Key Takeaways
- BIP-361 proposes a phased migration to quantum-resistant Bitcoin addresses by sunsetting legacy signatures.
- Holders must move vulnerable coins or risk a permanent freeze after roughly five years.
- The proposal has sparked debate over security versus property rights, especially for dormant holdings.
Bitcoin has faced forks, bans, and market crashes. Now, it may be preparing for something far more existential.
A new proposal from prominent developers is forcing the network to confront a long-avoided question.
What happens when quantum computers become powerful enough to break Bitcoin’s cryptography?
BIP-361, introduced on April 15, doesn’t just suggest a solution—it lays out a deadline.
And if adopted, it could permanently lock billions of dollars in coins that fail to adapt.
BIP-361: A Plan to Outrun Quantum Risk
The proposal, authored by Jameson Lopp and five co-authors, introduces a structured migration away from Bitcoin’s current signature systems toward quantum-resistant alternatives.
At its core, BIP-361 acts as an enforcement layer. It builds on earlier work, particularly BIP-360’s Pay-to-Merkle-Root (P2MR) output type, to push the network toward post-quantum security.
Today, Bitcoin relies on ECDSA and Schnorr signatures.
Both are secure against classical computing but theoretically vulnerable to Shor’s algorithm if sufficiently advanced quantum machines emerge.
That vulnerability is not evenly distributed.
Older address types—especially pay-to-public-key (P2PK) outputs and reused addresses—expose public keys directly on the blockchain.
In a quantum scenario, those keys could be reverse-engineered, giving attackers direct access to funds.
BIP-361 targets that exposure head-on.
A Countdown for Legacy Bitcoin
Rather than relying on voluntary upgrades, the proposal introduces a phased transition with clear deadlines.
In Phase A, expected roughly three years after activation, the network would reject any transaction sending new funds to vulnerable legacy addresses.
Users could still move funds out of those addresses, but not back into them.
Phase B raises the stakes significantly. Around five years after activation, all legacy signatures—ECDSA and Schnorr—would become invalid for spending unmigrated coins.
Any Bitcoin left in those older formats would effectively be frozen.
A potential Phase C could offer a recovery path.
The idea is to use zero-knowledge proofs to verify ownership of a seed phrase without exposing private keys, allowing access to frozen funds under strict conditions.
The goal is clear: reduce the attack surface before quantum capabilities arrive, rather than reacting after the fact.
Billions at Stake—and a Divided Community
The most controversial part of the proposal is the potential coin freeze in Phase B.
Under this stage, any BTC left in legacy scripts would become permanently unspendable—still technically owned, but effectively locked and unusable.
That includes early-mined coins and long-dormant wallets now worth billions at current prices, which has quickly fueled intense debate across the community.
Supporters see this as necessary preparation for future quantum threats.
Critics, however, argue it risks freezing legitimate holdings and challenges Bitcoin’s core “don’t trust, verify” principle.
Developers are urging users to act early by moving funds to quantum-resistant addresses well before the deadlines.
At the same time, exchanges and custodians would need to upgrade their systems and guide users through the transition.
The phased rollout gives the ecosystem several years to adapt, with clear block-height milestones designed to keep the process predictable.
Reaction has been swift—and deeply divided.
Across X and developer forums, some have labeled BIP-361 “authoritarian” and “predatory,” arguing it could undermine property rights and set a troubling precedent, especially when it comes to dormant holdings like Satoshi’s coins.
Others question who decides what counts as “vulnerable” and warn that such decisions could open the door to future interventions.
Supporters push back, framing it as a practical safeguard.
In their view, a quantum attack would permanently steal coins, whereas a freeze preserves ownership and allows recovery through solutions such as zero-knowledge proofs.
They argue that doing nothing today could lead to far worse consequences if quantum capabilities arrive sooner than expected.
The debate reflects a familiar tension in Bitcoin’s history—but this time, it centers less on ideology and more on how the network prepares for an uncertain future.
Is the Quantum Threat to Bitcoin Overplayed?
Recent headlines have amplified urgency.
A Google research paper suggested that breaking 256-bit elliptic-curve discrete-log problems might require far fewer qubits than previously estimated.
Yet many Bitcoin veterans and analysts argue the threat remains decades away and is being overhyped.
Blockstream CEO Adam Back stated current quantum hardware lacks the scale, error correction, and stability needed, calling the risk a long-term systems issue rather than an imminent crisis.
Wall Street’s Bernstein Research echoed this, labeling quantum a “manageable, medium-to-long-term upgrade cycle” with no existential threat.
Grayscale called quantum panic a “red herring,” noting any breakthrough would devastate global finance and the internet simultaneously—not just Bitcoin.
Coinbase and former Binance CEO Changpeng Zhao stressed the need for adaptation: protocol upgrades like P2MR and ongoing research into post-quantum signatures (e.g., SHRINCS) give Bitcoin breathing room.
Only a fraction of BTC has public keys exposed; modern Taproot outputs already hide them until spent.
The real debate has shifted from “if” to “when and how” Bitcoin coordinates its response.
With years of runway and proven upgrade mechanisms, the network’s track record suggests it will evolve without forced freezes if the community prefers softer incentives.
Still, BIP-361’s drafters believe certainty beats complacency.
Prashant Jha is a seasoned crypto journalist based in Delhi, India, with a Bachelor’s Degree in Computer Science Engineering. Passionate about the evolving world of blockchain and cryptocurrencies, he has been a dedicated voice in the industry since 2018. Prashant’s expertise lies in regulatory reporting, where he unravels complex legal and financial developments with clarity and precision. Before joining CCN in 2024, he honed his craft at Cointelegraph, establishing himself as a trusted name in crypto journalism.
His coverage spans major industry events, including the high-profile collapses of FTX, Three Arrows Capital (3AC), and LUNA, offering readers insightful analyses of their regulatory and market implications. Prashant’s technical background enables him to bridge the gap between intricate blockchain technology and its real-world applications, making his work accessible to novices and experts.
Beyond his professional pursuits, Prashant is an avid music enthusiast, often exploring diverse genres to unwind. A sports lover, he has a particular passion for cricket and frequently engages in discussions about the game. His multifaceted interests and sharp journalistic instincts make him a valuable contributor to CCN, where he continues shaping the crypto landscape's narrative.
