleven, told CoinDesk's Consensus Miami conference on Wednesday. He framed the asymmetry bluntly: the worst case of moving early is unused optionality, while the worst case of moving late is a sufficiently capable quantum computer running Shor's algorithm to derive private keys from any exposed public key — putting roughly $2.3 trillion of Bitcoin at risk.
Why it matters
Pruden's call to action centers on replacing the elliptic-curve digital signature algorithm, or ECDSA, that underpins every Bitcoin transaction today with a scheme that does not rely on the classical math Shor's algorithm can break. The National Institute of Standards and Technology has already standardized post-quantum options based on hash functions and lattices, with Bitcoin community discussion trending toward the hash-based route. BIP-360, proposed last year, laid groundwork for a quantum-resistant Taproot output type, and Blockstream has already deployed a hash-based signature scheme on its Liquid Network — proof the primitives work, even if the Bitcoin mainnet migration is unsolved.
Market impact
The migration will be substantially harder than Taproot, which took roughly five years and remained opt-in. Every bitcoin holder, wallet, exchange and institution that touches the asset will have to participate, and the timing risk is severe: a quantum computer arriving before users migrate could let an attacker front-run pending transactions within a single block, paying a higher fee to capture funds whose keys it has just derived. Pruden urged the community to defer the politically charged question of what to do with up to 5 million dormant quantum-vulnerable coins — including coins attributed to Satoshi Nakamoto via the "Patoshi" pattern — and focus on getting the D out of R&D first.
Frequently asked questions
-
Why is Bitcoin's post-quantum migration harder than Taproot?
Taproot took roughly five years but remained opt-in — most users never migrated. A post-quantum signature scheme will be mandatory: every bitcoin holder, wallet, exchange and institution that touches the asset will have to participate to stay secure, Pruden said.
-
What is the quantum threat to Bitcoin, exactly?
A sufficiently capable quantum computer running Shor's algorithm could derive private keys from any exposed public key, giving the attacker control of the corresponding bitcoin. Pruden valued the asset at stake at roughly $2.3 trillion.
-
What is the proposed technical fix?
Introduce a new signature scheme that does not rely on the classical math underlying ECDSA. The National Institute of Standards and Technology has standardized post-quantum schemes based on hash functions and lattices, with community discussion trending toward the hash-based option. BIP-360 laid groundwork for a…
-
What could happen if quantum computers arrive before migration completes?
An attacker could front-run pending transactions within a single block time, paying a higher fee to capture funds whose private keys it has just derived from exposed public keys. The timing risk is what makes the migration mandatory rather than opt-in.
-
What is the debate over dormant quantum-vulnerable coins?
Up to 5 million dormant coins — including coins attributed to Satoshi Nakamoto via the "Patoshi" mining pattern — sit in quantum-vulnerable address types. Pruden said the community should defer that fight, but personally leaned toward recycling dormant coins back into the supply curve to extend the mining-incentive…
Benjamin Cowen
TheBlock
WatcherGuru
Crypto News
WuBlockchain