Quantum risk fears spur BTC security proposal

TLDR

Fears that future quantum computers could crack Bitcoins cryptography have helped drive a new Bitcoin Improvement Proposal called BIP-360 that adds an optional, more quantum-resistant address type.

1. Bitcoin developers have merged BIP-360, introducing a Pay-to-Merkle-Root (P2MR) output type designed to reduce exposure of public keys to quantum attacks.
2. Quantum risk is still mostly theoretical, but estimates say about 6.51 million BTC sit in address types considered vulnerable, and institutions are starting to flag this in filings and allocations.
3. BIP-360 is only a draft and opt-in soft fork for now, with higher fees and lower privacy, so the key things to watch are wallet adoption, further post-quantum upgrades and activation debates.

Deep Dive

1. What BIP-360 Actually Proposes

BIP-360 is a Bitcoin Improvement Proposal that introduces a new output type called Pay-to-Merkle-Root (P2MR), which has been merged into the official BIP repository but not activated yet.

P2MR commits to the Merkle root of a script tree instead of a tweaked public key, removing Taproots key-path spend that exposes keys on-chain and making all spends go through script-path logic, which cuts the surface for long-lived quantum attacks. Reports describe BIP-360 as a consensus soft fork that keeps compatibility with existing Tapscript while adding a new SegWit v2 output and bech32m address format starting with bc1z for users who opt in.

2. How Serious The Quantum Risk Is

Quantum computers running algorithms like Shors could eventually break the elliptic-curve signatures that secure Bitcoin, allowing attackers to derive private keys from exposed public keys. One analysis cited by Yahoo Finance estimates that about 6.51 million BTC, nearly a third of supply, is in address formats such as P2PK and Taproot that are vulnerable if a powerful quantum computer arrives.

Regulators and security agencies are taking this seriously; for example, the NSAs CNSA 2.0 guidance pushes federal systems toward quantum-safe algorithms by around 2030, and NIST plans to phase out elliptic-curve crypto in the mid-2030s. Institutions like Coinbase and BlackRock have started listing quantum computing as a material risk, while Kevin OLeary and Jefferies Christopher Wood say it already affects how much BTC large funds are willing to hold.

3. Tradeoffs And What To Watch Next

P2MR mainly tackles long exposure risk, where public keys sit visible on-chain for months or years, and does not fully solve short exposure attacks that might target keys during mempool broadcast. It also has costs: spends are larger than current Taproot key-path spends, which increases fees, and every P2MR spend reveals that script trees are in use, which reduces privacy compared with todays Taproot key-path behavior.

BIP-360 remains in draft status, and activation would require broad consensus for a soft fork, plus wallet and exchange support, so no user is forced to change addresses today. The authors frame it as a building block for later upgrades that could introduce full post-quantum signature schemes like Dilithium or SPHINCS+, giving Bitcoin time to evolve as standards stabilize.

Conclusion

Quantum risk is becoming a visible narrative for Bitcoin, especially among institutions with long time horizons, and BIP-360 is the first formal protocol move to address it. The proposal reduces one important class of quantum exposure at the cost of higher fees and weaker privacy, while leaving short-term cryptography unchanged. How quickly wallets adopt P2MR and whether the community embraces further post-quantum upgrades will shape how credible Bitcoins long-run security story looks over the next decade.