Nine Companies Launch Quantum Alliance as 6 Million BTC Face Exposure Risk
Nine blockchain companies launched the Quantum Alliance on October 15 to build open post-quantum security standards, as roughly 6 million BTC sit in addresses with permanently exposed public keys and a March 2026 Google paper cut the estimated hardware requirement by 20x.
Post-quantum standards push arrives as Google research slashes the estimated hardware bar and Bitcoin's own developers quietly work the problem through BIP-360.
Key takeaways
- Nine blockchain companies launched the Quantum Alliance on October 15, 2026, to develop open post-quantum security standards, but most founding members are altcoin projects, not Bitcoin Core contributors.
- Roughly 6 million BTC (more than 30% of supply), including an estimated 1.1 million attributed to Satoshi Nakamoto, sit in addresses with permanently exposed public keys; a March 2026 paper from Google Quantum AI cut the estimated qubit requirement to break Bitcoin's elliptic-curve cryptography by approximately 20x.
- Proposals to freeze or seize quantum-vulnerable coins are a live threat to Bitcoin's property-rights guarantees. Voluntary migration to modern address types and the Bitcoin-native BIP-360 proposal are the correct path.
Nine blockchain companies unveiled the Quantum Alliance on October 15, 2026, to jointly develop open standards for post-quantum cryptographic security, per The Quantum Insider. The launch lands as a March 2026 paper from Google Quantum AI, co-authored with researchers from the Ethereum Foundation and Stanford, concluded that Bitcoin's secp256k1 curve could be broken with fewer than 500,000 physical qubits, roughly one-twentieth of prior estimates.
The founding nine: Quantus, American Fortress, Intmax, Keystone, Midnight Foundation, Postquant Labs, Abelian, The Vault, and Hacken. The Alliance plans to publish open standards, testing criteria, benchmarks, and migration guidance modeled on the IETF's open, rough-consensus process, spanning four tracks: blockchain migration, post-quantum zero-knowledge proof systems, wallet security, and cross-chain compatibility, per CryptoBriefing.
The Threat Is Real, the Timeline Is Contested
Christopher Smith, founder and CEO of Quantus, put the stakes plainly: "The most likely scenario is that whoever gets the first CRQC (Cryptographically Relevant Quantum Computer) will take them, probably with the blessing of whichever national government." "Hopefully it's a government that likes bitcoin."
No existing quantum computer can break Bitcoin's elliptic-curve cryptography in practice. The question is the forward timeline. The Alliance's Quantum Doom Clock, built by contributors Richard T. Carback III and Colton Dillion, points to March 2028 as an early possible window for a cryptographically relevant quantum computer, per The Quantum Insider. Independent estimates from credible researchers place the more likely range in the early-to-mid 2030s.
The exposure sitting in plain sight in the meantime is significant. Glassnode data puts roughly 6.04 million BTC (30.2% of supply) in addresses where the public key has been permanently broadcast to the chain, per analysis cited by multiple sources. That includes an estimated 1.1 million BTC attributed to Satoshi Nakamoto, held in Pay-to-Public-Key outputs from 2009-era mining where the public key is hardcoded and permanently visible.
The math that matters: those Satoshi-era P2PK coins can never be voluntarily migrated. The keys are lost. Any proposal to "protect" them is a proposal to freeze or permanently escrow a vast sum in BTC at current prices, under the authority of whoever controls the upgrade process.
Bitcoin's Actual Response Has No Press Release
The Quantum Alliance's founding roster is worth reading carefully. Midnight Foundation, Intmax, and Abelian are not Bitcoin projects. Quantus is a quantum-resistant layer-1 altcoin that launched its mainnet in September 2026. The Alliance is building standards for a multi-chain world, which is fine on its own terms, but it is not the Bitcoin-native response to the quantum threat.
That response is happening through BIP-360, a proposal for Pay-to-Merkle-Root addresses that would keep public keys off-chain longer and require a soft fork to implement. A July 24, 2026 revision added Python examples and test vectors, a sign of active development. Bitcoin Optech's October 2 newsletter documented developer discussions on post-quantum output designs, wallet compatibility, and signature cost, with no alliance or press releases required. Engineers are working the problem.
TFTC has tracked this thread as Europol flagged crypto wallets as the primary quantum attack surface and as Coinbase committed to supporting a post-quantum upgrade. The building is happening; the Alliance is the press release layer on top of work that predates it.
Smith framed the destination correctly: "In the future, 'post-quantum cryptography' will just be called 'cryptography' and everything else will be in a museum." The real debate is about who sets the standards, on what timeline, through what process, and crucially, what happens to coins that cannot be migrated.
The Freeze Argument Is the Bigger Risk
Proposals to freeze, move, or place vulnerable BTC in a trust are circulating alongside the technical migration conversation. These are not safety measures. A freeze requires a Bitcoin soft fork or hard fork to render specific UTXOs unspendable, based on address type rather than any demonstrated theft or wrongdoing.
The thesis here is falsifiable. Bitcoin's conservative, consensus-first upgrade process is the correct response: voluntary migration to post-quantum address types via BIP-360 or a successor, combined with sound custody hygiene. That thesis breaks only if a cryptographically relevant quantum computer capable of breaking secp256k1 in real time is demonstrated as imminent (within months) with no voluntary migration path adopted by the network.
Until that trigger fires, a protocol-enforced freeze is a solution worse than the problem it claims to solve. It establishes that the network can override property rights based on an externally assessed threat, with no answer to the question of who controls the resulting escrow.
What to Watch
Watch whether BIP-360 advances toward a formal activation proposal and whether wallet providers begin adding support for post-quantum address types ahead of any network upgrade. On the Alliance side, the open-standards process is the deliverable to watch: IETF-style rough consensus is the right model if it produces something interoperable and technically sound. The danger is if freeze proposals gain political momentum and get bundled into a "safety" narrative before voluntary migration has had a real runway.
Sources
- The Quantum Insider, October 15, 2026
- CryptoBriefing, October 15, 2026
- BIP-360 (Bitcoin GitHub)
- Bitcoin Optech Newsletter, October 2, 2026
- Google Quantum AI, Ethereum Foundation, and Stanford University, "Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities," March 2026
- NIST, First Post-Quantum Cryptography Standards, August 2024
Frequently Asked Questions
Is bitcoin at risk from quantum computers right now?
No. No existing quantum computer can break Bitcoin's elliptic-curve cryptography in practice. The risk is forward-looking, tied to the development of a cryptographically relevant quantum computer. Credible estimates put the earliest plausible window in the late 2020s and the more likely range in the early-to-mid 2030s.
What makes a Bitcoin address quantum-vulnerable?
Addresses where the public key has been broadcast to the blockchain. Pay-to-Public-Key (P2PK) outputs from 2009-era mining are permanently exposed. Reused P2PKH addresses are also exposed once a transaction has been sent from them.
If a coin has only ever been received to a modern bech32 (P2WPKH) address that has never sent a transaction, the public key has not been revealed on-chain. BIP-360 proposes a new address type that would keep public keys off-chain longer.
What would freezing Satoshi's bitcoin actually require?
A network-level fork to make specific UTXOs unspendable based on their address type. It would set a precedent that Bitcoin's property rights are conditional on an external threat assessment, and it raises a question nobody pushing the freeze proposal has answered: who controls the escrow, and under what legal authority?
