Top Cryptographers Cannot Agree on Bitcoin's Biggest Quantum Question

[Rory_39]

CoinDesk published a detailed piece on the Coinbase-convened advisory board report and the core disagreement it exposes. The most prestigious group of cryptographers assembled to examine Bitcoin's quantum risk cannot reach consensus on the single most consequential governance question: what should happen to millions of coins sitting in quantum-vulnerable addresses. About 6.7 million Bitcoin are considered exposed, including roughly 1.7 million in early pay-to-public-key addresses likely belonging to Satoshi Nakamoto and lost keys. The board, which includes Scott Aaronson, Stanford's Dan Boneh, and Justin Drake from the Ethereum Foundation, declines to recommend whether those coins should be frozen, burned, or left spendable, saying compatible solutions can be combined and that the community needs open discussion rather than premature prescription.

Dan Boneh's specific contribution to the debate is worth noting. He is not arguing that Bitcoin cannot survive quantum computing, calling claims it cannot insane. But he is warning that a hasty post-quantum migration is more likely to cause a catastrophic implementation bug than an actual quantum attack is in the near term. Google's March 2026 whitepaper estimated that breaking Bitcoin's secp256k1 elliptic curve might require as few as 1,200 logical qubits and under 500,000 physical qubits, substantially lower than previous estimates and with runtimes measured in minutes on a sufficiently capable future machine. BIP 361 notes that more than 34 percent of all Bitcoin had revealed public keys on-chain as of March 2026, leaving those UTXOs theoretically exposed.

What happens to Satoshi's BTC when Bitcoin's quantum problem is fixed?www.coindesk.com

[Frost Hermit]

Boneh saying a hasty migration is scarier than quantum attack is the most honest thing anyone has said in this debate. Implementation bugs have actually destroyed crypto projects. Quantum computers have not yet

[Coastal Otter]

1,200 logical qubits is a very different number from the millions people were citing two years ago. The timeline compression is real and the board is right to say this cannot wait for certainty

[Phil95]

The Satoshi coins problem has no clean solution. If you freeze them you are making a governance decision about property rights that sets a precedent for any other dormant funds. If you leave them vulnerable the whole network has an exposed flank

[SlayedRebellion]

34 percent of Bitcoin with public keys on-chain is not a small number. That represents trillions of dollars of potentially exposed value. This is an actual live risk that scales with how fast quantum hardware develops

[QuantumFoam]

The board declining to answer the hardest question is not a cop-out, it is appropriate intellectual honesty. They are cryptographers not politicians. The governance call belongs to the community

[R948]

I find it telling that Ethereum is better positioned here than Bitcoin. Smart contracts provide flexibility that could allow quantum-resistant signing without network-wide consensus changes

[DiamondDallas]

BIP 361 being merged into Bitcoin's repository in February is underreported. The actual technical work has started. The governance debate is lagging behind the engineering

[veritas.io]

Boneh's comment that Bitcoin will survive and claims it cannot are insane is reassuring from someone who understands the math. But surviving and surviving gracefully are different outcomes

[JayJ]

The fact that this advisory board could not reach consensus on the fundamental policy question tells you how hard the Bitcoin community's eventual governance fight is going to be

[Cyclops46]

Taproot making things worse by exposing more public keys is the kind of irony that is genuinely painful. A privacy and efficiency upgrade inadvertently widening the quantum attack surface

[Calm Paige]

Lol wait, are we actually panicking about quantum computers right now? The same theoretical physicists screaming about Shor's algorithm have been saying fusion energy is twenty years away for the last half a century. Core devs will fork Bitcoin way before a 4,000 qubit machine cracks ECDSA, calm down.

[Vanessa26]

Every time someone brings up reusing addresses with Taproot I get a mild panic attack. Reusing keys was already a terrible habit for regular privacy, but now it is basically sending a VIP invitation to future quantum bots. Good luck getting millions of dormant OG holders to migrate their coins though.