The quantum threat to Bitcoin: why decentralization has become the main vulnerability
The executive order signed by the US President on accelerating the transition of federal systems to post-quantum cryptography is an important signal, but for Bitcoin, it is nothing more than a reminder of a systemic problem. Decentralized networks cannot be updated by directive, and this creates a unique challenge that government agencies do not face.
Timeline Estimates: From Optimism to Realism
The exact date of the emergence of a cryptographically significant quantum computer remains a subject of debate, but the consensus is shifting towards the next decade. Leading experts point to a range of three to ten years, with some estimates suggesting a 10% probability of "Q-Day" occurring by 2030 and 50% by 2033. Industry roadmaps converge around the 2028–2030 period, although public data may not account for classified programs.
The Main Risk Is Not in Mining, But in Signatures
The key vulnerability of Bitcoin is not the Proof-of-Work algorithm, but the cryptography of signatures. A sufficiently powerful quantum computer could recover a private key from a disclosed public key, allowing it to sign transactions on behalf of any user. This threatens not so much the network as a whole, but rather individual funds in addresses with already used public keys.
Why Migration Will Take Years
The transition to post-quantum cryptography in Bitcoin is not a technical task, but a political and coordination one. Major changes to the network have historically been slow, causing hard forks and community splits. Agreement will be required among developers, miners, exchanges, custodians, and holders. Changes will affect signature sizes, consensus rules, wallet infrastructure, and user practices. Even with working protocols, the path from proposal to activation could take years.
Alternative Approaches and Controversies
Protection proposals already exist, such as BIP-360 and BIP-361. The first introduces a new output type that eliminates the vulnerable key-path spend. The second proposes a drastic scenario: locking coins in vulnerable addresses if owners refuse to migrate. This has sparked fierce debate—some consider the measure necessary, while others see it as a violation of the principle of sovereign control.
Other Networks Are Moving Faster
Unlike Bitcoin, more centralized ecosystems are already publishing roadmaps. Stellar and Algorand have presented quantum resilience plans, and the Ethereum Foundation has formed a dedicated team that proposed the SPHINCS- solution to protect wallets without a hard fork. This underscores that decentralization, while being Bitcoin's strength, in this case becomes its main hindrance.
My view: Bitcoin faces an existential challenge that has no simple solution within the existing governance model. While the community debates principles, time may be lost. The quantum threat is not a question of "if," but "when," and delays in coordination could cost billions.