Bitcoin's Quantum Clock: 6.9M BTC, Including Satoshi's, Sit in Exposed Addresses

Project Eleven estimates roughly 6.9 million BTC sit in addresses with exposed public keys, including Satoshi's coins, and resource estimates for a full 256-bit elliptic-curve break have fallen below 500,000 physical qubits.

A bitcoin lock icon with a quantum waveform pulling at its edges.
About a third of bitcoin sits in addresses where quantum attackers wouldn't need to race transactions.

Roughly 6.9 million BTC — about a third of the total supply — sit in addresses with exposed public keys, leaving them squarely in the line of fire if quantum computers reach key-breaking scale, according to research highlighted by CoinDesk.

How the exposure happened

The estimate comes from Project Eleven and includes Satoshi Nakamoto's roughly 1 million BTC, untouched since the network's earliest years. A side effect of the 2021 Taproot upgrade is that any bitcoin spent since activation publishes the public key protecting whatever balance remains at that address. Quantum attackers wouldn't need to race against an in-flight transaction; they could grind through exposed addresses at their own pace.

How close is "close"?

An independent researcher recently used publicly accessible quantum hardware to break a 15-bit elliptic-curve key, claiming Project Eleven's 1 BTC Q-Day Prize in the largest public demonstration to date. That is far from threatening bitcoin's 256-bit curve, but resource estimates for a full 256-bit break have fallen below 500,000 physical qubits. Migration paths like BIP-360, which would add quantum-safe address types, have been proposed but no concrete consensus has emerged from Bitcoin developers.

Clock is ticking for bitcoin to prevent quantum threat as it could drain 6.9 million BTC including Satoshi's
CoinDesk on the Project Eleven estimate, the Q-Day Prize result and the BIP-360 migration debate.

Why It Matters

Quantum risk is no longer a tail-of-tails for BTC — it's a governance problem. The hard question isn't whether to migrate signatures, it's what to do with the unmovable Satoshi-era coins, which can't be re-signed without their owner. Any answer — freeze, burn, recover — sets a brutal precedent. Expect this debate to intensify as post-quantum hardware milestones land, not after they do.

Daily Web3 × AI intel, straight to your inbox. Subscribe to BlockAI News.

How we report: This article cites primary sources, regulatory filings, and on-chain data where available. BlockAI News uses AI tools to assist with research and first-draft generation; every article is reviewed and edited by a human editor before publication. Read our full How We Report page, Editorial Policy, AI Use Policy, and Corrections Policy.

Keep Reading

SpaceX's $1.29B Bitcoin Vault Surfaces in the S-1 Nobody Saw Coming

SpaceX's $1.29B Bitcoin Vault Surfaces in the S-1 Nobody Saw Coming

SpaceX filed its Form S-1 with the U.S. Securities and Exchange Commission on May 20, 2026, and tucked inside the financial disclosures sat a number nobody on crypto Twitter had on their bingo card: 18,712 bitcoin, fair-valued at $1.29 billion as of March 31, against a $661 million cost basis. The largest IPO in history just outed itself as the seventh-biggest known corporate bitcoin holder on the planet, and the disclosure rewrites several assumptions about how much BTC actually sits on public

Read full story →

Stay Ahead of the Market

Daily AI & crypto briefings — straight to your inbox, your phone, and your timeline.