BTC records first quantum-safe mainnet spend

TLDR

Bitcoin has processed its first publicly reported quantum-safe transaction on mainnet, using StarkWares Quantum Safe Bitcoin method without changing Bitcoins consensus rules.

1. StarkWare researcher Avihu Levy executed a quantum-resistant spend in block 964,199, confirmed on Bitcoin mainnet via MARAs Slipstream service.
2. The Quantum Safe Bitcoin scheme uses hash-based tricks and heavy off-chain computation, works only via private mempools, and is far too costly for routine payments.
3. The demo gives some BTC an optional escape route from future quantum attacks, but many coins remain exposed and broader protocol-level upgrades are still needed.

Deep Dive

1. What Actually Happened

On 26 August 2026, StarkWare researcher Avihu Levy completed an experimental quantum-resistant Bitcoin transaction that was confirmed in block 964,199 and mined by MARA Pool via its Slipstream private mempool service. Reports describe it as the first quantum-safe or quantum-resistant spend recorded on Bitcoin mainnet, using Levys Quantum Safe Bitcoin (QSB) construction under Bitcoins existing consensus rules, with no hard fork, soft fork, or opcode changes required.

Coverage from multiple outlets, including Cointelegraph and CryptoSlate, agrees that this is the first confirmed onchain demonstration of a quantum-safe spend using current rules, rather than a testnet or sidechain experiment.

2. How QSB Works And Its Limits

The primary quantum risk is the window after you spend coins, when your public key sits in the mempool and a powerful quantum computer running Shors algorithm could, in theory, derive your private key.

QSB sidesteps this by shifting security from elliptic-curve signatures to hash functions. Levys scheme uses a hash-based one-time signature plus a hash-to-signature puzzle, searching over transaction parameters until a RIPEMD-160 hash can be interpreted as a valid signature, so the true security comes from hash preimage resistance rather than the curve itself. Each spend requires enormous off-chain GPU work and is estimated to cost roughly 75 to 200 dollars in computation per transaction, with specialized code and direct miner submission through services like Slipstream, as described in the QSB method writeup.

Risk note: QSB transactions are nonstandard, expensive, and not compatible with common flows like Lightning channels, so they are a last-resort tool rather than a new default.

3. Impact For Holders And What To Watch

For some UTXOs whose public keys have never been revealed, QSB shows there is a path to move them into a quantum-resistant condition today, under current Bitcoin rules. CryptoSlate notes that roughly 7 million BTC remain exposed because their public keys are already visible, which QSB cannot retroactively protect.

There is still no publicly demonstrated quantum computer capable of breaking Bitcoin keys, so this is early preparation, not an emergency fix. The more meaningful next steps are protocol-level changes, such as soft-fork proposals for new output types that are natively post-quantum and migration plans for exposed coins, along with more practical quantum-safe signature schemes that ordinary wallets can use.

Conclusion

The first quantum-safe Bitcoin mainnet spend is a real technical milestone, proving that quantum-resistant spending paths can exist inside todays Bitcoin rules. However, it is an expensive, niche mechanism that protects only a subset of coins and depends on special miner relationships. The bigger story for most BTC holders will be how quickly developers and institutions turn this proof-of-concept into scalable standards and protocol upgrades that can secure the broader supply against future quantum threats.