The Proposal That Shouldn't Exist
Bitcoin's most sacred property is about to be tested. Not by a government, not by a court — by Changpeng Zhao, the founder of Binance, proposing that the community freeze Satoshi Nakamoto's estimated 1.1 million BTC before quantum computers can steal them.
The suggestion, floated during a podcast with Galaxy Digital's Alex Thorn, sounds simple: give Satoshi six to twelve months to move the coins. If nobody touches them, freeze the addresses.
Simple. And existentially dangerous for what Bitcoin actually is.
What CZ Said
Zhao's argument is pragmatic. Quantum computing is advancing faster than expected. Google Quantum AI published research in March estimating that breaking Bitcoin's elliptic-curve cryptography could require fewer than 500,000 qubits — well below earlier projections. The timeline once measured in decades now feels measured in years.
The March paper sent shockwaves through the cryptography community. It didn't announce a working quantum computer capable of the attack — but it moved the goalposts sharply closer.
Satoshi's coins sit in addresses using early Pay-to-Public-Key (P2PK) scripts, which expose the public key directly. These are the most vulnerable to quantum attack because the public key is already on-chain — a quantum computer wouldn't need to intercept a spending transaction to extract it.
"If we don't do anything with it, then we're basically giving it to somebody who's going to hack it," Zhao said. His fear isn't theoretical. If a quantum-capable attacker drains 1.1 million BTC — roughly 5.2% of total supply — and dumps them on the market, the price destruction would dwarf any crash in Bitcoin's history.
The Case Against
The backlash was immediate and fierce. Investor Michael Terpin called the proposal a direct violation of Bitcoin's permissionless design. Others pointed to the precedent it would set: if the community can freeze Satoshi's coins, it can freeze anyone's.
Bitcoin's censorship resistance isn't a feature among features. It is the feature. The moment a consensus of developers, miners, or node operators can decide whose coins are valid and whose aren't, Bitcoin stops being Bitcoin. It becomes a committee-governed ledger with better branding.
Critics also question the mechanics. A soft fork to freeze specific addresses would require massive coordination. A hard fork would split the network. Neither option is clean, and both expose Bitcoin's governance to the kind of political capture it was designed to resist.
The Middle Ground
Not everyone sits neatly in the "freeze" or "don't freeze" camps. Developer Jameson Lopp and Bitwise's Matt Hougan have argued the real issue isn't Satoshi's coins specifically — it's preparing all of Bitcoin for a post-quantum world. Their proposals range from phased cryptographic upgrades that give every user time to migrate to quantum-resistant signatures, to placing dormant coins in a legal trust structure.
Blockstream's OP_CHECKSHRINCS proposal, which we covered yesterday, takes yet another approach: give Bitcoin a quantum-resistant opcode now, so users can opt into protection before Q-Day arrives. That's a technical solution. CZ's proposal is a governance one — and the distinction matters enormously.
The Bigger Problem
Satoshi's coins aren't the only ones at risk. Any Bitcoin sitting in P2PK addresses, or addresses where the public key has been exposed through a previous transaction, could be vulnerable once quantum reaches sufficient capability. Estimates vary, but somewhere between 4 and 6 million BTC may sit in quantum-vulnerable address types.
Freezing Satoshi's addresses does nothing for the rest. And if the argument becomes "freeze all quantum-vulnerable coins," that means locking up roughly a quarter of all Bitcoin that will ever exist. The cure starts looking worse than the disease.
This is the paradox CZ's proposal exposes. The narrower the freeze, the less effective it is. The broader the freeze, the more it resembles the kind of centralized control Bitcoin was built to eliminate.
The Real Question
Strip away the quantum details and the technical jargon, and this debate is about something fundamental: what is Bitcoin?
If Bitcoin is programmable money with immutable rules, then no one — not CZ, not the core developers, not a majority of miners — can decide to freeze anyone's coins for any reason. You upgrade the cryptography so everyone can protect themselves, and you accept that some coins will eventually be lost or stolen. That's how property works in a permissionless system.
If Bitcoin is a community-governed system where consensus can override individual property rights for the greater good, then the freeze makes sense. But so does every other intervention that follows: sanctions compliance, tax enforcement, seizure of "illicit" funds. The freeze isn't the end of the slippery slope. It's the first step onto it.
Bitcoin Gate Take
CZ is right that the quantum timeline is shortening faster than most people realize. He's wrong about the solution. Freezing specific addresses — no matter how well-intentioned — introduces a precedent fundamentally incompatible with Bitcoin's core value proposition. The correct response is what Blockstream and others are building: quantum-resistant cryptographic upgrades that let users opt in voluntarily. If Satoshi doesn't migrate, those coins become the first casualty of Q-Day. That's the price of a truly permissionless system. Watch for BIP proposals in the next 6-12 months — that's where this battle will actually be fought.