Bitcoin core contributors are debating BIP-361, a sweeping blueprint to defend the network against future quantum computers by sunsetting legacy cryptographic signatures and freezing vulnerable dormant wallets across three distinct phases.
By Keisha Williams | November 8, 2026
If you own Bitcoin (BTC), the cryptographic locks protecting your digital vault are safe today, but a monumental debate over their future has arrived on developer message boards. With Bitcoin (BTC) trading at 75,840 USD, Ethereum (ETH) at 2,231 USD, and market sentiment registering 28 on the Crypto Fear and Greed Index, researchers are confronting the long-term reality of advanced computing. Drafted by cypherpunk Jameson Lopp alongside co-authors Christian Papathanasiou, Ian Smith, Joe Ross, Steve Vaile, and Pierre-Luc Dallaire-Demers, the proposal known as BIP-361 outlines a controversial roadmap to protect the network before a machine capable of breaking standard encryption goes live.
At stake is an estimated 34 percent of all circulating coins—totaling roughly 6 million to 7 million BTC—stored in older wallet formats where public security keys sit openly visible on the public blockchain ledger. If left unprotected, future machines could systematically drain those dormant reserves. For everyday crypto holders, understanding this roadmap matters because it could eventually require moving older holdings to newer, quantum-shielded vaults before hard consensus deadlines take effect.
The Core Concept
To understand the core problem, picture your Bitcoin wallet as an electronic safety deposit box. Today, that box is locked by standard digital math known as elliptic curve cryptography—specifically ECDSA and Schnorr signatures. In simple terms, this math allows your private password to create a public account number that anyone can verify, without revealing the underlying password itself.
Under normal conditions, finding the secret password from the public key is mathematically impossible for conventional computers. However, physicists and cryptographers know that theoretical super-machines called cryptographically relevant quantum computers running a mathematical shortcut called Shor’s algorithm could reverse that math in minutes. While standard modern addresses hide your public key behind multiple cryptographic hashes until you spend, older legacy addresses—including those used in the earliest years of the blockchain—display those public keys directly on the ledger.
BIP-361, titled Post Quantum Migration and Legacy Signature Sunset, tackles this vulnerability head-on. Rather than waiting for a rogue entity to build a quantum machine and loot millions of coins without warning, the proposal establishes an orderly, multi-year retirement plan for outdated signature types.
- Targeted assets — Over 34 percent of the circulating supply resting in legacy or key-exposed formats
- Estimated exposure — Roughly 6 million to 7 million BTC currently sitting in quantum-vulnerable addresses
- Satoshi’s fortune — Includes the estimated 1.1 million BTC mined by creator Satoshi Nakamoto
- Companion framework — Works alongside BIP-360, which introduces quantum-resistant address types
How It Works Under the Hood
The engineering behind BIP-361 operates through a scheduled sequence of consensus soft forks divided into three progressive phases. I checked the proposal specification against the developer mailing list archives: the phase triggers and cryptographic parameters align with the technical draft. Each stage gives the ecosystem time to prepare before irreversible restrictions activate.
In Phase A, targeted for roughly 3 years following initial activation, the network begins address deprecation. Think of this as putting a one-way turnstile on older vaults: you can still withdraw your money, but the bank stops accepting fresh deposits. Validating nodes will automatically reject any new transaction that attempts to send coins to an outdated legacy address. During this multi-year grace window, holders are encouraged to voluntarily transfer their balances to modern quantum-resistant address formats, such as P2MR (Pay-to-Merkle-Root) structures proposed under BIP-360.
In Phase B, scheduled roughly 5 years post-activation, consensus rules enforce the signature sunset. At this threshold, validating nodes will officially stop accepting legacy ECDSA and Schnorr signatures altogether. Any coins that have not migrated to quantum-safe addresses become frozen on-chain. The balances remain visible on the public ledger, but standard spending commands will no longer be recognized. This drastic step seals the vaults shut, preventing an attacker with a quantum computer from siphoning unmigrated assets.
