- Developers have merged BIP 360 into Bitcoin‘s GitHub repository as a formal step toward future post-quantum security.
- The proposal creates the Pay-to-Merkle-Root (P2MR) output to fix a quantum vulnerability in the 2021 Taproot upgrade by removing the “key spend” path.
- Timelines for a functional, fault-tolerant quantum computer threatening Bitcoin range from 5-7 years according to Caltech to arguably decades away, per other researchers and NIST guidance.
- Activating any proposal like BIP 360 requires broad “rough consensus” across the decentralized Bitcoin network, which becomes more challenging over time.
In a significant move to fortify the network against a potential future threat, Bitcoin developers have merged BIP 360 into the official GitHub repository for improvement proposals. This action, reported by Decrypt, advances a framework designed to guard against powerful quantum computers capable of breaking current cryptography.
Specifically, BIP 360 introduces a new Pay-to-Merkle-Root (P2MR) output type. It directly addresses a vulnerability in the Taproot upgrade by disabling the key-path spending mechanism that exposes public keys, “which means that a quantum attacker could attack the key spend and steal your funds,” explained co-author Ethan Heilman.
The urgency of this work stems from Shor’s algorithm. This theoretical program could derive private keys from public ones if run on a sufficiently powerful and fault-tolerant quantum computer.
Consequently, the timeline for this arriving threat is hotly debated. In a recent public discussionCaltech President Thomas Rosenbaum predicted fault-tolerant quantum systems in five to seven years.
Recent quantum computing advances support this aggressive timeline. For instance, Caltech reported keeping over 6,000 qubits coherent with 99.98% accuracy in September, while IBM later created a record 120-qubit entangled state.
However, precise forecasts remain highly unreliable, according to researchers. Heilman stated, “There’s no good, concrete way of actually predicting it on a timescale of more than one or two or three years out.”
Meanwhile, guidance from the U.S. National Institute of Standards and Technology sets post-quantum migration targets into the mid-2030s. Some, like Bitcoin security expert Jameson Lopp, suggest a cryptographically relevant machine is years or decades away.
A greater challenge may be achieving network consensus for future upgrades. “It’s the nature of network protocols to ossify over time,” said Lopp, noting it becomes increasingly hard to coordinate change in a decentralized system.
Activating BIP 360 or any post-quantum upgrade would therefore require “rough consensus” across miners, node operators, businesses, and users. Heilman confirmed a separate activation client would then need about 95% support over a sustained period.
Despite the planning, some industry participants view quantum risk as speculative or fear-driven. Their contention is that large-scale quantum systems would likely target centralized infrastructure long before individual Bitcoin wallets.
Heilman acknowledged a small chance physical limits could prevent quantum computers from ever threatening Bitcoin. “But I treat it very much like something which is uncertain,” he concluded, emphasizing the importance of taking existential risks seriously.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
