As Tezos, Algorand, and QRL Go Quantum-Ready, Where Does Bitcoin Stand with BIP-360?

The Looming Quantum Threat and Google’s ‘9-Minute Problem’

The cryptocurrency industry is facing a narrowing timeline to secure networks against quantum computing advances. A major catalyst for recent debate stems from Google’s research paper, which compressed the anticipated threat window from a distant scenario in the 2040s to an urgent preparation timeframe between 2030 and 2035. The findings reduced the estimated physical qubits needed to crack Bitcoin’s underlying elliptic curve cryptography by roughly twentyfold, dropping the threshold from millions to fewer than 500,000 physical qubits.

Central to this risk is what researchers identify as the “9-minute problem.” When transactions wait for block confirmation, their public keys sit exposed inside Bitcoin’s mempool. Google’s modeling demonstrated that an advanced quantum computer could theoretically extract a private key from an exposed public key in roughly 9 minutes under specific assumptions—a critical vulnerability given Bitcoin’s 10-minute average block time. This creates an estimated 41% likelihood of a transaction hijack before it is mined into a block.

Addressing these projections, Maksym Sakharov, CEO & Co-Founder of WeFi, offered caution regarding alarmist interpretations. Maksym Sakharov told AMBCrypto, “I would be careful about treating the 41% figure as a prediction of what will happen in practice.” He clarified the technical constraints of the simulation, stating, “Google’s paper models a specific attack scenario under a defined set of assumptions, including a sufficiently capable fault-tolerant quantum computer, a public key becoming available almost immediately, and conditions that can favor either the attacker or the legitimate user depending on network behavior.” For Sakharov, proactive protocol design remains paramount: “Preparation matters more than prediction. The objective should be to ensure that migration paths, governance, and upgrade mechanisms are in place well before advances in quantum computing become an operational concern.”

Bitcoin’s On-Chain Exposure and Governance Bottlenecks

Beyond transactions sitting in the mempool, the historical architecture of Bitcoin poses a deeper dilemma. Data from Glassnode indicates that more than 6 million Bitcoin—representing nearly 30% of the total circulating supply—resides in addresses where the public key is already visible on-chain. This pool represents $500 billion to $600 billion in value that could be targeted without needing to penetrate cold storage or compromise private seed phrases. Exchange risk varies dramatically; while Coinbase maintains 5% exposure and Fidelity sits at 2%, Binance holds roughly 85% exposure, and platforms like Bitfinex and Robinhood register at or near 100%.

Christopher Smith, co-founder and CEO of Quantus, noted that the core impediment is cultural rather than purely cryptographic. Christopher Smith told AMBCrypto, “It’s a solvable technical problem, but the social coordination is the difficult part. For various reasons, Bitcoin has cultivated a culture of not changing, but it really is a cultural issue more than a technical issue. If we had a post-quantum address type, then most big addresses could migrate within a few months.” Christopher Smith added, “The bigger issues are that post-quantum addresses could take years to ship, and nobody has a politically viable solution for Satoshi’s coins, which are currently an $80B quantum canary.”

Dealing with unmovable capital, including the 1.1 million Bitcoin attributed to Satoshi Nakamoto, leaves network participants with contentious choices. The Coinbase Quantum Advisory Council identified three potential pathways: freeze the dormant assets, burn them, or do nothing and absorb the resulting financial losses. Meanwhile, Bitcoin’s proposed quantum-resistance specification, BIP-360—which presents Pay-to-Merkle-Root (P2MR) address types—remains limited. Christopher Smith explained, “The quantum safety of a BIP360 address is the same as a P2PKH address. To make a fully post-quantum address type, we need post-quantum op codes, which requires a decision on which post-quantum algorithm to support, and there is no official process for this.” BIP-360 does not discard ECDSA or Schnorr signatures, nor does it automate the migration of existing balances across wallets and custodians.

Altcoin Implementations and Cryptographic Upgrades

While Bitcoin struggles with consensus inertia, several prominent Layer-1 networks have accelerated their defenses. Tezos launched its post-quantum previewnet, activating tz5 accounts leveraging ML-DSA-44 signatures alongside STARK-based consensus aggregation, a ZODA data availability layer, and TzEL private payments on testnet. Arthur Breitman, co-founder of Tezos, previously referred to certain Bitcoin quantum narratives as “half-baked crank theories about quantum mechanics.” He subsequently clarified to AMBCrypto: “The crank theories represent a small group of people, though there’s a broader group that sees no urgency, or believes Bitcoin can handle post quantum without any soft or hard fork.”

Arthur Breitman emphasized that modern zero-knowledge tooling works in tandem with robust primitives, noting that “Starks have come a long way in terms of proving speed and ease of deployment, and they pair very nicely with hash-based signatures.” Regarding long-term planning, Breitman advised: “Offer hash-based signatures now. The chain can soft-fork very quickly in an emergency, I believe it will, and that’s a good thing. But users can be very slow moving, and they need to be given ample time, several years, to migrate.”

Other networks have similarly deployed post-quantum architecture. Algorand introduced native Falcon-1024 accounts with its v5.0.0 release, already executing over 500,000 post-quantum transactions under NIST Level 5 security standards. The Quantum Resistant Ledger (QRL) has utilized the stateful hash-based signature scheme XMSS since mid-2018. Simultaneously, Ethereum has outlined a path toward complete quantum protection targeted for 2029, utilizing account abstraction via EIP-8141 to enable post-quantum signatures ahead of full protocol-level transitions.

Why This Matters

The race to deploy post-quantum cryptography highlights a fundamental divide between blockchain ecosystems that evolve rapidly and those governed by rigid social consensus. Historically, Bitcoin protocol changes require extensive deliberation; Segregated Witness (SegWit) required over eight years from conception to widespread adoption, while Taproot spanned nearly seven years. A similar development trajectory launched today could push full Bitcoin quantum mitigation toward 2033, overlapping directly with Google’s anticipated risk window of 2030 to 2035.

As institutional capital deepens its exposure to decentralized networks, structural resilience against future cryptographic obsolescence is shifting from a theoretical benchmark into an active risk metric. As Maksym Sakharov observed, “The strongest ecosystems are already thinking about cryptographic migration as part of their long-term roadmap rather than as a future emergency. Good financial infrastructure is designed around the assumption that today’s strongest cryptography will eventually be replaced bysomething stronger.”

Frequently Asked Questions

What is the “9-minute problem” in Bitcoin?

The “9-minute problem” describes a theoretical attack vector outlined by Google researchers where a sufficiently powerful quantum computer could derive a private key from an exposed public key in approximately 9 minutes. Because transactions broadcast to Bitcoin’s mempool wait an average of 10 minutes to be included in a mined block, an attacker could attempt to hijack the transaction before it is confirmed.

Does BIP-360 make Bitcoin immune to quantum computing?

No. BIP-360 introduces Pay-to-Merkle-Root (P2MR) addresses to reduce key exposure via script paths, but it does not replace the underlying ECDSA and Schnorr signature algorithms. Achieving true quantum resistance requires implementing post-quantum opcodes, selecting supported post-quantum cryptographic algorithms, and coordinating the voluntary migration of user funds across the global ecosystem.

Which blockchains have already implemented post-quantum defenses?

Tezos has implemented tz5 accounts using ML-DSA-44 signatures on its previewnet, Algorand supports Falcon-1024 signatures on its mainnet, and the Quantum Resistant Ledger (QRL) has operated using XMSS hash-based signatures since 2018. Additionally, Ethereum plans to achieve comprehensive quantum protection by 2029.