Key takeaways

• BIP-360 formally puts quantum resistance on Bitcoin’s road map for the first time. It represents a measured, incremental step rather than a dramatic cryptographic overhaul.

• Quantum risk primarily targets exposed public keys, not Bitcoin’s SHA-256 hashing, making public key exposure the central vulnerability developers aim to reduce.

• BIP-360 introduces Pay-to-Merkle-Root (P2MR), which removes Taproot’s key path spending option and forces all spends through script paths to minimize elliptic curve exposure.

• Smart contract flexibility remains intact, as P2MR still supports multisig, timelocks and complex custody structures via Tapscript Merkle trees.

Bitcoin was built to withstand hostile economic, political and technical scenarios. As of March 10, 2026, its developers are preparing to confront an emerging threat: quantum computing.

The recent publication of Bitcoin Improvement Proposal 360 (BIP-360) officially adds quantum resistance to Bitcoin’s long-term technical road map for the first time. While some headlines portray it as a dramatic shift, the reality is far more measured and incremental.

This article explores how BIP-360 introduces Pay-to-Merkle-Root (P2MR) to reduce Bitcoin’s quantum exposure by removing Taproot key path spending. It explains what the proposal improves, what trade-offs it introduces and why it does not yet make Bitcoin fully post-quantum secure.

Why quantum computing poses a risk to Bitcoin

For security, Bitcoin depends on cryptography, primarily the Elliptic Curve Digital Signature Algorithm (ECDSA) and Schnorr signatures introduced via Taproot. Regular computers cannot realistically derive a private key from a public key. However, a powerful quantum computer running Shor’s algorithm could break elliptic curve discrete logarithms, exposing those keys.

Key distinctions include:

• Quantum attacks hit public-key cryptography hardest, not hashing.

• Bitcoin’s SHA-256 remains relatively strong against quantum methods. Grover’s algorithm only provides a quadratic speedup, not an exponential one.

• The real risk appears when public keys become exposed on the blockchain.

This is why the community focuses on public key exposure as the primary quantum risk vector.

Bitcoin’s vulnerabilities in 2026

Not every address type in the Bitcoin network faces the same level of future quantum threat:

• Reused addresses: Spending reveals the public key onchain, leaving it exposed to a future cryptographically relevant quantum computer (CRQC).

• Legacy pay to public key (P2PK) outputs: Early Bitcoin transactions directly embedded public keys in transaction outputs.

• Taproot key path spends: Taproot (2021) offers two paths: a compact key path (which exposes a tweaked public key on spend) or a script path (which reveals scripts via a Merkle proof). The key path is the main theoretical weak point under a quantum attack.

BIP-360 directly targets that key path exposure.

What BIP-360 introduces: P2MR

BIP-360 adds a new output type, Pay-to-Merkle-Root (P2MR), modeled closely on Taproot but with one critical change. It removes the key path spending option entirely.

Instead of committing to an internal public key like Taproot, P2MR commits solely to the Merkle root of a script tree. To spend:

No public key based spending route exists at all.

Eliminating key path spends means:

• No public key exposure for direct signature checks.

• All spending routes rely on hash-based commitments.

• Long-term elliptic curve public key exposure drops sharply.

Hash-based methods are far more resilient to quantum attacks than elliptic curve assumptions. This significantly shrinks the attack surface.

What BIP-360 preserves

A common misconception is that dropping key path spending weakens smart contracts or scripting. It does not. P2MR fully supports:

• Multisig setups

• Timelocks

• Conditional payments

• Inheritance schemes

• Advanced custody

BIP-360 executes all these functions via Tapscript Merkle trees. While the process retains full scripting capability, the convenient but vulnerable direct signature shortcut disappears.

Did you know? Satoshi Nakamoto briefly acknowledged quantum computing in early forum discussions, suggesting that if it became practical, Bitcoin could migrate to stronger signature schemes. This shows that upgrade flexibility was always part of the design philosophy.

Practical implications of BIP-360

BIP-360 may sound like a purely technical refinement, but its impact would be felt at the wallet, exchange and custody levels. If activated, it would gradually reshape how new Bitcoin outputs are created, spent and secured, especially for users prioritizing long-term quantum resilience.

