On April 9, 2026, StarkWare Chief Product Officer Avihu Levy published a scheme called QSB (Quantum-Safe Bitcoin) that enables quantum-resistant Bitcoin transactions using only existing protocol rules — no consensus changes or soft fork required. The research is a genuine milestone in Bitcoin’s long-running quantum security debate, but it comes with a significant practical limitation: each transaction costs $75 to $200 in off-chain GPU computation.
What Happened
Levy’s QSB scheme was published on April 9, 2026, and quickly drew endorsement from StarkWare co-founder Eli Ben-Sasson, who stated that Bitcoin can be quantum-safe immediately using this approach.
The core insight is that QSB builds its security foundation on RIPEMD-160, a hash function already embedded in Bitcoin’s existing protocol. Rather than creating new signature algorithms that would require a protocol upgrade, the scheme uses Bitcoin’s existing scripting capabilities to construct transactions that are resistant to quantum attacks.
Quantum computers threaten Bitcoin primarily through their ability to efficiently solve the discrete logarithm problem, which underlies Bitcoin’s elliptic curve cryptography (ECDSA). The QSB scheme avoids this vulnerability by using hash-based security instead. The recommended configuration achieves approximately 118-bit pre-image resistance, and an attacker using Grover’s algorithm would face roughly 2^69 work — an astronomically large number even for near-term quantum hardware.
CoinDesk reported the cost per transaction at $75 to $200 in GPU compute, with the off-chain burden shifting from consensus to computation for every transaction.
What It Means for Traders
For most Bitcoin traders and holders, QSB is not a tool you’ll use tomorrow. At $200 per transaction, it’s economically viable only for very high-value transfers — institutional custody moves, whale consolidations, or cold storage migrations where the quantum-attack risk premium justifies the cost.
Bitcoin custodians and long-term institutional holders — particularly sovereign wealth funds and corporate treasuries now holding Bitcoin — face the hardest problem: they need to secure holdings that may remain on-chain for decades, and quantum computing timelines are genuinely uncertain. QSB gives them an option today rather than forcing them to wait for a speculative soft fork timeline.
The broader significance for Bitcoin’s valuation is the signal it sends about the network’s adaptability. One persistent bear case for Bitcoin relative to newer blockchains is that Ethereum and others can more easily upgrade their cryptographic primitives. QSB demonstrates that Bitcoin’s conservative design philosophy doesn’t leave it defenseless — workarounds exist within the current ruleset. As GPU costs fall over time, the per-transaction cost for QSB-style protection will also decline.
The Bigger Picture
The quantum computing threat to public-key cryptography is a genuine long-horizon risk across all of finance, not just Bitcoin. The U.S. NIST finalized its first post-quantum cryptographic standards in 2024, and institutions across banking, government, and defense are actively migrating systems.
Bitcoin’s challenge is unique because its governance model makes protocol-level changes slow and contentious by design. Any proposal to replace ECDSA with a post-quantum alternative would require community consensus that has historically been difficult to achieve. QSB’s approach — working within existing rules rather than requiring changes — sidesteps the hardest part of Bitcoin protocol evolution entirely.
QSB is a research breakthrough that proves Bitcoin can achieve quantum resistance today without a protocol upgrade. At $200 per transaction it’s a tool for institutions and large holders — but as compute costs fall, it becomes increasingly viable for the broader market. Watch for Bitcoin core developer discussions on incorporating similar cryptographic primitives more efficiently.
