1. Cryptographic Protection Methods
Published 7/22/2026, 9:35:31 AM
Galaxy Digital launched the Bitcoin Quantum Readiness Initiative on July 21, 2026, to address the long-term threat posed by quantum computing to Bitcoin's elliptic curve cryptography (ECDSA). The initiative is a multi-pronged effort involving $5 million in developer grants, a Quantum Advisory Council, and a dedicated research program to bridge the gap between quantum physics and Bitcoin development.
1. Cryptographic Protection Methods
The initiative focuses on transitioning Bitcoin from its current reliance on the secp256k1 elliptic curve to Post-Quantum Cryptography (PQC). Key methods being researched and funded include:
- BIP-360 (Pay-to-Merkle-Root / P2MR): A proposal merged into the BIP repository in early 2026. It introduces a new address type that hides public keys behind a Merkle tree, preventing them from being exposed on-chain until the moment of spending. This significantly reduces the attack surface for Shor's algorithm.
- Hash-Based Signatures (SPHINCS+ / SLH-DSA): These schemes rely on the security of cryptographic hash functions rather than the difficulty of discrete logarithms. NIST standardized SPHINCS+ as FIPS 205 on August 13, 2024 [Source: https://csrc.nist.gov/pubs/fips/205/final]. They are a primary candidate for Bitcoin's future signature layer.
- Commit/Reveal Functions: Proposed by Tadge Dryja, this method allows users to publish a hash-based commitment before broadcasting a transaction. It acts as a "soft fork" that only activates if a quantum attack is demonstrated, imposing zero overhead if quantum computers never materialize.
- BIP-361 (Phased Migration): A proposal by Jameson Lopp that suggests a sunset period for legacy signatures, forcing a migration to quantum-resistant addresses to protect the approximately 6.9 million BTC currently at risk.
2. The Three Pillars of the Initiative
| Pillar | Function | Key Details |
|---|---|---|
| Developer Grants | Financial Support | Up to $5 million committed for PQC implementation, wallet migration tools, and formal security audits. |
| Advisory Council | Expert Oversight | Includes Barry Sanders (University of Calgary), Damien Bérubé (MIT), and Eran Tromer (Boston University). |
| Research Program | Knowledge Gap | Galaxy Research publishes technical threat assessments for institutional investors and policymakers. |
3. Risk Assessment & Timeline
Galaxy's research identifies that while a "cryptographically relevant" quantum computer does not yet exist, the timeline for "Q-Day" is compressing.
- BTC at Risk: Approximately 6.9 million BTC (~$461B) is currently vulnerable because the public keys are already exposed (e.g., legacy P2PK addresses or reused addresses).
- Hardware Threshold: 2026 research from Google Quantum AI suggests ECDSA-256 could be broken with as few as 500,000 physical qubits, a lower threshold than previously estimated.
- Projected Timeline: Baseline estimates for a viable attack are set around 2033, though optimistic estimates suggest 2030.
4. Industry & Policy Context
The initiative aligns with broader shifts in the cryptographic landscape:
- U.S. Executive Order 14412: Titled "Securing the Nation Against Advanced Cryptographic Attacks" (signed June 22, 2026), this order addresses quantum threats and the transition to PQC [Source: https://www.whitehouse.gov/presidential-actions/2026/06/securing-the-nation-against-advanced-cryptographic-attacks/].
- Institutional Response: BitGo announced quantum-risk management capabilities, including "Quantum Risk Scores" for wallets, on July 9, 2026 [Source: https://investors.bitgo.com/news/news-details/2026/BitGo-Announces-New-Quantum-Risk-Management-Capabilities-for-Bitcoin-Wallets/default.aspx].
While the initiative provides a framework for protection, primary source documentation for the specific $5M grant distribution and the full text of BIP-360/361 remains the definitive technical reference for these implementations.