Top Bitcoin addresses currently holding BTC at quantum-exposed scripts: P2PK, bare multisig, P2TR, and any reused hashed type where the revealed redeem script contained a pubkey.
Last refreshed 2026-06-28
from our weekly UTXO walk. Next refresh: next Sunday 06:00 UTC.
Bitcoin Quantum Exposure: the full report
Total BTC at risk, breakdown by script type, balance
distribution, concentration curve (Gini), exposure by age, and
week-over-week change. Live data refreshed every Sunday from
our own UTXO walk. The quarterly PDF (Baseline 2026 Q2) is
linked from the report page.
New to this? Read the plain-English explainer first.
This page is the live-data view for advanced readers. Read our
companion rabbit hole on LearnBitcoin.com for the layman's
walkthrough of quantum computing and Bitcoin:
what it actually threatens, why P2PK and P2TR are exposed by
design, and what you can do today.
STRICT redeem-script parsing. P2SH and P2WSH
addresses appear here only when the actually-revealed redeem script
contained a pubkey + CHECKSIG-family opcode (or any
CHECKMULTISIG). Timelock-only and hash-preimage scripts don't
leak pubkeys on spend and are correctly excluded. That filter is
why our exposed-supply figure is the rigorous lower bound and
differs from broader counts.
Why ancient P2PK dominates the 5+ year bucket.
The largest unmoved slice of currently-exposed BTC is Satoshi-era
P2PK coinbase rewards from a single early miner whose ExtraNonce
fingerprint identifies roughly 22% of all blocks in Bitcoin's first
year. This is the
Patoshi pattern. Those
coins have been forensically reachable since the day they were
mined and have not moved in over a decade; they anchor the bottom
of the aged-exposure histogram.
Top 20 exposed addresses by current balance
Joined from the most recent weekly rich-list
snapshot. Showing the largest single-address balances whose pubkey is
already visible on-chain. Each row links to the address lookup, where
you can see the full UTXO breakdown and the originating spend that
revealed the pubkey.
ChainQuery's attribution research identifies
10 of 20
above as known institutional custody:
Binance, Robinhood, Bitfinex, Tether, Upbit, Binance BTCB Reserve, OKEx, Bybit, and Binance Pool,
totalling 1,058,982 BTC
(70.4% of the top 20;
15.1% of all at-risk supply).
A further 4 are low-confidence candidates pending corroboration:
Kraken, Coincheck, Deribit, and Bitfinex.
The remaining 6
are mostly modern bech32 addresses consistent with other exchange cold
storage but not yet positively tied to an entity.
Further reading on the migration framework this work measures
against: BIP-361 on LearnBitcoin.com.
For a companion on-chain measurement using BIP-361's conservative
parsing rules, see
Wicked Smart Bitcoin's quantum-exposure dashboard
(34.55% at block 951,000). Their figure tracks BIP-361's upper bound;
ours tracks the strict lower bound. Real exposure sits between.