Paradigm'S Pacts Proposal Gives Satoshi A Quantum Rescue Path

@paradigm general partner Dan Robinson published a proposal on May 1, 2026 for Provable Address-Control Timestamps (PACTs) — a mechanism that would allow $BTC holders to privately record proof of wallet ownership today, without moving any coins or revealing their identity.

What PACTs Do — And Why They Matter Now

Robinson's proposal revolves around the concept of Provable Address-Control Timestamps. The core idea is not to move coins, but to timestamp proof of ownership at a specific date and reveal nothing to the public until the wallet owner needs to spend.

Robinson describes a three-step process using existing Bitcoin tools and the OpenTimestamps service. A holder generates a 256-bit secret salt, signs a full message with BIP-322 to prove control of a vulnerable scriptPubKey, hashes the signed message, and submits the hash to OpenTimestamps. OpenTimestamps then batches hashes into a Merkle tree and embeds the root in a Bitcoin OP_RETURN output. The initial timestamping step requires no onchain transaction and incurs no onchain fees.

If Bitcoin later activates a soft fork that freezes quantum-vulnerable coins, the protocol could include a rescue path that accepts a STARK proof — a type of zero-knowledge proof that remains secure against quantum computers — showing the holder created their commitment before quantum hardware existed. The holder submits that proof when they want to spend, and the network releases the coins. The redemption reveals nothing about which address, which amount, or even when the original timestamp was created.

Over 1.1 million $BTC worth roughly $75 billion in Satoshi-linked wallets face exposure if cryptographically relevant quantum computers emerge. Pre-2012 wallets, including most of Satoshi's known addresses, do not use BIP-32 and cannot be rescued through existing paths. PACTs are designed specifically to close that gap.

A Softer Path Than BIP-361's Freeze

The backdrop to Robinson's proposal is BIP-361, the draft Bitcoin Improvement Proposal co-authored by Casa CTO Jameson Lopp. BIP-361 would phase out quantum-vulnerable addresses on a fixed five-year timeline and freeze any coins that fail to migrate — including roughly 1 million bitcoin attributed to Satoshi Nakamoto and an estimated 5.6 million coins that have not moved in over a decade.

Reaction has been swift and deeply divided. Across developer forums, some have labelled BIP-361 "authoritarian" and "predatory," arguing it could undermine property rights and set a troubling precedent, especially regarding dormant holdings like Satoshi's coins.

PACTs do not require Bitcoin to decide today whether a sunset is necessary. They only give holders a silent, no-onchain-cost way to preserve evidence that may become useful if such a sunset is ever adopted.

There are real limitations to acknowledge. The verification infrastructure does not currently exist in Bitcoin and would require what Robinson calls "substantial new plumbing." PACTs also do not extend cleanly to multisig wallets, complex scripts, or custodial accounts, and would require additional standardisation. Crucially, the protocol only protects Satoshi if Satoshi himself — or whoever currently controls those keys — makes the commitment. If Satoshi is genuinely gone, no PACT can be retroactively created.

Robinson acknowledged the design is illustrative and needs review from cryptographers, Bitcoin developers, and the broader community. Still, given the low cost of acting early, the proposal offers a meaningful hedge for long-term holders ahead of any eventual quantum deadline.

Sources:
Paradigm — PACTs: Protecting Your Bitcoin From a Quantum Sunset
CoinDesk — New Bitcoin Quantum Proposal Offers Satoshi Nakamoto a Way to Prove Control Without Moving BTC
Bitcoin.com News — Bitcoin Developers Propose Freezing Coins Under BIP-361