Quantum Bitcoin Countdown

BIP-360 proposes the first step toward a quantum-resistant Bitcoin: a new output type built to carry quantum-resistant signatures in a later upgrade. Which signature scheme follows, and how quickly developers can agree on it, is still under debate. So is Bitcoin ready for quantum, and how much time does it have? In the 13th episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Isabel Foxen Duke, head of the MARA Foundation, adviser to the Starknet Foundation and co-author of BIP-360, who says Bitcoin should be prepared by 2032 and that the push to get there has accelerated sharply in the past year.Episode 13 is the one that follows the fix through Bitcoin’s proposal process: how BIP-360 shrank from a single moonshot proposal into a step-by-step upgrade path, why some developers now question whether anything else deserves their time, and why she argues that for Bitcoin the conservative choice is to change the protocol. She explains the stateful and stateless halves of SHRINCS, the leading candidate for a quantum-resistant signature, why the safer stateless path could cost 10 to 20 times today’s fees, and why custodians and most wallets are expected to avoid the stateful path. It covers how miners are approaching the threat, why the first quantum-safe Bitcoin transaction calmed the market without settling the problem, what could happen to the millions of coins that never move, and the wallet habits that protect holders today. It closes with her response to Chamath Palihapitiya’s criticism of Bitcoin’s progress, her 2032 timeline, and why she expects shocks to the market even in the best-prepared case.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:MARA Foundation - [link]BIP-360 - [link]SHRINCS / OP_CHECKSHRINCS - [link]Quantum Safe Bitcoin (QSB) paper - [link]Google Quantum AI, “Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities” - [link]Chamath Palihapitiya on Bitcoin and quantum - [link]Justin Drake on address reuse - [link]https://www.nist.gov/pqcryptoEpisodes referencedJonas Nick - [link]Charles Guillemet - [link]Avihu Levy - [link]Eli Ben-Sasson - [link]Nic Carter - [link]Cryptography and physicshttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Grover%27s_algorithmhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Post-quantum_cryptographyhttps://en.wikipedia.org/wiki/Hash-based_cryptographyhttps://en.wikipedia.org/wiki/Lattice-based_cryptographyhttps://en.wikipedia.org/wiki/Fork_(blockchain)https://en.wikipedia.org/wiki/Quantum_computingCHAPTERS0:00 Intro5:32 How BIP 360 Evolved9:32 Choosing Post-Quantum Signature Schemes13:23 Stateful Versus Stateless Wallet Trade-Offs26:34 Are Bitcoin Miners Preparing28:12 Quantum-Safe Bitcoin Transactions Today31:58 Why Unmoved Coins Matter34:39 Wallet Hygiene and Address Reuse38:16 Consensus and the 2032 Timeline43:28 Where to Follow the ResearchGUESTSIsabel Foxen Duke is the head of the MARA Foundation and an adviser to the Starknet Foundation. She co-authored BIP-360, the proposal for a quantum-resistant Bitcoin output type, alongside Hunter Beast and Ethan Heilman, and began working on quantum resistance at MARA through a quantum-resistant sidechain project.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Isabel Foxen Duke: https://x.com/IsabelFoxenDukeMARA Foundation: [link]Anduro: [link]New episodes release weekly. Subscribe to follow the full series.

