The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Bitcoin could face a quantum threat if a sufficiently capable quantum computer can use Shor’s algorithm to recover private keys from exposed public keys. But block 950,000 is a historical chain-height marker, not a measurement of how many bitcoins were vulnerable: it was mined on May 18, 2026, at 21:54:29 UTC, and no exposure count for that exact block is established here. The block explorer records its timestamp.
What does block 950,000 tell us about Bitcoin’s quantum exposure?
It identifies a point in Bitcoin’s transaction history. The explorer’s timestamp places block 950,000 on May 18, 2026, at 21:54:29 UTC. The height does not mark a quantum-computing breakthrough, a Bitcoin protocol change, or a verified snapshot of exposed coins.
As an Amazon Associate I earn from qualifying purchases.
There is no independently calculated exposure total for that exact block in the available sources. A separate estimate in the BIP-361 draft says that, as of March 1, 2026, its authors estimated that over 34% of all bitcoin had revealed a public key on-chain. That is the proposal authors’ estimate for that date—not a block-950,000 calculation—and its methodology is not independently verified here. BIP-361
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsHow could a quantum computer threaten Bitcoin?
The main concern is not that a quantum computer would simply “break Bitcoin.” Bitcoin uses elliptic-curve signatures, and a sufficiently capable quantum computer running Shor’s algorithm could solve the underlying discrete-logarithm problem to derive a private key from its public key. The existence and timing of a machine capable of doing this at the required scale remain uncertain; the cited proposals do not establish a date for such a capability.
#1 Best Overall
- BITCOIN EXCLUSIVE, PHONE VERIFICATION: Bitkey is designed from the ground up exclusively for bitcoin — a dedicated hardware wallet for secure bitcoin storage. Approve transactions with a tap using your phone and NFC. No device screen is required.
- SELF-CUSTODY, NO EXCHANGE OR CUSTODIAN REQUIRED: You hold two of the three keys in the Bitkey system – one on your phone and one on your Bitkey device. The third is stored on Bitkey’s server and cannot move your bitcoin on its own.
- NO SEED PHRASE: Set up and use Bitkey without creating or storing a seed phrase.
- 2-of-3 MULTISIG: Three keys are stored separately across your phone, Bitkey device, and Bitkey’s server. Any two keys are required to move your bitcoin.
- BUILT-IN RECOVERY: Encrypted backup and recovery tools can help you regain access if you lose your phone or Bitkey device. You can also designate a Recovery Contact.
Long exposure: a public key is already visible
If a public key is exposed on-chain and remains exposed, an attacker could in principle have time to attempt key recovery before the funds move. This is the long-exposure threat described in BIP-360.
Short exposure: a public key appears during a pending spend
Some outputs reveal the public key when spent. Once a spending transaction is broadcast, its public key can be visible while the transaction waits for confirmation. Attacking in that mempool interval would require key recovery quickly enough to act before confirmation; this is a distinct, short-exposure scenario.
Rank #2
- Unparalleled Security: Protect your assets NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Rest assured with Multi-share Backup, eliminating single points of failure for secure cold wallet recovery
Which Bitcoin outputs are more exposed?
Exposure depends on the output type and its history, so it is inaccurate to say that every bitcoin—or every address—is equally vulnerable right now.
- Taproot (P2TR) outputs: their public key is exposed in the output, creating the long-exposure concern discussed in BIP-360.
- Outputs that hash a public key: the key is not exposed in the same way in the output itself, but may become visible when the output is spent. Reusing a key or address can also leave a key exposed after an earlier spend.
An address label alone is not enough to make a categorical safety judgment: the output type, whether it has been spent, and whether its key has been reused all matter. BIP-360 discusses these exposure distinctions. Read the proposal.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
What do BIP-360 and BIP-361 propose?
They address different parts of the problem. BIP-360 proposes an output design aimed at reducing long exposure; BIP-361 proposes a staged migration away from legacy signatures. The BIPs index labels both as drafts—BIP-361 as draft informational—and cautions that listing a BIP does not establish adoption, community consensus, or endorsement. Neither proposal is evidence that its changes are active Bitcoin policy. Bitcoin BIPs index
| Proposal | Approach | Coverage and limits | Status and proposed timing |
|---|---|---|---|
| BIP-360 | Proposes Pay-to-Merkle-Root (P2MR), removing Taproot’s key-path spend and leaving a script-tree output. | Intended as a first step against long-exposure attacks. By itself, it does not prevent a short-exposure attack during the unconfirmed mempool interval; broader protection may require post-quantum signature schemes. | Draft, not established as active policy. The proposal is not a deployed protection. |
| BIP-361 | Proposes staged migration: first allow sends from legacy scripts to post-quantum scripts, then tighten ECDSA/Schnorr verification requirements. | A broader ecosystem transition that would require holders and services to migrate funds and adjust legacy-signature acceptance. | Draft informational. Its illustrative schedule places Phase A 160,000 blocks after hypothetical activation and Phase B two years after Phase A; these are proposed intervals, not current calendar deadlines. |
BIP-360’s authors describe the uncertainty this way: “While it is unclear when or if CRQCs will become viable in the future, we propose the addition of a quantum-resistant, script tree output type for those interested in this level of protection.” BIP-360 rationale
Rank #4
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
What should Bitcoin holders do now?
There is no established “Q-day” date in these sources, and the proposals are not currently a reason to treat ordinary wallet actions as a confirmed emergency. Practical steps are to:
- Keep wallet software current and follow official proposal updates and wallet release notes for any future migration instructions.
- Before acting on a claim that a particular address is safe, establish its output type and spending/reuse history rather than relying on the address format alone.
- Do not assume a hardware wallet fixes protocol-level exposure: the relevant risk is the signature scheme and the public key’s exposure, not simply where a private key is stored.
Do NIST’s post-quantum standards mean Bitcoin is quantum-resistant?
No. The National Institute of Standards and Technology (NIST) has released three finalized post-quantum cryptography standards and recommends that organizations begin migrating systems to quantum-resistant cryptography. That is guidance for cryptographic migration generally; it does not mean Bitcoin has adopted those standards or that Bitcoin transactions currently use them. NIST’s post-quantum cryptography program
Quick Recap
Best Value
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
