Top Bitcoin addresses currently holding BTC at quantum-exposed scripts: P2PK, bare multisig, P2TR, and any reused hashed type where the revealed redeem script contained a pubkey.
Last refreshed 2026-06-07
from our weekly UTXO walk. Next refresh: next Sunday 06:00 UTC.
Bitcoin Quantum Exposure: the full report
Total BTC at risk, breakdown by script type, balance
distribution, concentration curve (Gini), exposure by age, and
week-over-week change. Live data refreshed every Sunday from
our own UTXO walk. The quarterly PDF (Baseline 2026 Q2) is
linked from the report page.
New to this? Read the plain-English explainer first.
This page is the live-data view for advanced readers. Read our
companion rabbit hole on LearnBitcoin.com for the layman's
walkthrough of quantum computing and Bitcoin:
what it actually threatens, why P2PK and P2TR are exposed by
design, and what you can do today.
STRICT redeem-script parsing. P2SH and P2WSH
addresses appear here only when the actually-revealed redeem script
contained a pubkey + CHECKSIG-family opcode (or any
CHECKMULTISIG). Timelock-only and hash-preimage scripts don't
leak pubkeys on spend and are correctly excluded. That filter is
why our exposed-supply figure is the rigorous lower bound and
differs from broader counts.
Why ancient P2PK dominates the 5+ year bucket.
The largest unmoved slice of currently-exposed BTC is Satoshi-era
P2PK coinbase rewards from a single early miner whose ExtraNonce
fingerprint identifies roughly 22% of all blocks in Bitcoin's first
year. This is the
Patoshi pattern. Those
coins have been forensically reachable since the day they were
mined and have not moved in over a decade; they anchor the bottom
of the aged-exposure histogram.
Top 20 exposed addresses by current balance
Joined from the most recent weekly rich-list
snapshot. Showing the largest single-address balances whose pubkey is
already visible on-chain. Each row links to the address lookup, where
you can see the full UTXO breakdown and the originating spend that
revealed the pubkey.
ChainQuery's attribution research identifies
7 of 20
above as known institutional custody:
Robinhood, Bitfinex, Tether, Upbit, OKEx, Bybit, and Binance Pool,
totalling 565,069 BTC
(52.2% of the top 20;
11.1% of all at-risk supply).
A further 4 are low-confidence candidates pending corroboration:
Kraken, Deribit, Coincheck, and Bitfinex.
The remaining 9
are mostly modern bech32 addresses consistent with other exchange cold
storage but not yet positively tied to an entity.
Further reading on the migration framework this work measures
against: BIP-361 on LearnBitcoin.com.
For a companion on-chain measurement using BIP-361's conservative
parsing rules, see
Wicked Smart Bitcoin's quantum-exposure dashboard
(34.55% at block 951,000). Their figure tracks BIP-361's upper bound;
ours tracks the strict lower bound. Real exposure sits between.