Nine of Bitcoin's most powerful institutions committed $15 million over three years to fund quantum defense research, as a Google-led breakthrough compressed the timeline for a potential network-breaking attack.
Nine of Bitcoin's most powerful institutions committed $15 million over three years to fund quantum defense research, as a Google-led breakthrough compressed the timeline for a potential network-breaking attack.

Nine of Bitcoin's most powerful institutions committed $15 million over three years to fund quantum defense research, as a Google-led breakthrough compressed the timeline for a potential network-breaking attack.
Nine institutional Bitcoin players — including BlackRock, Coinbase and Strategy — formed the Bitcoin Security Consortium on July 23, pledging a combined $15 million over three years to fund research and open-source development aimed at protecting the network from quantum computing threats, according to a CoinDesk report and a Strategy press release.
"Bitcoin Core developers do incredibly important work, and we're pleased that our firm and the others in this group will now be making significant additional funding available to support Bitcoin's long-term security needs," Robert Mitchnick, BlackRock's global head of digital assets, said in the announcement.
The consortium's founding members span asset managers BlackRock and Fidelity Digital Assets, exchange and custody operators Coinbase and Anchorage Digital, innovation firms ARK Invest and Galaxy, infrastructure builders Blockstream and Block, and Strategy — the corporate Bitcoin treasury holding more than 847,000 BTC. Each member directs its own contribution independently, with day-to-day coordination handled by Mike Schmidt, executive director of the nonprofit Brink, who agreed to serve in a volunteer capacity.
The urgency behind the consortium traces directly to a March 30 research paper from Google Quantum AI, which showed that executing Shor's algorithm against Bitcoin's secp256k1 curve could require fewer than 500,000 physical qubits — roughly a 20-fold reduction from the prior 2023 estimate of 9 million. Project Eleven's 2026 threat report placed Q-Day — the date a quantum computer could break Bitcoin's cryptography — at a baseline of 2033, with an early scenario of 2030. Investment manager Bernstein estimated in April that Bitcoin has approximately three to five years to complete a post-quantum security upgrade.
$460 Billion in Exposed Bitcoin
More than 34% of all Bitcoin in circulation — roughly 6.5 million to 7 million BTC — has a public key permanently recorded on-chain, according to the BIP-361 proposal text. At prices near $66,000 per coin, the estimated value at risk exceeds $460 billion, as reported by CryptoSlate.
The exposure breaks into two categories: roughly 1.92 million BTC sit in Pay-to-Public-Key address formats where the public key is exposed by design, including approximately 1.1 million BTC in addresses widely attributed to Satoshi Nakamoto. An additional 4.12 million BTC were exposed through address reuse and prior transactions that broadcast the key, according to Glassnode data cited in the BIP-361 proposal.
This creates what cryptographers call a "harvest now, decrypt later" risk: a nation-state or well-funded adversary could be collecting exposed public keys from the blockchain today, storing them for future decryption once a capable quantum computer becomes available.
The BIP Debate — Migration or Freeze?
Bitcoin Improvement Proposal 360, merged into Bitcoin's official repository on Feb. 11, introduces a new output type called Pay-to-Merkle-Root, or P2MR, that commits only to the Merkle root of a script tree — meaning no public key appears on-chain at creation time. The proposal's authors describe it as a first step, with a companion proposal intended to layer in quantum-resistant signature schemes such as ML-DSA, standardized by NIST as FIPS 204 in August 2024.
A companion proposal, BIP-361, published April 14 and co-authored by Casa CTO Jameson Lopp, takes a harder line: a phased, five-year timeline in which holders of coins in legacy, quantum-vulnerable addresses must migrate to quantum-safe formats. Under the final phase, coins that fail to migrate could be permanently frozen — rendered unspendable to prevent a quantum attacker from stealing them instead.
The proposal drew immediate backlash. Critics labeled it authoritarian confiscation. Adam Back, Blockstream's CEO, argued the practical quantum threat remains 20 to 40 years away and that optional, gradual migration over roughly a decade is the appropriate response, not protocol-level forced freezes. Binance founder Changpeng Zhao proposed a 6-to-12-month migration grace period after which dormant coins could be frozen via a community-approved fork. Bitwise CIO Matt Hougan rejected both extremes, expressing support for a proposal by Castle Island Ventures partner Nic Carter that would place Satoshi's Bitcoin in a legal trust until ownership could be proven through historical records.
The consortium deliberately avoids these governance battles. It will not take positions on BIP-360, BIP-361, or any proposed protocol change. Its function is to fund the technical infrastructure — working implementations, security audits, wallet migration tools — that a future activation process will need.
Regulatory Context Adds Pressure
On June 22, President Trump signed Executive Order 14412, directing all federal agencies to migrate high-value systems to post-quantum cryptography for key establishment by Dec. 31, 2030, and for digital signatures by Dec. 31, 2031 — accelerating the prior 2035 deadline by four to five years. The order also requires federal contractors to comply with NIST's post-quantum standards by the end of 2030, a requirement analysts expect to propagate through the financial sector, including Bitcoin custodians and exchange operators among the consortium's founding members.
Coinbase, one of the consortium's nine members, had already formed a separate quantum computing advisory council in January 2026 — drawing in quantum computing pioneer Scott Aaronson of the University of Texas — which published a 51-page report in April concluding that while an attack is not imminent, migrations to post-quantum cryptography should begin immediately. The exchange is developing PQ-CoreKMS, a post-quantum version of its key management platform, and expects to introduce a post-quantum signing pipeline within the next year.
The practical implication for Bitcoin holders: no cryptographically relevant quantum computer currently exists, but the timeline has compressed significantly in 2026. A holder who waits for the hardware threat to become confirmed before taking action may find the industry's migration infrastructure is still being built when they need it.
This article is for informational purposes only and does not constitute investment advice.