Shor’s algorithm sits underneath every conversation about quantum and Bitcoin. It was published in 1994, long before anyone could build a quantum computer, and it is the reason a large enough machine could work backward from a public key to the private key behind it. So what does it actually do, and why can’t better randomness or a stronger key protect against it? In the 12th episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Eli Ben-Sasson, co-founder and CEO of StarkWare and co-inventor of the STARK proof system, who says that once a capable quantum computer arrives, no key with an exposed public key will be safe.Episode 12 is the one that explains the math behind the threat: what Peter Shor discovered, how a quantum computer can explore many possibilities at once before collapsing to a single answer, and why the repeating patterns hidden inside factoring and elliptic curve keys are exactly what it exploits. He explains why systems built on hashes, lattices and STARKs lack that structure, the 3 fronts where steady progress is bringing a working machine closer, and why AI could produce faster versions of Shor’s algorithm. It covers StarkWare’s move to explore turning Starknet into a quantum-safe layer 1 rather than wait on Ethereum, why he calls the QSB transaction a band-aid, and why he wants Bitcoiners to stop treating ossification as a virtue and speak up for soft forks. It closes with a step-by-step mental image of how Shor’s algorithm finds a key, why perfect entropy offers no protection, and his warning that Bitcoin’s value would fall sharply without a fix.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:StarkWare - https://starkware.co/Starknet - https://www.starknet.io/Quantum Safe Bitcoin (QSB) paper - [link]Eli Ben-Sasson’s Singapore talk on Starknet as a layer 1 - [link]https://www.nist.gov/pqcryptoCryptography and physicshttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Peter_Shorhttps://en.wikipedia.org/wiki/Integer_factorizationhttps://en.wikipedia.org/wiki/RSA_cryptosystemhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Grover%27s_algorithmhttps://en.wikipedia.org/wiki/Schr%C3%B6dinger%27s_cathttps://en.wikipedia.org/wiki/Quantum_error_correctionhttps://en.wikipedia.org/wiki/Post-quantum_cryptographyhttps://en.wikipedia.org/wiki/Lattice-based_cryptographyhttps://en.wikipedia.org/wiki/Zero-knowledge_proofhttps://en.wikipedia.org/wiki/Advanced_Encryption_Standardhttps://en.wikipedia.org/wiki/SHA-2GUESTSEli Ben-Sasson is the co-founder and CEO of StarkWare, the company behind Starknet, and a co-inventor of STARK proofs, the zero-knowledge proof system that secures it. He is a former professor of computer science at the Technion, a founding scientist of Zcash, and has been involved in Bitcoin research since 2013.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Eli Ben-Sasson: https://x.com/EliBenSassonNew episodes release weekly. Subscribe to follow the full series.

Every quantum warning ends with the same advice: move your coins to a fresh address and wait it out. But if someone can break the cryptography protecting a single large wallet, every holder feels it, whether their own coins move or not. So what can an individual Bitcoin holder actually do, and is quantum even the biggest risk? In the 11th episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo put that question to Nic Carter, founding partner at Castle Island Ventures and a longtime Bitcoin investor and researcher who has spent the last 18 months pressing developers to prepare, and who argues that cryptography's golden age is over and Bitcoin has entered the danger zone.Episode 11 is the one that asks what protection really means: why Nic says no single holder can make themselves safe from a break in elliptic curves, why an AI-driven classical break worries him more today than a working quantum computer, and why Bitcoin has to move away from hard-coded cryptography toward a design built to swap schemes as they fail. He grades the last year of developer work a 6 out of 10, explains why stateful schemes like SHRINCS have met resistance, and makes the case that the block size fight will look small once hash-based signatures arrive. It covers how a break would force Bitcoin's founding principles into conflict, from the 21 million supply to the rule that a valid signature proves ownership, his best case for an orderly salvage of abandoned coins, why he sees no problem with commercial firms helping the migration, and what the largest Wall Street firms tell him about their top concern. It closes with his read on Q-Day timelines, why Shor's algorithm is likely to arrive before the rest of quantum's benefits, and why he remains optimistic that Bitcoin can get through it if the work starts now.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:Castle Island Ventures - https://castleisland.vc/Project Eleven - [link]Justin Drake's fresh-address warning - [link]Vitalik Buterin's post on hash-based signatures - [link]https://www.nist.gov/pqcryptoCryptography and physicshttps://en.wikipedia.org/wiki/Elliptic-curve_cryptographyhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Discrete_logarithmhttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Post-quantum_cryptographyhttps://en.wikipedia.org/wiki/Hash-based_cryptographyhttps://en.wikipedia.org/wiki/Cryptographic_agilityhttps://en.wikipedia.org/wiki/SegWitGUESTSNic Carter is a founding partner at Castle Island Ventures, a venture firm focused on public blockchains, and a co-founder of Coin Metrics, a blockchain data company. He was previously the first cryptoasset analyst at Fidelity Investments. He writes widely on Bitcoin's design, monetary policy and governance, and has been one of the most vocal advocates for preparing Bitcoin for the quantum threat.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Nic Carter: https://x.com/nic__carterNew episodes release weekly. Subscribe to follow the full series.

