BitMEX Research has injected a new fault line into Bitcoin’s post-quantum security debate with a proposal that would wait for hard evidence of a cryptographic break before triggering defensive action. The idea centers on an evidence-first “canary fund” designed to react only when a quantum attack is proven on-chain, setting it directly against BIP-361’s more aggressive plan for a scheduled migration away from vulnerable legacy outputs.
The disagreement is not academic. It goes to the heart of how Bitcoin should respond to a threat that remains hypothetical in timing but potentially enormous in consequence. With warnings that quantum advances could eventually put vast pools of dormant and exposed coins at risk, the real question is whether the network should force users to move before an attack happens or preserve full spendability until one is unmistakably underway.
— BitMEX Research (@BitMEXResearch) April 15, 2026
BitMEX Wants Proof Before Bitcoin Pulls the Alarm
The BitMEX proposal revolves around a NUMS, or Nothing-Up-My-Sleeve, address generated from a public key for which no private key is known or controlled. In theory, any spend from that address would amount to undeniable proof that elliptic-curve cryptography had been broken, because the canary would be impossible to move unless someone had gained quantum-level cryptographic power.
Under that model, users could voluntarily send BTC to the address, creating a bounty that would naturally attract any attacker capable of breaking the underlying signature scheme. If the coins were ever spent, the network would have a visible and verifiable signal that the threat was real rather than speculative. The appeal of the design is clear: it delays disruptive protocol action until the danger is no longer theoretical.
BitMEX also tried to soften the practical downside of that wait-and-see posture. The proposal contemplates multisignature arrangements for donors and includes the possibility of withdrawing funds if the canary remains untouched, while also outlining quantum-safe recovery paths for coins that might later need to be protected. In that sense, the canary fund is meant to be both a warning system and a bridge to emergency coordination.
BIP-361 Takes the Opposite View of Risk
BIP-361 approaches the same problem from the other direction. Instead of waiting for proof of attack, it sets out a time-based migration path under which legacy outputs would eventually be frozen if users failed to move them to safer destinations. The logic behind that design is blunt: the best way to reduce quantum risk is to shrink the vulnerable supply before an attacker ever gets the chance to exploit it.
Supporters of that approach argue that Bitcoin cannot afford to sit still until the damage begins. In their view, a forced migration is not overreach but preventative maintenance at protocol scale. Critics, however, see something much more invasive in the plan. They argue that freezing unmigrated coins risks crossing a line from security policy into confiscatory governance, especially if inaccessible or lost coins are swept into the same outcome. For them, the danger is not only quantum attack but the precedent of changing spendability by collective decision.
The Real Divide Is About Governance Under Uncertainty
That is why the canary proposal has drawn criticism of its own. Skeptics such as Nic Carter argue that an attacker might not need to announce their capability by claiming the bounty. A sophisticated adversary could quietly extract value from dormant wallets, exchange-controlled addresses or other attractive targets without ever touching the canary, leaving the network exposed while the alarm remains silent. In that view, a reactive system may offer reassurance while still leaving too much room for a stealth attack to unfold.
The trade-off is therefore not between a good solution and a bad one, but between two different kinds of failure. A canary fund preserves user control and avoids premature disruption, yet risks reacting too late. A time-bound freeze reduces the window of exposure, yet risks locking coins and concentrating power over what remains spendable. Put simply, Bitcoin is choosing between delayed certainty and preemptive coercion.
Any serious movement toward either model would affect custody design, migration planning, recovery assumptions and even hedging around supply accessibility. If the canary path gains traction, market participants will need to monitor NUMS-address activity as a live warning signal. If BIP-361 advances instead, they will need to prepare for deadline-driven migration and the possibility of stranded balances. Either way, the quantum debate is no longer just about cryptography but about how Bitcoin decides when fear becomes policy.
