New Bitcoin PACTs Proposal Seeks to Counter Quantum Computing Threat
If quantum computers were to break Bitcoin's ECDSA signatures, funds held at older addresses whose public keys have been exposed could be stolen. These include addresses attributed to Satoshi Nakamoto, who is estimated to hold about 1.1 million BTC. The dispute centers on whether the community should preemptively freeze vulnerable legacy coins: doing so could prevent theft but might also permanently deprive their original owners of access.
Paradigm partner Dan Robinson unveiled PACTs on May 1, 2026. The proposal would let holders use BIP-322 signatures and OpenTimestamps to create private, timestamped proof of control without moving their BTC. If Bitcoin later freezes vulnerable addresses through a soft fork, holders could recover their assets using quantum-resistant STARK proofs. The proof must be created before a quantum attack or freeze, however, and the proposal has not yet been implemented.
All Coverage
3 original reportsThe Backstory
The history behind this eventExperts Warn ‘Harvest Now, Decrypt Later’ Attacks Threaten Bitcoin Security
Bitcoin uses elliptic-curve cryptography to protect assets and communications, but sufficiently powerful quantum computers could eventually break its current encryption. Experts say the more immediate danger is a “harvest now, decrypt later” strategy, in which attackers intercept and store large volumes of encrypted communications today, then recover sensitive historical data once the technology matures. The threat extends beyond wallet private keys.
Security experts and an early-stage venture investor have recently warned that historical communications and infrastructure data across the Bitcoin ecosystem may already be targets for quantum attacks. Ethereum has begun work on a post-quantum migration, but as of this report, neither Bitcoin nor related companies had publicly committed to specific safeguards, disclosed investment amounts or set completion dates. The upgrade timetable and division of responsibility therefore remain unclear.
AmericanFortress Unveils Quantum Defense Plan for Satoshi-Era Bitcoin Holdings
Major blockchains including Bitcoin use elliptic-curve cryptography to secure transactions. If a large-scale quantum computer could run Shor's algorithm, it might derive private keys for older wallets whose public keys have been exposed on-chain. Unlike newer wallets, Pre-BIP32 addresses from the Satoshi era cannot be upgraded automatically. That has put about 1.1 million BTC in the spotlight, with their security also affecting market confidence.
AmericanFortress unveiled a post-quantum signature proposal on May 21, 2026. It plans to use a backward-compatible soft fork to freeze older assets before verifying ownership with zero-knowledge proofs. The company said the approach could protect Satoshi Nakamoto's roughly 1.1 million BTC and nearly 5 million dormant BTC. It also completed an $8 million seed round on May 5, co-led by institutions including SAVA Digital Asset Fund.
Bitcoin’s BIP-360 Proposal Formally Sets Out Quantum-Resistance Roadmap
Bitcoin, with a market capitalization of about $1.3 trillion, relies on elliptic-curve cryptography to secure transactions. If large-scale quantum computers become viable, exposed public keys could potentially be used to derive private keys. Bitcoin developers have therefore proposed BIP-360, adding a quantum-resistant migration to the network’s long-term technical roadmap to reduce the potential risk to existing assets.
Proposed in 2025, BIP-360 introduces Pay-to-Merkle-Root (P2MR), which removes Taproot’s public-key spending path and instead locks scripts with a Merkle root, allowing keys to remain hidden until funds are spent. The proposal remains a draft, with no mainnet activation date, and does not yet introduce a complete post-quantum signature scheme. It nevertheless establishes a foundation for future upgrades.
StarkWare Researcher Proposes Quantum-Safe Bitcoin Without a Soft Fork
Bitcoin transactions rely on elliptic-curve digital signatures. A sufficiently powerful quantum computer running Shor’s algorithm could derive private keys from exposed public keys and steal assets. Replacing the signature mechanism would require network-wide consensus and asset migration, drawing attention to StarkWare’s upgrade-free approach as a fallback until longer-term changes such as BIP-360 are completed.
On April 9, 2026, StarkWare Chief Product Officer and BIP-360 co-author Avihu Levy published the QSB paper and open-source code. The system uses Bitcoin’s existing Script constraints and hash-based proofs to create quantum-resistant transactions without a soft fork or miner activation. Each transaction requires substantial offline GPU computation at an estimated cost of $75–$200, and the tool is currently intended for emergency recovery.
Subscribe to Mark Radar Weekly
Every Friday, the week's strongest signals in your inbox. Unsubscribe anytime.