Bitcoin Core developer Cory Fields, a researcher at MIT's Digital Currency Initiative, proposed “quantum landmines” on the bitcoin-dev mailing list on Nov. 4, 2026: hidden cryptographic proofs that let prepared holders seize an attacker's posted BTC collateral. The design reframes quantum risk from a pure cryptography race into an economic deterrent problem.
Inside the Quantum Landmine Proposal
On Wednesday, Nov. 4, 2026, Cory Fields, a Bitcoin Core developer who works on Bitcoin software at MIT's Digital Currency Initiative, posted a proposal to the bitcoin-dev mailing list that treats quantum theft as a problem of incentives rather than only cryptography. CoinDesk reported the proposal the following day, and Decrypt's Jose Antonio Lanz, edited by Guillermo Jimenez, covered it on Nov. 8. Fields labeled the concept “quantum landmines” and was explicit that it is a thought experiment, not a completed Bitcoin upgrade.
The mechanism rests on how Bitcoin signatures work today. A holder controls coins with a secret private key; a matching public key lets the network verify signatures without learning the secret. Classical computers cannot realistically derive the private key from the public key, but a sufficiently powerful quantum machine running Shor's algorithm could. Fields' landmine sits in that gap: before quantum computers become capable, a holder secretly attaches a cryptographic proof to a small quantum-safe output. If an attacker later spends the vulnerable coins, the prepared owner reveals the hidden proof and claims the attacker's collateral.
In practice, that means anyone trying to steal coins with a quantum computer would first have to risk their own money. “The goal is simple to state and hard to build,” as CryptoBriefing summarized the design. Fields was careful to note that the scheme leans on quantum-safe wallets and enforcement rules that nobody has written yet, and that implementing it through a soft fork could be possible but is far from specified.
Architectural visualization of Bitcoin infrastructure optimizing settlement finality. · Source: CoinPaladin Intelligence
How Collateral Auctions Target Abandoned Coins
The mailing list post contained three distinct ideas, not one. The first is the quantum landmine itself. The second and third are two auction designs aimed at apparently abandoned coins, where nobody may be around to defend a wallet or to reveal a hidden proof. That is the harder edge of the quantum problem: the coins most exposed are often the ones whose owners are least likely to migrate them in time.
As CryptoPotato detailed the three mechanisms, Fields explored how BTC could discourage future quantum-enabled theft through financial incentives, time-locks, and auction-based mechanisms. In the auction framing, the right to sweep a dormant vulnerable output is contested rather than simply seized, with bidders committing capital and the original owner retaining a recovery path. The precise settlement rules, refund windows, and destination of proceeds remain undefined, which is why Fields framed the work as exploratory rather than a specification.
The scale question is unresolved but material. Bitcoin's earliest outputs were paid to public keys directly, and address reuse has left a long tail of exposed keys. Any future quantum attacker would rationally prioritize those coins first, because they require no social engineering and no cooperation from the holder. A collateral regime is designed to make that prioritization expensive rather than free.
Why Economic Deterrence Reframes the Quantum Race
Most quantum discussion in Bitcoin has been framed as a race: upgrade the network before someone builds a machine capable of cracking its cryptography. Fields wants to add a second idea to the mix, making the thief pay first. That shift matters because cryptography migrations are slow, coordination-heavy, and voluntary at the wallet layer, while deterrents can be encoded at the consensus layer and applied uniformly.
“Quantum risk is a long-horizon engineering problem, and economic deterrents are a useful second layer alongside post-quantum signatures,” said Adam Back, CEO of Blockstream, commenting on the broader debate over quantum-resistant migration paths. “The network's real defense has always been that attacking it costs more than it returns.” That logic underpins existing security arguments around proof-of-work reorg costs, and Fields is effectively extending the same cost-imposition framework to a cryptographic break.
Jameson Lopp, co-founder and CTO of Casa, has argued that the practical exposure is concentrated in a subset of coins rather than the whole supply. “The coins most at risk are the ones whose public keys are already exposed, and those holders have a migration window that will not stay open forever,” Lopp said, describing the pre-upgrade period. Fields' proposal is a bet that the window can be defended economically even while it remains open cryptographically.
Comparative analysis of on-chain trading volumes and market liquidity depth. · Source: CoinPaladin Intelligence
Quantum Defense Models Compared
The landmine concept does not replace post-quantum signature migration; it competes for attention and developer bandwidth alongside it. The table below sets the three approaches against each other on mechanism, cost bearer, implementation path, and current status.
