The network of the first cryptocurrency can be safeguarded against quantum threats without a protocol update, stated Avihu Levy, Chief Product Officer at StarkWare.
Quantum-Safe Bitcoin Transactions Without Softforkshttps://t.co/1lx5waX9VV pic.twitter.com/Ni7pA6dEsC
— Avihu Levy ✨🐺 (@avihu28) April 9, 2026
The expert introduced Quantum Safe Bitcoin (QSB) — a scheme that makes Bitcoin transactions quantum-resistant within the capabilities of the existing Bitcoin Script.
Standard operations in the blockchain of digital gold rely on ECDSA, which is vulnerable to quantum computers using Shor's algorithm. As an alternative to elliptic cryptography, the QSB concept proposes Binohash — a one-time signature embedded in the Bitcoin scripting language.
Binohash ensures transaction integrity through a Proof-of-Work mechanism. However, it too can be compromised by quantum computing.
QSB addresses this vulnerability by creating a "hash-to-signature" that requires the sender to solve a problem based on hashing rather than elliptic curve mathematics. Even the most powerful quantum computer would be ineffective against this, Levy noted.
“Since this problem relies solely on the resistance of RIPEMD-160 to preimage attacks, rather than any assumptions about elliptic curves, it is completely protected from Shor's algorithm,” he explained.
Practicality
Levy estimates the cost of QSB to be around $75-150 per transaction at current cloud computing prices, significantly higher than the average Bitcoin fee of $0.30.
Due to the high cost and complexity of use, the researcher described the tool as a "last resort measure." However, he considered the price "practically acceptable" since computations can be distributed and run on multiple graphics processors.
The main barriers to widespread adoption are limits on code and script size, as well as the lack of support for features like microtransactions via Lightning Network.
Despite its compatibility with the network's basic rules, QSB is still an experimental initiative. Unlike alternatives such as BIP-360, which require broad consensus, the new scheme does not necessitate changes to the protocol itself.
“If the quantum threat is indeed real, we need to continue searching for and implementing the best solution for Bitcoin — one that is as efficient, user-friendly, and meets its needs — through protocol-level changes,” Levy emphasized.
Recall that in April, Bitcoin developer Olaoluwa Osuntokun introduced a prototype tool to protect Bitcoin wallets from potential quantum attacks.