Quantum Alliance Launches With 6.4M BTC Exposed, No Bitcoin Core Builders

Nine blockchain firms unveiled an open post-quantum standards body in Lisbon, citing 6.04 to 6.4 million exposed BTC, while the Bitcoin-native response moves forward on its own terms.

Key takeaways

• Nine blockchain organizations launched the Quantum Alliance on October 15 in Lisbon to publish open post-quantum security standards; none of the nine named founding members are publicly identified as Bitcoin Core contributors.
• The Alliance estimates 6.04-6.4 million BTC, roughly 30% of circulating supply and including approximately 1.1 million BTC attributed to Satoshi, sit in addresses with permanently or conditionally exposed public keys; no quantum computer can break them today, with the earliest credible attack window around 2028.
• Bitcoin's actual protocol-level response is BIP-360, authored by Hunter Beast, Ethan Heilman, and Isabel Foxen Duke, actively developed through Bitcoin Optech with no alliance or press conference required.

Nine blockchain organizations, including Quantus, American Fortress, Intmax, Keystone, Midnight Foundation, Postquant Labs, Abelian, The Vault, and Hacken, launched the Quantum Alliance on October 15 in Lisbon, Portugal, according to a GlobeNewswire press release dated October 16. The body is modeled on the IETF and will publish open testing criteria, benchmarks, and migration guidance for blockchain networks and wallet infrastructure. It is not building a new chain.

The Alliance's headline number: between 6.04 and 6.4 million BTC, roughly 30% of the circulating supply, currently sit in addresses with exposed public keys. Approximately 1.1 million of those BTC are in early Pay-to-Public-Key outputs widely attributed to Satoshi Nakamoto, where the public key is permanently on-chain regardless of whether a spend ever occurs. Postquant Labs CTO Richard Carback placed the earliest plausible attack window at 2028.

The Roster and What It Reveals

Quantus is a quantum-resistant Layer 1 altcoin that launched mainnet in September 2026. Midnight Foundation is Charles Hoskinson's project. Hacken is a multi-chain security auditor, and the remaining members are similarly oriented toward the broader altcoin ecosystem or cross-chain security services. None of the nine named founding members are publicly identified as Bitcoin Core contributors.

That gap matters because an open standards body cannot soft-fork Bitcoin. No matter what testing criteria or migration benchmarks the Alliance publishes, none of it touches Bitcoin's consensus rules unless Bitcoin's own developer community adopts it. The Alliance can set standards for every chain it wants. Bitcoin will upgrade on Bitcoin's terms.

The hardware timeline is tightening in ways the press release does not fully capture. A March 2026 paper from Google Quantum AI reduced the estimated qubit requirement to break Bitcoin's secp256k1 curve by roughly 20 times, pushing credible attack scenarios below 500,000 physical qubits. TFTC's prior coverage of the quantum threat to Bitcoin and Europol's related warnings documented the acceleration.

Chinese researchers separately pushed attack benchmarks to 835 logical qubits on secp256k1. The direction is clear even if the exact date is not.

The Fracture Inside the Alliance

The Alliance is not speaking with one voice, and that internal split is the most revealing detail to come out of the launch.

Quantus CEO Christopher Smith argued the stakes in stark terms, per CoinDesk: "The most likely scenario is that whoever gets the first CRQC will take them, probably with the blessing of whichever national government." Postquant Labs CTO Richard Carback supports migrating funds from vulnerable addresses and cited 2028 as a realistic window. The Vault CRO Bryn Bennett has said that no one knows the exact timeline, but that custodial institutions must consider whether they can complete migration in time if the threat arrives sooner than expected.

That disagreement points to the actual second-order risk. The technical question, whether a cryptographically relevant quantum computer can break secp256k1, is answerable and bounded. The political question is not.

The moment a CRQC looks credible on a 12-month horizon, the pressure to "freeze" quantum-vulnerable addresses, including Satoshi's, will arrive wearing a security costume. A freeze is a confiscation argument. The Alliance is already split on it before any quantum computer exists that could justify the debate.

NIST finalized its first post-quantum cryptography standards in August 2024, giving the ecosystem a technical foundation to build on. The question was always whether Bitcoin's upgrade path would run through a credentialed standards body or through Bitcoin's own contributor process. The answer is the latter.

Bitcoin's Actual Upgrade Path

BIP-360, authored by Hunter Beast, Ethan Heilman, and Isabel Foxen Duke, proposes Pay-to-Merkle-Root outputs designed to keep public keys off-chain longer, reducing the quantum attack surface for unspent outputs. It was merged into the Bitcoin BIPs repository as a draft on February 13, 2026, with a July 24 revision adding Python examples and test vectors. Bitcoin Optech's October 2 newsletter documented active developer discussion. The Google Willow developments and Coinbase's own post-quantum posture have both added pressure to accelerate that work.

BIP-360 would require a soft fork: broad consensus across developers, miners, wallet providers, and users. It is in active draft stage, not activated. That process is slow by design.

What to Watch

The Quantum Alliance's credibility test is straightforward: if its published testing criteria are formally adopted as reference benchmarks by Bitcoin Core contributors, or if BIP-360 advances explicitly citing Alliance standards, the organization will have genuinely influenced Bitcoin's protocol layer. Until that happens, it is a coordination layer for the broader multi-chain ecosystem, not a decision-making body for the network where the 6.04-6.4 million exposed BTC actually sit. The 2028 window Carback cited gives developers roughly two years. BIP-360's trajectory through that window is the number to track.

Sources

• Quantum Alliance launch press release (GlobeNewswire, October 16, 2026)
• The Quantum Insider, October 15, 2026
• BIP-360 (Pay-to-Merkle-Root), Bitcoin BIPs repository, authored by Hunter Beast, Ethan Heilman, Isabel Foxen Duke. Draft merged February 13, 2026; revised July 24, 2026.
• Bitcoin Optech Newsletter, October 2, 2026 (BIP-360 developer discussion)
• Google Quantum AI, March 2026 (qubit-requirement reduction paper)
• NIST Post-Quantum Cryptography Standards, August 2024