Bitcoin's Quantum Fix Needs to Start Now, and 1 Million Dormant Coins Are the Real Problem
A major exchange is pushing Bitcoin to plan its quantum-resistant migration years before any machine can break the network. The cryptography is solvable. The governance fight over dormant coins, block space, and custody isn't.
The quantum question around Bitcoin has mostly lived in academic papers and conference panels. Now one of the biggest exchanges is putting its weight behind a blunter position. The migration to quantum-resistant cryptography has to start years before any machine can actually crack the network, and it needs to be mapped out in public, with rules covering block space, custody and the coins nobody can move.
That last part is the awkward one. Bitcoin's ECDSA signatures are vulnerable in principle to a sufficiently powerful quantum computer. So are the addresses that haven't signed since 2009. Estimates put lost or dormant coins somewhere between 3 million and 4 million BTC, which at recent prices is north of $300 billion. Any fix that forces those coins to move, or freezes them outright, sets a precedent the network has never had to set. Satoshi's roughly 1 million coins are sitting in the middle of that debate.
Then there's block space. Post-quantum signatures are fat. NIST finalized its first standards back in August 2024, and the lattice-based scheme in FIPS 204 runs to thousands of bytes. A Schnorr signature is 64. Multiply that across every unspent output and you're looking at a chain that grows much faster than it does today. Node operators, miners and custodians each feel that cost differently, and they won't agree on the tradeoff without a fight.
The timeline is the comforting part. Google's Willow chip, shown off in December 2024, runs 105 qubits. Breaking elliptic curve math needs millions of stable ones. Most researchers put that in the 2030s at the earliest. So there's time. But "there's time" is exactly how a network ends up with a decade of arguing and a two-year scramble at the end.
Here's my take. The cryptography is the easy half. The governance is the hard half, and Bitcoin has no mechanism for deciding what to do with a million coins whose owner is either gone or silent. Starting that conversation now, before anyone's holding a gun to the network, is the right call. Capital follows clarity, and on this issue there isn't any yet.