Should lost bitcoin be frozen the ethics of protecting a network from its own past

Started by Pete, Today at 07:43 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Topic: Should lost bitcoin be frozen the ethics of protecting a network from its own past   Views(Read 49 times)
Active members in this topic:
Pete(1)

Pete

TL;DR

  • Millions of bitcoin sit in old addresses whose public keys are already visible, including coins widely attributed to Bitcoin's pseudonymous creator, making them potential targets for a future quantum computer
  • Many of those coins are probably lost forever, because their owners lost their keys or have died
  • A draft proposal, BIP-361, co-authored by Jameson Lopp and others and assigned its number in February 2026, would phase out spending with old signature types after a migration period, effectively freezing coins that are not moved
  • Supporters say freezing protects the whole network from a sudden flood of stolen coins; opponents say it violates property rights and Bitcoin's core principle that nobody can confiscate your money
  • The debate echoes Ethereum's 2016 DAO fork and raises classic philosophical questions about property, the common good and whether rules should change after the fact

A dilemma without a villain

Most ethical dilemmas in technology involve someone doing something wrong. This one is different. It concerns coins that have simply sat untouched for years, some since Bitcoin's earliest days. Their owners have done nothing wrong, and many are no longer around to act. Yet those coins could one day become a problem for everyone else

The reason is quantum computing. Bitcoin relies on elliptic curve signatures to prove ownership, and a sufficiently powerful quantum computer could, in principle, derive private keys from public keys. Coins held in old address types, or in addresses that have been reused, have public keys visible on the blockchain. If someone built such a machine, those coins could be taken by whoever got there first

This thread explores the ethical question that follows. Should the Bitcoin community change its rules to freeze vulnerable coins that are not moved to safer addresses by a deadline? Or should the network leave them alone, accepting that they might be stolen? It is not financial advice, and no position here is endorsed. The aim is to understand the arguments

How many coins are at stake

Estimates vary widely depending on how analysts count. Researchers commonly estimate that early pay to public key outputs contain several million bitcoin, including around a million coins often attributed to Bitcoin's creator, known as Satoshi Nakamoto. Other analyses that include reused addresses and some newer output types reach higher figures, sometimes approaching a third of total supply. Whatever the exact number, it represents a very large share of the currency

Many of these coins are probably lost. Early users mined bitcoin when it was nearly worthless and discarded laptops or forgot passwords. Some owners have died without passing on their keys. Nobody can move such coins to safety, because nobody holds the keys

Inheritance adds another layer. Some coins belong to people who died without sharing their keys, and their families may know the coins exist but cannot access them. A freeze would remove any remote hope of recovery if keys were later found. For grieving families, that can feel like a second loss

Research published in March 2026 by Google researchers and collaborators estimated that breaking the elliptic curve keys used by Bitcoin could require fewer than half a million physical qubits on suitable hardware. No such machine exists yet, and experts disagree about when one might. But the possibility is serious enough that developers are debating responses now

The proposal

In 2025, developer Jameson Lopp and co-authors proposed a plan for a phased migration, later assigned the number BIP-361 in February 2026 and titled Post Quantum Migration and Legacy Signature Sunset. As described in the draft, it would work in phases after a future post quantum signature scheme is adopted. In the first phase, lasting around three years, users could only send coins from legacy addresses to new quantum resistant addresses. Later, at a predetermined block height, the network would stop accepting old style signatures for spending, effectively freezing coins that had not been moved

The proposal is a draft, and adopting it would require broad consensus across Bitcoin's users, developers, miners and businesses. It has sparked heated debate. Some see it as a responsible plan to protect the network, while others see it as a betrayal of Bitcoin's founding principles. Discussions have also explored ways to let owners prove ownership later and recover frozen coins, though such mechanisms are technically challenging

Who decides is itself a question. Bitcoin has no central authority, so rule changes depend on rough consensus among developers, node operators, miners, exchanges and users. That process is slow by design. Some see it as a safeguard against hasty decisions, while others worry it could leave the network unable to act in time

The case for freezing

Supporters argue that the alternative could be catastrophic. If a quantum capable attacker suddenly gained access to millions of exposed coins, they could sell them, crashing the price and harming every holder. Even the fear of such an event could destabilise markets. Freezing vulnerable coins before that happens protects the whole community

They also point out that frozen coins are not stolen coins. Owners who still have their keys have years of warning to move their funds. Only coins that remain unmoved, which are likely lost, would be frozen. In practice, the policy mainly prevents a thief from claiming coins nobody else can use

There is a fairness argument too. If quantum attackers stole lost coins, they would gain enormous unearned wealth at everyone else's expense. Freezing prevents that windfall. Some describe it as the lesser of two evils

