Bitcoin facing the quantum threat: decentralization as the main obstacle to protection
A recent U.S. presidential executive order on accelerating the transition of federal systems to post-quantum cryptography underscores growing concern at the state level. However, while migration for government databases is a matter of bureaucratic procedures, for Bitcoin, things are far more complex. The decentralized network does not obey decrees, and its upgrade requires consensus among thousands of independent participants.
It is impossible to predict the exact date when a cryptographically significant quantum computer will emerge, but estimates from leading experts converge on a timeframe of three to ten years. Some analysts believe the probability of a "Q-Day" occurring by 2030 is around 10%, and by 2033, it reaches 50%. Importantly, public forecasts may not account for classified military programs, making the actual timeline even more concerning.
Bitcoin's Main Vulnerability Is Not Mining, But Signatures
The key risk for Bitcoin is not related to a quantum computer's ability to accelerate mining, but rather the threat to cryptographic signatures. If a public key of an address is exposed (which happens with every coin spend), a powerful quantum computer could recover the private key and sign a transaction on behalf of the owner. This puts billions of dollars in "hot" wallets and addresses with transaction histories at risk.
Technical proposals for protection already exist, such as BIP-360 and BIP-361. The first introduces a new output type that eliminates the quantum-vulnerable Taproot logic. The second describes a more stringent scenario—forced locking of coins on vulnerable addresses if owners refuse to migrate. However, these initiatives are still in the discussion phase, and there is a long road ahead before they are activated on the main network, filled with debates about Bitcoin's fundamental principles.
Decentralization Slows Down Evolution
The transition to post-quantum cryptography in Bitcoin is not just a technical upgrade. It requires coordination among developers, miners, exchanges, custodians, and millions of users. Any consensus change (hard fork) in Bitcoin historically triggers protracted political battles. Given that quantum migration will affect signature sizes, consensus rules, and the entire infrastructure, the process from the first proposal to activation could take years—even if working prototypes appear tomorrow.
It is telling that more centralized ecosystems, such as Stellar and Algorand, have already published roadmaps with specific timelines. The Ethereum Foundation has even proposed a solution for protecting accounts without a hard fork. Bitcoin, as the benchmark of decentralization, faces a paradox: its main advantage becomes the most serious obstacle on the path to quantum security.
My opinion: The industry underestimates the time lag between the emergence of a threat and its neutralization in decentralized networks. Even if Q-Day occurs in 2033, Bitcoin needs to start migrating now to be ready before the quantum computer becomes a reality. Otherwise, we risk facing a situation where the safest asset turns into the most vulnerable one.