Most investors treat Bitcoin like it's a ledger made directly from the laws of physics. In truth, it's just software, but the cryptography that underpins Bitcoin is software with an expiration date. If a sufficiently powerful quantum computer is developed sometime within the next 10 years, holders could be in for a rude awakening if that machine is used to crack Bitcoin's crypto.
Given that this piece of knowledge is becoming increasingly understood among investors, it's very possible that today the market is already demanding a valuation discount (with some estimates ranging up to 25%) -- to the asset because Bitcoin has no adopted quantum mitigation plan as of today.
If that hypothesis is true, developing and implementing a credible upgrade path would nullify one of the biggest risks facing the coin over the long term. If that happens, it could permanently re-rate the asset's valuation significantly higher.
For now, this is just a hypothesis about the market and its pricing of the asset. There might not be proof of the theory's correctness for a few years, if it's ever proven at all. Nonetheless, it's worth taking seriously because upgrading the blockchain isn’t the hard part compared to navigating the thorny governance and social coordination problems that the process necessarily implies.
The threat is mostly about signatures
The first thing for investors to understand is that quantum computing threatens ownership rights for Bitcoin, not its issuance via mining, nor other core elements of the protocol like block sizes or the date of the next halving.
The main risk is that a strong enough quantum computer would target elliptic-curve signatures, which would be problematic because public-key cryptography underpins token ownership. Take a look at the (non-comprehensive) table below.
Bitcoins Quantum Risk Issues
Issue | Why Investors Should Care | How To Mitigate |
|---|---|---|
Digital Signatures | A sufficiently capable quantum computer can use Shor-type attacks to derive private keys from exposed public keys, putting funds at risk when keys are revealed during spending or through address reuse | Add a post-quantum signature option via a conservative consensus upgrade Make wallets default to quantum-safer output types |
Mining Algorithm | Grover-type quadratic speedups apply to hash search, which could lower the effective security margin of SHA-256 | Monitor credible resource estimates and, only if needed, adjust parameters or consider a PoW change |
Key Migration | Even with a technically solid post-quantum signature design, Bitcoin still needs broad coordination across wallets, exchanges, custodians, miners, and node operators | Publish a clear migration playbook with timelines Ship wallet and exchange tooling early |
Inaccessible Keys | Coins tied to lost keys, dormant holders, or scripts that cannot easily transition may be unable to migrate, creating a tail-risk overhang: either they remain vulnerable later or the community debates controversial recovery rules that introduce governance risk. | Provide long lead times and strong defaults to maximize voluntary migration Be explicit about the policy for non-migrating coins |
The key takeaway here is that upgrading decentralized money is difficult even when everyone agrees in principle; there's simply a lot of moving parts, and all of them need to be handled well during any migration to a sounder security posture, and there's likely only one chance to get everything right.
With that foundation, let's move on to evaluating the claims about Bitcoin's quantum discount.
Capriole Investments has a lot to say here
One of the pioneering voices suggesting that quantum risk is creating a discount to Bitcoin's valuation is Capriole Investments' Charles Edwards.
In short, he argues that Bitcoin is already trading at a discounted fair value of between 20% and 30% today because:
The network lacks an implemented quantum-proof roadmap.
The coin is now exposed to a non-zero risk of being compromised due to the lengthy discussions and technical implementation period which the chain would need to successfully adapt and fortify itself against quantum risk, unlike in prior periods.
From a traditional valuation perspective, it's a no-brainer that if the time needed to design, test, and coordinate an upgrade is long, then the expected-value cost of being unprepared has a price today. If a material risk cannot be cheaply hedged, and if the timeline to reduce it is measured in years, investors demand a higher required return to hold the asset. A higher required return expresses itself as a lower price today.
Therefore, Edwards' idea is indeed quite plausible because markets are good at pricing in the potential impact of measurable risks and (at least traditionally) mediocre at pricing in long-tail, or otherwise unhedgeable risks. When they do price those long-tail risks it often looks like assigning a persistent risk premium to an asset to compensate investors for taking on the (potentially catastrophic) risk.
Of course, the issue is considerably muddled by the fact that there's another phenomenon in which the reverse also sometimes occurs; valuation multiples of assets with relatively probable and highly destructive tail risks can be compressed relative to other assets without the same problems.