Supporters also argue that clear rules announced well in advance are not retroactive in a meaningful sense. Owners would have years of warning and the ability to protect themselves. On this view, the change resembles a building code that requires owners to upgrade unsafe wiring by a deadline. Responsibility is shared between the community and individual holders

Philosophically, this position draws on ideas of the common good and the precautionary principle. When an action could prevent serious harm to many people and the costs fall mainly on property that is effectively abandoned, collective protection may justify changing the rules. Many legal systems have doctrines for dealing with abandoned property for similar reasons. Bitcoin, on this view, needs its own version

The case against freezing

Opponents argue that freezing coins violates the most important promise Bitcoin makes: that nobody, not even the community, can confiscate your money. Bitcoin's appeal rests on rules that cannot be changed to target particular coins. Changing them once, even for good reasons, sets a precedent that could be used again. Trust in the system could suffer more than any quantum attack would cause

They also question the assumption that unmoved coins are lost. Some owners may hold coins in long term storage, may be unaware of the debate or may live in places with limited access to information. Elderly holders, people in prison or those in difficult circumstances might miss a deadline through no fault of their own. Freezing could punish the vulnerable

Philosophically, this position draws on strong property rights traditions, such as those associated with John Locke, and on the principle that rules should not change after the fact. People acquired coins under certain rules, and changing those rules retroactively seems unjust. Some prefer to let the market and the attacker decide, accepting short term pain to preserve long term principles. Others argue that the community should accept quantum theft as a risk rather than compromise neutrality

Precedents from other blockchains

Ethereum faced a related dilemma in 2016. A smart contract called The DAO was exploited, and an attacker drained a large amount of ether. After intense debate, most of the Ethereum community supported a hard fork that reversed the effects of the hack. A minority refused, continuing the original chain as Ethereum Classic under the slogan code is law

Bitcoin itself has changed rules in response to emergencies. In August 2010, a bug allowed someone to create over 184 billion bitcoin in a single transaction. Developers quickly released a fix, and the network adopted a corrected chain that removed the invalid coins. That case involved a clear bug rather than legitimate ownership, but it shows that the community has acted decisively when the system's integrity was at stake

These precedents cut both ways. They show that blockchain communities can and do change rules under pressure. They also show that such changes can split communities and leave lasting disagreements. A quantum freeze could be one of the most contentious decisions in Bitcoin's history

Market reactions are hard to predict. Some analysts think a credible freeze plan could reassure investors by removing a tail risk. Others think any rule change affecting ownership could undermine confidence in Bitcoin as a store of value. The economic effects would depend heavily on how the change was communicated and implemented

Possible middle paths

Some proposals look for compromise. One idea is a long migration period, perhaps many years, with extensive outreach so that active owners have every chance to move their coins. Another is a recovery mechanism that lets owners later prove they controlled frozen coins without revealing keys in a way quantum attackers could exploit. Researchers have discussed zero knowledge proofs and commitments made in advance as possible tools

Another view suggests waiting until there is clear evidence that a cryptographically relevant quantum computer is near, then acting. Critics respond that waiting could leave too little time, since Bitcoin upgrades take years. The timing question is itself a moral question about acting under uncertainty. Act too early, and you may freeze coins unnecessarily, act too late, and you may fail to prevent harm

Questions to discuss

  • Is freezing vulnerable coins a form of confiscation, or a reasonable protection of the network
  • Should coins that appear abandoned be treated differently from coins held by active owners
  • Does the DAO fork make you more or less comfortable with changing rules after the fact
  • How long a migration period would be fair to holders who might miss the news
  • Would you rather risk a quantum theft or accept a rule change that breaks immutability

Closing thoughts

The question of whether to freeze vulnerable bitcoin brings together technology, economics and some of the oldest debates in philosophy. Property rights, the common good, fairness to the absent and the legitimacy of changing rules all come into play. Proposals such as BIP-361 have brought the debate into the open, and no consensus exists. Thoughtful discussion now may help the community reach a decision it can live with

Please share your views in the replies, whether or not you hold any cryptocurrency. This is as much a question about fairness and rules as about money. Respectful disagreement is very welcome, and nothing here is financial advice



Further reading

  • BIP-361, Post Quantum Migration and Legacy Signature Sunset, draft, Bitcoin Improvement Proposals
  • Babbush, Zalcman, Gidney and colleagues, resource estimates for breaking elliptic curve cryptocurrencies, IACR ePrint 2026/625
  • Ethereum Foundation blog, hard fork completed, July 2016
  • John Locke, Second Treatise of Government, 1689
Just here for the craic :)