- Cory Fields, a Bitcoin Core developer at MIT’s Digital Currency Initiative, proposed “quantum landmines”—a cryptographic defense mechanism designed to deter and penalize quantum thieves attempting to exploit vulnerable Bitcoin wallets. The proposal, outlined on the bitcoin-dev mailing list on Wednesday, represents a creative response to an existential threat: sufficiently powerful quantum computers (possibly achievable by 2029 according to Google’s estimates, as referenced in Article 315) could theoretically calculate a wallet’s secret spending key from its public key alone. Early Bitcoin transactions exposed public keys from the start, leaving coins associated with Satoshi Nakamoto and other early holders potentially vulnerable to quantum-enabled theft. Rather than freezing vulnerable coins (which could lock out legitimate owners who never upgraded) or leaving them undefended, Fields proposes a mechanism that imposes economic cost on attackers while rewarding owners who prepare in advance.
- The “quantum landmine” mechanism works as follows: before quantum computers become a practical threat, a Bitcoin owner creates a separate quantum-safe “landmine” wallet containing hidden cryptographic proof of ownership of their vulnerable coins. If a quantum thief later attempts to steal those coins, the theft triggers an automatic lockup: both the stolen Bitcoin and the thief’s own collateral (which they must supply from a quantum-safe wallet) are frozen for a predetermined waiting period, typically 30 days. During this lockup window, the original owner can reveal the hidden proof of ownership, reclaim their Bitcoin, and claim the thief’s collateral as a penalty. The thief faces a devastating outcome: they lose both their attempt to steal and their own funds. Critically, the thief has no way to identify which holdings are trapped before committing their own collateral, creating an asymmetric incentive: owners who prepare landmines transform their vulnerability into bait. Under Fields’ example, an attacker wanting to steal 1 BTC must supply 1 BTC of their own as collateral, creating the possibility of losing 2 BTC total if the theft is detected and the original owner has set a trap.
- The proposal addresses a significant challenge: coins believed to be lost or held by inactive owners (including Satoshi Nakamoto’s estimated ~1.1 million BTC) cannot be protected by landmine traps, since the original owners no longer hold their keys. To defend these coins from quantum theft, Fields sketched an auction system where network participants stake hidden bids on vulnerable wallets in advance. These bids act as cryptographic triggers: if a quantum attacker moves coins from those addresses, the highest bidder’s smart contract automatically activates. The system would instantly burn or destroy the thief’s target coins while seizing the thief’s locked collateral and transferring it to the winning bidder as a bounty. This mechanism preserves inactive coins from theft without requiring owner participation, though it creates a new dynamic: network participants effectively bet on quantum attacks against specific addresses and are rewarded financially if theft is attempted.
- A significant caveat undermines the proposal’s practical utility for honest holders: the blockchain cannot distinguish between a quantum thief and the legitimate owner of coins, so both would need to supply matching collateral to move funds. An early Bitcoin holder whose entire fortune sits in a vulnerable pre-2010 wallet would need 1 BTC of additional quantum-safe funds to move every 1 BTC they own, effectively doubling their capital requirements. For owners who lack that collateral, the landmine mechanism creates a perverse outcome: they are locked out of moving their own coins unless they acquire new quantum-safe funds. Fields explicitly framed these ideas as “thought experiments” and acknowledged that the actual enforcement rules remain unwritten. The proposal assumes Bitcoin first implements quantum-safe wallet standards and upgrades network consensus to support the collateral-locking and proof-revelation mechanics. Without those foundational changes, the landmine concept remains theoretical. For the session context, the quantum threat is genuine (Article 315 documented Coinbase’s urgent push for quantum defense starting now), but practical solutions face adoption friction and honest-user costs that could rival the threat itself.
What Happened?
