Bitcoin Improvement Proposal 360 Places Quantum Resistance on Protocol Road Map for First Time
BIP-360 introduces a new output type that eliminates public key exposure during transactions, marking Bitcoin's first formal step toward addressing quantum computing threats.
Bitcoin developers have published Improvement Proposal 360 (BIP-360), officially placing quantum resistance on the protocol's technical road map for the first time as of March 2026 [1].
The proposal introduces a new transaction output type called Pay-to-Merkle-Root (P2MR), which is modeled closely on Taproot but removes one critical feature: the key path spending option. Under the current Taproot design, spending a coin can expose a public key on the blockchain — precisely the vulnerability that a sufficiently powerful quantum computer running Shor's algorithm could theoretically exploit to derive private keys [1].
P2MR eliminates that exposure entirely by requiring all spending to pass through hash-based script paths instead. Importantly, the proposal preserves full smart contract functionality, including multisig arrangements, timelocks and complex custody structures [1].
However, the proposal has clear limitations. Existing Bitcoin holdings are not automatically protected — users would need to manually migrate funds to P2MR addresses. BIP-360 also does not replace ECDSA or Schnorr signatures with post-quantum alternatives such as lattice-based schemes, meaning it reduces rather than eliminates quantum risk [1].
If adopted, implementation would follow a phased soft fork approach, with wallets, exchanges and custodians gradually adding P2MR support — a process developers compare to the incremental rollouts of SegWit and Taproot [1].
Sources
AI-Assisted Content
This article was created with AI assistance. All facts are sourced from verified news outlets.