Post-quantum protection of Bitcoin: why decentralization is becoming the main vulnerability
The U.S. presidential executive order mandating an accelerated transition of federal systems to post-quantum cryptography is an important signal for the entire industry. However, for Bitcoin, this document has rather indirect significance. A decentralized network cannot be updated by a top-down directive, and this creates fundamental challenges that centralized structures do not face.
Estimates for the emergence of a cryptographically significant quantum computer vary, but a consensus is gradually forming. Leading experts agree that a time window of 3-10 years is realistic. Some analysts estimate the probability of the so-called Q-Day occurring by 2030 at 10%, and by 2033 at 50%. At the same time, it cannot be ruled out that public estimates do not account for classified quantum programs, which could significantly accelerate this process.
The main threat is not mining, but signatures
The key risk for Bitcoin is not related to the potential cracking of the mining algorithm, but to the vulnerability of digital signatures. If a user's public key becomes known (which happens at the moment a transaction is signed), a sufficiently powerful quantum computer could theoretically recover the private key and sign a transaction on behalf of the owner. The problem is compounded by the fact that many addresses with reuse already have exposed public keys.
Proposals to solve the problem have already emerged within the community. One BIP suggests introducing a new output type that eliminates quantum-vulnerable spending in the style of Taproot. Another, more radical proposal involves forcibly locking coins on vulnerable addresses if owners refuse to migrate. This has sparked heated debates: some see it as a necessary protective measure, others as a direct violation of the principle of sovereign control.
Why Bitcoin lags behind, and others do not
The transition to post-quantum cryptography for Bitcoin is not just a technical update. It is an extremely complex process of coordination among developers, miners, exchanges, custodians, and millions of users. Given that even minor changes to the network historically cause protracted political debates, migration could take years from the moment a working prototype appears.
Against this backdrop, other ecosystems demonstrate greater flexibility. For example, Ethereum has already proposed a solution for protecting accounts without the need for a hard fork, and the development team has made post-quantum security a strategic priority. Stellar and Algorand have also published their roadmaps.
My opinion: The paradox of the situation is that Bitcoin's main advantage—its decentralization and conservatism—becomes its Achilles' heel in this context. While more centralized networks can adapt relatively quickly, Bitcoin will have to go through a complex and possibly painful process of social consensus. And the longer this process takes, the higher the risk that Q-Day will catch the network off guard.