Cory Fields, a Bitcoin Core developer at MIT’s Digital Currency Initiative, proposed a novel defense mechanism against future quantum theft on the bitcoin-dev mailing list Wednesday, November 5, 2026. The proposal, called “quantum landmines,” would require would-be quantum thieves to stake collateral equal to the Bitcoin they attempt to steal. Under the mechanism, an owner could secretly deploy hidden cryptographic proof of ownership in a separate quantum-safe wallet before quantum computers become a threat. If a quantum attacker later attempts to move vulnerable coins, both the stolen Bitcoin and the attacker’s collateral would be frozen for a waiting period (Fields suggested 30 days). During this lockup, the original owner could reveal their proof, reclaim their Bitcoin, and seize the attacker’s collateral as a penalty. The thief would have no advance warning of which holdings are trapped, creating a powerful deterrent: quantum attackers would risk losing double their attempted theft. For coins believed to be lost or inactive (including Satoshi Nakamoto’s estimated holdings), Fields proposed a complementary auction system where network participants place hidden advance bids on vulnerable addresses. If a quantum attack is detected, the highest bidder’s smart contract would automatically activate, burning the attacker’s coins and transferring their collateral to the winning bidder as a bounty. Fields explicitly characterized these ideas as “thought experiments” and acknowledged that the enforcement mechanisms remain unspecified.
Why It Matters?
The quantum threat to Bitcoin is concrete and growing urgent. As documented in Article 315, Coinbase holds approximately 5% of all circulating Bitcoin and is advocating for immediate quantum-defense preparations across the industry, citing Google’s estimate that cryptographically relevant quantum computers could be feasible by 2029. Bitcoin’s elliptic curve digital signature algorithm (ECDSA) and Schnorr signatures are vulnerable to quantum attacks via Shor’s algorithm: a sufficiently powerful quantum computer could reverse the mathematical operation that turns a secret key into a public key, allowing an attacker to derive the spending key without the original owner’s knowledge. Early Bitcoin transactions (particularly those associated with Satoshi Nakamoto) exposed public keys in the blockchain, making those coins particularly vulnerable. The Bitcoin community faces a genuine trade-off: freeze vulnerable coins to prevent theft (but potentially lock out legitimate owners), or defend them cryptographically without imposing onerous costs on honest holders. Fields’ proposal attempts to split that difference by creating financial penalties for attackers while allowing owners to move their coins if they prepare in advance. The landmine mechanism introduces a psychological element: owners who suspect vulnerability can transform passive risk into active bait, turning the tables on potential thieves. However, the proposal also reveals the fundamental challenge: any defense that applies uniformly to all coins—including those moved by legitimate owners—imposes costs on the honest majority. Fields’ collateral requirement would force even owners moving their own coins to post matching funds, effectively doubling capital requirements during the transition to quantum-safe systems. This creates a tension between security and usability that any practical quantum defense must navigate. For the session narrative, the quantum threat contrasts with earlier themes: it is existential and accelerating (Google’s timeline), but solutions impose real economic friction on the network and its users.
What’s Next?
Monitor Bitcoin Core development discussions around quantum-safe wallet standards and consensus changes. Fields’ proposal is a thought experiment, but if it gains traction, it will require formal specification of collateral-locking rules, proof-revelation mechanics, and auction systems. Watch for technical responses from other Bitcoin developers and researchers regarding feasibility, security assumptions, and alternative approaches. Track Google’s quantum computing timeline and any updates on cryptographically relevant quantum computer (CRQC) progress. If Google or other quantum labs announce breakthroughs that accelerate the timeline beyond 2029, urgency for quantum-safe Bitcoin defenses will intensify dramatically. Monitor implementation of quantum-resistant signature schemes (proposed in Article 315: P2MR/BIP-360 and staged hybrid signatures). These foundational changes must occur before collateral-based defenses like landmines can be deployed. Track industry responses from Coinbase, other exchanges, and large Bitcoin holders regarding quantum-defense preferences. Will the community converge on freezing vulnerable coins, cryptographic traps, or a hybrid approach? Watch for any movement in early Bitcoin addresses (particularly Satoshi’s holdings). Large movements or unusual activity could indicate either anticipated quantum threats or owners preparing quantum-safe migration. Finally, monitor regulatory and legal questions: if a “landmine” successfully captures a thief’s collateral, who owns those funds? Is it the original Bitcoin owner (who triggered the trap), the network (via consensus rules), or a designated bounty program? Without legal clarity, the incentive structure Fields proposes may face adoption friction even if technically implemented.
Affected Tickers and Coins: BTC | Bitcoin Network
Source: CoinDesk (article by Shaurya Malwa)