Every quantum doomsday scenario starts the same way: the moment a machine can break Bitcoin's cryptography, the coins start moving. But the first machines that can do it will be slow, cost $100 million to $1 billion to build, and belong to companies that need to earn that money back. So what does a quantum attack on Bitcoin actually cost, and who pays the price first? In the [Nth] episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Pierre-Luc Dallaire-Demers, founder and CEO of Pauli Group, a quantum physicist who has worked in quantum computing since 2006, and who prices the first attacks at $1 million to $10 million per key.Episode [N] is the one that puts a number on the threat: how a machine that lasts a year or two gets amortized across a handful of keys per week, why breaking Bitcoin is the only profitable job for the first generation of quantum computers, and why small holders face lottery odds while exchanges, ETFs and sovereign funds sit at the front of the line. He explains why the first attacks could stay quiet, how key-breaking can be hidden inside what looks like a molecule simulation, and why the price of an attack falls exponentially once the first one lands. It covers his timeline of 2 to 5 years, why he says stopping it would take new physics, and how the resources needed to break a key fell by a factor of 40 to 50 in a single year as researchers used AI agents to rebuild Google's withheld circuit through the ECDSA.Fail project. It closes with his message to Bitcoin developers, that the solutions are starting to arrive and consensus is now the hard part.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:Pauli Group - https://pauli.group/ECDSA.Fail - https://ecdsa.fail/ECDSA.Fail paper - https://arxiv.org/abs/2609.28882Google Quantum AI elliptic curve resource estimate (March 2026) - [paper link]https://www.nist.gov/pqcryptoCryptography and physicshttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Quantum_error_correctionhttps://en.wikipedia.org/wiki/Post-quantum_cryptographyhttps://en.wikipedia.org/wiki/Zero-knowledge_proofhttps://en.wikipedia.org/wiki/Trapped-ion_quantum_computerhttps://en.wikipedia.org/wiki/Superconducting_quantum_computingGUESTSPierre-Luc Dallaire-Demers is the founder and CEO of Pauli Group, which has worked on deploying post-quantum cryptography to blockchains since 2021. He has been involved in quantum computing since 2006, earned his Ph.D. in theoretical physics at Saarland University in Germany, completed postdoctoral work at Harvard, and worked as a quantum algorithm researcher at Xanadu and Zapata Computing. His recent work includes research on the physical limits of quantum Bitcoin mining and contributions to the ECDSA.Fail paper on quantum circuits for breaking Bitcoin's elliptic curve.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Pierre-Luc Dallaire-Demers: [X link]New episodes release weekly. Subscribe to follow the full series.

Every hardware wallet is built around one idea: keep your keys offline, show you exactly what you're signing, and malware on your computer can't touch your Bitcoin. So what happens when the attack never touches the device at all? In the [Nth] episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Charles Guillemet, Chief Technology Officer at Ledger, a cryptographer whose team is already building post-quantum signatures into Ledger's secure element, and who says that as long as the blockchain itself is not quantum safe, there is nothing a wallet maker can do.Episode [N] is the one that looks at quantum from the wallet's side: why an attacker with a quantum computer can compute your keys just by watching the chain, why he thinks Bitcoin would be an epiphenomenon on a true Q-Day, and how a zero-knowledge proof of your seed's parent key could separate real owners from attackers after the chain is halted. He takes apart the argument that hashed addresses keep coins safe, since public keys already sit in wallet infrastructure, logs and RPC nodes. It covers the 3 questions any migration has to answer and why Bitcoin is only debating the easiest one, the 10x throughput cost of bigger signatures, and what stateful SHRINCS signatures would mean for wallets, including why 24 words alone may no longer be enough to recover. It closes with what happens if Bitcoin can't reach consensus and the market has to choose between hard forks, why the rest of the world is moving to ML-DSA while Bitcoin pursues hash-based signatures, and his own case for ML-DSA paired with bigger blocks.