A future quantum breakthrough could put far more than Satoshi Nakamoto’s estimated 1 million BTC at risk. According to figures cited by CryptoQuant founder Ki Young Ju on X, roughly 6.98 million bitcoin may be vulnerable in a sufficiently advanced quantum attack. At about $67,600 per BTC, that exposure comes to nearly $440 billion.
Satoshi’s holdings alone would be worth about $67.6 billion at current prices. But the larger issue is not only how much bitcoin could be targeted. The harder question is whether the network should change its rules before such an attack becomes possible.
Why some bitcoin are more exposed than others
The risk is concentrated, not universal. In Bitcoin’s early years, P2PK transactions placed public keys directly on-chain. Modern address formats usually reveal only a hash until coins are spent, but once a public key has been exposed through early mining activity or address reuse, that exposure remains permanent. In a mature quantum scenario, those public keys could theoretically be reversed into private keys.
That leaves certain early coins and reused addresses in a more fragile position than the rest of the supply. From there, the discussion turns into a protocol dispute. Should Bitcoin intervene, or should it leave ownership rules untouched?
Opponents of freezing say neutrality must hold
Nima Beni, founder of Bitlease, said Bitcoin treats all UTXOs equally and does not sort them by wallet age, identity, or perceived future danger. In his view, that neutrality is central to the protocol’s credibility. If the network creates an exception to freeze coins for security reasons, the same authority could later be used for other reasons too.
Georgii Verbitskii, founder of investor app TYMIO, pointed to a practical problem: the network has no dependable method to distinguish coins that are permanently lost from coins that are simply dormant. At the protocol level, he said, that line cannot be drawn with confidence.
Tether CEO Paolo Ardoino took a stricter position. He suggested that bitcoin in lost wallets, including Satoshi’s if those coins are truly abandoned, could be hacked and returned to circulation, and that any inflationary effect would be temporary as the market absorbs the supply. Roya Mahboob, CEO and founder of Digital Citizen Fund, also rejected the idea of freezing old addresses, saying it would violate immutability and property rights. In her view, coins mined in 2009 should be governed by the same rules as coins mined today.
Supporters of intervention argue for burning vulnerable outputs
Jameson Lopp argued that allowing quantum attackers to sweep exposed coins would hand a massive wealth transfer to whoever first controls advanced quantum hardware. In his essay Against Allowing Quantum Recovery of Bitcoin, he said a defensive soft fork should not be framed as confiscation. He described it instead as burning the funds, placing them out of reach of everyone.
That approach would likely require a soft fork that makes vulnerable outputs unspendable unless they are moved to upgraded quantum-resistant addresses before a deadline. It would be a significant rule change, and one that would require broad social consensus across the Bitcoin network.
Another camp still prefers a narrower path: upgrade Bitcoin’s cryptography and let users voluntarily migrate to quantum-resistant signatures, rather than rewriting ownership conditions at the base protocol level. The dispute remains unresolved, but the dividing line is now clear. If quantum risk shifts from theory to real capability, Bitcoin will face a direct choice between neutrality, immutability, and preemptive defense.