What to Know
- Nine crypto companies launched the Quantum Alliance to develop common standards for quantum-resistant blockchain security.
- Experts warn that a future cryptographically relevant quantum computer could expose secret keys for wallets with already visible public keys.
- The Quantum Alliance estimates that 6.4 million bitcoin, equal to 30.2% of supply, have exposed public keys.
- The exposed holdings include 1.1 million bitcoin attributed to Satoshi Nakamoto.
- No existing quantum computer is powerful enough to steal bitcoin by breaking current cryptography in this way.
- Researchers disagree on timing, with one industry executive saying nobody knows the date and another saying 2028 is realistic.
- Proposals to freeze, migrate or place vulnerable bitcoin in a trust have sparked concerns about property rights, neutrality and governance.
- Any move toward quantum-resistant Bitcoin security would require coordination among developers, miners, wallet providers, exchanges, custodians and users.
Quantum Alliance Enters a High-Stakes Bitcoin Security Debate
Nine crypto companies have launched the Quantum Alliance, a new industry initiative focused on preparing Bitcoin, Ethereum and other blockchain networks for a possible future in which quantum computers are powerful enough to compromise today’s cryptographic protections. The move lands at the center of one of the digital asset market’s most sensitive long-term questions: how can decentralized networks defend users against future attacks without undermining the rules that made those networks valuable in the first place?
The concern is not that bitcoin can be stolen by quantum machines today. Market participants involved in the debate have been clear that no existing quantum computer can currently reverse-engineer a Bitcoin secret key from a public key. The issue is that certain coins already have public keys visible on-chain, and a sufficiently advanced machine in the future could potentially use that information to uncover private keys and move the funds.
The Quantum Alliance estimates that 6.4 million bitcoin, representing 30.2% of supply, have exposed public keys. That pool includes 1.1 million bitcoin widely attributed to Satoshi Nakamoto. Because those coins are both historically important and economically enormous, the question of whether they should remain untouched, be protected through protocol changes, or be restricted before quantum computers mature has become a flashpoint for the crypto industry.
Why Exposed Public Keys Matter
Bitcoin ownership relies on digital signatures. A private key gives the holder the ability to authorize spending, while public information allows the network to verify that a valid owner has approved a transaction. In normal conditions, this system is designed so that observers can verify signatures without deriving the secret key behind them. A powerful enough quantum computer could change that assumption for some cryptographic systems.
The risk discussed by technical traders, security researchers and protocol engineers centers on wallets whose public keys are already visible. If a future cryptographically relevant quantum computer can derive a secret key from that public information, an attacker could sign a transaction and move funds without permission from the original holder. That is why dormant bitcoin, older wallet formats and long-held coins have become central to the discussion.
Christopher Smith, chief executive of quantum-resistant layer-1 blockchain Quantus, has warned that the first entity to develop a cryptographically relevant quantum computer could move vulnerable coins, potentially with government backing. His view reflects the more urgent side of the debate: if the technology arrives before networks migrate, exposed assets could become a target not only for private attackers but also for state-linked actors.
Timing Remains the Biggest Unknown
The industry remains divided on when quantum computing could become a practical threat to Bitcoin and other blockchain networks. Bryn Bennett, chief revenue officer at The Vault, has argued that nobody knows the date, while emphasizing that estimates have been moving closer and that custodians should prepare in advance. In that framing, the important question is not whether the threat arrives in 2028 or 2035, but whether infrastructure can migrate quickly enough if the timeline accelerates.
Richard Carback, chief technology officer of Postquant Labs, takes a more direct view and considers 2028 a realistic date for a machine capable of breaking today’s cryptography. That position is not universally accepted, but it has intensified discussion because blockchain upgrades can take years of design, debate, testing and adoption. In decentralized systems, technical readiness alone is not enough; social consensus is also required.
Recent research has reduced estimates of the computing power needed to attack Bitcoin and Ethereum, adding urgency to the issue. Still, forecasts remain disputed, and no current machine can break the cryptography securing these networks. For investors, custodians and developers, the challenge is planning for a threat that is not present today but could be extremely disruptive if ignored until it becomes imminent.
Freeze, Move or Trust: The Governance Dilemma
The most controversial part of the debate is not whether quantum-resistant cryptography should be explored. It is what should happen to coins that appear vulnerable if their owners do not or cannot migrate them. Some chart watchers and protocol specialists have raised the idea of freezing vulnerable holdings before they can be taken by a quantum attacker. Others argue that freezing assets would set a dangerous precedent for property rights and undermine Bitcoin’s neutrality.
Carback has said he prefers that vulnerable coins be moved rather than frozen. Bennett has framed freezing as a governance decision for the Bitcoin network rather than a responsibility for custodians or private companies. His view highlights a core issue: custodians can protect client assets, but abandoned or dormant coins do not have an obvious entity responsible for taking action on their behalf.
Binance founder Changpeng Zhao has suggested freezing Satoshi Nakamoto’s estimated 1.1 million bitcoin if the coins remain untouched as quantum technology advances. Bitcoin developer Jameson Lopp has also proposed restrictions on vulnerable coins to prevent future theft. Critics counter that such measures would collide with Bitcoin’s promise that no one can confiscate coins through centralized judgment or political pressure.
