A number of devs and founders have been speaking publicly about concrete publish‑quantum paths for Bitcoin. Two totally different proposals have caught the crypto world’s consideration.
Bitcoin’s Web-Watchers Begin Constructing Their Blackwall
The ticking clock marking 2029 because the doable “deadline” for quantum computer systems to have the ability to break Bitcoin and Ethereum’s cryptography has made devs roll up their sleaves and get to work.
The current spike of the Bitcoin quantum-panic or “quantum FUD” (worry, uncertainty and doubt) has moved on from the preliminary chaos that ensued following Google’s “doomsday” whitepaper to a race towards an enemy that doesn’t but exist. Previously days, two Bitcoin devs landed at totally different proposals aimed to guard Bitcoin from the longer term menace of quantum assaults.
Considered one of them consists in a “Taproot kill‑change + zk‑proof restoration” path for current UTXOs (Unspent Transaction Outputs). The opposite is a QSB (Quantum Protected Bitcoin), a transaction‑stage building that makes particular person spends quantum‑protected in the present day with none smooth fork (rule adjustments that keep suitable with previous software program).
Each approaches assume Shor‑fashion quantum computer systems (quantum computer systems primarily based on Shor’s algorithm) will nuke the maths behind Bitcoin’s present signatures (ECDSA/Schnorr), however they differ on how a lot of Bitcoin wants to vary: consensus guidelines vs person‑stage tooling.
Let’s study each proposals carefully.
Resolution #1
The primary answer comes from Olaoluwa Osuntokun, co‑founder and CTO of Lightning Labs (the principle firm constructing the Lightning Community implementation) and Tim Ruffing, co‑creator and contributor on Schnorr/Taproot, multisignature schemes like MuSig2 and a maintainer of Bitcoin’s core elliptic‑curve library.
On a publish made on the social media X on April 8, Osuntokun resurfaced Ruffing’s July 2025 whitepaper on Bitcoin’s post-quantum safety so as to suggest an answer for one of many issues offered within the paper: “to create a variant of seed-lifting that doesn’t reveal the pockets’s grasp secret”. He referred to as this “zk-STARK proof”.
within the face of quantum adversary, a generally mentioned emergency smooth fork for Bitcoin could be to disable the Taproot keyspend path (https://t.co/Gzx8NVui3N), successfully turning it into one thing that resembling BIP-360
assuming an current precautionary soft-fork so as to add a pq…
— Olaoluwa Osuntokun (@roasbeef) April 8, 2026
In plain language, Osuntokun’s instrument creates a particular cryptographic proof (the zk‑STARK) that allows you to show you actually have the unique pockets secret behind a given Taproot deal with, and that you just used the usual pockets guidelines to get from that secret to this deal with. They essential facet of the zk-STARK proof is that it does this with out ever revealing the key itself, or any personal keys, to anybody.
If, sooner or later, Bitcoin does a quantum‑protection smooth fork that disables regular key‑primarily based spends, many BIP‑86 Taproot wallets could possibly be caught and unable to maneuver cash. With this proof, these customers get an additional “escape hatch”: they’ll show possession of their Taproot cash through the seed‑derivation proof and transfer funds in a brand new, quantum‑protected means, regardless that the previous key‑spend path is turned off.
He mentioned all of the technicalities behind this on the Bitcoin dev mailing listing.
The answer has discovered acceptance, and it’s been typically obtained very properly within the crypto group.
Appears like this probably solves the thorniest challenge round quantum proofing Bitcoin: confiscation of cash.
A PQ smooth fork like BIP360 successfully “confiscates” cash by completely disabling spends from sure “susceptible” wallets the place public keys have been revealed.… https://t.co/wV49BIXmx2
— Vijay Selvam (@VijaySelvam) April 9, 2026
Resolution #2
The second, and extra polemic answer, comes from Avihu Mordechai Levy, a cryptography engineer at StarkWare who works on zero‑data proofs and STARKs. His whitepaper, printed yesterday, exhibits the way to make particular person Bitcoin transactions quantum‑protected in the present day, utilizing Lamport‑fashion one‑time signatures plus a “hash‑to‑signature” proof‑of‑work puzzle, with zero adjustments to Bitcoin’s base protocol.
Quantum-Protected Bitcoin Transactions With out Softforkshttps://t.co/1lx5waX9VV pic.twitter.com/Ni7pA6dEsC
— Avihu Levy ✨🐺 (@avihu28) April 9, 2026
QSB replaces the previous signature‑measurement PoW (which quantum assaults may fully break by discovering tiny ECDSA r‑values) with a RIPEMD‑160‑primarily based puzzle that solely depends on hash pre‑picture resistance, which is merely weakened, not destroyed, by Grover’s algorithm (quantum tech).
Once more in plain language, what QSB does is it throws away the previous “make the signature tiny” proof‑of‑work trick, as a result of a robust quantum pc may cheat that by exploiting the elliptic‑curve math. As a substitute, QSB makes use of a brand new puzzle constructed on the RIPEMD‑160 hash perform. Breaking a hash like that’s extraordinarily onerous, even with a quantum pc.
QSB suits in legacy script limits and provides round 118‑bit publish‑quantum pre‑picture safety. Nonetheless, it prices lots of of {dollars} in off‑chain GPU work per transaction and requires non‑commonplace naked scripts mined through personal relay providers. Because of this many are calling QSB a “final resort” or perhaps a “whale-grade band-aid”.
I’m not claiming this isn’t grossly inefficient, nor that it wouldn’t make sense to finally enhance the protocol layer if a cleaner answer emerges.
My level is solely that it’s false to say this sort of whale-grade band-aid doesn’t exist already on the present protocol…
— Coinjoined Chris ⚡ (@coinjoined) April 10, 2026
A Philosophical Cut up
The group is not arguing if quantum breaks ECDSA/Schnorr, however the way to stage an orderly migration. Let’s do not forget that the creator of Bitcoin, Satoshi Nakamoto himself, assured in 2010 {that a} gradual transition to post-quantum, stronger know-how, was doable for Bitcoin.
A publish from Satoshi Nakamoto concerning the quantum menace for Bitcoin. Supply: Bitcoin Journal on X.
Taproot‑primarily based restoration tries to guard the complete UTXO set with minimal worth destruction, whereas some outstanding voices nonetheless argue non‑migrated cash ought to merely expire quite than be “rescue” in bizarre methods, to protect Bitcoin’s financial story.
In the mean time of writing, BTC trades for the excessive $71ks on the day by day chart. Supply: BTCUSD on Tradingview.
Cowl picture from Perplexity. BTCUSD chart from Tradingview.
Editorial Course of for bitcoinist is centered on delivering totally researched, correct, and unbiased content material. We uphold strict sourcing requirements, and every web page undergoes diligent evaluation by our group of high know-how specialists and seasoned editors. This course of ensures the integrity, relevance, and worth of our content material for our readers.
