Blog
Plain explanations of Bitcoin's quantum exposure: which coins are at risk, why, and what the protocol is doing about it. The threat is real and distant, and we write about it that way.
-
What is BIP-361?
Not an address type and not a signature scheme: a proposed timeline for retiring ECDSA and Schnorr. The two phases, why the sunset would cover never-spent hashed addresses too, the rescue protocol and its caveats, and what it means for your coins today.
-
Address reuse and quantum exposure
A hashed address hides its key until the first spend. Receive on it again, or leave coins behind after a partial spend, and they sit on a visible key for good. Why reuse, not Taproot, is the largest exposed set, how to check an address, and what to do.
-
Are Taproot addresses quantum vulnerable?
Yes, by design: a bc1p output is a public key, not a hash of one. Why the tweak is not a defence, why Taproot chose this trade, the one real exception for script-only multisig, and what a Taproot user can calmly do today.
-
Quantum exposure of the 100 richest Bitcoin addresses
Report. 67 of the 100 largest balances, holding 2.24 million BTC, already have their public key on-chain. Almost all of it is address reuse by custodial cold wallets, not Taproot. Full table, method, limits and open data. Updated monthly.
-
What is BIP-360?
Pay-to-Merkle-Root, explained without the hype. It is Taproot with the quantum-vulnerable key path removed, not a post-quantum signature scheme. What it does, what it deliberately leaves out, where BIP-361 fits, and what it means for your coins today.
-
Is my bitcoin safe from quantum computers?
A quantum computer could derive a private key from a public key, not from a hash. That one rule decides which of your coins are exposed right now. Every address type, the two kinds of attack, how much is exposed today, and what you can do about it.