Quantum

Long

Bitcoin

<div class="content-blocks">
 <div id="content-block-A">
  <h2 id="why-dormant-bitcoin-addresses-are-vulnerable-to-quantum-threats">Why dormant Bitcoin addresses are vulnerable to quantum threats</h2>
  <p><em>The common narrative surrounding the impact of quantum computing on Bitcoin focuses on a doomsday scenario in which the entire network collapses at once. However, this perspective overlooks a critical distinction in how the risk is actually distributed.</em></p>
  <p>Bitcoin's quantum vulnerability is not a blanket threat. It is concentrated in dormant addresses with exposed public keys. This includes many of the oldest coins from the “Satoshi era” and lost wallets.</p>
  <p>While modern Bitcoin (<a href="https://cointelegraph.com/price-indexes/bitcoin" rel="noopener noreferrer nofollow">BTC</a>) addresses use stronger security layers, these legacy holdings could become the primary targets of the first generation of <a href="https://cointelegraph.com/features/bitcoin-s-quantum-upgrade-path-what-bip-360-changes-and-what-it-does-not" rel="noopener noreferrer nofollow">powerful quantum machines</a>. These <a href="https://cointelegraph.com/news/coinbase-launches-crypto-wallets-built-ai-agents" rel="noopener noreferrer nofollow">wallets offer attackers time</a>, scale and minimal resistance. That combination makes them the most likely starting point for any future quantum-driven disruption.</p>
  <p>Ultimately, this does not point to a sudden networkwide failure. Instead, it suggests a tiered risk model in which a specific segment of the supply is far more exposed than the rest.</p>
  <p>The quantum debate is not just about how powerful computers become. It is also about which parts of Bitcoin are already structurally exposed and which can still adapt in time.</p>
  <p><em><strong>Did you know? </strong>Dormant Bitcoin wallets may hold coins secured by older cryptographic methods, making them potential targets if quantum computers ever break current encryption standards.</em></p>
 </div>
 <div id="content-block-B">
  <h2 id="what-quantum-computers-could-actually-attack-in-bitcoin">What quantum computers could actually attack in Bitcoin</h2>
  <p><em>Bitcoin relies on two broad cryptographic components: </em><a href="https://cointelegraph.com/news/law-decoded-e-pluribus-sha-256" rel="noopener noreferrer nofollow"><em>hash functions (SHA-256)</em></a><em> for mining and block security and public-key cryptography (ECDSA/Schnorr) for transaction signatures.</em></p>
  <p>Quantum computers affect these components differently.</p>
  <p>Hash functions are relatively resilient. While Grover’s algorithm could theoretically weaken them, it would not render them useless. It would only reduce their effective security level.</p>
  <figure><img src="https://s3.cointelegraph.com/uploads/2026-04/019d8816-55ef-7630-b2aa-70e79e3d1af4.jpg" alt="Dormant Bitcoin wallets are the biggest quantum risk: Here is why">
  </figure>
  <p>Public-key cryptography is a different story. Using Shor’s algorithm, a powerful quantum computer could derive a <a href="https://cointelegraph.com/news/crypto-private-key-theft-big-business-what-to-know" rel="noopener noreferrer nofollow">private key</a> from a known public key. In Bitcoin’s context, that means any coin with an exposed public key could be spent by an attacker.</p>
 </div>
 <div id="content-block-C">
  <h2 id="the-key-distinction-on-spend-vs-at-rest-attacks">The key distinction: On-spend vs. at-rest attacks</h2>
  <p><em>To understand why dormant wallets matter, it is important to distinguish between two types of </em><a href="https://cointelegraph.com/news/quantum-computers-need-far-less-power-crack-crypto-says-google" rel="noopener noreferrer nofollow"><em>quantum attacks</em></a><em>:</em></p>
  <h3 id="on-spend-attacks">On-spend attacks</h3>
  <ul>
   <li><p>They occur when a user broadcasts a transaction.</p></li>
   <li><p>The public key becomes visible during the transaction process.</p></li>
   <li><p>The attacker must derive the private key within a short window, roughly one block interval, or about 10 minutes.</p></li>
  </ul>
  <h3 id="at-rest-attacks">At-rest attacks</h3>
  <ul>
   <li><p>They target coins whose public keys are already exposed on-chain.</p></li>
   <li><p>The attacker has extended time, potentially days, weeks or longer, to compute the private key.</p></li>
   <li><p>No immediate transaction trigger is required.</p></li>
  </ul>
  <p>This timing difference is crucial. On-spend attacks are constrained by speed, while at-rest attacks are constrained only by computational capability.</p>
 </div>
 <div id="content-block-D">
  <h2 id="why-dormant-wallets-could-be-more-exposed-than-active-ones">Why dormant wallets could be more exposed than active ones</h2>
  <p><em>Dormant wallets combine three characteristics that make them uniquely vulnerable: no defensive action, long exposure windows and high-value concentration.</em></p>
  <ul>
   <li><p><strong>No defensive action:</strong> Active wallets can move funds to new addresses, adopt better practices or migrate to future quantum-resistant formats. Dormant wallets cannot. If the owner has lost access or is no longer active, those coins remain permanently exposed.</p></li>
   <li><p><strong>Long exposure windows:</strong> If a wallet’s public key is already visible, attackers can work offline without time pressure. This removes one of Bitcoin’s natural defenses: the short transaction confirmation window.</p></li>
   <li><p><strong>High-value concentration:</strong> Many dormant wallets belong to early Bitcoin users who mined or accumulated coins when they had little value. Today, some of these wallets may hold BTC worth tens of thousands of dollars. This creates a high-value, low-resistance target profile.</p></li>