So, where's the proof that this specific risk premium or discount exists?
There's not really a rigorous experiment to run here. You can't create a counterfactual Bitcoin with perfect quantum mitigation in a vacuum and then compare its valuation to the asset we're actually invested in.
A weaker but still useful test is to ask whether the narrative explains behavior that otherwise looks odd. Here, it does. Bitcoin can trade richly on its evergreen digital store-of-value narratives while also showing an unusually sharp sensitivity to downside on even a whiff of governance drama. That pattern is consistent with a market willing to pay for the asset's long-term story while also demanding a discount for uncertainty around its capacity to coordinate through contentious protocol transitions.
If that governance uncertainty already weighs on valuation, it would logically extend to a future quantum-mitigation effort. Until there is a credible plan with clear implementation details and visible ecosystem commitments, investors cannot confidently estimate either the probability of a successful migration or the distribution of second-order risks introduced by the upgrade itself.
In that environment, the market can rationally keep fair value a bit lower.
The larger point is that the quantum tail risk is also about information quality. If the market lacks the inputs needed to price the threat and the mitigation path with confidence, the asset can trade with inadequate compensation for long stretches, and then reprice quickly once credible, decision-relevant information arrives.
Finally, even if this discount is real, it's guaranteed to be unstable. The valuation gap can close well in advance of a finished upgrade if the market is convinced that a workable path exists and will be executed. In other words, the re-rating catalyst is credibility.
Now, let's dig deeper into the nature of the governance risks facing Bitcoin here.
Governance is where quantum risk turns into market risk
The word “consensus” is the source of most confusion here, so it is worth separating meanings before getting into specifics.
On-chain consensus is about which blocks and transactions are valid. It is enforced by nodes, and it is largely mechanical once rules are set.
Social consensus, on the other hand, is about deciding which new rules should exist and when they should activate. It's something negotiated through BIPs, informal proposals, discussions about implementation, and seeing miners' graffiti inscribed in block headers. And it's all with no central chain of command or source of genuine authority. In addition, it's social consensus that has the potential to be a real stumbling block for Bitcoin.
Bitcoin's process is intentionally conservative: That's a feature, because coordination failures can be catastrophic, but it also means that even straightforward changes can take years, and urgent changes collide with the culture's well-intentioned allergy to urgency. That means even if quantum timelines are long, the migration timeline can still be longer than investors assume, which is exactly what Edwards is getting at with his theory.
But what would it take to remove the discount, assuming it exists?
What could re-rate Bitcoin's value
It's tempting to answer the above question by saying “just add post-quantum crypto” to Bitcoin, but a credible plan has to be legible to engineers and investable to institutions, and a hand-wavy "just do it" simply doesn't work on those counts.
Nonetheless, the broader world is already standardizing post-quantum primitives, with NIST announcing finalized post-quantum standards for key establishment and signatures and national security systems like the NSA publishing CNSA 2.0 algorithms and timelines that force vendors to build tooling, audits, and migration playbooks.
Therefore, libraries, hardware security modules, and developers will move on to a quantum-secure future whether Bitcoin moves or not. Here's what a credible mitigation plan should mean for Bitcoin investors:
It commits to a small set of signature candidates, with explicit trade-offs around size, verification cost, and implementation risk.
It offers a migration path that makes the safe choice the default for ordinary holders.
It specifies what happens to coins that never migrate, without pretending that everyone will cooperate.
It includes an activation path that minimizes chain-split risk while setting clear expectations.
It is accompanied by visible ecosystem commitments from wallets, exchanges, and custodians.
It has a clear pathway for integrating post-quantum signatures with hardware wallet technology.
After a plan that covers those bases is in hand, investors can then go on to make conclusions about the valuation question without self-deception. If the market has been haircutting Bitcoin for being unprepared, then credible progress should compress that premium more or less with each step of the process, assuming it happens.
As long as such a plan isn't on the table for everyone in the market to see, the quantum discounting hypothesis stays plausible. For now, Edwards' argument appears to be both sound and convincing. With a bit of luck, it'll actually push the chain to evolve in the right direction, and soon.
To keep up with the latest in blockchain technology and quantum computing, join us on X and subscribe to our newsletter.
