Quick Summary
Nine crypto companies launched the Quantum Alliance on October 15, 2026, promising to write "common security standards" for Bitcoin and other chains before quantum computers can break them. The alliance’s own number: 6.4 million bitcoin — 30.2% of the entire supply — sit in outputs whose public keys are already exposed on-chain.
Then came the part that isn’t in the press release. The CEO of one of the founding members said out loud that whoever builds the first cryptographically relevant quantum computer will probably just take those coins, "with the blessing of whichever national government" gets there first. Another member wants the vulnerable coins frozen. A third wants them moved into a trust where owners have to prove ownership to get their money back.
Nobody elected any of them. Nobody asked you.
What Happened
Nine crypto firms — including Hacken, Charles Hoskinson’s Midnight Foundation, Quantus and Postquant Labs — unveiled the Quantum Alliance on Thursday. Its stated mission is to develop common security tests and guidance for moving existing blockchain networks onto quantum-resistant cryptography. Reasonable goal. Serious problem. Bad process.
Here’s the math they published. Roughly 6.4 million bitcoin, about 30.2% of the supply, sits in outputs whose public keys are already visible on-chain. Those coins can’t be stolen that way today — no existing quantum computer is powerful enough. But a wallet’s public key is the half of the equation that’s public, and a machine that can reverse it gets the private key.
Coinbase’s own quantum wishlist put the number higher earlier this year: around 6.9 million BTC in outputs with visible public keys, roughly 1.7 million of them in legacy pay-to-public-key outputs, including early mining rewards. Coinbase’s post treats those legacy coins as "a separate governance and engineering problem."
Governance. There’s the word.
Christopher Smith, CEO of quantum-resistant layer-1 Quantus, was blunt about the endgame: "The most likely scenario is that whoever gets the first CRQC (Cryptographically Relevant Quantum Computer) will take them, probably with the blessing of whichever national government. Hopefully it’s a government that likes bitcoin."
Read that again. A founding member of the alliance set up to "prepare" Bitcoin is telling you the coins get taken — by whoever gets there first, with a state’s permission — and the best case he can offer is hoping that state happens to like Bitcoin.
Then there’s the freeze debate. Richard Carback, CTO of Postquant Labs, says he believes 2028 is a realistic date for a machine that can break today’s cryptography, and he’d rather see vulnerable coins moved than frozen. He has also proposed putting them in a trust, where people who can prove ownership could recover their funds.
Bryn Bennett of The Vault pointed at the hole in all of it: "Nobody owns that issue, and that’s the problem. A custodian protects its clients’ assets, not abandoned ones. Freezing coins is a governance decision for the Bitcoin network, not for the industry." Then the line that should be printed on every hardware wallet box: "Any freeze would trade quantum risk for a precedent on property rights and neutrality."
This isn’t new, either. Binance’s Changpeng Zhao suggested freezing Satoshi’s estimated 1.1 million bitcoin if they stay untouched as quantum tech advances. Bitcoin developer Jameson Lopp argued it is better to freeze 5.6 million BTC than let hackers have them. The counterargument is simple, and it is the one that matters: freezing someone’s bitcoin is confiscation, and confiscation is the exact thing Bitcoin was built to make impossible.
Why This Matters for Bitcoin
Strip the technical language and here is what is actually being designed: a mechanism that decides which coins can be moved and which can be locked, who gets to vote on it, and who enforces it.
Making bitcoin quantum-resistant means replacing the digital signatures that authorize transactions. That requires agreement across developers, miners, wallet providers, exchanges and users — and the new signatures take up more space, which means potentially higher fees or fewer transactions per block.
And the cost estimate? Bennett again: "Nobody has a credible single number, and anyone offering one is guessing. The real cost isn’t the cryptography; it’s coordinating wallets, exchanges, custodians and protocol developers."
Translation: the expensive part is getting everyone to agree. Which is the same problem the BIP-110 governance crisis already put on display — a vocal minority deciding it gets to redefine what Bitcoin is, while everyone else finds out afterward. We have seen this movie. It ends with a chain split and a lot of people discovering their "consensus" was somebody else’s decision.
Now add quantum to that. Quantum is the perfect excuse for a freeze: the threat is real, the timeline is unknown, and "we’re only doing it to protect you" is the oldest sentence in the confiscation playbook.
