A number of devs and founders have been speaking publicly about concrete submit‑quantum paths for Bitcoin. Two completely different proposals have caught the crypto world’s consideration.
Bitcoin’s Web-Watchers Begin Constructing Their Blackwall
The ticking clock marking 2029 because the potential “deadline” for quantum computer systems to have the ability to break Bitcoin and Ethereum’s cryptography has made devs roll up their sleaves and get to work.
The latest spike of the Bitcoin quantum-panic or “quantum FUD” (worry, uncertainty and doubt) has moved on from the preliminary chaos that ensued following Google’s “doomsday” whitepaper to a race in opposition to an enemy that doesn’t but exist. Prior to now days, two Bitcoin devs landed at completely different proposals aimed to guard Bitcoin from the long run menace of quantum assaults.
One in every of them consists in a “Taproot kill‑swap + zk‑proof restoration” path for current UTXOs (Unspent Transaction Outputs). The opposite is a QSB (Quantum Secure Bitcoin), a transaction‑stage development that makes particular person spends quantum‑protected right this moment with none comfortable fork (rule adjustments that keep appropriate with previous software program).
Each approaches assume Shor‑type quantum computer systems (quantum computer systems based mostly on Shor’s algorithm) will nuke the maths behind Bitcoin’s present signatures (ECDSA/Schnorr), however they differ on how a lot of Bitcoin wants to vary: consensus guidelines vs person‑stage tooling.
Let’s study each proposals intently.
Answer #1
The primary resolution comes from Olaoluwa Osuntokun, co‑founder and CTO of Lightning Labs (the principle firm constructing the Lightning Community implementation) and Tim Ruffing, co‑writer and contributor on Schnorr/Taproot, multisignature schemes like MuSig2 and a maintainer of Bitcoin’s core elliptic‑curve library.
On a submit made on the social media X on April 8, Osuntokun resurfaced Ruffing’s July 2025 whitepaper on Bitcoin’s post-quantum safety as a way to suggest an answer for one of many issues introduced within the paper: “to create a variant of seed-lifting that doesn’t reveal the pockets’s grasp secret”. He known as this “zk-STARK proof”.
within the face of quantum adversary, a generally mentioned emergency comfortable fork for Bitcoin could be to disable the Taproot keyspend path (https://t.co/Gzx8NVui3N), successfully turning it into one thing that resembling BIP-360
assuming an current precautionary soft-fork so as to add a pq…
— Olaoluwa Osuntokun (@roasbeef) April 8, 2026
In plain language, Osuntokun’s instrument creates a particular cryptographic proof (the zk‑STARK) that allows you to show you actually have the unique pockets secret behind a given Taproot tackle, and that you just used the usual pockets guidelines to get from that secret to this tackle. They essential side of the zk-STARK proof is that it does this with out ever revealing the key itself, or any non-public keys, to anybody.
If, sooner or later, Bitcoin does a quantum‑protection comfortable fork that disables regular key‑based mostly spends, many BIP‑86 Taproot wallets might be caught and unable to maneuver cash. With this proof, these customers get an additional “escape hatch”: they will show possession of their Taproot cash through the seed‑derivation proof and transfer funds in a brand new, quantum‑protected means, despite the fact that the previous key‑spend path is turned off.
He mentioned all of the technicalities behind this on the Bitcoin dev mailing listing.
The answer has discovered acceptance, and it’s been typically obtained very nicely within the crypto neighborhood.
Appears to be like like this probably solves the thorniest concern round quantum proofing Bitcoin: confiscation of cash.
A PQ comfortable fork like BIP360 successfully “confiscates” cash by completely disabling spends from sure “susceptible” wallets the place public keys have been revealed.… https://t.co/wV49BIXmx2
— Vijay Selvam (@VijaySelvam) April 9, 2026
Answer #2
The second, and extra polemic resolution, comes from Avihu Mordechai Levy, a cryptography engineer at StarkWare who works on zero‑information proofs and STARKs. His whitepaper, revealed yesterday, reveals make particular person Bitcoin transactions quantum‑protected right this moment, utilizing Lamport‑type one‑time signatures plus a “hash‑to‑signature” proof‑of‑work puzzle, with zero adjustments to Bitcoin’s base protocol.
Quantum-Secure Bitcoin Transactions With out Softforkshttps://t.co/1lx5waX9VV pic.twitter.com/Ni7pA6dEsC
— Avihu Levy ✨🐺 (@avihu28) April 9, 2026
QSB replaces the previous signature‑measurement PoW (which quantum assaults might utterly break by discovering tiny ECDSA r‑values) with a RIPEMD‑160‑based mostly puzzle that solely depends on hash pre‑picture resistance, which is merely weakened, not destroyed, by Grover’s algorithm (quantum tech).
Once more in plain language, what QSB does is it throws away the previous “make the signature tiny” proof‑of‑work trick, as a result of a robust quantum pc might cheat that by exploiting the elliptic‑curve math. As a substitute, QSB makes use of a brand new puzzle constructed on the RIPEMD‑160 hash perform. Breaking a hash like that’s extraordinarily laborious, even with a quantum pc.
QSB matches in legacy script limits and provides round 118‑bit submit‑quantum pre‑picture safety. Nonetheless, it prices lots of of {dollars} in off‑chain GPU work per transaction and requires non‑commonplace naked scripts mined through non-public relay providers. For this reason many are calling QSB a “final resort” or perhaps a “whale-grade band-aid”.
I’m not claiming this isn’t grossly inefficient, nor that it wouldn’t make sense to ultimately enhance the protocol layer if a cleaner resolution emerges.
My level is just that it’s false to say this sort of whale-grade band-aid doesn’t exist already on the present protocol…
— Coinjoined Chris ⚡ (@coinjoined) April 10, 2026
A Philosophical Break up
The neighborhood is now not arguing if quantum breaks ECDSA/Schnorr, however stage an orderly migration. Let’s keep in mind that the creator of Bitcoin, Satoshi Nakamoto himself, assured in 2010 {that a} gradual transition to post-quantum, stronger know-how, was potential for Bitcoin.
A submit from Satoshi Nakamoto relating to the quantum menace for Bitcoin. Supply: Bitcoin Journal on X.
Taproot‑based mostly restoration tries to guard your complete UTXO set with minimal worth destruction, whereas some outstanding voices nonetheless argue non‑migrated cash ought to merely expire somewhat than be “rescue” in bizarre methods, to protect Bitcoin’s financial story.
For the time being of writing, BTC trades for the excessive $71ks on the day by day chart. Supply: BTCUSD on Tradingview.
Cowl picture from Perplexity. BTCUSD chart from Tradingview.
Editorial Course of for bitcoinist is centered on delivering completely researched, correct, and unbiased content material. We uphold strict sourcing requirements, and every web page undergoes diligent assessment by our crew of high know-how consultants and seasoned editors. This course of ensures the integrity, relevance, and worth of our content material for our readers.