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:Ledger - https://www.ledger.com/Ledger blog - https://www.ledger.com/blogCharles Guillemet on SHRINCS - [article link]Project Eleven - https://www.projecteleven.com/https://www.nist.gov/pqcryptoML-DSA (FIPS 204) - https://csrc.nist.gov/pubs/fips/204/finalSLH-DSA (FIPS 205) - https://csrc.nist.gov/pubs/fips/205/finalBIP-39 - https://github.com/bitcoin/bips/blob/master/bip-0039.mediawikiCryptography and physicshttps://en.wikipedia.org/wiki/Post-quantum_cryptographyhttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Zero-knowledge_proofhttps://en.wikipedia.org/wiki/Hash-based_cryptographyGUESTSCharles Guillemet is the Chief Technology Officer of Ledger and a cryptographer. He has followed the post-quantum migration closely since NIST standardized its first quantum-safe algorithms and set migration deadlines of 2030 for critical systems and 2035 for everything else. For more than a year he has taken part in discussions with the Ethereum Foundation, NEAR and Bitcoin developers on how blockchains should migrate. He writes regularly on security, AI and post-quantum cryptography.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Charles Guillemet: https://x.com/P3b7_New episodes release weekly. Subscribe to follow the full series.

Every quantum conversation in Bitcoin starts from the same place: the threat is to Bitcoin, and the question is whether Bitcoin can be fixed in time. What if that's the smaller half of the story? In the [Nth] episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to John Lillick, author of Quantum Money, an investor whose roots run back to the earliest days of both Bitcoin and Ethereum, and who argues that the machine capable of breaking today's signatures arrives on the same clock as the infrastructure built to replace the financial system outright.Episode [N] is the one that widens the lens: why Lillick separates the problem into defense and attack and thinks the industry is watching the wrong one, what the roadmaps from IonQ, IBM, DARPA and NIST actually converge on and why the gap between a startup's incentive and a government agency's matters when reading them, how the no-cloning theorem turns a quantum state into a bearer asset and what Stephen Wiesner saw in 1972 that took fifty years to become buildable, and why he thinks Bitcoin's proof of work consensus is never the thing at risk. It covers the roughly seven million coins sitting in vulnerable address types, the case he made publicly that Bitcoin is a military target and what a state actor would actually gain, quantum memory as the dependency that gates everything, and the quantum internet's missing modem moment. It closes with the two things he cannot put a date on: whether Ethereum can execute a migration he compares to engineering a jumbo jet in mid flight, and how far ahead the capability may already be in hands that have no interest in telling us.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:Quantum Money — John Lillick [book link]"Bitcoin Is The Perfect Military Target" — John Lillick [article link]Project Eleven — https://www.projecteleven.com/https://www.ibm.com/quantum/technologyhttps://ionq.com/resources/ionq-technology-roadmaphttps://www.nist.gov/pqcryptohttps://psiquantum.com/Cryptography and physicshttps://en.wikipedia.org/wiki/No-cloning_theoremhttps://en.wikipedia.org/wiki/Stephen_Wiesnerhttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Quantum_key_distributionhttps://en.wikipedia.org/wiki/Quantum_networkhttps://en.wikipedia.org/wiki/Quantum_memoryGUESTSJohn Lillick is the author of Quantum Money. He was involved in Bitcoin and Ethereum from their earliest days, worked with Polygon, and now invests in quantum technology as a venture capitalist. He argues that the arrival of cryptographically relevant quantum computers is only half the transition, and that the quantum internet will underpin a financial system anchored in the laws of physics rather than in distributed consensus. He is currently writing a second book, Quantum Money for the Banks.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_New episodes release weekly. Subscribe to follow the full series.

