Will Quantum Computers Break Bitcoin?
Bitcoin's quantum exposure is real, narrow, and addressable. The question is not whether Bitcoin can be made quantum-safe — it can — but which addresses leak public keys today, and whether the network can ship a signature upgrade before a cryptographically relevant quantum computer arrives.
What quantum actually threatens in Bitcoin
Bitcoin uses SHA-256 for proof-of-work and ECDSA on the secp256k1 curve for signatures. Grover's algorithm gives a quadratic speedup on hashing — annoying, not fatal: doubling key sizes restores margin. Shor's algorithm is the real concern: it would let a sufficiently large quantum computer derive a private key from an exposed public key in polynomial time.
Address types and exposure
A P2PKH or P2WPKH address only reveals a public-key hash on-chain — the underlying public key is hidden until the first spend. Once you spend from an address, the public key is permanently exposed. P2PK addresses (older, mostly early Satoshi-era coins) expose the public key from the start. Address reuse turns every wallet into a P2PK-equivalent over time.
What 'Q-Day for Bitcoin' would actually look like
It would not be a sudden 21-million-coin event. The first practical attack would target high-value reused addresses with exposed public keys and slow confirmation windows. Network-level response would be a signature-scheme upgrade (likely SLH-DSA or a lattice-based scheme) shipped as a soft fork, with a migration window for users to move funds.
What you can do now
Avoid address reuse. Prefer single-use receive addresses. For long-term holdings, use modern P2WPKH or P2TR addresses and do not spend unnecessarily. Track BIP discussions on PQ signature schemes. Do not move funds based on a generic risk score — moving spends and re-exposes the public key.
Key takeaways
- Bitcoin's quantum risk is concentrated in exposed public keys and reused addresses.
- Unspent P2PKH/P2WPKH/P2TR outputs hide the public key behind a hash.
- Address reuse and spending eliminate that protection.
- Q-Day for Bitcoin is a soft-fork problem, not an extinction event.