Shor's Algorithm, Meet Your Match: StarkWare's $150-per-TX 'Fix It Yourself' Quantum Bitcoin

StarkWare chief product officer Avihu Levy has dropped a quantum curveball on the Bitcoin community. His Quantum Safe Bitcoin (QSB) scheme could make transactions quantum-resistant right now — no soft fork required.

The catch? It'll run you between $75and $150 in GPU compute per transaction. That's right, degens. Your coffee purchase just became more expensive than your car payment.

In a proposal published Thursday, Levy explained that QSB swaps the standard elliptic curve digital signature algorithm for a hash-to-sig puzzle. Instead of relying on math that quantum computers can theoretically crack with Shor's algorithm, users must brute-force an input whose hash randomly resembles a valid ECDSA signature. Even a quantum computer can't cheat this process — but neither can regular users without serious hardware. It's like asking someone to find a specific grain of sand on a beach, except the beach is made of GPUs and your electricity bill is crying.

The scheme works within existing Bitcoin script constraints, meaning no protocol changes are needed. StarkWare CEO Eli Ben-Sasson called it "huge," claiming it essentially makes Bitcoin quantum-safe today. Move over, Nakamoto. We've got a new messiah in town, and he wants your compute budget.

Not everyone is convinced. Bitcoin ESG specialist Daniel Batten called it an "overstatement" since exposed public keys and dormant wallets — including an estimated 1.7 million BTC in early P2PK addresses — aren't addressed in the paper. Spoiler alert: those 1.7 million BTC aren't getting quantum-safe anytime soon, no matter how many GPUs you throw at the problem.

The proposal explicitly recommends treating QSB as a last-resort measure. It doesn't scale to all users, doesn't cover Lightning Network, and frankly, nobody's spending $150 in compute to buy a coffee. Unless that coffee comes with a golden toilet, in which case, DYOR.

Meanwhile, Google published a paper in March suggesting quantum computers could crack Bitcoin's cryptography with far fewer resources than previously thought. And Lightning Labs CTO Olaoluwa Osuntokun recently released a quantum "escape hatch" prototype that lets users prove wallet ownership from their seed phrase without revealing it. Because nothing says "secure future" like a backup plan for your backup plan.

Protocol-level changes remain the preferred long-term path forward. But in the meantime, if you've got $150 and a mining rig lying around, congratulations — you're now quantum-resistant. Everyone else, keep HODLing and praying to the math gods.