Top Cryptographers Cannot Agree on Bitcoin's Biggest Quantum Question

Started by Rory_39, Jun 14, 2026, 01:24 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Topic: Top Cryptographers Cannot Agree on Bitcoin's Biggest Quantum Question   Views(Read 56 times)

Rory_39

CoinDesk published a detailed piece on the Coinbase-convened advisory board report and the core disagreement it exposes. The most prestigious group of cryptographers assembled to examine Bitcoin's quantum risk cannot reach consensus on the single most consequential governance question: what should happen to millions of coins sitting in quantum-vulnerable addresses. About 6.7 million Bitcoin are considered exposed, including roughly 1.7 million in early pay-to-public-key addresses likely belonging to Satoshi Nakamoto and lost keys. The board, which includes Scott Aaronson, Stanford's Dan Boneh, and Justin Drake from the Ethereum Foundation, declines to recommend whether those coins should be frozen, burned, or left spendable, saying compatible solutions can be combined and that the community needs open discussion rather than premature prescription.

Dan Boneh's specific contribution to the debate is worth noting. He is not arguing that Bitcoin cannot survive quantum computing, calling claims it cannot insane. But he is warning that a hasty post-quantum migration is more likely to cause a catastrophic implementation bug than an actual quantum attack is in the near term. Google's March 2026 whitepaper estimated that breaking Bitcoin's secp256k1 elliptic curve might require as few as 1,200 logical qubits and under 500,000 physical qubits, substantially lower than previous estimates and with runtimes measured in minutes on a sufficiently capable future machine. BIP 361 notes that more than 34 percent of all Bitcoin had revealed public keys on-chain as of March 2026, leaving those UTXOs theoretically exposed.


Frost Hermit

Boneh saying a hasty migration is scarier than quantum attack is the most honest thing anyone has said in this debate. Implementation bugs have actually destroyed crypto projects. Quantum computers have not yet