For most of Bitcoin’s history, the threat of quantum computers breaking its cryptography was a distant theory. In 2026, the fixing has begun.
On February 11, 2026, a proposal called BIP-360 was merged into Bitcoin’s repository. It introduces the network’s first quantum-resistant address type. Two months later, BIP-361 laid out a plan to migrate or freeze roughly 6.5 to 6.9 million Bitcoin that sit in vulnerable addresses. This includes an estimated 1.7 million coins believed to belong to Satoshi Nakamoto.
The real threat
The common misconception is that quantum computers threaten Bitcoin mining. They do not. Mining uses SHA-256 hashing, which would require enormous quantum resources to attack. The real vulnerability is in transaction signing, which uses elliptic-curve cryptography. A quantum computer running Shor’s algorithm could derive a private key from an exposed public key.
A public key is only vulnerable once revealed on the blockchain. This happens when addresses send transactions, or with ancient Pay-to-Public-Key outputs. Project Eleven estimates that roughly 6.9 million BTC sit in addresses with exposed public keys.
Why now
Bitcoin’s developers moved in 2026 because the timeline appeared to accelerate. Google researchers published findings suggesting that breaking 256-bit elliptic-curve cryptography might require fewer quantum resources than previously thought. In April 2026, a researcher broke a 15-bit elliptic-curve key using real quantum hardware. This was a 512-fold improvement over a previous result.
A panel of cryptographers convened by Coinbase concluded that a relevant quantum computer will eventually be built. They said migration must begin now. Google set its own post-quantum migration target for 2029.
What BIP-360 does
BIP-360 introduces a new output type called Pay-to-Quantum-Resistant-Hash. It works like Taproot but removes the element a quantum computer could exploit. Spending uses post-quantum signature schemes based on NIST-approved algorithms. The new addresses begin with “bc1r.”
The design preserves compatibility. Legacy nodes treat the outputs as “anyone-can-spend” while upgraded nodes validate them correctly. This allows a soft fork rather than a disruptive hard fork.
There is a cost. Post-quantum signatures are larger than current signatures. Some schemes produce signatures up to 8 kilobytes. This could drive fees higher unless miners give them a witness discount.
The hard part: BIP-361
BIP-361 addresses the vulnerable legacy supply. It proposes setting a deadline for holders to migrate to quantum-resistant addresses. After that, the network stops honoring spends from old vulnerable signature types.
The problem is the coins that cannot migrate. The estimated 1.7 million BTC in ancient addresses, including Satoshi’s, cannot be moved because the owners are lost. If BIP-361’s signature sunset takes effect, these coins would be frozen permanently.
This pits two Bitcoin principles against each other: immutability versus preventing catastrophic theft. The debate is unresolved. Critics argue that freezing coins is more dangerous than the quantum threat itself. Supporters counter that doing nothing guarantees eventual theft.
How Bitcoin compares to other chains
Ethereum has taken a more aggressive approach. Vitalik Buterin published a quantum-resistance roadmap targeting multiple layers. Ethereum can move faster due to its more flexible governance.
Ripple’s XRP Ledger has a four-phase plan targeting quantum resistance by 2028. Hedera already uses hash-based cryptography that is inherently more resistant.
Bitcoin’s migration is harder due to its massive exposed legacy supply and consensus-driven governance. What looks like slow movement is partly Bitcoin facing a harder version of the problem.
What it means for holders
There is no immediate danger. No quantum computer capable of breaking Bitcoin exists today. Holders do not need to do anything urgent.
The vulnerability applies only to addresses with exposed public keys. Coins held in modern address types that have never been spent are protected by hashing. When quantum-resistant addresses become available, holders can migrate their coins to the new “bc1r” type.
The episode shows Bitcoin’s adaptability. The most contentious question about frozen coins remains unresolved and may prove to be one of the hardest decisions Bitcoin ever makes. For now, the takeaway is calm awareness. The threat is real but distant. The response has begun. No urgent action is required. The hardest choices are still ahead.
This article is for informational purposes and does not constitute financial advice. Cryptocurrency markets are volatile. Always do your own research.
