BitMEX Research has proposed a conditional “canary fund” that would only trigger a network-wide freeze of older Bitcoin wallets if a quantum computer is proven to have successfully stolen funds.
BitMEX Research published the alternative strategy on Thursday, arguing that any drastic protocol changes should wait until a tangible threat materializes. The idea centers on a “canary watch state” that uses a specialized bounty address to act as an early warning system.
By placing Bitcoin into an address where the private key is mathematically unknown but the address remains valid, the community would effectively dare any quantum-capable actor to claim the prize.
If those funds are ever moved, it would serve as public proof that quantum decryption is no longer a theory, automatically activating a soft fork to protect the rest of the network.
A reactive shield for legacy coins
The proposal seeks to avoid the immediate restrictions suggested by other recent development plans. Under the BitMEX framework, users with older wallets could continue to transact normally as long as the canary fund remains untouched.
This approach introduces a “safety window” where transactions from vulnerable addresses would be subject to temporary locks, providing a buffer that makes stealth attacks more difficult.
Supporters of this method note that contributors to the bounty fund would maintain control over their assets, with the ability to withdraw their BTC via multisignature protocols at any time.
BitMEX researchers noted that while their system adds technical layers to the network, the controversial nature of freezing assets makes a more measured response necessary.
“Mitigating the impact of the freeze using this type of system may be worth consideration,” the proposal stated, framing the design as a way to ring the alarm only when a breach is confirmed.
The conflict with BIP-361 deadlines
The BitMEX alternative arrives as a direct response to BIP-361, a draft plan titled “Post Quantum Migration and Legacy Signature Sunset.”
The proposal, introduced earlier this week, outlines a stricter three-stage rollout that would eventually invalidate legacy signature schemes entirely. BIP-361 would begin blocking new deposits into older addresses within three years, followed by a total freeze of all unmigrated funds after five years.
Some critics have characterized the BIP-361 approach as authoritarian, pointing out that no previous Bitcoin upgrade has attempted to revoke access to coins that have remained untouched by their owners.
Jameson Lopp, a co-author of BIP-361, has acknowledged the community’s unease regarding the mandatory deadlines.
“I know folks don’t like it. I don’t like it myself. I wrote it because I like the alternative even less,” Lopp wrote.
Navigating the quantum timeline
The debate is fueled by data indicating that approximately 34% of the Bitcoin supply is stored in addresses that have already exposed a public key on-chain. These funds, including those attributed to Satoshi Nakamoto, are theoretically vulnerable to a “Q-Day” event where a quantum processor could derive private keys from public data.
While the exact timing of such a breakthrough is unknown, the risk is becoming a practical priority for the tech industry.
Google has recently shared research suggesting a 20-fold reduction in the resources needed to break modern encryption, setting its own migration timeline for 2029.
The BitMEX proposal attempts to bridge the gap between this looming technological shift and Bitcoin’s commitment to property rights, offering a way to upgrade the network’s defenses without prematurely locking out holders.
