Cory Fields proposed a countermeasure. A quantum attacker who wants to steal coins would first have to stake bitcoin as collateral.

I found a November 8 report from Decrypt. Fields is a Bitcoin developer. His idea is to put a hurdle in the way of potential quantum attackers in the future: before you touch someone else’s wallet, you have to stake some bitcoin.

How much do they have to stake? The report didn’t specify an exact amount. The core mechanism is collateral plus penalties. The attacker stakes bitcoin, and if it’s later determined that they carried out an attack, the collateral is forfeited.

Wallet owners who prepared in advance have a chance to get their coins back. They can also collect a penalty.

This design sounds a little convoluted. Why would an attacker willingly put up coins?

My guess is that Fields assumes a quantum attack doesn't happen instantly. It takes exposure and a window of time. The collateral mechanism turns that window into a costly game.

But that's also the problem. Would someone with real quantum computing power care about this amount of collateral?

Look at it another way. This mechanism is more about buying ordinary holders time to migrate. Moving wallets is a massive undertaking. Bitcoin ranks first by market cap, with $1 billion in 24-hour trading volume. With a market this big, migration can't happen overnight.

In Fields's proposal, collateral is like a land mine. Anyone who steps on it has to pay up first.

The controversies are obvious, too. Who decides whether an attack has taken place? Who gets the collateral? Adding an adjudication layer to a decentralized system is controversial in itself.

The report didn't go into these details. While looking through the data, I noticed BTC was down 2.5% over 24 hours. The market isn't treating this proposal as a short-term factor.

But the quantum threat isn't a short-term factor. It's a matter of time.

Fields's proposal at least puts the issue on the table: designing incentives for wallet migration is harder than the technology itself.

Having an attacker stake bitcoin sounds like making a thief pay a security deposit before stealing something. It makes sense in theory, but it's full of pitfalls in practice.

For example, a quantum attacker might not need to touch on-chain collateral at all. They could take a different route.

Another issue: the collateral mechanism would require a hard fork. Reaching consensus on forks has never been easy in the Bitcoin community.

The report didn't mention any of this. It only described the mechanism itself.

I'm watching this because it exposes an awkward truth: as the quantum threat approaches, holders may have less incentive to migrate their wallets than attackers have to research the algorithms.

Fields wants to use economic penalties to make up for that incentive gap.

Whether it works is another question. But at least someone is starting to design a countermeasure instead of just shouting, “Quantum is coming.”

Decrypt's report ends by noting that this mechanism would give prepared holders an opportunity.

Prepared holders. Those two words are key. What about the ones who aren't prepared?

The report doesn't answer that.