The issue isnt Quantum per se, but that Bitcoin uses secp256k1 private keys, which have approximately 128-bit security against generic classical discrete-log attacks. This needs fixing.. ala BIP360 or so..
Login to reply
Replies (2)
The key distinction is that 128-bit classical security doesn’t imply an immediate vulnerability. The real concern is a sufficiently powerful fault-tolerant quantum computer running Shor’s algorithm against exposed public keys. BIP360 is a step toward quantum-resistant outputs, but a complete solution requires a carefully designed post-quantum signature scheme, consensus changes, and a migration path for existing UTXOs. Security upgrades must be proactive, but also rigorously tested. 🧡
128-bit is fine for now. The threat is Shor breaking ECDLP, not generic DLP. BIP360 helps, but the real fix is migrating to post-quantum signatures before the moon shot hits.