• Wallets could introduce opt-in P2MR addresses (likely starting with “bc1z”) as a “quantum-hardened” choice for new coins or long-term holdings.

• Transactions will be slightly larger (more witness data from script paths), potentially raising fees somewhat compared to Taproot key path spends. Security trades off against compactness.

• A full rollout would require updates to wallets, exchanges, custodians and hardware wallets. Planning should start years in advance.

Did you know? Governments are already preparing for “harvest now, decrypt later” risks, where encrypted data is stored today in anticipation of future quantum decryption. This strategy mirrors concerns about exposed Bitcoin public keys.

What BIP-360 explicitly does not do

While BIP-360 strengthens Bitcoin in the face of future quantum threats, it is not a sweeping cryptographic overhaul. Understanding its limits is just as important as understanding its innovations:

• No automatic upgrade for existing coins: Old unspent transaction outputs (UTXO) remain vulnerable until users manually move funds to P2MR outputs. Migration depends on user behavior.

• No new post-quantum signatures: BIP-360 does not replace ECDSA or Schnorr with lattice-based (for example, Dilithium or ML-DSA) or hash-based (for example SPHINCS+) schemes. It only removes the Taproot key path exposure pattern. A full base layer transition to post-quantum signatures would require a much larger change.

• No complete quantum immunity: A sudden CRQC breakthrough would still require massive coordination among miners, nodes, exchanges and custodians. Dormant coins could create complex governance issues and network stress could follow.

Why developers are acting now

Quantum progress is uncertain. Some believe it is decades away. Others point to IBM’s late 2020s fault-tolerant goals, Google’s chip advances, Microsoft’s topological research and US government transitions planned for 2030-2035.

Critical infrastructure migrations take many years. Bitcoin’s developers stress planning across BIP design, software, infrastructure and user adoption. Waiting for certainty in quantum progress could leave insufficient time for infrastructure upgrades.

If consensus builds, a phased soft fork could unfold:

1. Activate the P2MR output type

2. Wallets, exchanges and custodians add support

3. Gradual user migration over years

This mirrors the optional then widespread adoption of SegWit and Taproot.

The broader debate around BIP-360

Debate continues on urgency and costs. Questions under discussion include:

• Are modest fee increases acceptable for HODLers?

• Should institutions lead the migration?

• What about coins that never move?

• How should wallets signal “quantum safety” without causing unnecessary alarm?

This is an ongoing conversation. BIP-360 advances the discussion but does not close it.

Did you know? The idea that quantum computers could threaten cryptography dates back to 1994, when mathematician Peter Shor introduced Shor’s algorithm, long before Bitcoin existed. Bitcoin’s future quantum planning is essentially a response to a 30-year-old theoretical breakthrough.

What users can do right now

There is no need to panic for now, as quantum threats are not imminent. Prudent steps you might take include:

• Never reuse addresses

• Stick to up-to-date wallet software

• Follow protocol upgrade news

• Watch for P2MR support in wallets

Those with large holdings should quietly map exposures and consider contingency plans.

BIP-360: The first step toward quantum resistance

BIP-360 represents Bitcoin’s first concrete step toward reducing its quantum exposure at the protocol level. It redefines how new outputs can be created, minimizes public key leaks and sets the stage for long-term migration planning.

It does not change existing coins automatically, keeps current signatures intact and underscores the need for a careful, coordinated ecosystem-wide effort. True quantum resistance will come from sustained engineering and phased adoption, not a single BIP.

ICP soared by 16% after being listed on South Korea’s largest exchange, but will the momentum last?

Internet Computer (ICP) saw its price explode by roughly 16% following its listing on South Korea’s largest cryptocurrency exchange, Upbit.

The altcoin’s value rose from around $2.35 to a high of $2.73 within minutes of the announcement. Trading pairs include ICP/KRW, ICP/BTC, and ICP/USDT.

In case you’re wondering, exchange listings on major centralized venues have historically led to considerable price increases for newly listed cryptocurrencies. This is especially true for altcoins with thinner market depth, where it’s easier to move the price with smaller amounts.

Upbit is currently the third-largest centralized spot exchange in the world, with a 24-hour trading volume of around $1.16 billion, according to CoinMarketCap, trailing only Binance and Coinbase.

