Galaxy Invests $5 Million to Prepare for Bitcoin Quantum Threat: Signature Upgrade Takes Years, Coordination Is the Biggest Challenge

Author: CryptoSlate

Compiled by: TechFlow

TechFlow Editor's Note: Quantum computers cannot crack Bitcoin today, but the real challenge lies in this: developers, miners, wallets, exchanges, custodians, and users need years to coordinate a defensive upgrade. Galaxy Digital's $5 million grant program attempts to drive this marathon-like migration before the threat becomes reality, but funding can only accelerate technical development and cannot replace the hardest part of Bitcoin's decentralized governance — getting the entire network to reach consensus and act in sync.

Galaxy Digital pledged on July 21 to invest up to $5 million to help Bitcoin prepare for the quantum era. The program will provide funding support when developers reach key milestones, while also funding research work and a quantum advisory committee.

Quantum computers currently cannot crack Bitcoin's signature security, but the program's goal is to start advancing migration work before this threat becomes reality.

The program targets multiple links in the transition chain: reviewing anti-quantum transaction proposals, integrating post-quantum signatures, formal security audits, and software and institutional migration tools.

Funding can accelerate these workflows, but Bitcoin's decentralized governance still requires developers, miners, node operators, wallets, exchanges, custodians, and users to coordinate an upgrade. Galaxy stated that the design, testing, and deployment of this upgrade may take several years.

There are two time windows for technical risks. A sufficiently powerful quantum computer can use Shor's algorithm to recover private keys from exposed elliptic curve public keys and forge valid signatures. Keys already visible on-chain leave attackers a long window of opportunity. Most Bitcoin expenditures also expose public keys when transactions wait to enter the mempool, creating a shorter window for faster attacks.

Bitcoin Encryption Won't Be Threatened by Quantum Computers, for a Simple Reason: It Actually Doesn't Exist

The BIP 360 draft points out that pay-to-public-key, bare multisig, and Taproot outputs are exposed long-term. Address reuse, extended public keys, and wallet descriptors may also expose vulnerable material. Hash-protected outputs hide public keys until spending or other disclosure occurs.

BIP 360 will add a new Pay-to-Merkle-Root output via a soft fork. This scheme, called P2MR, abandons Taproot's key path, limits long-term exposure, and leaves room for stronger signature schemes later.

The proposal is still a draft and only covers the first exposure window. Protecting transactions after keys appear in the mempool may require post-quantum signatures.

This "Quantum-Safe" Bitcoin Scheme Removes Taproot's Key Path — And Intentionally Increases Fees

This is where Galaxy's grant program can help transform research into audited code and migration tools, but funding cannot choose Bitcoin's final design or schedule its adoption timeline.

The second proposal, BIP 361, illustrates the scale of operations. This draft informational BIP relies on an unspecified post-quantum signature proposal and outlines a transition of approximately five years after activation, in two phases. Its timeline is just a scenario, not an adopted roadmap.

After selecting a design, the network still needs proposal and signature review, audits, wallet and node releases, institutional upgrades, and holder migration. Users need time to transfer funds into protected outputs while existing signatures can still be used safely. Each dependency makes a last-minute response more difficult.

Bitcoin's Quantum Migration Plan Forces Network to Choose Between Frozen and Stolen Coins

Broader cryptography projects have been working on multi-year timelines. NIST finalized three post-quantum standards in August 2024, including two digital signature standards, and urged early integration because migration takes time. Executive Order 14412 directs the Office of Management and Budget to require designated federal systems to use post-quantum signatures by December 31, 2031.

These federal rules only cover government systems and do not predict when quantum hardware will arrive. But they illustrate why Galaxy needs to start early. Bitcoin still needs a thoroughly reviewed signature design, broad community consensus, and enough time for users to transfer funds, so research and tools cannot wait until the threat is imminent to begin.