The Chief Technology Officer of Lightning Labs, Olaoluwa Osuntokun, has introduced a prototype tool designed to safeguard Bitcoin wallets against potential quantum attacks.
In the face of a quantum adversary, a commonly discussed emergency soft fork for Bitcoin would be to disable the Taproot keyspend path (https://t.co/Gzx8NVui3N), effectively turning it into something resembling BIP-360.
— Olaoluwa Osuntokun (@roasbeef) April 8, 2026
Assuming an existing precautionary soft-fork to add a pq…
The Problem
Bitcoin relies on encryption algorithms that are theoretically vulnerable to powerful quantum computers. If compromised, public data on the blockchain could allow attackers to compute private keys and steal funds from holders of digital gold.
To mitigate this threat, developers have proposed a protection plan. The first step is voluntary migration: BIP-360 introduces a quantum-resistant type of wallet. Users will be able to preemptively transfer coins to new addresses.
However, migration takes time, and not all holders of digital gold will adapt quickly enough. Moreover, there are old wallets in the network with permanently lost access.
As a last resort, an emergency halt mechanism is in place: the blockchain would disable the current signature system to prevent asset theft.
The main issue is that most modern addresses, including the Taproot format, rely solely on this signature system. If it is blocked, legitimate owners will lose the ability to prove ownership of their funds.
The Solution
Osuntokun's solution serves as a backup for those who cannot migrate in time and want to avoid the "emergency halt" trap.
His system, based on zk-STARK, replaces the digital signature: the owner confirms the creation of the wallet using a secret seed phrase without revealing it. This way, rescuing one address does not jeopardize others generated from the same phrase.
The prototype is already operational. On a powerful MacBook, generating a proof took about 55 seconds, while verification took less than two seconds. The proof file is approximately 1.7 MB (similar to a high-resolution photo).
Osuntokun noted that the system was developed as a side project and is not yet optimized. There is currently no formal proposal for integrating the tool into the Bitcoin network, nor any timeline.
Bernstein's Forecast
The Bernstein analyst team, led by Gautam Chhugani, described quantum computing as a "managed update cycle" rather than an "existential risk" for the first cryptocurrency.
A recent Google study showed that significantly fewer resources may be needed to break Bitcoin's cryptography than previously thought. However, creating a super-powerful computer remains a challenge for Bernstein due to technical complexities and high costs.
Bernstein estimates that the crypto industry has three to five years to prepare, which should be sufficient time to transition to quantum-resistant standards.
Experts predict that cryptographically significant quantum computers may only emerge in about ten years. Source: Bernstein.
Similarly, in an interview with Bloomberg, Blockstream CEO Adam Back expressed that the Google article only addressed algorithm improvements and did not discuss advancements in hardware.
Back stated that current quantum systems remain "extremely primitive" due to limitations in error correction. He noted that even the most advanced demonstrations are trivial compared to what is needed to break Bitcoin's cryptography.
"The most complex computation he performed was factoring 21 into seven times three, something elementary school children can do," Back remarked.
In April, Grayscale's head of research, Zach Pandl, described the quantum issue facing Bitcoin as more social than technical.