Notice what is missing from the entire debate: your ability to just fix this yourself. Coins whose public keys are exposed are the vulnerable ones. Coins behind addresses that have never spent — where the public key was never revealed — are a much harder target. That means the migration is something you can start today, on your own, with no committee, no soft fork, no alliance, and no permission.
If you still think the timeline is somebody else’s problem, remember the devs who admitted they had no quantum plan at all, and notice that the industry’s answer since then has been to write rules instead of write code.
The Love Is Bitcoin Takeaway
The industry wants to own the quantum conversation because the quantum conversation is really a custody conversation.
If your coins sit on an exchange, with a custodian, or inside an ETF, you do not get a vote on any of this. You get an announcement. And an announcement is not a property right — you already learned that from why custodial exchanges fail the moment something goes wrong, and you will learn it again the day a freeze needs a list of which coins to lock.
If your coins sit in your own wallet, on a key only you know, then the "governance problem" is yours to solve with one transaction. That is the whole point of Bitcoin: the rules change for everyone at once, but your keys answer to no committee.
The people building the Quantum Alliance are not villains for planning ahead. They are custodians, and custodians plan for assets they hold. But notice that the people who hold your bitcoin for you are the same people now volunteering to write the rules for it. That is not a coincidence. That is an incentive.
Quantum is coming eventually. It might be 2028. It might be 2035. Nobody knows. What you can know is who is holding your keys when it arrives — and whether you are on the list of people who get asked for permission.
What Beginners Should Do Next
You do not need to understand lattice cryptography to act on this. You need one sentence: a public key that is already on the blockchain can be attacked; a public key that has never been revealed cannot.
- Stop reusing addresses. Every time you receive bitcoin, use a fresh address. This is free, and your wallet already does it if you let it.
- If you have coins in an old address you have already spent from, your public key is public. Plan to move those coins to a fresh wallet when fees are cheap.
- Do not leave coins on an exchange because it is convenient. Convenience is how custodians end up holding a huge slice of the supply and a seat at the table where your coins get discussed.
- Hold your own keys with hardware you control. Learn how to withdraw Bitcoin to your own wallet — and do it before there is a deadline.
- Write your seed phrase on metal. A backup that dies in a fire is not a backup.
None of this requires a fork. None of this requires a vote. None of this requires nine companies agreeing on a standard. It requires you moving your own coins.
FAQ
Can a quantum computer steal my bitcoin today?
No. No existing machine is powerful enough to derive a private key from a public key. The Quantum Alliance says the same thing.
What does "exposed public key" mean?
When you spend from an address, its public key becomes visible on-chain. Older address types like P2PK exposed the public key from the start. A powerful enough quantum computer could, in theory, work backwards from that public key to the private key. Addresses that have never been spent from keep their public key hidden.
Is the Quantum Alliance going to freeze my bitcoin?
It says it is developing standards and guidance, not rules. But members are openly debating freezing vulnerable coins, moving them, or placing them in a trust — and the alliance’s own founding members are the ones raising the possibility.
How much bitcoin is actually at risk?
The alliance estimates 6.4 million BTC, about 30.2% of supply, in outputs with exposed public keys. Coinbase’s advisory board estimated around 6.9 million BTC earlier this year.
Should I sell?
No. You should move. Self-custody with fresh keys solves the problem the industry is trying to solve for you.
Final Thoughts
Nine private companies formed an alliance to protect Bitcoin from quantum computers and immediately started arguing about whether to freeze your coins, move your coins, or hold your coins in a trust. Not one of them suggested the obvious answer: let people move their own coins, on their own keys, before anyone needs a committee.
That is not a technology problem. That is a custody problem wearing a lab coat.
Before you buy, sell, or move anything: if you are going to hold your own keys, do it properly. Get hardware you control, keep your seed phrase offline, and never hand your 24 words to anyone — no support agent, no website, no "official" account, no alliance. Not ever.
Lock your coins down properly with coupon code LOVEISBITCOIN at https://loveisbitcoin.com/bull — the best way to buy bitcoin without a bank holding your keys.
So here is the question: if a quantum computer showed up tomorrow and a committee offered to "protect" your coins by freezing them until you prove they are yours — would you say thank you, or would you be furious that anyone thought it was their call?
THEY'RE WRITING THE CONFISCATION RULES FOR 6.4 MILLION BITCOIN — AND A NATIONAL GOVERNMENT IS FIRST IN LINE
