The Anatomy of the Ledger: Address Typologies and Exposure
To the casual observer, Bitcoin is often perceived as a monolithic cryptographic structure where every coin is protected by the exact same shield. From an engineering standpoint, this is a dangerous misconception. The vulnerability of an asset on the blockchain to a quantum attack is not determined by the protocol itself, but by the specific typology of the address housing the funds.
In Bitcoin's architecture, there is a fundamental distinction between an address and a public key. Modern addresses utilize a double-hash mechanism: your public key is processed through SHA-256 and then through RIPEMD-160, creating a cryptographic abstraction known as a Public Key Hash (PKH).
When funds sit inside a standard modern address—such as a Pay-to-Witness-Public-Key-Hash (P2WPKH) native segwit address—the raw public key is completely hidden from the public ledger. A quantum computer running Shor's Algorithm cannot attack a hash function; it can only attack the asymmetric mathematics of the elliptic curve (ECDSA). Therefore, as long as your public key is concealed behind a layer of hashes, your funds remain secure from quantum decryption.
The critical vulnerability occurs the millisecond the public key is exposed to the network.
The Attack Vector: Reused Addresses and the Mempool Race
There are two primary scenarios where a public key is stripped of its hash shield and left transparent on the ledger:
Address Reuse: When you sign an outgoing transaction from a Bitcoin address, the protocol requires you to reveal your raw public key so the network can verify that the signature corresponds to the Public Key Hash. If you spend a fraction of your funds and leave the remaining balance (the change output) in that exact same address, that address is now compromised in a post-quantum environment. The public key is out in the open, ready to be targeted by Shor's Algorithm.
The Mempool Window: Even if you do not reuse addresses, a high-velocity quantum machine presents a threat during the broadcast phase. When a transaction is submitted, it sits in the Mempool (the waiting room of unconfirmed transactions) before being included in a block. During this window—which typically lasts around 10 minutes—the public key is completely visible. An attacker with a stable quantum machine could intercept the transaction in the mempool, compute the private key via Shor's Algorithm, and broadcast a fraudulent transaction with a much higher transaction fee (RBF - Replace-by-Fee), stealing the funds before the legitimate block is mined.
The Ghost in the Ledger: Satoshi’s Millions and P2PK Exposure
The ultimate test for a quantum attacker will not be tracking modern transactions in the mempool; it will be hunting the oldest, most legendary wealth on the blockchain: the unspent millions of Satoshi Nakamoto.
During the first year of Bitcoin’s existence (the Genesis Era), the network utilized a standard transaction script known as Pay-to-Public-Key (P2PK). In this primitive architecture, the protocol did not hash the public key to create a shorter address. Instead, the raw, uncompressed 65-byte public key was written directly into the public ledger (scriptPubKey).
Satoshi Nakamoto is estimated to own roughly 1.1 million Bitcoins spread across thousands of these early P2PK wallets, accumulated during the mining of the first 20,000 blocks. Because these coins have never been moved or spent, their raw public keys have been sitting completely exposed to the entire world inside the blockchain database for over 15 years.
In a post-quantum scenario, these early wallets represent a massive, zero-risk honey pot. An attacker running Shor’s Algorithm wouldn't need to intercept a live transaction or fight a race condition in the mempool. They could simply extract Satoshi’s public keys from the genesis blocks offline, compute the corresponding private keys in a matter of minutes, and sign valid transactions to drain the funds.
Address / Tx Type Public Key Status on Ledger Quantum Risk Level Vulnerability Mechanism
Genesis Era (P2PK) Exposed (written in raw text since 2009) 🔴 Critical Immediate decryption via Shor's Algorithm offline.
Reused Addresses (P2PKH) Exposed (revealed during the first spend) 🔴 Critical Attacker can crack the key and drain the remaining balance.
Active Mempool Tx Exposed (visible for ~10 minutes) 🟡 Medium-High Risk of MEV / Front-running via Replace-by-Fee (RBF) race.
Modern Unspent (P2WPKH) Hidden (secured behind SHA-256 + RIPEMD-160) 🟢 Safe Hash functions are immune to Shor's Algorithm.
Conclusion: The Fractured Timeline of Trust
The anatomy of the ledger proves that the quantum threat is not a binary event where everything fails at once. It is a slow, structural degradation. The first dominoes to fall will be the ghost wallets of the cypherpunk pioneers and the addresses of careless users who reuse their cryptographic keys.
As the industry approaches this technical crossroad, the core dilemma changes from a mathematical puzzle to an existential question: Should the Bitcoin community allow a massive redistribution of wealth by letting quantum attackers drain Satoshi's frozen coins, or will the network force a hard-coded migration to lock those millions forever?
Part 1