Quantum Risk And Bitcoin: Preparing For A Post-Quantum World

Key Concepts

• Quantum Computing Risk: The potential for quantum computers to break the asymmetric cryptography (specifically ECDSA) that secures Bitcoin.
• Shor’s Algorithm: A quantum algorithm capable of factoring large integers and solving discrete logarithm problems, which would render current public-key cryptography obsolete.
• Fast Clock vs. Slow Clock: A distinction in quantum hardware; "Fast clock" (superconducting) systems could potentially target transactions in the mempool, while "Slow clock" (neutral atoms/trapped ions) systems are currently more scalable but slower.
• Cryptographic Agility: The ability of a network to switch between different cryptographic primitives to maintain security as threats evolve.
• QLDPC Codes: Quantum Low-Density Parity-Check codes, which allow for more efficient error correction and the creation of logical qubits.
• Satoshi Coins: The ~1.1 million BTC mined by Satoshi Nakamoto, which remain in static, vulnerable addresses.

---

1. The Nature of the Quantum Threat

The primary risk to Bitcoin is the compromise of digital signatures. Bitcoin uses public keys to authorize transactions. If a quantum computer becomes powerful enough, it could derive a private key from a public key, allowing an attacker to sign transactions on behalf of the owner.

• The Two Vectors:
  1. Dormant/Static Addresses: Coins (like Satoshi’s) that have never moved or are held in static multisig wallets are perpetually exposed.
  2. Mempool Attacks: Once a user broadcasts a transaction, their public key is exposed to the network. A "fast clock" quantum computer could theoretically generate a fraudulent transaction with a higher fee, front-running the original transaction and stealing the funds before they are confirmed.

2. Quantum Hardware Evolution

The experts discussed a bifurcation in quantum technology:

• Gen 1 (Superconducting): Pioneered by Google and IBM. They offer high clock speeds but are physically delicate and difficult to scale.
• Gen 2 (Neutral Atoms/Trapped Ions): These are more stable and currently show the most promise for scaling. While they operate at slower clock speeds, they may reach "cryptographic relevance" first.
• Gen 3 (Silicon Spins/Photonics): Emerging technologies that aim to combine scalability with high speed.
• The "All-or-Nothing" Threshold: Quantum computing is currently in a state where it cannot perform useful tasks until robust error correction is achieved. Once that threshold is crossed, the jump in capability could be rapid.

3. Mitigation and Migration Framework

The panel emphasized that Bitcoin must eventually adopt post-quantum cryptography (PQC).

• The Migration Process: Users would need to move funds from current UTXOs (Unspent Transaction Outputs) to new, quantum-secure addresses.
• The "Fast Clock" Deadline: If a quantum computer becomes fast enough to attack the mempool, the ability to migrate on-chain is effectively destroyed, as any migration transaction would itself be intercepted.
• Cryptographic Agility: The network should move toward a system where it can support multiple signature schemes simultaneously, allowing for a transition period without locking the network into a single, potentially flawed algorithm.

4. The "Satoshi Coin" Dilemma

A significant portion of the discussion focused on the ~2.5 million BTC that are presumed abandoned or lost.

• The Debate: Should these coins be protected, burned, or left as a "honeypot" for the first quantum-capable actor?
• Proposed Solutions:
  • Redistribution: Alex Prudin suggested moving these coins to the end of the supply curve to incentivize miners after the block subsidy ends.
  • Status Quo: Leaving them vulnerable as a "canary in the coal mine" to signal when quantum threats have reached a critical level.
• Key Argument: There is no consensus. The community is split, and any intervention would be viewed by some as a violation of Bitcoin’s core property rights and immutability.

5. Notable Quotes

• Nick Carter: "I don't want to wager the future of a trillion-dollar network on this hope that technology does not advance."
• Alex Prudin: "At the point at which a quantum computer advances far enough that it is fast clock and able to attack transactions in the mempool, you no longer have an on-chain path to migrating."
• General Consensus: The "BS to reality ratio" in quantum computing is high, but the existential risk necessitates proactive preparation rather than passive reliance on the difficulty of engineering.

Synthesis and Conclusion

The panel concluded that while quantum computing remains a long-term threat with significant engineering hurdles, the "wait and see" approach is dangerous for a network with the inertia of Bitcoin. The most actionable path forward involves:

1. Developing Cryptographic Agility: Preparing the protocol to support new, quantum-resistant signature schemes.
2. Accepting Performance Trade-offs: Acknowledging that PQC signatures will likely be larger and more computationally expensive, potentially reducing transactions per second.
3. Community Coordination: Addressing the "coordination failure" where no single entity is leading the quantum-readiness effort.
4. Strategic Ambiguity: Maintaining a degree of vulnerability in dormant coins as a potential early-warning system, while simultaneously building the infrastructure to protect active users.