In a Nov. 4, 2026, Bitcoin Development Mailing List post, Fields outlined three experimental mechanisms intended to discourage quantum-enabled theft through financial penalties rather than cryptographic protection alone. Fields, a longtime contributor to Bitcoin Core and researcher associated with MIT’s Digital Currency Initiative, emphasized that the concepts remain preliminary.

“The purpose of this post is just to introduce the ideas as thought experiments,” Fields explained, adding that he believes implementation through a soft fork could be possible.

His proposal arrives amid growing debate over Bitcoin’s exposure to quantum computing. Research compiled by the firm Project Eleven estimates approximately 6.9 million BTC have publicly exposed cryptographic keys—nearly one-third of the total possible bitcoin supply—potentially making them vulnerable to sufficiently powerful quantum computers. No publicly demonstrated quantum computer can presently execute such an attack against the Bitcoin network.

Fields’ first mechanism, dubbed “Quantum Landmines,” introduces a concealed cryptographic commitment that could transform an attempted robbery into a financial windfall for its intended victim.

“This is a commit/reveal scheme, similar to those which have been discussed here, but with the addition of a payout in the case of proven theft,” Fields wrote.

Under his hypothetical arrangement, a bitcoin holder named Alice possesses 1 BTC in an older, quantum-vulnerable output, another 1 BTC in a quantum-safe output, and a negligible amount in a separate quantum-safe output containing hidden proof of ownership.

Before quantum computers become dangerous, Alice secretly commits evidence demonstrating control of her original private key. Following the hypothetical arrival of “Q-Day”—the day when a computer becomes powerful enough to crack the network’s cryptography—Bitcoin’s proposed rules would require anyone spending vulnerable legacy coins to supply matching collateral.

An attacker attempting to steal Alice’s 1 BTC would consequently need to contribute another 1 BTC, creating a restricted 2 BTC output subject to a waiting period. Fields explained that the attacker would lack the necessary historical proof to immediately withdraw the funds.

However, Alice could reveal her concealed commitment during the proposed 30-day period, reclaiming her original bitcoin alongside the attacker’s collateral. “Unbeknownst to the attacker, Alice’s trivial output, which looked just like any other quantum-safe output, actually contained a landmine.”

The uncertainty becomes a deterrent. Attackers cannot readily distinguish vulnerable holdings from those secretly equipped with financial traps. Fields described an especially provocative consequence: “This scheme is especially interesting because it actually incentivizes Alice to bait a quantum attacker pre-Q-Day in order to double her vulnerable coins later, and thus makes quantum attackers wary of stealing coins as they may be secretly guarded by mines.”

Fields acknowledged a fundamental limitation: Many older bitcoin outputs may have permanently lost private keys, leaving nobody capable of preparing ownership proofs.

“The obvious problem with relying on landmines alone is that the associated private keys for many vulnerable outputs are believed to be lost, thus a quantum attacker could reasonably assume that they are not guarded by landmines.” His proposed alternative, called a “Staked Auction,” would allow third-parties to commit collateral and concealed bids against vulnerable holdings before Q-Day.

In one illustration, an attacker targets 50 BTC while supplying another 50 BTC as collateral. Competing participants subsequently reveal previously committed bids, potentially capturing the attacker’s collateral while the vulnerable coins are destroyed.

Fields explained the intended result:

“The attacker only ever makes away with the stolen coins if no one outbids them. Thus they’re incentivized to make a very conservative bid.”

A third mechanism, the “Sats Auction,” removes advance staking requirements and instead introduces competitive bidding after vulnerable coins are spent. Fields credited Neha Narula with suggesting an approach based on the Dollar Auction game, where competing bidders risk escalating losses. “The logical conclusion is for the attacker not to play,” Fields observed.

Source: Project Eleven, February 2026 stats. These figures describe potential exposure to a future cryptographically capable quantum computer, not coins currently being stolen. Fresh, never-spent hashed addresses are excluded from the total.

Despite their ingenuity, these mechanisms introduce substantial unresolved questions involving collateral requirements, economic incentives, confiscation risks and legitimate ownership. Fields acknowledged the uncertainty surrounding the desired outcome.

“However, it’s unclear what the best design would be because it’s not even clear to me what the most desirable outcome would be,” he said. None of these mechanisms has been activated on Bitcoin, and their implementation would require significant additional engineering and consensus.

Ultimately, Fields’ experiments challenge a familiar assumption about quantum security and theoretical attacks: Rather than merely preventing cryptographic attacks, Bitcoin might also make exploiting vulnerable coins economically irrational. Whether that deterrence can protect legitimate owners without imposing unacceptable costs remains the central question.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到[email protected]，本平台相关工作人员将会进行核查。