Quantum-Ready Bitcoin Prototype Debuts, but Adoption Hurdles Loom

In brief

• BTQ Technologies released the first working implementation of BIP 360 on the Bitcoin Quantum testnet.
• The upgrade introduces quantum-resistant transaction structures and post-quantum signatures.
• BTQ says Bitcoin’s biggest barrier to quantum readiness is social consensus around any changes.

Bitcoin may already have the technology to survive in the nascent quantum era. The harder problem may be getting anyone to agree to use it. BTQ Technologies, a quantum computing and cryptography firm, said Thursday it has released the first working implementation of Bitcoin Improvement Proposal 360, or BIP 360, on its Bitcoin Quantum testnet. The system allows developers, miners, and researchers to test quantum-resistant Bitcoin transactions in a live environment. The company is not waiting for the Bitcoin ecosystem to adopt the upgrade. It has instead implemented BIP 360 on its Bitcoin Quantum testnet, a separate blockchain designed to test quantum-resistant transaction models in practice.

 “We started this idea of basically building a quantum canary network for Bitcoin—sort of like the canary in the coal mine,” Christopher Tam, president and head of innovation at BTQ Technologies, told Decrypt. “Can we create a Bitcoin-like environment and run through a few repetitions of failure so we can see what will work and what will break in the quantum world?” The strategy sidesteps Bitcoin’s governance process, but it raises a central question: whether miners and users would adopt a new chain rather than upgrade the existing network. Bitcoin’s history suggests they may not, and convincing users to move to a separate blockchain could prove even harder than changing Bitcoin itself.

“It’s the hardest part of the problem,” Tam said. “In a nutshell, it’s a social problem. There are certain high priests within Bitcoin that you need to convince,” Tam said. “They’re stubborn because it’s worked in the past, and they’re sitting on their bags. “You have these social problems that seem extremely unlikely to be solved anytime soon, because it’s not a technical problem, it’s human behavior.” Experts warn that a practical quantum computer could eventually break elliptic-curve cryptography used to secure Bitcoin addresses, allowing attackers to derive private keys from public ones. Roughly 35% of the Bitcoin supply could be exposed to quantum attacks, according to a recent report by ARK Invest. BIP 360 aims to mitigate that risk by restructuring transactions to limit public-key exposure through a method called Pay-to-Merkle-Root (P2MR), which commits transactions to a hashed set of conditions rather than exposing a public key upfront. By removing the need to reveal a public key on-chain, P2MR reduces the information available to a future quantum attacker, a model BTQ has implemented on its testnet. However, BIP 360 addresses only part of the technical problem Bitcoin faces from quantum computers, Tam said. “It only provides a way to future-proof transactions,” he said. “It does no reverse, sort of reverse engineering of security, where any historical addresses or transactions will be secured.” Bitcoin’s decentralized model prioritizes stability and broad consensus, which has historically slowed the adoption of major upgrades like SegWit and Taproot. Adding to that resistance is the notion of forking the Bitcoin network. Operating at the codebase level Bitcoin Quantum does not migrate existing balances or replicate Bitcoin’s ledger; as Tam explained, it starts from a new genesis block, creating a separate proof-of-work asset that users must choose to adopt.

“We don’t mean a state fork or chain fork where we’re on block 100 on Bitcoin, and then jump to block 101 on Bitcoin Quantum. We’re not doing that,” Tam said. “It’s going to be a new Genesis block from day zero. Bitcoin is at block 100. Bitcoin Quantum will be day zero, block zero." A hard fork creates a permanent split by introducing rules that are not backward-compatible, while a soft fork updates the network with stricter rules that remain compatible with older versions. As Tam explained, the fork operates at the codebase level, starting with an older 2011 version of Bitcoin’s software and replacing vulnerable cryptographic algorithms with post-quantum cryptography. “So it’s a fork in the sense that we forked the protocol, but not the state,” he said. The Bitcoin Quantum testnet now includes more than 50 miners and more than 100,000 mined blocks, according to BTQ. Hard forks, however, are rarely without contention. After the Ethereum blockchain implemented a hard fork in 2016 to restore assets affected by the DAO hack, some developers and users chose to remain on the original chain rather than adopt the change, leading to the creation of Ethereum Classic. Still, Tam said Bitcoin developers can’t afford to wait to make the network quantum-resistant. “With Y2K, everyone knew when it was going to happen—it was the year 2000, everything was going to break, and we needed a coordinated effort to mitigate that,” Tam said. “Unlike Y2K, we know Q‑Day is going to happen at some point; the question is when.”