The Bitcoin community has an assumption it rarely examines: that doing nothing is the neutral option. Leave the abandoned coins alone, touch nobody's property, and you've kept faith with the protocol. What if inaction is the thing that breaks it? In the 6th episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Yehuda Lindell, Head of Cryptography at Coinbase and professor of computer science at Bar-Ilan University, who started this debate in the don't-touch-anyone's-property camp and ended at the opposite extreme — not for economic reasons, but moral ones.Episode 6 is the one that stops being about cryptography: why "not your keys, not your coins" actually means the reverse, and what happens to that promise when signing no longer proves ownership. It covers the roughly 1.7 million Bitcoin sitting in the abandoned class across some 20,000 early public keys, why Lindell thinks an attacker with a quantum computer dumps rather than sells slowly, and the line he draws between coins that are genuinely lost — gold at the bottom of the ocean, he says, and he has no ethical problem with someone taking those — and coins whose owners simply cannot move them. It walks through what a partial freeze could look like using hash pre-image proofs that need no external registry, why the Hourglass proposal solves the cutoff-date problem better than it solves the market-dump problem, and an idea Lindell raises for the first time on this recording: leaving low-value addresses untouched because no quantum attacker would spend the machine time on them.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:https://www.coinbase.com/blog/coinbase-quantum-advisory-councilhttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Grover%27s_algorithmhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Preimage_attackhttps://en.wikipedia.org/wiki/Zero-knowledge_proofhttps://bitcoinops.org/https://delvingbitcoin.org/CHAPTERS00:00 Cold open01:00 Introducing Yehuda Lindell01:40 Why it's the abandoned coins, not Satoshi's02:45 How many coins are actually at stake05:17 The two extreme positions07:07 Why he changed his mind07:51 What "not your keys, not your coins" really means10:30 The market impact argument11:45 How a quantum attacker would behave16:50 Does knowing a key make it yours?21:06 The bank analogy25:07 Lost coins versus coins that can't move27:40 Proving ownership without elliptic curves29:46 The Hourglass proposal32:33 What "freezing" actually means34:59 Why inaction doesn't preserve anything38:52 The moment his position flipped41:32 Coldcard, and what the protocol does and doesn't promise44:22 The people he'd help if he could47:19 Separate the two questions49:26 Rizzo and Nathan wrap up52:20 The Coinbase Quantum Advisory Council paperGUESTSYehuda Lindell is Head of Cryptography and an Engineering Fellow at Coinbase, and a professor of computer science at Bar-Ilan University, currently on leave. He is a co-author on the position papers published by the Coinbase Quantum Advisory Council, the independent body Coinbase convened to assess quantum computing's impact on blockchains, including its report on the abandoned-coins question discussed in this episode. His work spans secure multiparty computation, threshold cryptography and applied cryptographic engineering.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Coinbase: https://www.coinbase.com/New episodes release weekly. Subscribe to follow the full series.

Bitcoin's quantum problem has always come with an assumption attached: fixing it means changing Bitcoin. What if it doesn't? In the [Nth] episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Avihu Levy, Chief Product Officer at StarkWare, who spent his evenings, weekends and holidays proving that a quantum-safe Bitcoin transaction can be built today, inside the rules Bitcoin already has, with no soft fork and no consensus battle.Episode 5 is the one that doesn't ask permission: how Quantum Safe Bitcoin shifts security from elliptic curves to hash pre-images without touching a line of consensus code, why the trick lives entirely inside legacy script and its 201-opcode, 10,000-byte constraints, how revealing eight secrets out of a hundred makes a forged signature worthless to the attacker who forged it, and what that costs in transaction size, in dollars per spend, and in transactions that no ordinary node will relay. It covers the limitations Avihu puts up front himself, what a wallet would have to hold, and how Robin Linus's Binohash became the missing piece after a commenter dismissed it as useless. It closes with the two things the mechanism cannot solve: what happens when a working workaround becomes an argument against ever fixing the protocol properly, and what Bitcoin does about the coins that will never move.