Bitcoin Changes Only by Consensus

BIP-110 tried to force a change and the network refused it. Quantum resistance will arrive the way every real upgrade does, by consensus, when the time comes. No business and no institution gets a vote.

AnalysisBlock · 962,03413 min read

This is analysis. It interprets events and their context, and it is not financial advice.

Two proposals arrived on Bitcoin roughly a year apart, and they have nothing technical in common. One, BIP-110, tried to harden the network against "spam" by changing a consensus rule. The other, BIP-360, introduces a new address type designed to survive a future quantum computer. One was refused by the network and collapsed within hours of its activation point. The other is being built, tested, and funded. Different problem, different code, different fate.

That is exactly why they belong side by side. When two changes share no engineering DNA and only one survives, the deciding factor cannot be the engineering. It is the one thing they have in common, and the only thing they have in common. Each is an attempt to change the rules that every Bitcoin user runs. Looked at together, they work almost like a controlled experiment. Hold the machinery of change constant, vary everything else, and watch what actually determines the outcome. The answer is consensus, and it tells you exactly how quantum resistance will arrive too. Not by decree, and not on a schedule anyone imposes, but naturally, when the network is ready.

How Bitcoin actually changes

Start with the mechanism, because most people picture it wrong. It is easy to assume miners decide, since they signal for upgrades. They do not. Miners schedule and coordinate. The people who run economic nodes, the exchanges, the businesses, and the individuals who validate their own transactions, are the ones who choose which rules to enforce. A change becomes real only when that economic majority adopts it and keeps running it.

The clearest proof is the fight over SegWit in 2017. Miners stalled the upgrade for months. Users answered with a user activated soft fork, a flag day on which their nodes would simply reject any block that did not signal support. Faced with producing blocks the network would discard, the miners fell in line, and SegWit activated. Taproot in 2021 showed the calm version of the same rule. It had broad agreement across developers, miners, and businesses before it ever activated, so a short signaling window called Speedy Trial was enough. It locked in at block 709,632 with almost no drama. Wide consensus first, activation second. That order is not a formality. It is the whole game.

Notice who was absent from the deciding moment in both cases. Not a company, not a foundation, not a standards body. There is no board that can approve a change to Bitcoin and no institution that can veto one. The rule is enforced by whoever runs a node, which means the only way to change Bitcoin is to persuade the people who use it. This is the part that businesses and organizations keep having to relearn. Capital does not come with extra votes, a large balance sheet does not move a consensus rule, and no amount of corporate weight substitutes for the agreement of the users. Every attempt to impose a change from the top hits the same wall. For the machinery of a contested split, see our analysis in BIP-110 explained. For who actually secures the network, see the role of miners.

The failure case: change without consensus

BIP-110 is what happens when you try to skip that order. Its backers wanted to force an anti-spam rule through a low signaling threshold and a mechanism they called mandatory signaling, without ever securing the economic majority that has to enforce a rule for it to mean anything. Miner support sat in the low single digits, and part of even that was likely rented hash rate rather than committed operators.

At the activation point the chain briefly split. Then the minority chain starved. Blocks that should arrive every ten minutes came hours apart, and soon barely at all. Within a day the effort was abandoned. No economic weight ever stood behind it, so there was nothing to enforce and nothing to sustain. You cannot decree a change that Bitcoin's users do not want. The market does not need to ban a bad rule. It simply declines to run it, and the rule dies of neglect.

The opposite starting point: a change people actually want

Now take the quantum case, which begins from the reverse position. Here the demand is real and widely shared, not manufactured by a handful of developers.

In March 2026, Google's Quantum AI team published research estimating that breaking the elliptic curve cryptography behind Bitcoin could take around twenty times fewer resources than a widely cited 2019 estimate, on the order of fewer than 500,000 physical qubits. Its authors include not only Google researchers but Dan Boneh of Stanford and Justin Drake of the Ethereum Foundation, which is worth noting because it is not a hype shop. Drake put a rough figure on the risk of at least a ten percent chance that a quantum computer could recover a private key from an exposed public key by 2032.

An honest reading holds two facts at once. The direction of travel is real, and the timeline is not here. No machine today can break Bitcoin, and the gap between current hardware and the requirement is still enormous. The often quoted figure that a "primed" quantum computer could derive a key in about nine minutes describes a fault tolerant machine that does not exist, and it has been widely misread as a present danger. It is not one. What is true is that the threat is now concrete enough that preparation has sensibly begun.

And unlike BIP-110, the preparation already has a tool. BIP-360, published in February 2026, adds a quantum resistant output type that works much like a Taproot output but replaces the element a quantum computer could exploit with a post quantum signature scheme drawn from the approved NIST algorithms. By the logic of the SegWit and Taproot precedents, this is the kind of change that arrives without a fight, because almost everyone wants their own coins to stay safe. Nobody has to be talked into wanting security. When the need becomes real, the consensus is already latent, waiting to form.

The one question still open

There is a single genuinely open question inside the quantum move, and it is worth naming honestly rather than glossing over.

Roughly six to seven million Bitcoin, close to a third of the supply, sit in outputs whose public keys are already visible on the chain. Analysts split this into two buckets. Around 1.9 million are structurally exposed in old pay to public key outputs, the format Satoshi's mining rewards used. Another four million or so are exposed through address reuse. Satoshi's own estimated 1.1 million Bitcoin sit squarely in the first bucket. A future quantum computer capable of the attack could, in principle, take any coin whose owner does not move it to a safe address first.

So a companion proposal, BIP-361, asks what to do about coins that never migrate. Should the protocol require them to move, and if they never do, should it freeze them to keep them out of an attacker's hands? Both answers have a real case. Freezing prevents a scenario where an adversary sweeps millions of long dormant coins and shocks the network. Leaving them alone honors the deepest promise Bitcoin makes, that no one can seize your coins by decree, which is not a promise a network abandons lightly. Reasonable people who agree on everything else land on opposite sides of this one.