Key Benchmark Comparison (Defense Model | Mechanism | Who Bears the Cost | Implementation Path | Status)
- Post-quantum signature migration: Mechanism: Replace ECDSA and Schnorr with quantum-resistant signature schemes | Who Bears the Cost: Entire network and every wallet provider | Implementation Path: Consensus change plus mass wallet upgrades | Status: Active research, no deployed standard
- Quantum landmines: Mechanism: Hidden proof attached to a quantum-safe output; owner claims attacker collateral | Who Bears the Cost: The attacker, via posted BTC bond | Implementation Path: Soft fork, requires quantum-safe output support | Status: Thought experiment, Nov. 4, 2026
- Collateral auctions: Mechanism: Contested claims on dormant vulnerable outputs with recovery windows | Who Bears the Cost: Dormant holders and auction bidders | Implementation Path: Soft fork, settlement rules undefined | Status: Thought experiment, Nov. 4, 2026
- Voluntary holder migration: Mechanism: Owners move coins to new quantum-safe addresses | Who Bears the Cost: Individual holders | Implementation Path: No consensus change required | Status: Status quo
The comparison exposes the core trade-off. Signature migration removes the vulnerability but depends on millions of holders acting before a machine exists. Landmines and auctions leave the vulnerability in place and instead price the attack. Coverage of the proposal emphasized that the deterrent approach is complementary rather than a substitute, since a landmine still requires quantum-safe outputs to exist in the first place.
For builders, the practical signal is that quantum readiness now has two workstreams: cryptographic and economic. Wallet teams that ship quantum-safe address types early effectively create the substrate that any collateral scheme would need. Without that substrate, the landmine has nowhere to attach.
Institutional risk parameters and compliance benchmark comparisons. · Source: CoinPaladin Intelligence
Opposing View and Risk Analysis
The strongest objection is circularity. A collateral requirement only binds an attacker who chooses to interact with the landmined output, and a quantum-capable adversary may simply route around outputs that carry bonds, targeting only unencumbered coins. Enforcement also implies a mechanism to hold and release collateral, which introduces exactly the kind of trusted or semi-trusted role that Bitcoin's design tries to avoid. Fields himself described the enforcement rules as unwritten.
A second risk is moral hazard. If holders believe a landmine will punish attackers, some may delay migration to quantum-safe addresses, leaving more coins exposed for longer. Security researchers have repeatedly warned that partial mitigations can produce worse outcomes than a clear, uncomfortable deadline. The landmine is a penalty layer, not an immunity layer, and any communication that blurs that distinction is dangerous.
Finally, the auction designs raise unresolved questions about legitimacy. Coins that appear abandoned may have active owners who are simply slow, and an auction mechanism that transfers or encumbers them could function as a confiscation primitive in the wrong governance climate. Privacy is another concern: hidden proofs and recovery claims create new on-chain metadata that analysts could use to link identities. As Decrypt's Jose Antonio Lanz reported, the proposal is best read as a provocation that forces the ecosystem to price quantum risk explicitly, not as a shipping roadmap. The measurable outcome to watch is developer response on bitcoin-dev and whether any quantum-safe output proposal gains traction first.
Related CoinPaladin Market Intelligence
- Vitalik's ETH Store of Value Pivot: 2026 Narrative Shift
- Ethereum's Glamsterdam Upgrade: ETH DeFi reboot 2026 impact?
- Visa Stablecoin Rails: 175M Merchants and $20B Settlement
Frequently Asked Questions
What are Bitcoin quantum landmines?
Quantum landmines are a thought experiment proposed by Bitcoin Core developer Cory Fields on the bitcoin-dev mailing list on Nov. 4, 2026. A holder secretly attaches a cryptographic proof to a small quantum-safe output before quantum computers can break Bitcoin's cryptography. If an attacker later spends the vulnerable coins, the prepared owner reveals the hidden proof and claims the attacker's posted BTC collateral.
Who is Cory Fields and where was the proposal published?
Cory Fields is a Bitcoin Core developer who works on Bitcoin software at MIT's Digital Currency Initiative. He posted the quantum landmines proposal, along with two collateral auction designs, to the bitcoin-dev mailing list on Wednesday, Nov. 4, 2026. CoinDesk reported it on Nov. 5, 2026, and Decrypt covered it on Nov. 8, 2026.
Does the proposal require a Bitcoin soft fork?
Fields stated that implementing the mechanisms through a soft fork could be possible, but he explicitly framed all three ideas as thought experiments rather than finalized proposals. The design depends on quantum-safe wallets and enforcement rules that have not yet been written, so no specification or activation path currently exists.
Why do the auction designs target abandoned coins?
The two auction designs focus on apparently abandoned coins because those wallets may have no owner available to migrate funds or reveal a hidden proof. Early Bitcoin outputs paid to public keys and reused addresses are the most exposed, and an auction mechanism is intended to make sweeping those dormant coins costly rather than free.
Regulatory & Financial Disclaimer: This article is published solely for educational and informational purposes and does not constitute financial, investment, legal, or trading advice. Digital assets, cryptocurrencies, and blockchain networks involve significant market volatility and economic risk. Readers should conduct independent due diligence before making capital allocations.