ICP is the 47th largest cryptocurrency by means of total market capitalization ($550M) and around $147 million in 24-hour trading volume – a metric that’s a whopping 170% up in the past day, showcasing the impact of the listing.

Usually, though, these moves are not as sustainable and result in reversals, but it’s interesting to see if ICP will follow a similar path.

The PI token exceeded $0.23 earlier today before it retraced slightly.

The updates recently implemented by the team, as well as the upcoming ones, continue to benefit Pi Network’s underlying asset, as PI is among the few alts in the green today.

Aside from the expected completion of protocol v20.2 upgrade by tomorrow, the Pi Network community is also anticipating Pi Day – March 14.

Pi’s Upcoming Updates

The past several weeks have been quite eventful for Pi Network, especially in terms of upgrades and price movements. On February 21, the team announced that the protocol v19.6 migration was successfully completed, and the subsequent v19.9 iteration arrived on March 4.

They explained at the time that the v20.2 update was next in line, with initial deadline expectations set for March 14, which was later moved to March 12. Both of the already completed updates were followed by impressive price gains from PI, and it seems the hype about the upcoming upgrade has not disappointed so far.

Another factor that could be boosting the native token is the buildup to what became known as Pi Day, March 14, due to its symbolic resemblance to the mathematical constant π. As it happened last year, the community has hyped itself up, expecting some major announcements, perhaps a listing on a top-tier exchange such as Binance.

PI Defies Market Correction

As mentioned above, the protocol updates and perhaps anticipation for Pi Day have resulted in impressive gains for PI lately. The token is up by over 6% in the past day and sits just inches below $0.23. Moreover, it’s one of the best-performing crypto assets on a monthly scale, gaining 56%, and it’s up by 73% since its latest all-time low of $0.1312 marked on February 11.

A few things to consider for its future price moves include the token unlock schedule, as over 13.5 million coins will be unlocked in three consecutive days starting today, and the number will jump to 17 million on March 17. Additionally, PI has a history of performing well in the weeks leading up to big announcements or updates, only to crash hard after in a classic sell-the-news event.

You may also like:

Bitcoin staking infrastructure developer Babylon Labs has integrated with Ledger, a cryptocurrency hardware wallet maker, in a move that could make it easier for holders to put their Bitcoin (BTC) to work in financial applications without giving up self-custody.

In a Tuesday announcement, the companies said Ledger signers will be used for Babylon’s Trustless Bitcoin Vaults, also known as BTCVaults. The vaults allow BTC holders to lock their tokens into programmable contracts governed by onchain conditions while retaining self-custody of the underlying asset.

Ledger devices will act as the secure signing layer for BTCVault transactions, enabling users to authorize vault interactions directly from their hardware wallet.

The feature relies on Ledger’s Clear Signing technology, which displays human-readable transaction details on the device screen so users can verify exactly what they are approving before signing. The approach is designed to reduce the risk of signing malicious or opaque transactions, a common concern in crypto workflows.

The tie-up is significant given Ledger’s scale as a hardware wallet provider, with the company reporting more than 8 million devices sold globally. As Cointelegraph recently reported, Ledger is said to be in talks with major financial institutions about a US initial public offering. 

Related: Ledger and Trezor 2025 hardware wallets released: What’s new for users?

Digital asset vaults growth surges

Self-custodial vaults are emerging as a growing use case in digital assets as users look for ways to put their crypto to work without relinquishing control of their funds. 

Unlike traditional custodial platforms, where assets are deposited with an exchange or intermediary, vaults are typically governed by programmable conditions that allow users to retain ownership while participating in lending, staking or yield strategies.

Vault strategies have gained traction in decentralized finance. Protocols such as Yearn Finance popularized the concept through automated yield vaults that allocate user deposits across lending and liquidity markets. 

More recently, messaging platform Telegram introduced vault-style yield products within its integrated crypto wallet, allowing users to deposit assets such as Bitcoin, Ether (ETH) and Tether’s USDt (USDT) into structured strategies designed to generate returns.

Institutional players are also joining the fray. Asset manager Bitwise recently collaborated with DeFi lending protocol Morpho to curate onchain vault strategies designed to generate yield through overcollateralized lending markets.

Related: Bitcoin company Fold pays off $66M debt, frees up BTC collateral