February 24, 2026 ChainGPT

Matt Corallo: Bitcoin can avoid a quantum crisis with a two-step, low-disruption plan

Matt Corallo: Bitcoin can avoid a quantum crisis with a two-step, low-disruption plan
Bitcoin engineer Matt Corallo pushed back on claims that the developer community is “sleepwalking” into a quantum-era crisis, saying a practical, low-disruption roadmap is already forming. Speaking on the Unchained podcast on Feb. 22, Corallo — known in the community as TheBlueMatt — framed the work as two clear steps: first, give wallets the ability to commit to post-quantum public keys; second, decide later when to stop accepting legacy, quantum-vulnerable spend paths. His comments were a direct response to criticism from Castle Island Ventures’ Nick Carter, who has warned developers aren’t treating the quantum threat with adequate urgency. Corallo argued that characterization overlooks both active engineering work and a technical nuance in how many wallets already operate. Seed-phrase wallets already contain a “quantum-safe anchor,” Corallo said: even if current on-chain public keys and signature schemes would be breakable by a future cryptographically relevant quantum computer, the wallet-derivation layer can already support post-quantum keys. That changes the migration problem materially, he said, because it allows Bitcoin to be prepared without immediately imposing the heavy size and fee penalties of large post-quantum signatures on-chain. “There are only two steps,” Corallo summarized. “The first relevant step is just adding the ability to commit to a postquantum public key. I think that should be done soon.” He said the community is converging on hash-based signatures for that role, with discussions focusing on implementation details rather than whether to adopt them. Corallo pointed to work around BIP 360 and said there is “pretty strong consensus” around hash-based approaches, even as formatting debates continue. The harder, political choice will come later: when to stop accepting older, quantum-vulnerable spend paths. That enforcement moment, Corallo warned, is where contentious social and market decisions will surface — including what happens to coins that haven’t migrated, lost keys, or abandoned addresses. He suggested those outcomes could ultimately be decided by market-driven forces or community politics rather than purely technical fiat. Corallo emphasized a staged approach because it lowers barriers to adoption. Wallets can begin committing to post-quantum keys now without immediately using large PQ signatures on-chain; the wallets “know how to build these keys, how to sign with these keys. They just don’t have to use it yet,” he said. That makes the initial upgrade effectively free in terms of transaction size and fees, reducing the incentive for users or providers to procrastinate. He also pushed back on the idea that Bitcoin developers are ignoring the problem, citing research and engineering work at organizations including Blockstream Research and Chaincode Labs, and naming Ethan Heilman and co-authors working on BIP 360. Corallo said discussion of post-quantum topics on the Bitcoin developer mailing list has steadily risen and at times accounted for “30 or 40%” of posts — evidence, he argued, of sustained attention rather than neglect. Corallo conceded the migration will be lengthy and that the political complications around disabling insecure spend paths are real. But his core message was narrower: Bitcoin doesn’t need a fully finalized end-state today to begin meaningful preparation. Implement the commitment layer now; manage the enforcement decision later. At press time, BTC traded at $65,953. Read more AI-generated news on: undefined/news