Key Takeaways
- • Bitcoin developers are actively debating BIP-361, a proposal to freeze coins vulnerable to quantum attacks, with over 34% of all Bitcoin (approximately $74 billion in value) currently exposed due to revealed public keys on-chain.
- • The proposal introduces a three-phase timeline: blocking inflows to vulnerable addresses three years after activation, freezing legacy coins two years later, and providing a recovery path through zero-knowledge proofs for holders who miss the deadline.
- • BitMEX Research has proposed an alternative "quantum canary" mechanism that would only trigger a freeze if a quantum attack is proven on-chain through spending from a specially constructed canary address, avoiding preemptive coin freezing.
- • The debate centers on a fundamental trade-off: network security against quantum threats versus individual property rights, with quantum computers capable of breaking Bitcoin's encryption estimated to emerge 5-15 years away, though preparation requires years of advance work.
- • Co-authored by Jameson Lopp and five other developers, BIP-361 represents the first Bitcoin upgrade proposal to potentially render existing transactions invalid and force users to migrate to quantum-resistant addresses.
Summary
Bitcoin developers are engaged in an intensifying debate over how to address the growing quantum computing threat to the network's security. The focal point is BIP-361, titled "Post Quantum Migration and Legacy Signature Sunset," which proposes to phase out Bitcoin's existing signature schemes and freeze coins that fail to migrate to quantum-resistant addresses. The proposal, co-authored by Jameson Lopp and five other developers and published in Bitcoin's official improvement repository on April 16, 2026, targets a critical vulnerability: quantum attacks could theoretically derive private keys from publicly exposed addresses on the blockchain, enabling attackers to steal funds without owner credentials.
The scale of the problem is substantial. According to the proposal, over 34% of all Bitcoin—representing approximately $74 billion in value—has exposed a public key on-chain, leaving those holdings vulnerable once a sufficiently powerful quantum computer emerges. The proposal establishes a three-phase implementation timeline: blocking new inflows to vulnerable addresses roughly three years after activation, freezing all legacy coins two years later, and establishing a recovery mechanism using zero-knowledge proofs for holders who miss the migration deadline. Critically, this would mark the first Bitcoin upgrade to force such a choice between collective network defense and individual access to coins.
In response to concerns about the bluntness of a full freeze, BitMEX Research has proposed an alternative mechanism termed the "quantum canary" system. Rather than preemptively freezing coins after a fixed timeline, this approach would place vulnerable addresses in a "canary observation state." A specially constructed canary fund address—generated using a system that mathematically proves no private key exists—would serve as a trigger mechanism. Only when a valid spend occurs on-chain from this canary address would it definitively prove that a quantum computer capable of stealing Bitcoin exists, at which point the freeze would immediately activate. If the canary is never triggered, quantum-fragile coins could continue to be spent normally. This scheme also allows users to donate Bitcoin to the canary address as a bounty pool, structured as a 1-of-2 multisignature output with withdrawal rights.
BitMEX Research acknowledged that the canary mechanism is more complex than a straightforward freeze, but argued the added complexity is justified given the significant economic disruption that a preemptive freeze could cause. Meanwhile, most researchers estimate that practical quantum attacks remain 5-15 years away, yet stress that preparation must begin years in advance due to the complexity involved. The debate reflects deep tensions within the Bitcoin developer community: balancing genuine security imperatives against concerns that freezing dormant coins—including Satoshi Nakamoto's estimated holdings—could fundamentally alter Bitcoin's character as a property-rights system.
The scale of the problem is substantial. According to the proposal, over 34% of all Bitcoin—representing approximately $74 billion in value—has exposed a public key on-chain, leaving those holdings vulnerable once a sufficiently powerful quantum computer emerges. The proposal establishes a three-phase implementation timeline: blocking new inflows to vulnerable addresses roughly three years after activation, freezing all legacy coins two years later, and establishing a recovery mechanism using zero-knowledge proofs for holders who miss the migration deadline. Critically, this would mark the first Bitcoin upgrade to force such a choice between collective network defense and individual access to coins.
In response to concerns about the bluntness of a full freeze, BitMEX Research has proposed an alternative mechanism termed the "quantum canary" system. Rather than preemptively freezing coins after a fixed timeline, this approach would place vulnerable addresses in a "canary observation state." A specially constructed canary fund address—generated using a system that mathematically proves no private key exists—would serve as a trigger mechanism. Only when a valid spend occurs on-chain from this canary address would it definitively prove that a quantum computer capable of stealing Bitcoin exists, at which point the freeze would immediately activate. If the canary is never triggered, quantum-fragile coins could continue to be spent normally. This scheme also allows users to donate Bitcoin to the canary address as a bounty pool, structured as a 1-of-2 multisignature output with withdrawal rights.
BitMEX Research acknowledged that the canary mechanism is more complex than a straightforward freeze, but argued the added complexity is justified given the significant economic disruption that a preemptive freeze could cause. Meanwhile, most researchers estimate that practical quantum attacks remain 5-15 years away, yet stress that preparation must begin years in advance due to the complexity involved. The debate reflects deep tensions within the Bitcoin developer community: balancing genuine security imperatives against concerns that freezing dormant coins—including Satoshi Nakamoto's estimated holdings—could fundamentally alter Bitcoin's character as a property-rights system.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.