Bitcoin’s Quantum Crisis: Lost Coins Threaten Future Security

James Check, founder and lead analyst at the onchain analysis service Checkonchain, emphasized that the quantum threat is primarily a consensus problem within the Bitcoin community. In a recent X post, Check highlighted that there is little likelihood of reaching consensus to proactively upgrade existing Bitcoin holdings to quantum-resistant addresses, due to political and development hurdles. This suggests that a significant portion of Bitcoin could become vulnerable when quantum computing advances sufficiently, potentially flooding the market with unprotected coins.

Data from BitBo shows that approximately 32.4% of all Bitcoin has not been moved in over five years, with additional assets remaining untouched for over a decade. While some of these coins may be lost or inaccessible, the exact figures are uncertain, raising concerns about the resilience of long-term holdings against future quantum attacks.

In response to these risks, Delphi Digital research head Ceteris Paribus noted that the core issue isn’t solely technological. He pointed out that, while quantum-resistant Bitcoin solutions are feasible, the challenge lies in addressing the legacy coins stored in addresses vulnerable to quantum theft. Notably, Adam Back, an early cypherpunk and cited in the Bitcoin white paper, stated that the community could face a stark choice: deprecate old addresses or risk losing funds to quantum threats. Back also speculated that quantum computing could reveal whether Bitcoin’s pseudonymous creator, Satoshi Nakamoto, is still active by forcing Nakamoto to transfer or move their holdings.

Technologically, the foundational frameworks for quantum-resistant Bitcoin exist, with the US National Institute of Standards and Technology (NIST) endorsing multiple post-quantum cryptography schemes last year. The Bitcoin Improvement Proposal 360 addresses this need by proposing enhancements to address future vulnerabilities. However, since Bitcoin uses ECDSA for legacy addresses and Schnorr signatures for Taproot, both susceptible to quantum attacks, entirely new post-quantum signature standards may be required. This complicates efforts to recover or protect assets that are currently stored in non-quantum-resistant addresses.

While Bitcoin’s community debates the pathway forward, other blockchain networks have made strides. In late July, researchers introduced a backward-compatible quantum-resistant fix for networks like Sui, Solana, Near, and Cosmos that does not require re-signing addresses. However, such solutions are not yet available for Bitcoin or Ethereum, leaving these major networks exposed to potential future quantum vulnerabilities.

In conclusion, the threat of quantum computing remains a developing challenge for Bitcoin’s future security landscape. While technological solutions are progressing, the community’s ability to reach consensus on implementing them will ultimately influence the asset’s resilience in the long term.