New Bitcoin quantum proposal offers Satoshi Nakamoto a way to prove control without moving BTC

A new design proposed by venture fund Paradigm would let holders privately timestamp proof that they control vulnerable keys before quantum computers arrive, creating a possible rescue path if Bitcoin ever sunsets old addresses.

What to know:

• A new proposal called Provable Address-Control Timestamps, or PACTs, aims to protect old bitcoin wallets from future quantum-computing attacks without forcing their owners to move coins now.
• PACTs let holders privately timestamp cryptographic proofs of ownership today and later use quantum-resistant STARK proofs to unlock their coins if the network freezes vulnerable addresses.
• The system would require Bitcoin to adopt new STARK verification infrastructure via a soft fork and can only safeguard Satoshi Nakamoto’s coins if whoever controls those keys acts before quantum theft or a community-imposed freeze occurs.

Bitcoin's quantum computing concerns have always had a Satoshi problem inside it.

Millions of bitcoin sitting in old wallets with exposed public keys could be vulnerable to theft if powerful enough quantum computers arrive. That includes the roughly 1.1 million bitcoin attributed to pseudonymous creator Satoshi Nakamoto, currently worth around $84 billion.

The obvious defense is a soft fork (or an upgrade to existing network rules) that eventually stops allowing spends from those legacy address types, forcing holders to move into quantum-safe formats before attackers can derive their private keys.

Prominent developer Jameson Lopp and five other developers proposed exactly that in mid-April through BIP-361, which would phase out quantum-vulnerable addresses on a five-year timeline and freeze any coins that fail to migrate.

That proposal created a different problem, however. Satoshi, and every other long-dormant holder, would have to wake up publicly or risk losing access to their assets.

Dan Robinson, a general partner at Paradigm, published a proposal Friday for a way around that trade-off that revolves around the concept of Provable Address-Control Timestamps, or PACTs.

The core idea is not to move coins but timestamp proof of ownership at a specific date and reveal nothing to the public until the owners of those wallets actually need to spend.

A holder generates a random salt, which is a piece of secret data used to make a cryptographic commitment unique and unguessable, and uses BIP-322, a standard for signing messages from a Bitcoin address without spending from it, to produce a proof of ownership.

The salt and proof are bundled together into an onchain commitment and timestamp it through OpenTimestamps, a free service that anchors data onto the Bitcoin blockchain through a single batched transaction. The salt, proof, and timestamp files stay private.

If Bitcoin later activates a soft fork that freezes quantum-vulnerable coins, the protocol could include a rescue path that accepts a STARK proof, a type of zero-knowledge proof that remains secure against quantum computers, showing the holder created their commitment before quantum hardware existed.

The holder submits that proof when they want to spend, and the network releases the coins. The redemption reveals nothing about which address, which amount, or even when the original timestamp was created.

These PACTs also address a specific gap in BIP-361 by including a rescue path for wallets derived through BIP-32, the deterministic key generation standard introduced in 2012. Pre-2012 wallets, including most of Satoshi's known addresses, do not use BIP-32 and cannot be rescued through that path.

As such, Robinson stated that the PACTs require Bitcoin to eventually adopt a STARK verification protocol, which would itself need a separate soft fork with broad community consensus.

The verification infrastructure does not exist in Bitcoin currently and would need what Robinson calls "substantial new plumbing," such as multisig wallets, complex scripts, and hardware wallet support that would all need careful standardization.

That last constraint is the one PACTs cannot work around.

The protocol only protects Satoshi if Satoshi himself, or whoever currently controls those keys, makes the commitment. If Satoshi is genuinely gone, no PACT can be retroactively created. The coins remain exposed to whichever scenario plays out first, quantum theft or community freeze.

What PACTs do offer is a way to make the BIP-361 debate less binary. The current freeze proposal forces a choice between protecting against quantum theft and respecting dormant property rights.

Whether Satoshi will use it is the question PACTs cannot answer.

More For You

Although Manfred will not start trading crypto until the end of May, it already has a crypto wallet and credentials to hire staff, make payments and do business.

What to know:

• ClawBank said its Manfred AI agent has autonomously formed its own corporation in the U.S., obtaining an IRS Employer Identification Number, an FDIC-insured bank account and a crypto wallet.
• Manfred, which runs its own X account under the persona “Manfred Macx,” is designed to trade crypto and can already transact...

Bitcoin above $78,000 as Senate clears Clarity Act yield hurdle, S&P 500 sets new record

10 minutes ago

Clarity Act text lets crypto firms offer stablecoin rewards while shielding bank yield

9 hours ago

Bitcoin miner Riot's shares jump 8% after expanding AMD data center deal, signaling AI pivot

10 hours ago

Ethereum Foundation finalizes sale of 10,000 ether to BitMine as part of its treasury strategy

12 hours ago

Canadian pension giant AIMCo buys the dip in Strategy, now sitting on $69 million unrealized gain

13 hours ago

A new narrative for bitcoin that will last

13 hours ago

Tether posts $1.04 billion Q1 profit, reaches $8.23 billion reserve buffer

14 hours ago

SBI Holdings eyes stake in crypto exchange Bitbank to build digital asset powerhouse

19 hours ago

Strategy keeps STRC dividend at 11.5% as stock logs first monthly gain in nine

23 hours ago

Bithumb scores a legal win in South Korea as six-month suspension is lifted by local judge

23 hours ago

Institutional demand to drive bitcoin market cap to $16 trillion by 2030: Ark Invest

17 hours ago