Bitcoin's quantum security plan would freeze Satoshi's 1.1 million coins forever, and the developers wrote it that way on purpose.
The Summary
- Casa co-founder Jameson Lopp and five co-authors published BIP-361, a three-phase proposal to sunset legacy ECDSA/Schnorr signatures and force migration to quantum-resistant alternatives
- Cardano founder Charles Hoskinson says the plan can't rescue roughly 1.7 million BTC in pre-2013 addresses, including Satoshi's estimated 1.1 million coins
- The authors call it a "private incentive to upgrade" because frozen or lost coins make everyone else's holdings worth slightly more
- Bankless frames it plainly: Bitcoin's quantum defense solves a future threat at the expense of its most sacred rule
The Signal
BIP-361 is a quantum security proposal with a poison pill built in. The three-phase timeline starts with a soft fork enabling quantum-resistant signature schemes, followed by a migration period where holders move coins to new addresses. Phase three sunsets the old signature standards entirely. Coins that don't migrate get frozen. Permanently.
This hits roughly 1.7 million Bitcoin still sitting in pre-2013 addresses, most of which are presumed lost or abandoned. But the largest single block belongs to Satoshi Nakamoto, estimated at 1.1 million BTC. Those coins have never moved. They likely never will. And BIP-361 would seal them in digital amber.
"Bitcoin's quantum defense solves a future threat at the expense of its most sacred rule."
Charles Hoskinson calls out what the proposal doesn't say: there's no zero-knowledge recovery mechanism that could save Satoshi's stash. If you don't have the private key to migrate, you're done. The proposal's authors know this. They're counting on it.
Here's why that's not a bug, it's the feature:
- Quantum computers threaten old Bitcoin addresses because they used pay-to-public-key (P2PK) formats that exposed public keys on the blockchain
- Modern addresses hide public keys until you spend, buying time against quantum attacks
- Legacy coins are sitting ducks once quantum computing scales
The authors describe freezing these coins as a "private incentive" because reducing circulating supply makes the remaining coins more scarce. Translation: your Bitcoin gets more valuable when Satoshi's million coins get locked forever. That's the carrot. The stick is quantum vulnerability.
This is where BIP-361 breaks from Bitcoin's founding ethos. Bitcoin's prime directive has always been immutability. Code is law. Your keys, your coins. No central authority decides who gets to keep their holdings. BIP-361 flips that. It forces a technical upgrade tied to a timeline, with confiscation as the penalty for non-compliance.
The proposal hasn't specified exact timelines yet, but the structure is clear: announce, migrate, sunset. Anyone who doesn't move coins to quantum-resistant addresses during the migration window loses access. Not because they got hacked. Not because they made a mistake. Because the protocol changed the rules underneath them.
The Implication
Watch how the Bitcoin developer community responds to this. If BIP-361 gains traction, it sets a precedent that protocol-level confiscation is acceptable when the threat is big enough. That opens the door to future proposals that freeze or reassign coins for other reasons: sanctioned addresses, lost coins past a certain age, anything a future coalition decides is worth the trade-off.
If you hold Bitcoin in old addresses, the clock just started ticking. Migration windows won't last forever. And if you're waiting for Satoshi to move those coins, BIP-361 is a bet that wait will be permanent.