That is not a crisis. It is exactly the kind of question consensus exists to settle, and it will be settled the way Bitcoin settles everything, when enough of the network converges on an answer. No deadline is being missed, because the threat is not here yet, and no committee has to force the issue. When the time comes, the resolution will emerge the same way SegWit and Taproot did, out of broad agreement rather than a top down ruling. The need will be near universal, and that is precisely the condition under which Bitcoin changes smoothly.

Why Wall Street should want this before it needs it

There is a second effect worth drawing out, and it runs opposite to how quantum is usually discussed. A visible, credible path to quantum safety is a selling point for large allocators, even while no quantum computer can threaten anything.

Years of fearmongering have planted a specific worry in institutional minds, that Bitcoin carries an expiry date written into its cryptography, and that the day quantum computers mature the asset simply goes to zero. It is one of the most common objections raised in a boardroom, and it keeps otherwise interested capital on the sidelines. The worry is misplaced, because cryptography is a component and components can be upgraded. BIP-360 is the proof on the table. A network that has already designed its quantum successor is a network that has answered the objection in advance.

For an allocator sizing a position for the next decade, that changes the shape of the risk. The difference between an asset believed to have a built in ceiling and one without is not a technical footnote. It is a reason to be in at all. As the quantum-resistant path becomes more concrete and better understood, one of the last respectable reasons to dismiss Bitcoin loses its force. None of this is a claim about price. It is a claim about which objections survive contact with the facts, and this one does not.

The natural mechanism, caught in the act

The most useful thing to watch right now is not a cryptographer. It is how the largest holders in Bitcoin are behaving, because it shows the point of this whole piece proving itself in real time.

In July 2026, nine of the biggest institutions in the space, among them BlackRock, Strategy, Coinbase, Fidelity, ARK Invest, Block, Blockstream, Galaxy, and Anchorage, pledged fifteen million Dollar over three years to fund Bitcoin security research, with post quantum work first in line. The striking part is not the money. It is what they went out of their way to refuse. There is no shared war chest, because each firm funds developers independently. The group takes no position on any protocol change, does not speak for Bitcoin, and does not steer development. The coordinator, Mike Schmidt of the developer funding nonprofit Brink, framed the goal as a counterweight to quantum panic in both directions, neither doom nor denial.

Even Michael Saylor, whose company holds more Bitcoin than anyone, illustrates the constraint. Late in 2025 he floated freezing lost coins in a quantum migration. He then walked it back to a different posture entirely, that it is not his company's place to advocate a specific solution or timeline, and that its role is to help a consensus form rather than to pick the answer. Whatever one thinks of the reversal, the direction of it is the tell. The biggest money in Bitcoin, when it decides to help, ties its own hands.

This is the proof restated in the plainest possible form. Here are nine of the most powerful financial institutions on earth, gathered specifically around Bitcoin's security, and the first thing they establish is that they cannot and will not decide anything about the protocol. They can fund the people doing the work. They cannot buy the outcome. The Blocksize War is the reminder that this holds even when large actors do push. Back then a major exchange backed bigger blocks, and the users overrode the big players anyway. Businesses can support Bitcoin. They cannot direct it.

What actually decides it

Strip the two cases down and the same variable is left standing in both. Not technical merit, since BIP-360 is sound engineering and BIP-110 was not obviously worthless to its backers. Not urgency, since the quantum clock is louder than any spam complaint ever was. Not money, since the richest holders are the ones disclaiming control. What decides change on Bitcoin is whether the economic majority freely converges. Everything else is noise.

BIP-110 never had that convergence and tried to substitute force, so it died. Quantum resistance will have it, because the need is one almost every holder shares, and so it will arrive on its own schedule, when the network is ready and not a moment before. That is not a weakness to be engineered around. It is the entire point of a money that no company, no government, and no consortium can change from above.

Where the argument stops

An honest analysis marks its limits. This is not a prediction that quantum computing arrives on any particular date, and the hardware gap today is still vast. The debate over what to do with exposed coins is real and not yet settled, and the consortium's restraint is a promise worth watching rather than trusting. What is not in doubt is the mechanism. Bitcoin changes when its users agree, and not before. It refused BIP-110 on those terms, and it will adopt quantum resistance on those same terms, naturally, when the time has come.

Frequently Asked Questions

No. No existing quantum computer can break the cryptography that protects Bitcoin, and the gap between current hardware and what an attack would require is still very large. The 2026 research that drew attention lowered the estimated resources for a future attack and modeled what a fault tolerant machine could eventually do. It did not describe a capability that exists now. The concern is a multi year preparation problem, not a present emergency.

No. The cryptography is a component, and components can be upgraded. Bitcoin has changed its rules before, and BIP-360 already defines a quantum-resistant address type that spends with post quantum signatures. The moment a real threat approaches, coins can move to safe addresses. An asset with a working migration path does not expire when one algorithm ages out.

No, and it explicitly disclaims that role. Its members fund developers independently, take no position on protocol changes, and do not speak for Bitcoin. Funding research is not the same as deciding consensus, which is enforced by everyone who runs a node. History supports the distinction. When large players have tried to push protocol outcomes before, the wider set of users has overridden them.

Sources

  1. 1.Primary source: Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities (Google Quantum AI, March 2026)
  2. 2.Google Research on responsible disclosure of the quantum vulnerability
  3. 3.BIP-360, the quantum-resistant output type
  4. 4.Bitcoin Security Consortium launch, Strategy press release
  5. 5.Taproot activation via Speedy Trial at block 709,632
  6. 6.Exposed public keys and the P2PK versus address-reuse split