CZ: If Satoshi-Era Addresses Remain Dormant After a Bitcoin Post-Quantum Upgrade, They Should Be Frozen
CZ: If Satoshi-Era Addresses Remain Dormant After a Bitcoin Post-Quantum Upgrade, They Should Be Frozen
Quantum computing has gone from a sci-fi talking point to a real governance stress test for Bitcoin. In a recent conversation on Galaxy’s Galaxy Brains podcast, Binance founder Changpeng Zhao (CZ) argued that the “do nothing” path is the worst possible outcome—especially when it comes to long-dormant coins widely associated with Satoshi Nakamoto.
His most provocative idea is simple: if Bitcoin ever migrates to a post-quantum cryptographic scheme, the community could offer a clear 6–12 month window for coins to move. If Satoshi-linked coins still don’t move after that window, CZ suggests that the new rules should freeze those addresses, effectively removing roughly one million BTC from circulation rather than leaving them as a prize for the first entity capable of quantum key extraction.
That proposal sits at the intersection of cryptography, game theory, and Bitcoin’s social contract. Let’s unpack what’s at stake—and what practical steps users should consider today.
Why quantum is a Bitcoin problem (but not an unsolvable one)
Bitcoin’s core security assumption is that spending requires a valid digital signature under widely used public-key cryptography. A sufficiently capable quantum computer running Shor’s algorithm could threaten certain signature schemes by deriving private keys from exposed public keys—turning “unspendable without keys” into “spendable by whoever has the most compute.”
Two nuances matter:
- Not all BTC is equally exposed. Coins sitting in outputs where public keys are already on-chain (for example, certain early-era constructions or address reuse patterns) are more exposed than coins whose public keys remain hidden until spending.
- The fix is mostly about coordination, not invention. Post-quantum cryptography is an active field with standardized candidates already available, such as NIST’s finalized post-quantum cryptography standards. The hard part for Bitcoin is aligning wallets, exchanges, miners, nodes, and custody providers on when and how to switch.
This framing aligns with ongoing industry research: Galaxy’s overview, “Bitcoin Is Rising to the Challenge of Quantum Readiness,” emphasizes that the bigger constraint is ecosystem coordination and migration, not a lack of cryptographic tools.
The real fight: upgrade mechanics and social consensus
Bitcoin upgrades are rarely just technical. They are legitimacy events.
Over the past year, the post-quantum discussion has matured from abstract threat modeling into concrete migration proposals. One example is the draft proposal BIP-361: “Post Quantum Migration and Legacy Signature Sunset”, which outlines a staged approach to transitioning away from legacy signature assumptions and handling coins that do not migrate.
Meanwhile, alternative approaches try to reduce the need for “move coins or lose access” deadlines. For instance, CoinDesk reported on PACTs (Provable Address-Control Timestamps), which aim to let owners prove control without immediately moving funds—an idea motivated partly by the sensitivity around dormant or institutionally held coins.
This is the context in which CZ’s proposal lands: he’s not claiming quantum resistance is impossible; he’s saying that indecision creates a perverse incentive where the “winner” of the quantum race gets to claim abandoned or inactive funds.
CZ’s Satoshi-coin argument: remove the jackpot, avoid a chaotic redistribution
CZ’s core claim is a game-theoretic one:
- If Bitcoin upgrades and old vulnerable coins remain spendable forever, then a future quantum-capable attacker can selectively target the largest exposed pools first.
- Among the most discussed pools are coins believed to be connected to Satoshi Nakamoto—often estimated at around ~1 million BTC, and notable for being dormant for more than a decade (the exact mapping is debated, and any estimate should be treated carefully).
From CZ’s perspective, letting those coins sit indefinitely after a post-quantum transition is effectively assigning them to “whoever breaks them first.” That is not “neutral”—it’s an implicit redistribution mechanism based on brute force.
So he proposes a more explicit rule:
- Fork or upgrade to a post-quantum scheme
- Announce a migration window (6–12 months)
- If Satoshi-era coins don’t move, freeze them under the new rules
- Remove them from circulating supply rather than leaving them as a prize
The political subtext is important: CZ also frames this as something that should be decided through community consensus mechanisms—signaling, debate, and ultimately broad agreement—because any outcome touches Bitcoin’s perceived immutability and property rights.
The uncomfortable questions CZ’s proposal forces Bitcoin to answer
Even if you agree with the threat model, the “freeze” solution raises hard problems:
1) Is freezing dormant coins compatible with Bitcoin’s property-rights ethos?
Many Bitcoiners argue that control of keys is the only ownership proof that matters. Freezing coins—especially because they are dormant—can be seen as a precedent that weakens Bitcoin’s credibility as
