New Bitcoin Quantum Proposal Offers Satoshi Nakamoto a Way to Prove Control without Moving BTC

Why It Matters

PACTs could preserve billions in dormant Bitcoin, including Satoshi’s estimated $84 billion, while avoiding a hard freeze that would violate property rights. Their success depends on community consensus for additional soft forks and infrastructure changes.

Key Takeaways

• Paradigm proposes PACTs to timestamp Bitcoin ownership privately.
• PACTs use BIP‑322 signatures and OpenTimestamps for on‑chain commitments.
• Rescue requires future STARK verification soft fork and new infrastructure.
• Solution avoids public exposure but cannot help absent original key holder.
• Addresses gap in BIP‑361 for pre‑BIP‑32 wallets like Satoshi’s.

Pulse Analysis

The looming threat of quantum computers has reignited debate over Bitcoin’s legacy address formats, which expose roughly 1.1 million BTC—about $84 billion—to potential future attacks. Existing proposals, such as BIP‑361, suggest a five‑year phase‑out and a hard freeze for un‑migrated funds, forcing even dormant holders like Satoshi Nakamoto to reveal themselves or lose access. While technically sound, that approach pits security against the principle of immutable ownership, prompting the search for a less disruptive solution.

Paradigm’s Provable Address‑Control Timestamps (PACTs) aim to bridge that divide. By generating a random salt and signing a message with BIP‑322, a holder creates a cryptographic commitment that is anchored to the blockchain via OpenTimestamps. The commitment remains private until the owner decides to spend, at which point a STARK zero‑knowledge proof—secure against quantum attacks—demonstrates the timestamp predates any quantum capability. This design preserves anonymity, protects the value of dormant coins, and fills a gap in BIP‑361 by covering pre‑BIP‑32 wallets, including those attributed to Satoshi.

However, PACTs are not a silver bullet. Implementing the required STARK verification demands a separate soft fork, extensive multisig and scripting upgrades, and broad hardware‑wallet support—collectively described as “substantial new plumbing.” Moreover, the system only works if the original key holder creates the commitment; if Satoshi’s keys are lost, the coins remain vulnerable. The proposal therefore adds nuance to the quantum‑risk conversation, offering a potential rescue path while highlighting the trade‑offs between technical feasibility, community consensus, and the preservation of dormant property rights.