The Quantum Issue: Bitcoin Quantum Exposure at Block 950,000
Bitcoin Magazine The Quantum Issue: Bitcoin Quantum Exposure at Block 950,000 From The Quantum Issue: a breakdown of how much of Bitcoin's supply is vulnerable to quantum attack, and the logistical...
From The Quantum Issue: a breakdown of how much of Bitcoin's supply is vulnerable to quantum attack, and the logistical questions of changing that.
Migration estimates are useful for relative sizing, not as forecasts of real-world coordination, fee pressure, or user behavior.
The raw view shows 6,900,573 BTC exposed, but it intentionally treats exposure as a cryptographic condition: a public key has appeared on-chain. That is the right starting point, but it is not the same as economic loss risk. A live exchange wallet, an institutional multisig, a dormant early address, and an abandoned key can all be cryptographically exposed while having very different abilities to migrate.
2. Active and known-entity exposure is less concerning than raw exposure implies.
The active >=1 BTC filter captures 3,331,639 BTC, or 48.28% of all exposed supply. This is a large amount of bitcoin, but it is concentrated in 46,163 groups rather than millions of unmanaged holders. The largest visible active exposures include operational entities such as exchanges, brokers, custodial multisig operators, stablecoin infrastructure, and mining-related wallets. These entities are among the most likely to monitor quantum developments, coordinate wallet rotations, and migrate before a practical attack window opens.
This does not make the exposure irrelevant. It creates coordination and execution risk. But it is meaningfully different from lost-key risk: active custodial and exchange balances are generally the coins most likely to move first in a credible threat scenario.
When active entities are removed and the view is narrowed to never-spent or inactive balances of at least 1 BTC, exposed supply is 3,413,767 BTC. After removing known operational entities while retaining Satoshi-attributed coins, the remaining exposed supply falls to 2,277,978 BTC across 73,658 groups and 1,096,018 UTXOs.
That 2.28M BTC segment is the cleanest approximation in this dataset of the harder-to-mitigate exposure surface: early holders, inactive self-custody, old address reuse, dormant P2PK outputs, and coins that may be lost or otherwise unable to respond. This is where the practical quantum risk is most persistent.
A capable quantum adversary would still face operating costs, limited throughput, opportunity costs, transaction fees, and operational risk. The rational target set is therefore unlikely to be every exposed key. It is more likely to start with the highest-value exposed balances.
Applying balance thresholds shows how quickly the practical attack surface compresses. With known entities removed and only dormant or never-spent balances included, the >=10 BTC view still contains 2,187,481 BTC but only 39,897 groups and 365,830 UTXOs. At >=100 BTC, the target set drops to 351,654 BTC across just 675 groups and 33,573 UTXOs.
Filtered to only show never-spent + inactive balances, known operational entities removed, Satoshi coins retained unless excluded by the balance threshold.
Displayed totals may differ by a few BTC from KPI totals due to dashboard rounding at the script-type level.
The apparent crossover from P2PK dominance at the >=10 BTC threshold to P2PKH dominance at the >=100 BTC threshold should not be interpreted as P2PK risk disappearing. It is primarily a filter artifact: the Satoshi-attributed P2PK outputs in this dataset are 50 BTC per key, so they are included at >=10 BTC and excluded once the pubkey balance threshold exceeds 50 BTC. That exclusion causes the P2PK bucket to collapse from roughly 1.716M BTC to about 10k BTC in the >=100 BTC view.
Data source: Bitcoin Quantum Exposure Dashboard snapshot at block 950,000. This analysis assumes the dashboard methodology PDF supplied separately to the editor.
This piece is featured in the latest Print edition of Bitcoin Magazine, The Quantum Issue. We’re sharing it here as an early look at the ideas explored throughout the full issue.
Asanat Analysis — Why it matters
Bitcoin's quantum vulnerability window—estimated at 1-4M BTC exposed via reused addresses—remains a theoretical rather than imminent threat. Current quantum computers lack the 1,500+ stable qubits needed to break ECDSA, and Bitcoin's ~10-minute block time provides a practical escape hatch: outputs can be spent before a quantum actor completes Shor's algorithm. The real exposure concentrates among dormant early hodlers using legacy address formats, not active circulation.
This narrative resurfaces periodically as a complexity concern rather than existential risk, often coinciding with quantum computing headlines. Bitcoin's protocol allows gradual migration to post-quantum signatures (via soft fork) without consensus emergency. Ethereum and other chains face identical ECDSA exposure but have shown less institutional focus on the issue. The story's timing at block 950,000 (near the 1M symbolic milestone) suggests editorial framing rather than new technical developments.
For market participants, quantum FUD has historically triggered minor volatility but no sustained capital rotation—investors rationally discount a 10-15 year horizon. The more pressing second-order effect: sustained quantum threat discussions accelerate adoption of privacy protocols and hardware custody solutions among sophisticated actors, indirectly benefiting security infrastructure providers.