At Consensus Miami 2026, Hoskinson stated there is now more than a 50% probability that commercial quantum computers capable of breaking current digital security standards could emerge before 2033 . He has also cited DARPA’s quantum benchmarking initiative—where 11 major companies including IBM and Quantinuum passed the first gate—as evidence the threat is “coming faster than expected” .
“Bitcoin’s security assumption in its core assumes that quantum computers don’t exist,” Hoskinson said during an interview in May 2026. “And if they did, more than a third of the entire Bitcoin supply is vulnerable” .
Bitcoin Improvement Proposal 361 (BIP-361), titled “Post Quantum Migration and Legacy Signature Sunset,” is the most detailed plan yet for moving Bitcoin to quantum-safe cryptography. Here is its current status and timeline.
BIP-361 would require broad technical and social consensus (a soft fork activation) before taking effect. A critical prerequisite is the development and adoption of a separate future BIP for quantum-safe signature types, which has not yet been finalized or deployed .
| Phase | Timing from activation | What happens |
|---|---|---|
| Phase A | ~160,000 blocks (~3 years) | Blocks new transactions sending BTC to quantum-vulnerable legacy addresses; spending from them is still allowed |
| Phase B | ~260,000 blocks (~5 years) | Renders ECDSA and Schnorr signatures completely invalid for spending; coins not migrated to quantum-safe addresses become permanently unspendable (“frozen”) |
| Phase C (optional) | Post-Phase B | Zero-knowledge proof (ZKP) recovery mechanism for frozen coins |
Hoskinson has argued that BIP-361 is misleadingly classified as a soft fork when it actually demands a hard fork, and that its zero-knowledge proof recovery mechanism may not help holders of approximately 1.7 million Bitcoin generated before 2013 seed phrase protocols were standardized .
Multiple independent estimates converge around ~30–34% of the circulating supply:
| Source | Exposure figure | Date |
|---|---|---|
| BIP-361 proposal itself | >34% of all BTC in circulation (public key exposed on-chain as of March 1, 2026) | Apr 14, 2026 |
| Glassnode (May 2026) | 6.04 million BTC (30.2% of issued supply) — valued at ~$469 billion at then-prices | May 2026 |
| Project Eleven Bitcoin Risq List | ~6.9 million BTC (~one-third of circulating supply) | May 2026 |
| Chain analysis via Bitcoin Core (June 2026) | 5.07 million BTC (25.3%) using stricter methodology | Jun 2026 |
These coins include early Pay-to-Public-Key (P2PK) addresses, any address that has spent from it (exposing its public key), and Satoshi Nakamoto’s estimated ~1.1 million BTC . Exchanges show especially high exposure—Binance at 85% and Bitfinex at 100% of their on-chain balances—because they reuse addresses for hot wallet operations .
Hoskinson has warned that doing nothing would result in over 8 million BTC being stolen, and that at least 10% of the supply is likely going to be stolen eventually if migration does not happen in time .
The quantum threat to Bitcoin is no longer just a physicist’s hypothetical. With a formal BIP on the table, multiple independent exposure estimates, and a public debate between prominent industry figures, the question is shifting from if quantum computers will break Bitcoin’s encryption to when—and whether Bitcoin’s governance can move fast enough to respond.