Isn't the biggest elephant of quantum theft coins mined in P2PK from 2009 ? [what some would call "the Satoshi coins", although I do sympathize with voices that discourage such slang]
I'm guessing most people who actually care about their coins will be moving to some quantum-secure solution long before that theft becomes possible, yet once it does, there are multiple thousands of 50BTC coinbases just sitting around on-chain with ECDSA public key visible, up for the taking to anyone who can solve secp256k1 discrete log.
It's not an existential threat, although the only way for the market value to survive without a significant revaluation is for the attacker to very obviously hoard the coins, rather than depositing them in exchanges.
Isn't the biggest elephant of quantum theft coins mined in P2PK from 2009 ? [what some would call "the Satoshi coins", although I do sympathize with voices that discourage such slang]
I'm guessing most people who actually care about their coins will be moving to some quantum-secure solution long before that theft becomes possible, yet once it does, there are multiple thousands of 50BTC coinbases just sitting around on-chain with ECDSA public key visible, up for the taking to anyone who can solve secp256k1 discrete log.
It's not an existential threat, although the only way for the market value to survive without a significant revaluation is for the attacker to very obviously hoard the coins, rather than depositing them in exchanges.