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Links referenced:https://starkware.co/blog/quantum-safe-bitcoin-transactions-without-softforks/https://github.com/avihu28/Quantum-Safe-Bitcoin-Transactionshttps://bitcoinops.org/https://delvingbitcoin.org/https://github.com/bitcoin/bips/blob/master/bip-0032.mediawikihttps://github.com/bitcoin/bips/blob/master/bip-0340.mediawikihttps://github.com/bitcoin/bips/blob/master/bip-0341.mediawikiCryptography and historyhttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Grover%27s_algorithmhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Lamport_signaturehttps://en.wikipedia.org/wiki/RIPEMDhttps://en.wikipedia.org/wiki/SHA-2https://en.wikipedia.org/wiki/Preimage_attackPresented in partnership with Starkware.CHAPTERS00:00 Cold open01:00 Introducing Avihu Levy03:34 How QSB came about08:19 The limitations up front11:47 Signatures without a protocol change16:07 Robin Linus and Binohash19:00 A quantum safe spend23:43 What wallets would have to hold26:38 Size, cost and non-standard transactions30:03 What QSB does to the debate32:55 When a workaround becomes an excuse35:05 The field of proposals37:13 The coins that never move41:57 Why he is optimistic45:03 Rizzo and Nathan wrap upGUESTSAvihu Levy is Chief Product Officer at StarkWare. In April 2026 he published "Quantum-Safe Bitcoin Transactions Without Softforks," introducing Quantum Safe Bitcoin (QSB), a scheme that makes Bitcoin transactions resistant to an adversary running Shor's algorithm without any change to the protocol. QSB operates entirely within existing legacy script constraints and builds on Binohash (Linus, 2026), replacing reliance on elliptic curve security with hash pre-image assumptions. The paper and script generation tools are published open source alongside it.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Starkware: https://starkware.co/Avihu Levy: https://x.com/avihu28New episodes release weekly. Subscribe to follow the full series.

Can Bitcoin's signatures actually be replaced, and what does the replacement cost? In the [Nth] episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Jonas Nick, Blockstream's Director of Research, who has spent the past year and a half building the smallest post-quantum signature scheme anyone has proposed for Bitcoin and who maintained Bitcoin's secp256k1 library for over seven years before that.Links referenced:https://blockstream.com/quantum/https://blog.blockstream.com/op_checkshrincs-a-hash-based-signature-opcode-for-post-quantum-bitcoin/https://eprint.iacr.org/2025/2203https://delvingbitcoin.org/t/shrincs-post-quantum-signatures-for-bitcoin/https://blog.blockstream.com/searching-for-shrincs-parameters/https://blog.blockstream.com/blockstream-quarterly-update-q1-2026/https://blog.blockstream.com/blockstream-quarterly-update-q2-2026/https://bitcoinops.org/https://delvingbitcoin.org/https://github.com/bitcoin/bips/blob/master/bip-0032.mediawikihttps://github.com/bitcoin/bips/blob/master/bip-0340.mediawikihttps://github.com/bitcoin/bips/blob/master/bip-0341.mediawikiCryptography and historyhttps://en.wikipedia.org/wiki/Shor%27s_algorithmhttps://en.wikipedia.org/wiki/Grover%27s_algorithmhttps://en.wikipedia.org/wiki/SPHINCS%2Bhttps://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithmhttps://en.wikipedia.org/wiki/Schnorr_signaturehttps://en.wikipedia.org/wiki/Merkle_signature_schemehttps://en.wikipedia.org/wiki/Lamport_signaturehttps://en.wikipedia.org/wiki/Lattice-based_cryptographyhttps://en.wikipedia.org/wiki/SHA-2Presented in partnership with Starkware.CHAPTERS00:00 Meet the expert: Jonas Nick00:32 A year and a half inside the problem01:59 It isn't only the signatures. Lightning too.03:40 The assumption everything rests on04:47 What cryptographers stopped researching05:27 Why a plan is needed regardless of timing06:16 If Bitcoin does nothing: every coin, gone07:13 Why this needs a consensus change08:39 The people who say it will never happen10:01 Bitcoin as a social construct11:24 The government's post-quantum billions13:12 Why NIST's use case doesn't transfer14:42 Why hash-based is the conservative bet15:00 100x larger signatures15:37 Seven transactions per second becomes half of one16:52 There is no free lunch17:03 What breaks: BIP-32, silent payments, MuSig, FROST18:01 Verification time and who stops running nodes18:56 Signing time and the hardware wallet problem20:50 No reinsurance22:42 No silver bullet23:06 SHRINCS and the statefulness trade-off23:19 Five to ten times larger, seven down to three25:06 Who actually pays for this26:04 Why he won't bundle a block size increase27:05 Four megabytes was never the right number29:35 What SHRINCS actually is35:38 Why Bitcoin's usage pattern makes this work37:36 Already running on Liquid38:38 What Liquid doesn't protect39:47 The next step is a BIP41:23 Nobody knows what rough consensus means43:21 What changed in the last six months44:17 Where to follow the discussionGUESTSJonas Nick is Director of Research at Blockstream, where he leads the post-quantum signature work. With cryptographer Mikhail Kudinov he designed SHRINCS, a hash-based signature scheme producing 324-byte signatures whose security rests entirely on SHA-256, and SHRIMPS, its multi-device counterpart. In May 2026 he published OP_CHECKSHRINCS, a proposed Bitcoin opcode that would verify those signatures through an extension of the Taproot tree. FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Starkware: https://starkware.co/Jonas Nick: https://x.com/n1cklerNew episodes release weekly. Subscribe to follow the full series.

