Bitcoin has survived exchange collapses, regulatory crackdowns, and roughly a dozen declared deaths. Now it faces a philosophical crisis with actual technical teeth: what happens when quantum computers get powerful enough to crack Bitcoin’s cryptography, and millions of coins, including those belonging to Satoshi Nakamoto, become sitting targets?

The threat is real, and the clock is ticking

A Google Quantum AI whitepaper has given the community something concrete to argue about. The report warns that quantum computers could derive Bitcoin private keys from public keys in as little as nine minutes, with that capability expected to become realistic by 2029.

Here’s the thing about Bitcoin’s security model: it relies on elliptic curve cryptography, a system where knowing someone’s public key doesn’t let you work backwards to their private key. Quantum computers, particularly those running Shor’s algorithm, can do exactly that math, in theory breaking open any wallet whose public key is exposed on the blockchain.

Early Bitcoin addresses, known as P2PK addresses, are especially vulnerable because they expose public keys directly. More recent address formats partially obscure the public key behind a hash, buying some time, but not immunity.

Estimates put the total quantum-vulnerable Bitcoin supply somewhere between 6.7 and 6.9 million BTC. That’s a meaningful slice of the roughly 21 million coins that will ever exist.

The Satoshi problem

Nested inside that larger number is a more emotionally loaded subset: approximately 1.1 million BTC widely attributed to Satoshi Nakamoto, sitting in wallets that have never moved and whose public keys are known.

Binance co-founder Changpeng Zhao has proposed a specific solution. His suggestion: give the community a migration window after any quantum-resistant protocol upgrade, then freeze wallets, including Satoshi’s, that haven’t moved within 12 months of that deadline.

The argument for this is straightforward. If a quantum attacker can derive Satoshi’s private key and move those coins, the result is catastrophic, both for Bitcoin’s price and for its credibility as a store of value. Better to make those coins permanently inaccessible than to let them fall into hostile hands.

The argument against it is also straightforward, and it cuts to the heart of what Bitcoin is supposed to be. Freezing anyone’s coins, even coins that have sat unmoved for over a decade, requires the network to decide that certain UTXOs are invalid. That is a form of confiscation. It’s the kind of thing Bitcoin was designed to make impossible.

The Coinbase advisory panel has acknowledged the urgency of the quantum resistance problem without endorsing the coin-freezing approach.

A proposal called BIP-361 has entered the conversation as a potential framework for handling legacy coin migration, though the specifics of how it would treat non-migrated addresses remain a live debate.

What this actually means for Bitcoin holders

Around 6.7 to 6.9 million BTC in potential play introduces a supply question that markets will price in well before any technical resolution arrives. Investors holding coins in older address formats have an incentive to migrate regardless of what the protocol decides, simply to avoid being caught in the crossfire of a governance fight.

The deeper risk is reputational rather than technical. Bitcoin’s value proposition rests on absolute scarcity and absolute immutability. A protocol change that renders some coins unspendable, even coins that haven’t moved in 15 years, is a philosophical Rubicon. Once crossed, the argument that Bitcoin’s rules are inviolable becomes harder to make with a straight face.

That doesn’t mean the freeze proposal is wrong on the merits. It might genuinely be the least-bad option if the alternative is a quantum attacker dumping a million-plus BTC onto the market overnight. But the cost of that choice, the precedent it sets, is something the Bitcoin community will be debating long after the quantum threat is resolved one way or another.