Bitcoin's Quantum Reckoning: Adam Back Says Post-Quantum Migration Could Expose Satoshi's True Holding Size

At Paris Blockchain Week this week, Blockstream CEO Adam Back made a compelling case that Bitcoin's inevitable shift to post-quantum cryptography will inadvertently solve one of crypto's biggest mysteries: exactly how much Bitcoin Satoshi Nakamoto still controls.

Here's the reasoning: when Bitcoin developers push through a post-quantum migration, any holder with vulnerable coins will face a hard choice—move them to quantum-resistant addresses or risk losing them forever. The coins that remain unmoved? Those can reasonably be written off as genuinely lost. That means Satoshi's actual accessible stash will become clear.

Back estimates Satoshi holds between 500,000 to 1 million BTC. Data platform Arkham puts the number even higher, suggesting Nakamoto-linked wallets hold approximately 1.09 million Bitcoin—currently worth $81.6 billion. The debate matters because this represents one of the largest cryptocurrency holdings on the network, and its potential movement could dramatically impact market sentiment and Bitcoin's price action.

The quantum computing threat to Bitcoin isn't immediate, though. Back emphasized that Bitcoin developers and holders have a substantial runway—he pegs the realistic threat window at least 20 years out. Current quantum computers are "less powerful than a $5 calculator," he noted, and their limitations actually become more problematic as they scale, particularly around energy consumption. This timeline gives the crypto community plenty of runway to develop robust solutions before quantum-capable systems threaten Bitcoin's signature schemes.

On the technical front, Back and his team at Blockstream Research released a research paper in December 2025 outlining hash-based signature schemes as a promising path for securing Bitcoin in a post-quantum world. The proposal replaces the current ECDSA and Schnorr signatures with quantum-resistant alternatives that rely on hash function assumptions—the same foundational cryptography Bitcoin already uses for its core network design.

This approach differs from current signature methods: ECDSA uses elliptic-curve cryptography to verify message authenticity, while Schnorr signatures enhance privacy and reduce data size by combining multiple signatures into one. Hash-based alternatives would shore up Bitcoin against quantum threats while maintaining the network's existing security philosophy.

The timing of Back's comments follows a heated debate in the Bitcoin community. On Wednesday, Jameson Lopp and five co-authors published a Bitcoin Improvement Proposal (BIP) aimed at restricting future movement of coins held in quantum-vulnerable address formats—including older coins whose public keys have already been exposed. This proposal underscores growing concern about the quantum threat among core Bitcoin developers and holders.

Recent analysis from Bernstein suggests the bitcoin market has already priced in quantum computing risks, meaning traders aren't expecting sudden panic when breakthroughs arrive. Still, getting ahead of this threat remains crucial for Bitcoin's long-term security posture and institutional confidence in the network.