- Quantum-safe Bitcoin transaction mined on mainnet without consensus changes.
- QSB enables quantum-resistant Bitcoin transactions on mainnet without a soft fork.
- High GPU costs and nonstandard transactions continue to limit QSB adoption.
A Bitcoin transaction designed to withstand a quantum-computing attack has been mined on mainnet without changing the network’s consensus rules. The transaction used Quantum-Safe Bitcoin (QSB), developed by Avihu Levy, head of StarkWare’s applications division, in collaboration with StarkWare engineer Tomer Giladi, and mined through MARA Foundation’s Slipstream service.
Levy’s QSB layout builds on BINOHASH and replaces a non-quantum-safe component with a hash-to-signature puzzle based on RIPEMD-160 pre-image resistance. The paper estimates about 118 bits of second-preimage resistance under its Shor threat model, with lower effective security under Grover’s algorithm.
The construction works within Bitcoin’s existing script limits and does not require a soft fork. Instead, the sender performs computational work offchain to find a spending transaction whose hash satisfies Bitcoin’s signature-format requirements. The transaction then depends on hash security rather than only elliptic-curve signatures.
However, the process remains costly. Levy estimated offchain GPU expenses at several hundred dollars per transaction. QSB transactions are also nonstandard, meaning they do not move through Bitcoin’s ordinary mempool and currently require a direct mining route.
The method does not protect every Bitcoin output. He cited roughly 1.7 million BTC held in P2PK outputs, as well as addresses with exposed public keys, as cases that cannot be protected by a no-fork scheme once exposed.
He said P2PK holders could theoretically move funds into QSB before a quantum attack, while higher-security modes may be possible at greater cost. He also described the design as a research prototype.
(adsbygoogle = window.adsbygoogle || []).push({});Section 1.3 of Levy’s paper calls QSB a “last-resort measure.” It says the approach does not yet scale across Bitcoin’s users, transaction values, and throughput, while also creating a more complex user experience.
The scheme also does not currently cover Lightning Network channels. The paper concludes that Bitcoin still needs research into a more efficient, user-friendly, quantum-resistant design implemented through protocol-level changes.