  </ul>
  <p><em><strong>Did you know? </strong>Coins in inactive wallets cannot upgrade their security, which means quantum-resistant fixes may protect only active users, not untouched early Bitcoin holdings.</em></p>
 </div>
 <div id="content-block-E">
  <h2 id="which-bitcoin-wallets-are-most-exposed">Which Bitcoin wallets are most exposed</h2>
  <p><em>Not all Bitcoin addresses are equally vulnerable. The most exposed categories include the following:</em></p>
  <h3 id="old-p2pk-pay-to-public-key-outputs">Old P2PK (Pay-to-Public-Key) outputs</h3>
  <ul>
   <li><p>They were common in Bitcoin’s early years.</p></li>
   <li><p>Public keys are directly visible on-chain.</p></li>
   <li><p>They have no additional layer of protection.</p></li>
  </ul>
  <h3 id="address-reuse">Address reuse</h3>
  <ul>
   <li><p>This happens when a user spends from an address and continues using it.</p></li>
   <li><p>The public key becomes visible after the first spend.</p></li>
   <li><p>Any remaining funds become vulnerable.</p></li>
  </ul>
  <p>Certain modern script types</p>
  <ul>
   <li><p>Some newer formats, such as Taproot outputs, include public keys directly.</p></li>
   <li><p>While they were designed for efficiency and privacy, they may still fall into “at-rest” exposure under quantum assumptions.</p></li>
  </ul>
  <p>Even relatively safer formats can lose that advantage if users reuse addresses.</p>
 </div>
 <div id="content-block-F">
  <h2 id="the-scale-of-the-problem-dormant-coins-dominate-the-risk">The scale of the problem: Dormant coins dominate the risk</h2>
  <p><em>Quantum risk is not just theoretical. It is also measurable in terms of exposure.</em></p>
  <p>Estimates suggest the following:</p>
  <ul>
   <li><p>Bitcoin worth millions of dollars remains in addresses with exposed public keys.</p></li>
   <li><p>A significant portion of these holdings comes from early-era mining rewards.</p></li>
   <li><p>Many of these coins have not moved for more than a decade.</p></li>
  </ul>
  <p>A large share of these holdings consists of 50 BTC block rewards from Bitcoin’s early days, often associated with miners who are no longer active.</p>
  <p>This creates a structural imbalance:</p>
  <ul>
   <li><p>A relatively small number of wallets</p></li>
   <li><p>Holding a disproportionately large share of vulnerable coins</p></li>
  </ul>
  <p>In other words, the largest quantum targets are also among the largest Bitcoin holdings.</p>
  <p><em><strong>Did you know? </strong>Some of the largest Bitcoin holdings have not moved in more than a decade, creating a silent pool of assets that could be exposed to future quantum attacks.</em></p>
 </div>
 <div id="content-block-G">
  <h2 id="a-deeper-challenge-dormant-wallets-and-network-governance">A deeper challenge: Dormant wallets and network governance</h2>
  <p><em>Dormant wallets introduce more than a technical problem. They also raise governance and policy questions.</em></p>
  <p>If quantum attackers begin targeting these coins, the Bitcoin ecosystem could face difficult choices:</p>
  <ul>
   <li><p>Should such coins be claimable if the cryptographic conditions are met?</p></li>
   <li><p>Should protocol changes attempt to freeze or protect long-dormant funds?</p></li>
   <li><p>How should the network treat assets that are likely lost but still technically spendable?</p></li>
  </ul>
  <p>This raises broader debates around property rights, immutability and digital salvage. Unlike active users, dormant wallets cannot participate in any migration or upgrade process, which makes them a unique edge case in protocol design.</p>
 </div>
 <div id="content-block-H">
  <h2 id="why-this-doesn-t-mean-bitcoin-is-broken">Why this doesn’t mean Bitcoin is broken</h2>
  <p><em>It is important to distinguish between Bitcoin’s long-term structural risk and any immediate threat.</em></p>
  <p>There is currently no widely accepted evidence that quantum computers capable of breaking Bitcoin’s cryptography exist today. The development of such systems is <a href="https://csrc.nist.gov/projects/post-quantum-cryptography" rel="noopener noreferrer nofollow">expected</a> to take years, and possibly decades, of engineering progress.</p>
  <p>Moreover:</p>
  <ul>
   <li><p>The risk is expected to develop gradually.</p></li>
   <li><p>The ecosystem has time to research and deploy mitigation strategies.</p></li>
   <li><p>Active users can adapt more quickly than dormant wallets.</p></li>
  </ul>
  <p>This means the first effects of quantum advances, if and when they arrive, may be selective rather than universal.</p>
 </div>
 <div id="content-block-I">
  <h2 id="what-can-be-done-in-the-meantime">What can be done in the meantime</h2>
  <p><em>To reduce the vulnerability of dormant Bitcoin wallets to quantum attacks, holders can take a few steps:</em></p>
  <ul>
   <li><p><strong>Minimizing public-key exposure:</strong> Reducing address reuse and limiting when public keys are revealed remains a foundational practice.</p></li>
   <li><p><strong>Migration readiness:</strong> Developing pathways for users to move funds into future quantum-resistant formats will be critical.</p></li>
   <li><p><strong>Protocol research:</strong> Ongoing work is exploring how Bitcoin could integrate quantum-resistant cryptography without compromising its core properties.</p></li>
  </ul>
  <p>These measures primarily benefit active participants, which reinforces the gap between movable and immovable coins.</p>
 </div>
</div>

Dormant Bitcoin wallets are the biggest quantum risk: Here is why

Table of Contents

Cointelegraph

Other articles published on Apr 13, 2026

Join our free newsletter for daily crypto updates!