Bitcoin devs adopt plan limiting quantum risks

TLDR

Bitcoin developers have merged a new proposal called BIP-360 that introduces a more quantum-resilient output type without changing existing coins.

1. BIP-360 defines Pay-to-Merkle-Root (P2MR), a Taproot-like output that removes the quantum vulnerable key-path spend option.
2. The change aims to cut long term quantum exposure but trades off higher fees and weaker on-chain privacy for users who opt in.
3. It is still a draft and would need a soft fork, wallet support, and broad adoption before it materially changes how most BTC is stored.

Deep Dive

1. What Bitcoin Devs Just Did

Developers have merged an updated draft of BIP-360 into the official Bitcoin Improvement Proposals repo, formally documenting a plan to reduce quantum exposure for new outputs.Bitcoinist summary explains that BIP-360 introduces Pay-to-Merkle-Root (P2MR), a Taproot-adjacent output type.

Today, Taproot (P2TR) outputs can be spent via a key path that exposes a public key on-chain. P2MR instead commits directly to a Merkle root of scripts and removes the key-path spend entirely. It is designed as a SegWit v2 soft fork output with new addresses (for example starting with bc1z) while leaving existing outputs unaffected.CryptoSlate notes that this is a plan and building block, not an activated upgrade yet.

2. Which Quantum Risk This Actually Reduces

The main concern is a future large quantum computer that can break elliptic curve signatures used by Bitcoin. The worst case is "long exposure" keys, where public keys sit visible on-chain for months or years, giving attackers time to harvest and later crack them.CryptoSlate explains that P2MR eliminates this long exposure surface for new outputs by never using a key-path spend at all.

It does not fully solve "short exposure" risk, where public keys appear briefly in the mempool when a transaction is broadcast. It also does nothing for coins already held in legacy or exposed Taproot outputs. Other work, like post quantum signature schemes and wallet level defenses, will still be needed, as highlighted in broader coverage of quantum ready wallets and NIST post quantum standards.Cointelegraph

3. Fees, Privacy, and What To Watch

Removing the key path has costs. P2MR spends are larger in bytes and therefore higher in fees than Taproot key path spends, and every spend must reveal a script path, reducing on-chain privacy compared with current best case Taproot usage.Bitcoinist quantifies a minimum witness increase of roughly 37 bytes versus simple Taproot key spends.

Migration would be opt in. Activation would require community consensus on a soft fork, then adoption by wallets, exchanges, and custodians. Institutions with large, long horizon holdings are the most likely early users. Key things to watch are: whether BIP-360 moves from draft toward activation, how wallets expose P2MR options, and future proposals that add true post quantum signature types on top.

Conclusion

Bitcoin developers have taken a concrete first step toward protocol level quantum risk reduction by specifying a new P2MR output that removes long exposure to public keys for new coins. In exchange, users who eventually opt in will accept somewhat higher fees and weaker privacy. The bigger picture is a multi step transition, where BIP-360 offers early optionality, but meaningful protection will depend on activation, ecosystem support, and later integration of full post quantum cryptography.