StarkWare tests quantum-resistant Bitcoin transaction on mainnet

StarkWare researcher Avihu Levy has tested an experimental quantum-resistant transaction on the Bitcoin mainnet, in what the company described as the first transaction of its kind. 

According to StarkWare, the transaction was confirmed Wednesday in Bitcoin block 964,199. Onchain data shows that it spent a 10,000-satoshi output protected by Levy’s Quantum Safe Bitcoin (QSB) scheme, with MARA Pool mining the block after receiving the transaction through its Slipstream service. 

Levy’s paper and code repository said QSB combines hash-based one-time signatures with computational searches that bind an authorization to a specific transaction. The construction is intended to prevent forgery even if a quantum computer breaks the elliptic-curve cryptography Bitcoin uses.

The test moves Levy’s April proposal from theory to an onchain demonstration, showing that Bitcoin’s existing consensus rules can accommodate one form of quantum-resistant spending without a protocol change.

Quantum-resistant Bitcoin method remains costly

In March, Google researchers estimated that a sufficiently capable quantum computer could theoretically derive a Bitcoin private key nine to 12 minutes after its public key becomes visible. Google said that could allow an attacker to replace a pending transaction during Bitcoin’s confirmation window. 

Levy then introduced QSB in April, estimating at the time that generating a transaction would require between $75 and $150 in GPU computation. He described it as a last-resort measure rather than a replacement for protocol-level protections.

StarkWare spokesperson Nathan Jeffay told Cointelegraph that the completed transaction cost “low hundreds of dollars,” estimating the expense at around $150 to $200. StarkWare’s release said the process took hours of computation.

Levy’s repository also classifies QSB transactions as nonstandard under Bitcoin Core’s default relay policies. StarkWare said ordinary nodes therefore would not propagate the transaction before confirmation, requiring it to be submitted directly through MARA’s Slipstream service.

QSB applies to individual Bitcoin transactions rather than upgrading cryptography across the network. “A soft fork should happen, and I believe it will,” StarkWare CEO Eli Ben-Sasson said, adding that QSB provides a safety net while protocol-level protections are developed. 

Bitcoin developers are separately considering proposals including BIP-360, a proposed soft fork that would introduce a Pay-to-Merkle-Root output type while removing Taproot’s quantum-vulnerable key-path spend.