Bitcoin Quantum Defense Brief

How Quantum Computing Breaks Bitcoin Cryptography

• ECDSA relies on elliptic curve discrete log — Bitcoin uses the secp256k1 curve. The security assumption is that deriving a private key from a public key is computationally infeasible for classical computers.
• Shor's Algorithm breaks this in polynomial time — a cryptographically relevant quantum computer (CRQC) can solve the elliptic curve discrete logarithm problem efficiently, making private key extraction from a public key feasible.
• Exposed public keys are the primary attack surface — Bitcoin addresses are hashed versions of public keys. The actual public key is only revealed when you spend from an address. Once revealed, it is permanently visible on-chain.

Understanding Public Key Exposure

• Spent-from addresses reveal public keys — every time a transaction is broadcast from an address, the public key is included in the transaction data and becomes permanently visible on the blockchain.
• Over 5 million BTC estimated in exposed addresses — researchers estimate that a significant portion of all Bitcoin, worth hundreds of billions of dollars, sits in addresses where the public key has already been revealed (Aggarwal et al., 2017).
• Legacy address formats are most commonly affected — addresses beginning with "1" (P2PKH) and early Pay-to-Public-Key (P2PK) outputs, including Satoshi's original coins and early miner rewards, carry the highest exposure risk.

Steps You Can Take Today

These steps cost almost nothing and dramatically reduce your quantum attack surface:

• Stop address reuse — use a fresh receiving address for every transaction. Most modern wallets do this by default. Verify your wallet settings.
• Sweep exposed UTXOs to fresh SegWit addresses — if you have funds in addresses you have previously spent from, move them to a new address where the public key has never been revealed.
• Use native SegWit (bc1q) as default — native SegWit addresses keep the public key hidden in the witness data until spending occurs. Avoid legacy address formats where possible.
• Evaluate multisig for high-value holdings — 2-of-3 or 3-of-5 multisig setups require an attacker to break multiple keys simultaneously, significantly raising the bar for any quantum attack.
• Secure seed phrases offline — use metal backup plates, never digital storage. This protects against both classical and quantum-adjacent threats.

Enterprise Quantum Readiness

Organizations holding or custodying digital assets should begin quantum preparedness planning now:

• Cryptographic inventory of key material — catalog all private keys, public keys, and address types in use across wallets, custody solutions, and cold storage. Identify which keys have been exposed on-chain.
• Key lifecycle documentation — document key generation methods, rotation schedules, and retirement procedures. Ensure all key material has clear ownership and expiration policies.
• HSM and custody architecture evaluation — assess whether your hardware security modules and custody providers support firmware upgrades for post-quantum algorithms. Plan for PQC-capable hardware procurement.
• Migration planning — develop a phased plan for moving exposed holdings to quantum-safer configurations. Prioritize high-value UTXOs and addresses with known public key exposure.