đ¨ Bitcoin researcher warns post-quantum upgrade could take 7 years as BIP-360 merged, while scientists estimate 100,000 qubits could break encryption within timeframe đ¨
Bitcoin researcher and BIP-360 co-author Ethan Heilman estimates it would take seven years for Bitcoin to migrate to full quantum resilience if it started tomorrowâan optimistic forecast based on consensus agreementâwith three years until activation and four more years for wallet, custodian, and Lightning Network upgrades plus user migration to quantum-safe addresses. The timeline puts Bitcoin in the danger zone as Caltech president Thomas Rosenbaum predicted functioning fault-tolerant quantum computers in five to seven years, while University of Texas professor Scott Aaronson suggested it could happen before the next US presidential election. A recent preprint paper 'The Pinnacle Architecture' claimed that 2048-bit RSA encryption could be broken with less than 100,000 physical qubits in one monthâdown from previous estimates of 900,000 qubitsâand Bitcoin's elliptic curve cryptography may fall sooner than RSA due to using 256-bit keys versus 2,048-bit. The updated BIP-360 proposal merged last week introduces Pay-to-Merkle-Root (P2MR) output type as a "conservative first step" that protects against long-range attacks but requires additional soft forks with post-quantum signature algorithms to defend against short-range attacks.
đ Key points
đš Seven-year migration timeline: Heilman estimates three years until BIP-360 activation (assuming two and a half years for BIPs completion, code review and testing, plus six months to activate), followed by four more years for 90% of wallets, custodians, payment processors, Lightning nodes, and treasury management software to upgrade; every Bitcoin holder must migrate funds to new quantum-safe addresses at 3-10 TPS, a process that could take months or years.
đš Qubit requirements dropping rapidly: Five years ago, scientists assumed tens of millions of physical qubits would be required to break 2048-bit RSA encryption; Google researchers revised that to 900,000 qubits in 2025; 'The Pinnacle Architecture' preprint now suggests less than 100,000 physical qubits could factor 2048-bit RSA in one month, with Bitcoin's 256-bit elliptic curve cryptography likely falling sooner.
đš BIP-360 conservative first step: The merged proposal introduces Pay-to-Merkle-Root (P2MR), an upgraded version of Taproot that hides public keys and removes quantum-vulnerable key paths; it's backward compatible and minimal change that protects against long-range attacks (like cracking Satoshi's coins over time) but not short-range attacks during transaction processing.
đš Post-quantum signature challenge: Full quantum safety requires additional soft forks to add post-quantum signature algorithms as opcodes in Bitcoin tapscript; signatures are 10 to 100 times larger, which would slow the blockchain to a crawl unless Bitcoin implements witness discounts (enabling spam), larger block sizes, or zero-knowledge proofs to compress signatures.
đš Ethereum collaboration offer: Ethereum's post-quantum team has a working prototype using hash-based ZK STARKs to aggregate signatures for each block into a single proof; researcher Justin Drake said they hope Bitcoin will adopt it as the industry standard, built "with Bitcoiner security in mind" and already co-authoring four academic papers with Blockstream Research.
đ Why it matters
đš Q Day rapidly approaching: Multiple credible scientists predict fault-tolerant quantum computers capable of breaking Bitcoin encryption within five to seven years, overlapping with Bitcoin's seven-year upgrade timeline; Google's Willow chip demonstrated scalable quantum error correction in 2024, and AI-driven breakthroughs in error-correction decoders like DeepMind's AlphaQubit are accelerating progress.
đš Consensus challenge exceeds technical difficulty: Making Bitcoin quantum-resistant is technically easier than Solana or Ethereum (only one-third of Bitcoin has public keys exposed versus all of Solana and most of Ethereum), but reaching consensus on hard decisionsâblock size increases, zero-knowledge proofs, or freezing Satoshi's coinsâwill be Bitcoin's defining challenge.
đš Satoshi's coins dilemma: Satoshi's approximately 1 million BTC cannot be upgraded to post-quantum without Satoshi's keys, forcing a choice between freezing them forever (undermining sacrosanct private property rights) or allowing them to be stolen and dumped on the market; Bitcoiners are still fighting over Taproot five years later, suggesting consensus on Satoshi's coins will be contentious.
đš Short-range attack vulnerability remains: BIP-360 only protects against long-range attacks where attackers have time to crack encryption; it doesn't protect against short-range attacks where quantum computers could crack private keys from public keys exposed in the mempool before transactions are processed, requiring additional signature algorithm upgrades.
đŻ Bottom line: Bitcoin faces a seven-year migration timeline to quantum resistance at the exact moment when credible scientists predict fault-tolerant quantum computers could arrive in five to seven years, creating a dangerous race against Q Day. While BIP-360's merger is progress, it's only the first stepâprotecting against long-range attacks but leaving short-range vulnerabilities exposedâand full quantum safety requires additional soft forks with post-quantum signatures that are 10-100 times larger, forcing hard choices about block sizes or zero-knowledge proofs. The technical upgrade is achievable, but Bitcoin's real challenge is reaching consensus on sacred cows like block sizes, Satoshi's coins, and adopting Ethereum-developed ZK STARKs while still debating Taproot's effects five years later. If quantum computers arrive before Bitcoin completes its migration, the "Bitcoin is just FUD" crowd will discover that dismissing existential threats doesn't make them disappearâit just ensures unpreparedness when they materialize.
https://cointelegraph.com/magazine/bitcoin-7-years-upgrade-post-quantum-bip-360-co-author/