A research benchmark reportedly estimates that making a Bitcoin transaction quantum-safe could cost 82% less than earlier projections suggested. The finding, attributed to a study called the Yukon benchmark, has not been independently verified, but it arrives as new data shows a growing share of Bitcoin is sitting in a position that a powerful quantum computer could theoretically exploit.
According to a single source that could not be independently verified at publication time, the Yukon research benchmark estimated an 82% reduction in the cost of a quantum-safe Bitcoin transaction compared to a prior baseline. The specific cryptographic scheme, transaction model, and fee assumptions behind that figure have not been confirmed from a publicly accessible research paper or official release. Treat the 82% figure as an unconfirmed report until the underlying methodology is auditable. For related coverage, see Bitcoin and Gold ETFs Drew $7 Billion in 5 U.S. Trading Sessions.
Why Quantum-Safe Transactions Have a Cost Problem
Bitcoin currently uses a signature scheme called ECDSA (Elliptic Curve Digital Signature Algorithm) to prove ownership when spending funds. As Bitcoin Optech explains, ECDSA public keys are vulnerable to Shor’s algorithm on a sufficiently capable quantum computer, meaning a future quantum machine could derive a private key from a public key and steal funds. For related coverage, see US Wallet Moves Alameda Bitcoin, Raising Reserve Questions.
Switching to a quantum-resistant alternative is not free. CoinDesk’s coverage of a Europol warning reported that new post-quantum signature schemes can be 10 to 120 times larger than Bitcoin’s current ECDSA signatures. Larger signatures mean larger transactions, which means higher fees on a network where block space is limited.
That size difference directly affects what it would cost to migrate Bitcoin transactions to a quantum-resistant format. A benchmark that tests a specific post-quantum scheme against a specific transaction template can produce a cost estimate, but the result is only as reliable as its assumptions about signature size, block weight, and network fee rates at the time of migration.
In August 2024, NIST finalized three post-quantum cryptography standards: FIPS 203 for general encryption, and FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) for digital signatures. NIST said the standards are ready for immediate use and encouraged early adoption because integration takes time. None of these standards prescribe a specific Bitcoin migration path or validate any particular transaction-cost benchmark.
How Much Bitcoin Is Actually at Risk
The exposure question is separate from the cost question, and the numbers here are verified. CoinDesk reported, citing Glassnode data, that approximately 6.9 million BTC sat behind already-visible public keys, equal to 31.2% of circulating supply. A visible public key is one that has already been used to sign a transaction, making it readable on the blockchain.
The same CoinDesk report noted that exposed supply had grown by 222,000 BTC since Glassnode’s May report, even as total Bitcoin supply increased by only 64,000 BTC over the same period. Exchanges alone held 1.79 million BTC behind visible public keys. This matters because those funds are the ones most vulnerable to a quantum attack, not Bitcoin held in addresses whose public keys have never been broadcast.
An academic paper by Aggarwal et al. found Bitcoin’s proof-of-work mining process relatively resistant to near-term quantum speedups, but identified the elliptic-curve signature scheme as the more exposed component. That analysis reinforces why researchers are focused on signature costs rather than mining when modeling a quantum migration. Separately, a quantum-resistant Bitcoin transaction has already been demonstrated on mainnet without requiring a consensus rule change, and StarkWare executed a quantum-safe Bitcoin transaction on mainnet, showing that prototype work is already underway at the implementation level.
What a Lower Cost Estimate Would Mean in Practice
If the Yukon benchmark’s reported 82% reduction holds up under scrutiny, it would mean quantum-safe transactions could become practical at closer to current fee levels. That matters for the feasibility of any future migration proposal, since a scheme that multiplied transaction costs by ten or more would face serious resistance from users, developers, and miners.
But a benchmark is not a deployment. The remaining questions include whether the result is reproducible, whether the underlying post-quantum scheme has passed a full security review, how it interacts with Bitcoin’s existing script and witness formats, and how any migration would be governed and rolled out. Bitcoin Improvement Proposal 361 has already proposed protections for vulnerable wallets, illustrating that the governance process for addressing quantum risk is active but not resolved.
For anyone holding Bitcoin today, the practical takeaway is that no quantum computer currently capable of breaking ECDSA exists, and researchers are actively working on making any future migration as affordable as possible. The cost of protection is the open question; the Yukon benchmark, if confirmed, would be meaningful progress on that question.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
