The Bitcoin Quantum Threat: Why Exposed Public Keys Are the Real Risk

Michael Gutkin, vice president of research at Fireblocks, emphasizes that a holder's risk profile depends less on their institutional status and more on their specific transaction history. Early Bitcoin outputs, known as P2PK, reveal public keys by design, leaving many Satoshi-era holdings permanently exposed. While modern formats like SegWit hide keys until a transaction is broadcast, the act of spending from these addresses permanently reveals the key, making subsequent funds deposited to the same address similarly vulnerable.

Rather than attempting high-risk, one-time mass migrations, institutions are advised to adopt gradual address rotation. This involves using fresh addresses for every deposit and change output while continuously tracking which specific unspent transaction outputs are tied to exposed keys. Companies like BitGo and Fireblocks are currently developing dashboard tools to help custodians identify and isolate these balances, treating the issue as a matter of ongoing operational hygiene rather than an immediate emergency.

Despite these precautions, Bitcoin lacks a native, quantum-resistant authorization method. Proposed solutions like BIP 360 aim to reduce long-term exposure, but they do not eliminate the threat of attacks occurring during the brief window between a transaction being broadcast and confirmed. Furthermore, unlike Ethereum, where smart accounts may eventually allow for signature-scheme upgrades, Bitcoin’s protocol requires significant structural changes to accommodate new cryptographic standards. As research persists, the industry remains focused on developing post-quantum signature schemes that can balance security with the realities of blockchain transaction fees and storage constraints.