Breaking secp256k1: Quantum Attacks on Bitcoin Signatures | Fred King at BTC Prague

Worth flagging in that talk if it isn't already, the exposure isn't every Bitcoin address equally. Any address that's revealed its public key on chain, reused addresses, old P2PK outputs, is exposed to Shor's algorithm the moment a capable enough machine exists. Fresh P2PKH addresses hide the key until spend. That distinction changes what a realistic migration path needs to cover

Would love to see the recording when it's up. The part that never gets enough airtime in these talks is which addresses are exposed today. Any P2PK output or reused P2PKH address has its public key sitting on chain, and that includes a big chunk of the 2009 to 2011 coins. That's an attack surface that exists right now and just needs the hardware to catch up. Curious if King puts a number on how much of the supply falls into that bucket