Bitcoin’s Quantum Fix Could Save Your Coins — But Not Satoshi’s 1.1M BTC
A new proof-of-ownership tool could let everyday holders reclaim frozen coins after quantum hacking — but Satoshi's stash may be lost forever.
If you own bitcoin, there’s a decent chance a chunk of your coins would be locked out of reach the moment a powerful enough quantum computer switches on. A new tool from research group Project Eleven says it can help regular holders prove those coins are still theirs — and get them unfrozen. But there’s a catch: it almost certainly won’t help unlock the roughly 1.1 million BTC believed to belong to bitcoin’s mysterious creator, Satoshi Nakamoto.
Here’s the backstory. In April, longtime bitcoin developer Jameson Lopp and five co-authors published a proposal called BIP-361. It’s a plan to protect bitcoin from “Q-Day” — the theoretical moment a quantum computer becomes powerful enough to crack the math behind bitcoin’s signatures and forge transactions from wallets that were never meant to move again. Under the proposal, deposits to vulnerable addresses would be blocked after three years, and whatever coins remained in them would be frozen entirely after five. Because of how bitcoin addresses work, that would affect more than a third of all bitcoin in existence — including Satoshi’s long-dormant fortune.
Why some bitcoin is “quantum-vulnerable” in the first place
Not all bitcoin addresses are equally exposed. The risk comes down to whether a wallet’s public key has ever been visible on the blockchain — which happens once you spend from it. A sufficiently powerful quantum computer could, in theory, take that exposed public key and work backward to derive the private key, letting an attacker sign transactions and drain the wallet. Addresses that have never spent a coin, or that use certain modern designs, are considered safer because the underlying hashing used to derive keys isn’t something quantum computers are known to be able to break.
That difference — breakable signatures, but unbroken hashing — is exactly what Project Eleven’s new system leans on.
Proving you own coins without exposing your keys
BIP-361 always included a promised “escape hatch”: a way for genuine owners of frozen coins to prove they still control them, using something called a zero-knowledge proof. In plain terms, that’s a way to convince someone you know a secret — like your wallet’s seed phrase — without actually revealing it.
Project Eleven says it has built and funded a working version of that proof. It uses a wallet’s own key-derivation path — essentially, the private “recipe” a wallet software follows to generate keys from a seed phrase — as evidence of legitimate ownership, since only someone holding the original seed material could reproduce it. According to the group’s benchmarks, the prototype runs in just 243 milliseconds on an ordinary laptop, a dramatic speed jump over earlier attempts at similar cryptography.
What this means for your wallet — and why Satoshi’s coins are different
For everyday holders, this matters because it offers a plausible path back to your coins if quantum computing ever forces a freeze under something like BIP-361. If you still have your seed phrase, you could, in theory, use a proof like this to demonstrate ownership and reclaim funds that had been locked for safety.
Satoshi’s coins are a different story. Recovery under this scheme depends entirely on someone actually holding the original seed material tied to those addresses. Since nobody has ever moved or claimed control of Satoshi’s wallets, there’s no known way to run this proof for them — meaning those 1.1 million BTC would likely stay frozen indefinitely, even if the rest of the system works as intended.
It’s also worth staying realistic about where this stands today. Project Eleven’s system is unaudited, incomplete, and would require the bitcoin network to agree on contentious rule changes — including the freeze mechanism itself — before any of this could actually protect a single coin. Q-Day, the moment quantum computers could pull this off for real, remains theoretical. But with over a third of bitcoin’s supply sitting in addresses considered vulnerable, the debate over how to handle it is only going to get louder.
Read more: CZ Says Bitcoin Beats AI on Inflation — But Not Everyone Buys the 21M Cap Story
