Crucially, Bernstein separates this from a proof-of-work integrity scare. Bitcoin’s mining process, which relies on SHA-256 hashing, is not considered meaningfully vulnerable to quantum attacks or AI quantum computing breakthroughs. For market structure, that keeps the debate away from hashrate shock narratives and focused on signature and key security, where the remediation path is upgrades and user migration rather than a sudden collapse in chain security.

The Legacy Supply Overhang: 1.7M BTC in Early P2PK and Other Flagged Output Types

Bernstein flags specific output types as among the most vulnerable to quantum risks: pay-to-public-key (P2PK), pay-to-multisig (P2MS), and pay-to-Taproot (P2TR). The inclusion of Taproot in that list is notable because it shifts the conversation from “ancient coins only” to a broader set of spending patterns and script types, even if the report’s emphasis remains on public key exposure.

The concrete number traders will anchor to is the legacy bucket. Bernstein estimates roughly 1.7 million BTC are held in early P2PK addresses where public keys are permanently exposed, including an estimated 1.1 million BTC attributed to Satoshi Nakamoto.

That does not come with an activation plan or a specific Bitcoin Improvement Proposal (BIP). Still, it creates a clean narrative handle for volatility if the market starts treating movement from early P2PK-era coins as a proxy for “quantum readiness,” even when the underlying driver is mundane key management.

Signals Traders Can Track Before This Becomes a Protocol-Level Story

The first real tell will be process, not price: any concrete BIP, draft standardization effort, or explicit post-quantum signature direction referenced by core contributors. Bernstein outlines a preparation window but does not specify an implementation plan, so the market will likely respond to visible coordination milestones.

On-chain behavior is the second tell. If movement from early P2PK-era coins accelerates, the market can turn it into a supply-overhang narrative quickly, given the report’s ~1.7M BTC estimate for that cohort.

Third, watch wallet and custody guidance. If major providers start pushing stricter defaults around address reuse and migrations to newer formats, that would align with Bernstein’s claim that avoiding reuse significantly reduces risk and would signal the start of operational rollout.

Finally, the timeline itself is a variable. Updates from major quantum research groups that materially change expectations for CRQCs would pressure Bernstein’s three-to-five-year preparation window, especially given the report’s own reference to Google’s “significant reduction” in required resources.

Why This Reads Like a Long-Dated Transition, Not a Mining Shock

I treat Bernstein’s note as a positioning guide for custody and protocol expectations, not a catalyst for immediate BTC repricing. The threshold that matters is whether the conversation graduates from generalized “quantum” headlines into concrete BIP work and wallet-provider behavior changes that force migration decisions.

The real test is whether legacy public-key-exposed outputs start moving in size and frequency alongside visible standard-setting for post-quantum signatures. If that holds, the setup starts to look structural rather than narrative-driven, because it would tie a known legacy exposure bucket to an actual upgrade path that changes how coins are secured and spent.

Sources

• Bernstein (via Cointelegraph publication of research summary)