Note: every expert quoted in the source sells quantum-resistant infrastructure, custody or security products. The underlying cryptographic concern is well established; the timelines are supplied by interested parties.
- Nine crypto companies launched the Quantum Alliance to develop common security standards for bitcoin, Ethereum and other networks, estimating that 6.4 million bitcoin, 30.2% of supply, have public keys already exposed. At current prices that is roughly $525 billion, including about 1.1 million coins attributed to Satoshi Nakamoto.
- No existing quantum computer can break this cryptography and the timing is disputed. Richard Carback of Postquant Labs believes 2028 is realistic for a capable machine. Bryn Bennett of The Vault said nobody knows the date, estimates keep falling, and the question for custodians is whether they can migrate in time if it arrives early.
- The proposed remedy creates a worse problem than the one it solves. Bennett put it directly: nobody owns the issue, a custodian protects its clients’ assets rather than abandoned ones, freezing coins is a governance decision for the Bitcoin network rather than the industry, and any freeze would trade quantum risk for a precedent on property rights and neutrality.
- Christopher Smith of Quantus offered a stark scenario, saying the most likely outcome is that whoever builds the first cryptographically relevant quantum computer takes those coins, probably with the blessing of a national government.
What Happened?
Making bitcoin quantum-resistant would require replacing the digital signatures authorising transactions, which needs agreement among developers, miners, wallet providers, exchanges and users. Bennett said nobody has a credible figure for the cost and anyone offering one is guessing, adding that the real expense is coordination rather than cryptography. Replacement signatures could occupy more blockchain space, potentially raising fees or reducing throughput, though researchers are working to limit that. Binance founder Changpeng Zhao has suggested freezing Satoshi’s holdings if they remain untouched as the technology advances, and developer Jameson Lopp has proposed restrictions on vulnerable coins, while critics argue freezing contradicts the promise that bitcoin cannot be confiscated. Carback proposed placing vulnerable coins in a trust from which provable owners could recover funds. The Alliance includes Hacken, Charles Hoskinson’s Midnight Foundation, Quantus and Postquant Labs.
Why It Matters?
The governance question is more immediate than the cryptographic one and deserves the attention. Bitcoin’s central proposition is that no authority can seize your holdings. A protocol change that freezes coins, even vulnerable ones, even protectively, establishes that holdings can be immobilised by consensus, and once that precedent exists the question becomes who qualifies and under what circumstances. That decision could be taken years before any quantum machine exists, which means the thesis risk arrives well ahead of the technical risk. Anyone holding bitcoin on the confiscation-resistance argument should follow this debate more closely than the quantum timeline. Proportionality is worth maintaining on the technical threat. No machine can do this today, the dates are contested, and they are being supplied by people selling the remedy. That does not make the concern illegitimate, since the cryptographic vulnerability is a documented property of the signature scheme rather than a marketing claim, but a 2028 estimate from a post-quantum laboratory should be weighted accordingly. Set against that, the losses actually occurring in this market are operational. A supply chain implant in resold hardware wallets reportedly took up to $93.2 million from more than 300 wallets, a Brooklyn fraud network stole tens of millions with roughly $300,000 recovered, and an autonomous AI model spent from a wallet whose recovery phrases were already public. None of that required a quantum computer. Smith’s scenario of a state-backed actor taking the coins is reported as he stated it, and it is a claim about future government behaviour made by someone selling protection against that outcome.
What Next?
The Alliance plans to publish common security tests and guidance for migrating to quantum-resistant systems, which will be the first substantive output to assess. Watch whether any freeze or trust proposal gains support among Bitcoin developers, since that is the governance decision with real consequences. Migration of custodial holdings is the practical workstream for exchanges and institutional holders. For individual holders the useful step is understanding what their custodian’s migration plan is, rather than acting on any particular date estimate.
Affected Tickers and Coins: BTC, ETH, COIN, MSTR
Source: CoinDesk
