7.12 Million Bitcoin Have an Exposed Lock. Satoshi's Coins Can't Be Fixed.
Glassnode counts 7.12 million BTC, or 35.4% of circulating supply, sitting with public keys already visible on-chain. Most holders can migrate to safer addresses in minutes. The Satoshi-era coins can't move without exposing themselves.
Glassnode just put a number on Bitcoin's quantum problem. 7.12 million coins. That's 35.4% of circulating supply with a public key already printed on the ledger.
Not a theory. A count.
The Count
Anon, let me explain the mechanics. A Bitcoin address is a hash of a public key. That hash is the lock everyone can see. The full key stays hidden until you spend. And once you spend, the key is on the chain forever.
A big enough quantum computer running Shor's algorithm could, in theory, work backwards from that key and drain the coins.
That "in theory" is carrying a lot of weight. No machine today comes close. But the exposure is real and it's been piling up since 2009.
The earliest coins were mined to pay-to-public-key outputs. Their keys went on the ledger on day one. Satoshi Nakamoto's stash sits in exactly those outputs, roughly a million BTC by most estimates, untouched for more than 15 years. Then Taproot shipped in November 2021 and added a fresh batch of exposed keys to the pile. Every new address type that publishes a key grows the number Glassnode is tracking.
Who Can Actually Fix It
Most of those 7.12 million coins have an owner who can patch this in minutes. Move the coins to a quantum-resistant address and the old key stops mattering. One transaction, done. Exchanges can batch it. Custodians can script it. Funds with deep cold storage can run it as a routine migration.
Real talk: for most holders this is a chore, not a crisis.
The unfixable part is Satoshi's coins. Spending them is what exposes the key. So the only remedy, moving them somewhere safer, is the exact act that creates the risk. And if someone did move them, the market would read it as a signal it couldn't ignore. A whale waking up after 15 years? CT would lose its mind inside a minute.
So what happens when the one wallet nobody can fix belongs to the person everyone is watching?
Here's my take, and it's not a comfortable one. This isn't a math problem. It's a coordination problem. Bitcoin has to agree on a post-quantum signature scheme, ship a soft fork, and convince a huge chunk of supply to migrate. That's node upgrades plus years of nagging. Bitcoin is famously bad at all three.
NIST finalized its post-quantum standards back in August 2024. Google's Willow chip landed in December 2024 and did nothing to Bitcoin, despite the headlines. Both things are true at once. That's the tension nobody wants to sit with.
And the market is pricing this at zero. Is that wrong? Maybe not today. But the gap between "we should migrate" and "we must migrate now" is short when you measure it in block height.
What to Watch
Watch Glassnode's number. It only goes up as more keys get exposed, so each new Taproot spend nudges the count higher. Watch the quantum-resistant address proposals, including BIP-360. Not for code, for soft fork chatter on the mailing list.
Watch hardware roadmaps from IBM and Google too. Logical qubits matter, physical qubits are marketing. And watch the old pay-to-public-key outputs. Any movement there's the tell, and it'll be the loudest signal this market has seen in years.
The chain doesn't lie. Those keys are already out there, sitting in plain sight since 2009. This is bigger than people realize, and the clock is running on coordination, not cryptography.