MIT's Ethan Heilman: 80% of Bitcoin is Quantum Vulnerable - How to Stop the Q-Day Threat

— Quantum threat timelines are shrinking, driven primarily by algorithmic breakthroughs rather than hardware progress alone; Google's recent paper made attacks 20× easier through new physical architecture designs.

— Quantum labs are going dark: researchers believe they are close enough to stop publishing warnings, eliminating the early warning system Bitcoin currently relies on.

— BIP 360 and post-quantum signatures form a multi-layered solution: BIP 360 provides a foundation, but full protection requires additional consensus changes, non-consensus wallet standards, and gradual user adoption.

— Long-range vs. short-range risk: 80% of Bitcoin is currently vulnerable to quantum theft in some form; however, simply avoiding public key reuse and address reuse (via pay-to-script-hash and similar outputs) can reduce long-range exposure significantly.

— Nation-state vs. corporate actors: U.S. companies like Google face legal complications that sovereign nations do not, creating a possible grace period before quantum computers are weaponized against Bitcoin.

— Adoption and fee concerns: post-quantum signatures (9+ kilobytes) must be implemented without forcing users to pay dramatically higher fees until Q-Day actually arrives; communication and wallet standardization are the hard problems.

— Large Bitcoin holders concerned about near-term quantum risk (3–4 months) should consider moving funds to fresh pay-to-script-hash outputs with no public key exposure and optional randomization; this protects against worst-case scenarios without requiring hard forks.

— Exchanges and custodians should stop reusing addresses and implement proper wallet architectures that hide public keys until spend; this single change could reduce systemic quantum vulnerability by one-third or more.

— Support and monitor BIP 360 activation and post-quantum opcode development; users can begin adopting hash-based backup schemes (via OP_SUCCESS) at no cost until consensus solidifies that activation is necessary.