In Phase C, the blueprint explores long-term rescue mechanisms. To prevent permanent wealth destruction for forgetful users, developers propose using advanced cryptographic proofs, specifically zero-knowledge proofs. This technology works like a blind identity check: it allows a wallet owner who holds their original recovery seed phrase to prove they own the locked funds without exposing their secret keys to the network. However, historical coins that lack deterministic seed phrases—such as Satoshi Nakamoto’s estimated 1.1 million BTC hoard—would be permanently locked out.
Real-World Applications
For retail investors and institutional funds, the real-world impact of BIP-361 centers on portfolio hygiene and long-term storage safety. While everyday users transacting through modern mobile apps are largely insulated today, long-term savers must treat quantum migration as a vital maintenance task.
Consider how this upgrade reshapes three essential sectors of the crypto ecosystem:
- Cold storage custodians — Institutional vaults and physical hardware wallet makers must deploy firmware updates supporting BIP-360 address formats well ahead of the Phase A deposit cutoff
- Address hygiene for retail — Everyday investors who routinely reuse public addresses will be forced to abandon the habit, as address reuse exposes public keys to the network
- Dormant coin accounting — Financial analysts and fund managers will have clear visibility into active circulating supply as unmigrated coins separate from active liquidity
By forcing old coins into modern formats, the broader financial system gains certainty. Institutional treasuries holding millions in corporate reserves cannot afford the existential risk of a sudden cryptographic break, making proactive protocol upgrades a selling point for risk-averse capital.
Scalability & Limitations
Despite its technical elegance, BIP-361 sparks intense debate across the global mining and developer community. The central conflict lies between mathematical survival and Bitcoin’s foundational ethos of strict immutability.
A core promise of decentralized money has always been that valid coins remain spendable forever, without permission or deadlines. By introducing a mandatory sunset that eventually freezes unmigrated wallets, BIP-361 crosses a line that many ideological purists view as confiscation. If an investor falls into a coma, misplaces a password for a decade, or passes away without sharing migration instructions, their private property could be frozen by protocol decree.
From an engineering perspective, post-quantum cryptography also introduces physical bandwidth constraints. Quantum-resistant signatures require substantially larger mathematical keys than nimble ECDSA pairs. If millions of users rush to broadcast migration transactions within a compressed timeline, network transaction fees could surge dramatically, placing heavy financial burdens on smaller retail holders.
The Future Horizon
As BIP-361 navigates the review process, it remains an informational draft rather than scheduled code. Core maintainers and mining pools will debate the proposal across developer conferences and working groups before any soft fork activation criteria are drafted.
In the near term, developers will focus on formalizing the accompanying BIP-360 standard to ensure that user-friendly, quantum-safe address tools exist long before any restrictions take effect. For current holders, no immediate action is required today. However, keeping wallet software updated and avoiding address reuse remain the best operational practices while the global crypto infrastructure prepares for the post-quantum era.
Keisha Williams’s take
In my assessment, drawing a hard line to lock unmigrated keys is the only realistic way to stop quantum thieves from destroying Bitcoin’s credibility. Next year’s developer working group feedback on the BIP-360 address specification will signal whether wallet builders can actually coordinate on user-friendly migration tools. Pushing this sunset without airtight zero-knowledge recovery paths risks alienating long-term savers whose dormant vaults form the backbone of the community.
The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.
freezing satoshi’s 1.1 million coins is the actual nuclear option here. whatever happens to those coins sets precedent for every confiscated wallet debate coming next
6 to 7 million BTC sitting in vulnerable addresses is a bigger number than I expected. Three phases with soft forks feels like the only sane rollout given how slow wallet migration is.
lopp co-authoring this tracks, that guy has been ringing the qr bell for years lol
btc at 75k and fear at 28 and im somehow more stressed about a bip draft than the chart
Freeze dormant wallets and you freeze Satoshi’s coins too. There is no clean way to separate those, and the market will price that uncertainty for years.