1. The 1.1M BTC Vulnerability

Published 7/14/2026, 10:46:22 AM

The threat of quantum computing to Bitcoin has transitioned from theoretical speculation to active protocol-level preparation as of July 2026. Approximately 1.1 million BTC held in Satoshi-era legacy wallets are uniquely vulnerable because their public keys are permanently exposed on-chain, making them targets for Shor's algorithm once a Cryptographically Relevant Quantum Computer (CRQC) emerges. While technical paths like BIP-360 and BIP-361 have been proposed to mitigate this, a soft-fork remains a complex political and technical challenge that could take years to achieve consensus.

1. The 1.1M BTC Vulnerability

The "1.1 million BTC" figure specifically refers to coins stored in early Pay-to-Public-Key (P2PK) addresses, primarily from the Satoshi era. Unlike modern addresses that only reveal a hash of the public key until a spend occurs, P2PK addresses expose the full public key in the blockchain's history.

Total Exposure: Beyond Satoshi's coins, research suggests between 4 million and 6.7 million BTC (~25-34% of supply) are considered "immediately vulnerable" due to address reuse or legacy formats.
The "HNDL" Threat: Adversaries are currently engaging in "Harvest Now, Decrypt Later" (HNDL) attacks, stockpiling these exposed public keys to derive private keys the moment quantum hardware matures [Source: https://www.coindesk.com/tech/2026/04/15/jameson-lopp-on-quantum-threat-bitcoin-must-act-now].

2. Soft-Fork Feasibility & Technical Proposals

Technical solutions are currently being drafted, but they face significant implementation hurdles regarding signature size and network throughput.

Proposal	Status	Description
BIP-360 (P2MR)	Merged (Feb 2026)	Introduces Pay-to-Merkle-Root to eliminate "key-path" vulnerabilities in Taproot [Source: https://bip360.com].
BIP-361	Draft (Feb 2026)	Proposes a three-phase "Legacy Signature Sunset" to eventually invalidate ECDSA signatures [Source: https://bitcoinmagazine.com/technical/bitcoin-bip-360-merge-post-quantum-cryptography].
QRA / SPHINCS+	Research Phase	Integration of post-quantum signature schemes; however, these are 30-100x larger than current signatures.

Implementing these schemes would reduce Bitcoin's transaction capacity by approximately 50% and significantly increase fees due to the massive size of post-quantum signatures.

3. Governance and Political Hurdles

Governance remains the primary barrier to quantum readiness. Bitcoin's decentralized nature makes a coordinated "forced migration" extremely difficult:

The "Burn vs. Steal" Dilemma: If a soft-fork freezes vulnerable coins to prevent quantum theft, it effectively "burns" billions in potentially lost or dormant BTC (including Satoshi's), violating Bitcoin's immutability ethos.
Consensus Timeline: Historically, major upgrades like SegWit took over two years to activate. Experts estimate a full post-quantum migration requires 7+ years of coordination, while some 2026 estimates suggest a CRQC could arrive as early as 2030-2035 [Source: https://finance.yahoo.com/news/bitcoin-quantum-resistance-bip-360-130000000/].
Chain Split Risk: Academic research (Meunier, 2026) warns that a forced quantum-resistant upgrade could lead to a permanent chain split between "Quantum-Safe Bitcoin" and "Legacy Bitcoin" [Note: not independently confirmed].

Summary of Quantum Readiness (July 2026)

Metric	Status / Value
Vulnerable Supply	~~6.7M BTC (~~$600B)
Satoshi's Stake	~1.1M BTC (P2PK)
Primary BIP	BIP-360 (P2MR)
Threat Window	2030–2035 (Estimated 50% probability)
Governance Risk	High (Potential for chain split)

While a soft-fork is technically possible and proposals like BIP-360 are already being merged into the codebase, the "actual" occurrence of a soft-fork depends on the community's willingness to potentially invalidate billions of dollars in legacy BTC to save the network's integrity. As of mid-2026, the technical foundation is being laid, but the political consensus for activation has not yet been reached.