Top cryptographers can't agree on Bitcoin's biggest quantum question

Tech Top cryptographers can't agree on Bitcoin's biggest quantum question A Coinbase-convened panel says Bitcoin should start preparing for quantum attacks now, but declines to take a position on whether millions of vulnerable coins, including many linked to Satoshi Nakamoto, should eventually be frozen. By Shaurya Malwa Jun 13, 2026, 6:07 a.m. 3 min read Make preferred on Share Share this article Copy link X icon X (Twitter) LinkedIn Facebook Email Make preferred on Summary Show A Coinbase advisory council of leading cryptographers says quantum computers are not yet a threat to Bitcoin but urges the community to begin technical planning for post-quantum signatures now. Roughly 6.7 million bitcoin are considered vulnerable to a future quantum attack, including about 1.7 million in early addresses likely tied to Satoshi Nakamoto and lost keys, fueling debate over whether to let those coins remain spendable. The council declines to choose between proposals that could freeze or constrain vulnerable coins, instead stressing that compatible solutions can be combined and that users need clear communication and timely action from the Bitcoin community. A Coinbase-convened advisory board of some of the most prominent cryptographers in the world has laid out what Bitcoin should do about the millions of coins a future quantum computer could steal, and on the hardest question, it refuses to answer. The board, which shared the report with CoinDesk earlier this week, includes Scott Aaronson of the University of Texas at Austin, Dan Boneh of Stanford and Justin Drake of the Ethereum Foundation. Its starting point is that quantum computers are not a threat to blockchains today and that nobody knows when they will be, so the debate should not wait on a timeline. The exposure is concentrated in Bitcoin, however. About 1.7 million bitcoin sit in roughly 20,000 early pay-to-public-key addresses, a format that publishes the owner's public key directly on the blockchain and leaves it open to a quantum attacker. Many are assumed to belong to Bitcoin's pseudonymous creator Satoshi Nakamoto and other owners who lost their keys, which means they can never be moved to safety. Another 5 million or so are exposed through address reuse, according to Project11, a research group tracking the issue, though most of those are thought to be active holdings in exchange wallets. Swapping in quantum-resistant signatures is the easy part, but the fight is over the coins nobody moves. One camp argues for a hard deadline, after which the signature schemes Bitcoin uses today, ECDSA and Schnorr, stop being accepted and any unmigrated coins become unspendable. Leaving them live, this side says, hands a future attacker, potentially a sanctioned state like North Korea, a stash of bitcoin large enough to crash the price and taint the network's legitimacy. The other camp calls that confiscation, a violation of the absolute property rights Bitcoin was built on, and warns it sets a precedent for freezing coins under government pressure later. Between them sit the several proposals CoinDesk has tracked over the past two months. Hourglass would cap how many vulnerable coins can be spent per block to prevent a supply flood. BIP-361 , from developer Jameson Lopp and others, would let migrated holders prove ownership after the cutoff with a quantum-resistant proof that exposes no key. PACTs, from Paradigm's Dan Robinson, would let owners timestamp a private claim now and move funds later without revealing anything today. The Coinbase board, however, notes these are compatible and could be adopted together. What the board will not do is choose. It writes that there is no correct answer and that the Bitcoin community has to decide. It commits to only two things, that the technical migration planning should start now because it is separate from the abandoned-coins question, and that holders need clarity so the issue does not fester. "While the council takes no position on the abandoned coins debate, that's for the community to decide, they are direct about two things: Start the technical migration work now. The engineering work to support post-quantum signatures is independent of the governance debate and shouldn't wait for it." "Communicate clearly. Users need to know this problem is being taken seriously. Uncertainty is its own risk," it adds. The proposals multiply and the names attached to them get more serious. The instruction every version shares, move now, is the one Bitcoin has yet to act on while Ethereum has spent years preparing . Latest Crypto News 1 Anthropic's pre-IPO shares fall as US government shuts down its most powerful AI model 5 minutes ago 2 Bitcoin steadies above $63,000 as its worst week in months got a late macro rescue 21 minutes ago 3 SpaceX IPO scramble reveals difference between tokenizing a stock and getting one 51 minutes ago 4 Bitcoin hit bottom at $59,000 marking end to the crypto winter, says Standard Chartered analyst 11 hours ago 5 VanEck bets BNB’s real-world usage can stand out in a crowded crypto ETF market 14 hours ago 6 Elon Musk's SpaceX soars 20% in blockbuster Nasdaq debut 14 hours ago 7 Bloomberg Analyst: Most Bitcoin ETF Investors Have Stayed Put Despite Outflows 14 hours ago 8 Kalshi’s crypto perpetuals spark debate over whether they’re futures or swaps 14 hours ago 9 The U.S. government is betting $2 Billion on quantum computing, and the defense side can't keep up 14 hours ago 10 FTX's Sam Bankman-Fried loses appeal of criminal conviction on fraud, conspiracy charges 15 hours ago Latest Research The Incentive Dynamic Engine: A New Era for io.net Tokenomics The Incentive Dynamic Engine: A New Era for io.net Tokenomics io.net's IDE ties token burns to real GPU demand, replacing fixed emissions with a demand-linked model - live as of 11 June 2026. By CoinDesk Research 20 hours ago Commissioned by io.net io.net's IDE ties token burns to real GPU demand, replacing fixed emissions with a demand-linked model - live as of 11 June 2026. Why it matters : io.net's IDE ties token burns to real GPU demand, replacing fixed emissions with a demand-linked model - live as of 11 June 2026. View Full Report More From Tech SpaceX IPO scramble reveals difference between tokenizing a stock and getting one Live updates: SpaceX rallies nearly 20% in first session, while bitcoin trades shy of $64,000 The company that makes your TV is taking ads onchain. Arbitrum helped