StarkWare says Bitcoin has now seen its first QSB mainnet transaction, a quantum-resistant workaround, not a miracle cure.
According to StarkWare, a Bitcoin mainnet transaction using Avihu Levy’s Quantum-Safe Bitcoin (QSB) method was mined on Aug. 26 without a soft fork, new opcodes, or any change to Bitcoin’s consensus rules.
- QSB transaction mined on mainnet
- No protocol upgrade required
- Limited protection, not full quantum safety
- Costly and non-standard to use
The headline is real enough. The hype around it deserves a seatbelt.
QSB is not a new Bitcoin standard or a network-wide fix. It is a transaction construction that tries to protect certain coins by shifting security away from elliptic-curve assumptions and toward hash-based protections, which are generally viewed as more resistant to quantum attacks. In plain English: it is a clever workaround for a future quantum threat, not proof that Bitcoin has solved the problem.
That distinction matters because Bitcoin’s current signatures rely on elliptic-curve cryptography, which a sufficiently powerful fault-tolerant quantum computer could theoretically break using Shor’s algorithm. No publicly demonstrated cryptographically relevant quantum computer exists today, so this remains a forward-looking risk rather than an active break-in. Still, pretending the issue doesn’t exist would be lazy, and Bitcoin can be many things, but lazy is usually not one of them.
StarkWare says this was the first quantum-safe Bitcoin transaction mined on mainnet. The transaction is linked to the mempool.space record 305a24ffea912b9cf428f29ebf952321c96dab5bab284fc0d0801562f5abab07. It did not move through Bitcoin’s normal public mempool, because QSB transactions exceed standard relay policy limits. Instead, MARA’s Slipstream service was used to send it directly to a miner.
That routing detail is not a footnote. It is the whole point of why this is interesting and why it is still awkward. Bitcoin nodes generally follow policy rules about what they will relay across the network. If a transaction cannot pass those rules, it is not a normal user experience, it is a special delivery lane. Useful? Yes. Elegant? Not remotely. But Bitcoin has never been known for pampered UX.
The cost is another reality check. The implementation is estimated to require roughly $75 to $150 in off-chain cloud GPU computation before broadcast, with the paper giving a broader estimate of $75 to $200 because of implementation uncertainty. That makes QSB more of a high-value protection path than something ordinary users would casually run on a Tuesday afternoon.
QSB’s scope is also narrow. The materials describe it as working with legacy pre-SegWit scripts, and they make clear it does not directly protect Taproot outputs or Lightning Network channels. That is a major limitation, not a tiny asterisk. Taproot is widely used, and Lightning is central to Bitcoin’s scaling story. A method that skips both is not a full quantum defense for Bitcoin; it is a partial shield for a limited set of outputs.
There is also an exposure problem. Once a public key is revealed on-chain, a future quantum attacker could potentially target those coins if the relevant script type remains spendable. That is why the long-term quantum discussion keeps circling back to exposed keys, dormant coins, and older output types that are already sitting out in the open like a drunk guy on a park bench at 3 a.m.
Bitcoin specialist Daniel Batten called broader claims that QSB already makes Bitcoin quantum-safe “an overstatement.” He is right to push back. A working proof of concept is not the same thing as a network-wide defense. Calling Bitcoin quantum-safe because one special transaction worked would be like declaring a house fire solved because one room had a functioning extinguisher.
Eli Ben-Sasson, StarkWare’s CEO, framed the significance more carefully:
“What today’s successful transaction offers Bitcoin is a reassurance that holdings can be protected before that happens”
That is the right way to read it. Reassurance, not victory. A fallback, not a finish line.
The bigger lesson here is political as much as technical. Bitcoin is hard to change at the base layer. Any serious protocol upgrade has to survive miner incentives, developer debate, user coordination, and the usual round of internet trench warfare. QSB is interesting because it shows users may be able to protect some holdings without waiting for the whole machine to agree on a soft fork. That kind of ugly improvisation is very Bitcoin: if the road is blocked, someone will weld on a sidecar and call it resilience.
But a workaround is still a workaround. A durable answer to quantum risk will almost certainly require something broader than direct-to-miner escape hatches and expensive off-chain computation.