What actually happens to Bitcoin the day a quantum computer arrives? In the third episode of The Quantum Bitcoin Podcast, Bitcoin historian Pete Rizzo and co-host Nathan Jeffay put that question to Jameson Lopp, the Bitcoin security researcher who has spent the past year writing the attack scenarios out in full and who authored BIP-361, the first Bitcoin Improvement Proposal of his 14 years in Bitcoin.Episode three maps what the attack actually looks like: why a quantum attacker works in silence rather than in public, how roughly six blocks of block space could sweep 95% of the most valuable exposed addresses before anyone knows it is happening, what Lopp heard when he asked quantum computing companies directly whether they would take vulnerable coins, why address reuse has already exposed around 30% of all Bitcoin, and why he expects roughly 2.6 million coins to never migrate at all. It closes with the uncomfortable part: what deprecating elliptic curve cryptography would mean for people who cannot move their coins, why Lopp thinks the real constraint is not the computer but the decade Bitcoin needs to agree on anything, and what he actually wants to see happen on Q-Day.The Quantum Bitcoin Podcast is a series examining the quantum threat to Bitcoin, designed to be watched in sequence. Each episode opens with a discussion between the hosts, presents extended interviews with expert guests on a single key question, and closes with a recap of how the evidence has changed their thinking.Presented in partnership with Starkware.CHAPTERS00:00 Cold open01:24 What this episode covers02:08 Rizzo and Nathan set up the question06:40 Meet the expert: Jameson Lopp07:38 Why quantum is half a dozen problems at once10:35 Q-Day and the real target: Bitcoin's signatures14:16 What a quantum attacker does first15:58 Six blocks: how the sweep plays out17:44 Why nobody announces a working quantum computer20:19 The board meeting: asking the quantum companies directly22:47 Enigma, salvage law, and the softer target25:04 Why Lopp refuses to predict a date27:50 Safe until you spend: the mempool attack29:44 Address reuse and the 30% already exposed31:38 The migration math: 17.5 million move, 2.6 million don't33:41 Why the upgrade takes a decade36:19 Why Lopp rejects the collective action framing38:24 A systemic threat, not an individual one43:49 Deprecating elliptic curve cryptography46:38 Rescue paths and why nobody gets rug pulled49:06 Setting the record straight on Satoshi's coins53:12 Every other chain has this problem56:40 What Lopp wants to happen on Q-Day57:30 Recap: what we learned about the attack scenariosGUESTSJameson Lopp is a Bitcoin security researcher and co-founder of Casa, with 14 years in Bitcoin and a decade working in Bitcoin security, previously at BitGo. He is the author of BIP-361, which proposes deprecating elliptic curve cryptography on a fixed timeline to force migration before a quantum attacker arrives, and he publishes his research at lopp.net.FOLLOWThe Quantum Bitcoin Podcast: https://www.youtube.com/@QuantumBitcoinPodcastPete Rizzo: https://x.com/pete_rizzo_Starkware: https://starkware.co/Jameson Lopp: https://x.com/loppNew episodes release weekly. Subscribe to follow the full series.