A StarkWare researcher has reportedly carried out what may be the first Bitcoin transaction designed to resist attacks from a sufficiently powerful quantum computer. The test transaction was deployed directly to Bitcoin's live network, bypassing any need for a soft fork or modifications to the protocol's consensus mechanism.
The development does not resolve all of Bitcoin's vulnerabilities to quantum computing. The method is better understood as evidence that a quantum-resistant fallback route is achievable for users today, even while those working at the protocol level have yet to agree on a permanent solution.
Advances in quantum computing raise questions about the long-term resilience of Bitcoin's encryption, given that the network relies on cryptographic protections that sufficiently powerful hardware may one day be able to circumvent. Elliptic-curve cryptography underpins the digital signatures that verify coin ownership within the Bitcoin network. Under sufficiently advanced quantum computing conditions, researchers have noted that algorithms such as Shor's could potentially extract a private cryptographic key from a publicly visible one, enabling unauthorised access to and transfer of digital assets.
A more immediate concern involves the bitcoin holdings stored in wallet addresses that may one day become susceptible to quantum computing threats. According to Glassnode's May analysis, approximately 6.04 million BTC — representing around 30.2% of all coins in circulation — had their public keys visible on the blockchain. Based on a bitcoin valuation of $80,000, approximately $483 billion in holdings could be classified as exposed to potential security risks.
The concentration of accessible bitcoin holdings is what has led some observers to characterise the matter as a quantum-era race for digital assets. The early holdings attributed to Bitcoin's pseudonymous founder represent a potentially valuable target for any actor who achieves sufficiently advanced quantum computing capability.
Throughout the past year, a portion of Bitcoin developers have been engaged in debate over what steps ought to be taken before such a machine becomes a reality. The prevailing thinking centres not on implementing an urgent fix to Bitcoin now, but on preparing a transition pathway that can be activated ahead of the anticipated threshold at which quantum computing power would be sufficient to compromise the network's current cryptographic protections.
Matt Corallo, among the pioneering contributors to Bitcoin's development, has contended that the priority should be expanding the volume of coins that can be protected before a quantum computer capable of breaking current cryptography becomes a reality. During a Bitcoin developer forum discussion earlier this year, he argued that the network ought to lower the volume of exposed coins, thereby reducing any incentive for the community to pursue a fork aimed at destroying those holdings. Corallo has additionally outlined a scenario in which a soft fork might deactivate at-risk spending pathways once the threat reaches a sufficient level of severity.
Debate persists over the exact process, particularly regarding what should become of tokens belonging to holders who do not complete the transition. The matter has drawn interest from well outside the circle of Bitcoin's principal software developers.
A consortium established in July by Coinbase, Strategy, BlackRock, Galaxy, Fidelity Digital Assets, Blockstream, and several other firms committed $15 million across a three-year period to fund Bitcoin security research, with post-quantum cryptography designated as the initial area of focus. The cryptocurrency exchange formed a dedicated advisory panel to address quantum computing threats and security vulnerabilities across the broader blockchain sector.
Experts have yet to reach agreement on whether quantum risks represent an urgent priority requiring immediate action. Proponents including Strategy's Michael Saylor have placed the quantum computing threat at least a decade out, whereas Coinbase's own research contends that defensive measures must be put in place well before such technology advances to the point of compromising current cryptographic standards. A portion of institutional investors have cited the matter as grounds for maintaining a cautious stance toward bitcoin holdings. Quantum computing has been identified on multiple occasions by Ray Dalio as a potential threat to bitcoin.
The protocol relies on a framework known as Quantum-Safe Bitcoin, or QSB, which StarkWare researcher Avihu Levy created. In April, Levy released a paper outlining a method by which Bitcoin transactions could be shielded from quantum computing threats without requiring any alterations to the existing protocol. Rather than depending on the varieties of digital signature schemes that a sufficiently advanced quantum computer could potentially compromise, QSB employs a cryptographic method grounded in hashing, a technique widely regarded as substantially more resilient against quantum-based threats.
Rooted in a predecessor framework known as Binohash, the approach is structured to operate within Bitcoin's current transaction architecture without requiring any modifications to the network's core protocol. There is, however, one restriction that applies. Producing such a transaction demands considerable processing that takes place outside the blockchain. In the initial paper, Levy put the processing expenditure for GPUs at several hundred dollars, a figure that dwarfs the minimal transaction charges typically linked to bitcoin transfers. The approach was described as a fallback measure, not intended for everyday Bitcoin transactions.
While quantum-resistant blockchain protocols can protect assets once funds are moved into a secure output, the migration process itself carries uncertainty if a cryptographically powerful quantum machine has already come online. When a transaction is sent from an address with known quantum vulnerabilities, the underlying cryptographic data becomes accessible, potentially allowing a sufficiently advanced quantum system to intercept and reroute the funds before the network confirms the transfer. Transferring at-risk holdings to quantum-resistant addresses before such computing power materialises would eliminate the need for any last-minute fallback, though QSB remains an available contingency in the interim.
The company regards the current approach as an incomplete response to the challenges posed by quantum computing. Eli Ben-Sasson, the company's chief executive, likened the approach to a lifeboat, noting that while it offers a degree of assurance, it should not prompt complacency but rather encourage the development of additional protective measures across the sector.
Quantum-readiness frameworks such as Bitcoin Improvement Proposal 360 are already under development, and a completed quantum-resistant transaction on the main network demonstrates that at least one contingency pathway is technically viable. Questions remain about key details, including which post-quantum signature standard to adopt and how to handle bitcoin holdings left in outdated address formats beyond a reasonable transition period.