That is where BIP-360 comes in. The proposal would introduce Pay-to-Merkle-Root outputs, a new output format that would commit to a set of possible spending conditions, and it would require a Bitcoin protocol change. In other words, it is the slower, heavier, more politically annoying path. It is also the sort of path Bitcoin often ends up needing when the temporary hacks stop being enough.
The research materials are clear on one thing: QSB is not a full replacement for protocol-level quantum resistance. It is a demonstration that Bitcoin can be hardened in a narrow case today, under existing rules, without waiting for consensus changes. That is meaningful. It is also not the same as “Bitcoin is quantum-safe now.”
No one has publicly shown a cryptographically relevant quantum computer capable of breaking Bitcoin keys. That means the pressure is still preventive, not emergency triage. But prevention is exactly where Bitcoin tends to reveal whether it values resilience more than slogans.
What comes next is straightforward enough: independent review of the QSB code, more mainnet testing, and work on more scalable post-quantum signature systems. That last part is the real prize. If Bitcoin is going to harden against quantum attacks without wrecking usability, it will need something that ordinary users can actually run, not just something clever enough to impress cryptographers and annoy miners.
Related efforts are already circling this same problem from other angles. StarkWare’s Quantum Safe Bitcoin: A New Scheme to Protect Transactions pitch helped push the idea into the open, while the company’s own write-up on the Bitcoin mines first quantum-safe mainnet transaction claim showed how quickly a technical demo can turn into a headline grenade. There is also a broader explainer making the rounds that argues Bitcoin Can Be Quantum-Safe Now, Says StarkWare Researcher, a statement that sounds a lot stronger than what the underlying limitations actually support.
Outside Bitcoin, the quantum-resistant branding machine is already doing its usual thing: some projects are rushing to market with promises, testnets, and enough buzzwords to wallpaper a server room. BTQ Technologies Implements BIP 360 Quantum-Resistant testnet transactions is a good example of how quickly the phrase “quantum-resistant” can get stapled onto anything with a pulse. Meanwhile, other chains are trying to use the same fear as a marketing accelerant, whether that ends up being substance or just another round of shiny FOMO. See also the hype cycle around Algorand (ALGO) Surges 20% on Quantum Resistance Hype: Real and Hoskinson Unveils Cardano’s Quantum Resistance Plan: 3 steps to security, because apparently every chain now wants to be the one holding the anti-quantum umbrella when the storm arrives.
And if you want the practical payments angle, GoMining Launches GoBTC Bitcoin Payments Protocol With 0.2% merchant fee is another reminder that the market keeps trying to make Bitcoin more usable while also making it more defensible. That tension, usability versus hardening, convenience versus sovereignty, is the actual story under the hood.
That is where the real work will be: independent review, more mainnet testing, and a path that ordinary users can actually use without needing a PhD, a miner hookup, and a small cloud budget. Quantum resistance that only the elite can afford is not a solution, it is a velvet rope.
Key questions and takeaways
-
Did Bitcoin see its first QSB mainnet transaction?
According to StarkWare, yes, a QSB transaction was mined on Bitcoin mainnet on Aug. 26. That is a real demonstration, but it does not mean Bitcoin as a whole is quantum-safe. -
Did this require a soft fork or consensus change?
No. That is the most notable part. QSB worked under Bitcoin’s existing consensus rules, which makes it useful as a workaround and awkward as a long-term solution. -
Does QSB protect all Bitcoin users and outputs?
No. It is limited, expensive, and non-standard. The materials say it does not directly protect Taproot or Lightning, and it only covers certain legacy outputs. -
Is Bitcoin quantum-safe now?
No. QSB is a narrow proof of concept and fallback path, not a full network-wide fix. -
Why does this matter if quantum computers cannot break Bitcoin today?
Because Bitcoin’s signature scheme is still theoretically vulnerable to a sufficiently powerful quantum computer. Demonstrating a workable fallback now is better than waiting until the threat is no longer theoretical. -
Can a workaround replace a real Bitcoin upgrade?
Not permanently. It can buy time and protect some coins, but a durable solution will likely require broader consensus and eventually a protocol-level change.
The sober read is simple: Bitcoin has shown it can route around its quantum problem in one narrow case. The uncomfortable read is just as simple: “quantum-resistant” is still more aspiration than reality for Bitcoin.