A trust structure has also entered the discussion. Carback proposed placing vulnerable coins in a trust, with owners able to recover funds if they can prove ownership. That idea aims to balance theft prevention with recovery rights, but it would still raise difficult questions about who administers the trust, what proof is sufficient, and whether such a framework would be acceptable to a decentralized network built around self-custody.
Quantum-Resistant Bitcoin Would Require Broad Coordination
Making Bitcoin quantum-resistant would require replacing the digital signatures used to authorize transactions. That is a major technical and social undertaking. Developers would need to agree on the cryptographic approach, wallet providers would need to support it, exchanges and custodians would need to implement migration paths, miners would need to accept upgraded rules, and users would need to move funds safely.
Bennett has argued that the real cost is not the cryptography itself but the coordination among wallets, exchanges, custodians and protocol developers. That view resonates across the wider crypto market because many blockchain failures and delays are not caused by the lack of a theoretical solution. They often arise when different stakeholders must agree on implementation details, timelines and trade-offs.
There are also efficiency concerns. Replacement signatures could take up more space on the blockchain. If signatures become larger, fees could rise or the number of transactions Bitcoin can process could fall. Researchers are already working on ways to reduce those effects, but the trade-off remains important because Bitcoin’s base layer is intentionally conservative and capacity-constrained.
What the Quantum Alliance Plans to Do
The Quantum Alliance includes Hacken, the Midnight Foundation associated with Charles Hoskinson, Quantus and Postquant Labs, among other members. Its stated goal is to publish common security tests and guidance that can help existing networks migrate toward quantum-resistant systems. The alliance is not only focused on Bitcoin; it is also looking at Ethereum and broader blockchain infrastructure.
Common standards could help reduce fragmentation. If each wallet, exchange, custodian and protocol team adopts a different approach, migration could become confusing and risky for users. Shared testing methods and implementation guidance may make it easier to evaluate readiness, compare solutions and identify weaknesses before any emergency emerges.
For Bitcoin holders, the development is both reassuring and unsettling. It is reassuring because the industry is preparing before the threat is active. It is unsettling because the debate exposes unresolved questions about who acts when dormant assets face future risk, whether the network can intervene without compromising neutrality, and whether users will migrate in time if technical warnings become urgent.
The Stakes for Bitcoin’s Long-Term Credibility
Bitcoin’s appeal rests on predictable rules, resistance to confiscation and the ability to hold value outside traditional financial intermediaries. A quantum-driven security threat would test all of those principles at once. If vulnerable coins can be stolen, users may question the network’s durability. If vulnerable coins are frozen, users may question whether property rights are truly protected. If migration is voluntary, some holders may fail to act before the risk becomes real.
The Quantum Alliance’s formation shows that the crypto sector is no longer treating quantum security as a distant academic issue. The timeline remains uncertain, and the technical threat has not arrived, but the governance debate is already here. The path forward will likely depend on whether Bitcoin’s ecosystem can develop a solution that protects users while preserving the network’s core social contract.
Frequently Asked Questions (FAQs)
What is the Quantum Alliance?
The Quantum Alliance is a group formed by nine crypto companies to develop common security standards and guidance for helping Bitcoin, Ethereum and other blockchain networks prepare for future quantum computing threats.
How many bitcoin are considered vulnerable to a future quantum threat?
The Quantum Alliance estimates that 6.4 million bitcoin, or 30.2% of supply, have public keys already exposed and could become vulnerable if a sufficiently powerful quantum computer emerges.
Can quantum computers steal bitcoin today?
No. Market participants in the debate have emphasized that no existing quantum computer is powerful enough to break Bitcoin’s current cryptography and steal coins through this method today.
Why are Satoshi Nakamoto’s coins part of the debate?
Satoshi Nakamoto is associated with an estimated 1.1 million bitcoin. Because those coins are historically significant and have remained untouched, they are central to discussions about whether vulnerable dormant holdings should be protected, restricted or left alone.
When could quantum computing become a real threat to Bitcoin?
There is no agreed date. Some industry participants argue that nobody knows whether the relevant timeline is 2028 or 2035, while Richard Carback of Postquant Labs has said 2028 is a realistic date for a machine capable of breaking today’s cryptography.
Why is freezing vulnerable bitcoin controversial?
Freezing coins could reduce the risk of theft, but it would also create a precedent affecting property rights and network neutrality. Critics argue that restricting coins conflicts with Bitcoin’s promise that assets cannot be confiscated by outside decision-makers.
What would make Bitcoin quantum-resistant?
Bitcoin would need to replace the digital signatures used to authorize transactions with quantum-resistant alternatives. That would require broad coordination among developers, miners, wallet providers, exchanges, custodians and users.
Could quantum-resistant signatures affect Bitcoin fees?
They could. Replacement signatures may take up more space on the blockchain, which could increase fees or reduce transaction capacity, although researchers are working on ways to limit that impact.
What is the main challenge for Bitcoin holders?
The main challenge is uncertainty. Holders do not face an active quantum theft threat today, but the ecosystem must decide how to prepare for a future risk without undermining Bitcoin’s rules, neutrality and property-rights expectations.