The Bitcoin network is bracing for a major technological threat: the advent of quantum computers, which could eventually shatter the cryptographic foundations protecting digital assets. While this risk remains largely theoretical today, the development of so-called "cryptographically relevant" computers could enable attackers to utilize Shor’s algorithm to derive private keys from public keys. This vulnerability primarily affects legacy addresses or those that have already been involved in a transaction, potentially exposing a portion of the funds stored on the blockchain.
To counter this scenario, researchers and developers are actively working to structure a robust roadmap. Among the promising solutions, the BIP-360 protocol aims to introduce a novel address format, P2MR, designed to conceal the public key until the moment of spending. In parallel, the SHRINCS project, led by the teams at Blockstream, proposes a highly efficient post-quantum signature system. By leveraging the SHA-256 hash function, this mechanism offers a more compact footprint and faster verification speeds than current standards like Schnorr signatures, thereby addressing the critical need for data optimization.
Managing passive users represents another critical challenge. Security mechanisms dubbed Lifeboat and Dropkick are currently under study to protect wallets whose owners might not migrate their funds in time. These mechanisms would allow for validating prior ownership of an address against a quantum theft attempt, or even triggering a coordinated network upgrade in the event of a confirmed threat. However, the implementation of these solutions remains complex, requiring in-depth security testing and rigorous community validation.
Technical and ethical challenges persist before any concrete integration. The increased size of post-quantum signatures could lead to blockchain bloat, mechanically resulting in a rise in transaction fees. Furthermore, the issue of "lost bitcoins"—where private keys are no longer accessible—remains thorny: should these addresses be deliberately neutralized to prevent them from falling into the hands of attackers, at the risk of altering the immutable nature of the network? The response to these dilemmas will be decisive for the future resilience of the asset.