Should Bitcoin Quantum Migration Start from Old Addresses?
No, it should not start from the oldest P2PK and Satoshi addresses. Technical solutions only apply to HD wallet addresses generated after 2012. P2PK addresses lack parent keys, seed phrases and derivation paths, making zero-knowledge proofs impossible. The real priority is the modern addresses you hold that have already exposed their public keys—address reuse or the first spend of a Taproot address reveals the public key and makes them the logical starting point for quantum migration.
Why Old Addresses Cannot Be Migrated Technically
The degree of exposure of a Bitcoin address directly determines its vulnerability to quantum threats.
Based on public key exposure, on-chain assets fall into three tiers:
Safest tier: Modern addresses that have never been used (public key hidden behind hash), accounting for over 65% of circulating supply.
Intermediate tier: Modern addresses whose public key has been exposed due to address reuse or Taproot design (roughly 4.5–5.2 million BTC).
Most vulnerable tier: Early P2PK addresses (roughly 1.7–1.9 million BTC), where the public key is directly embedded in the transaction script.
Bitcoin addresses generated before 2012 are fully independent and random; there is no parent key, no seed phrase, no derivation path.
Project Eleven's zero-knowledge proof tool can generate a proof in 243 milliseconds on an M5 MacBook Air, but it only works for HD wallet addresses created after 2012. For P2PK addresses that cannot construct a zero-knowledge proof, "cryptographically, it's a dead end."
Which Addresses You Should Migrate
Case A: You use an HD wallet created after 2012, with addresses starting with 1, 3 or bc1q.
If these addresses have never been spent (public key not exposed), they are currently safe.
If an address has been reused, or if coins have been sent from it (public key exposed), it is advisable to migrate to a quantum-safe address using a zero-knowledge proof tool once the community reaches an upgrade consensus.
Case B: You hold Taproot addresses (starting with bc1p).
Taproot addresses expose the public key by design. Analyst Willy Woo advises: do not initiate transactions from Taproot addresses before quantum-safe upgrades are complete (spending reveals more information), and do not use Taproot addresses to receive new assets.
Coinbase Advisory Board estimates that roughly 6.9–7 million BTC are exposed to quantum threats because their public keys are already on-chain, of which about 1.7 million are in P2PK format.
What Will Happen to Old Addresses (P2PK / Satoshi Addresses)?
This is a governance debate, not a technical question. Each of the four paths discussed by the community is controversial:
| Path | Approach | Controversy |
|---|---|---|
| Forced freeze (BIP-361) | Set a migration window; freeze unmigrated assets after the deadline | Criticized as "confiscating user assets" |
| "Hourglass" rate-limiting | Limit P2PK transactions to 1 BTC per block | Legitimizes "theft" |
| No action | Whoever gets a quantum computer first takes the coins | Could flood 8–9% of supply onto the market |
| Forced redistribution | Redistribute old coins to active holders via a hard fork | Would split the community and the chain |
Binance founder Changpeng Zhao suggested in June 2026 a 6–12 month migration window and freezing unmigrated addresses (roughly 1 million BTC linked to Satoshi) after that period. However, community developers remain deeply divided.
The roughly 1.1 million BTC held by Satoshi are scattered across about 22,000 P2PK addresses, each holding around 50 BTC. These addresses have no derivation path and cannot be migrated using zero-knowledge proof technology. Cryptographic solutions can no longer save them—this has become a political issue.
Check Your Migration Readiness
Open your Bitcoin wallet and review your transaction history.
Identify the type of addresses you hold: check the prefix (1, 3, bc1q, bc1p).
Check whether an address has been used for spending: if an address has only received coins and never sent any, its public key remains hidden and it is relatively safe. If you often reuse the same address for receiving and sending, or hold bc1p Taproot addresses, consider prioritizing migration after a quantum-safe upgrade plan is finalized.
Next step: If you are an ordinary BTC holder, no emergency action is needed right now—quantum computers are not yet able to break current signature schemes, and technical discussions have not reached a final consensus. What is worth doing: examine your address usage habits and stop reusing addresses. If you run a node or participate in community discussions, you can follow the progress of BIP-361 and BIP-360. For the ultimate fate of P2PK and Satoshi addresses, there is currently no solution that is both technically feasible and consistent with Bitcoin's core principles—and that is precisely the hardest governance question the community must face in the coming years.
