Go to app

What does Glassnode's finding of 6.26 million

Published 10/8/2026, 7:00:00 PM

I have comprehensive data from multiple independent sources. Let me synthesize the findings.

Answer

What the 6.26M BTC figure is. On October 8, 2026, Glassnode co-founder Rafael Schultze-Kraft put the number of Bitcoin with exposed public keys at more than 6.26 million BTC, or 31.2% of circulating supply (Crypto Briefing, TradingView). This is an update to Glassnode's primary research report, "Measuring Bitcoin's Quantum-Exposed Supply" (May 20, 2026), which measured 6.04M BTC (30.2% of issued supply) exposed "at rest," with the remaining 13.99M BTC (69.8%) showing no public-key exposure (Glassnode Research). The figure has been climbing as more coins are spent and addresses reused.

What "exposed public key" means. Bitcoin's security relies on a one-way relationship: private key → public key → address. A public key is "exposed" when it is visible on-chain, which happens in two ways (Glassnode Research, Decrypt):

Exposure typeMechanismVolume (May 2026)
StructuralScript types that reveal the key by design — P2PK (Satoshi-era), P2MS, bare multisig, and P2TR (Taproot, which exposes a version of the key as soon as funded)1.92M BTC
OperationalAddress reuse, partial spending, and custody practices — spending from a P2PKH/P2WPKH address reveals its public key in the spending script4.12M BTC

Why it matters for holder security. The risk is theoretical but permanent. A sufficiently powerful quantum computer running Shor's algorithm could work backward from a public key to derive the private key and move the funds. Critically, once a public key is exposed, it stays exposed forever — there is no retroactive fix. Europol's cybercrime unit stated: "Once a public key is exposed, it remains permanently vulnerable to future quantum decryption," and the only remedy is moving funds to new wallets before any attack arrives (BeInCrypto via Binance Square, KuCoin).

Practical implications for holders:

  • Address reuse is the biggest controllable risk. P2PKH/P2WPKH addresses hide the key behind a hash only until you spend from them. Reusing an address after spending exposes the key. The operational bucket (4.12M BTC) is more than double the structural bucket, and it is largely behavioral — meaning it is avoidable (Yahoo Finance).
  • Exchanges are a concentration point. Glassnode data shows exchanges hold ~1.66M of the exposed supply (BlockchainReporter via Binance Square). A separate analysis of Glassnode's quantum-risk dataset found Binance wallets at ~85% public-key exposure vs. Coinbase at ~5% (Bitcoin Foundation).
  • Satoshi-era coins are irreducibly at risk. Roughly 1.7M BTC across ~20,000 legacy P2PK addresses have keys fully visible and can never be migrated (The Block).

The critical caveat (counterpoint). This is a future threat, not a present one. A cryptographically relevant quantum computer does not yet exist, and the fault-tolerant hardware required for a real ECDSA attack still does not exist (Mitrade). Europol itself concluded cryptocurrencies will not collapse from quantum computing, recommending "proactive defense" and a phased transition to quantum-resistant cryptography rather than immediate panic (KuCoin). The dollar figure (~$469B at the May report) is a theoretical exposure ceiling, not an imminent loss.

What a holder should actually do. The actionable takeaway is behavioral: stop reusing addresses (use fresh receive addresses per transaction), and for large holdings, consider migrating coins from legacy/reused addresses to fresh P2WPKH or P2TR addresses that have never spent. The industry is also working on protocol-level fixes such as BIP-360 for quantum-proof implementations (CoinTelegraph). Note that ~10% of supply is "structurally unsafe" regardless of behavior — those coins (P2PK, P2MS, P2TR) expose keys by design and can only be protected by migration.

Data caveats: The 6.26M figure is a co-founder's statement reported by Crypto Briefing/TradingView on Oct 8, 2026, and is not yet reflected in the primary Glassnode research page (which still shows 6.04M). The two figures are consistent in direction (exposure is growing) but differ in methodology timing (issued vs. circulating supply). I could not retrieve the full body text of the Crypto Briefing or CoinDesk articles via scraping, so the co-founder's exact quote and the AI-warning context from CoinDesk are only partially captured.

Evidence Snippets

Claim: The 6.26M BTC / 31.2% figure was stated by Glassnode co-founder Rafael Schultze-Kraft on Oct 8, 2026.

Claim: Glassnode's primary research measured 6.04M BTC (30.2%) exposed at rest, 13.99M BTC (69.8%) not exposed.

Claim: Exposure splits into structural (1.92M BTC) and operational (4.12M BTC) buckets.

Claim: The exposed supply was valued at ~$469 billion.

Claim: Exchanges hold ~1.66M of the exposed supply.

Claim: Once a public key is exposed, it remains permanently vulnerable; migration is the only fix.

Claim: ~1.7M BTC sit in legacy P2PK addresses that can never be migrated.

Claim: A cryptographically relevant quantum computer does not yet exist.

Claim: BIP-360 is proposed as a quantum-proof implementation.

Claim: Binance shows ~85% public-key exposure vs. Coinbase ~5% in Glassnode's dataset.


Some steps didn't finish and sources may be incomplete. Ask if you want me to go deeper.