Bitcoin Quantum Exposure
Current unspent outputs grouped by whether the exact spending key is cryptographically linked to curve-valid secp256k1 public material disclosed on the canonical chain.
Verified through block #971,156 · 2026-10-12 23:35:27 UTCVerified
Threat model: Hypothetical fast secret-scalar recovery from a curve-valid secp256k1 public point. Exposure is a precondition under this hypothetical model—not a claim that bitcoin is stealable today. Taproot key-path and hash-locked outputs without a strict disclosure proof remain separate from proven exposure.
Classification states
The five states exactly partition every UTXO and every satoshi in the snapshot.
| State | Outputs | UTXO share | Value | Value share |
|---|---|---|---|---|
| Strict proof: key exposed | 101,157,358 | 61.3289% | 6,919,886.75045140 BTC | 34.4322% |
| Invalid key material | 2,295 | 0.0014% | 0.22778450 BTC | 0.0000% |
| Revealed script unresolved | 80,412 | 0.0488% | 94,256.29324169 BTC | 0.4690% |
| Unsupported semantics | 293,858 | 0.1782% | 2,628.14213994 BTC | 0.0131% |
| No strict disclosure proof | 63,408,603 | 38.4428% | 13,080,364.08536076 BTC | 65.0857% |
Classification distribution
Snapshot UTXOs or BTC value by classification state. These categories are descriptive, not a safety rating.
Proven exposure by output type
Only the strict-proof state is shown here. Types with zero exposure are omitted; the CSV remains complete.
| Output type | Exposed outputs | Share of proven | Exposed value |
|---|---|---|---|
| P2PK compressed | 10,211 | 0.0101% | 5,635.83807319 BTC |
| P2PK uncompressed | 34,334 | 0.0339% | 1,708,982.97240680 BTC |
| P2PKH | 17,377,548 | 17.1787% | 1,180,201.57136768 BTC |
| P2SH | 5,459,432 | 5.3970% | 1,106,405.96394487 BTC |
| Bare multisig | 2,463,977 | 2.4358% | 60.11486085 BTC |
| P2WPKH | 21,617,016 | 21.3697% | 1,999,834.09199659 BTC |
| P2WSH | 421,405 | 0.4166% | 701,123.94294648 BTC |
| P2TR | 53,773,435 | 53.1582% | 217,642.25485494 BTC |
Exposed value by output type
Strict-proof subset, ranked by BTC or UTXO count. Each label includes its share of the selected metric.
Strict proof path
Why a current UTXO is classified as proven exposed.
| Reason | Outputs | Share of proven | Value |
|---|---|---|---|
| Direct P2pk | 44,542 | 0.0440% | 1,714,618.71046445 BTC |
| Direct P2tr | 53,773,435 | 53.1582% | 217,642.25485494 BTC |
| Direct Bare Multisig | 2,463,980 | 2.4358% | 60.21487639 BTC |
| Revealed P2pkh | 38,994,564 | 38.5484% | 3,180,035.66336427 BTC |
| Revealed P2sh P2pk | 207 | 0.0002% | 2,470.24568252 BTC |
| Revealed P2sh P2pkh | 33 | 0.0000% | 0.18280167 BTC |
| Revealed P2sh Multisig | 967,722 | 0.9567% | 124,190.01989302 BTC |
| Revealed P2sh P2wpkh Complete Input | 4,245,655 | 4.1971% | 832,439.44974639 BTC |
| Revealed P2sh P2wsh Complete Input | 245,815 | 0.2430% | 147,306.06582127 BTC |
| Revealed P2wsh P2pk | 899 | 0.0009% | 0.04890081 BTC |
| Revealed P2wsh P2pkh | 4 | 0.0000% | 0.00284773 BTC |
| Revealed P2wsh Multisig | 420,502 | 0.4157% | 701,123.89119794 BTC |
Exposure by proof path
Measured strict-proof exposure grouped by the validated on-chain linkage.
Creation age of proven outputs
Age of the current UTXO at the fixed snapshot anchor.
| Age band | Outputs | Share of proven | Value |
|---|---|---|---|
| < 1d | 193,188 | 0.1910% | 111,422.12251484 BTC |
| 1d–< 7d | 501,828 | 0.4961% | 274,571.00863909 BTC |
| 7d–< 30d | 1,144,827 | 1.1317% | 374,504.16687489 BTC |
| 30d–< 90d | 2,073,607 | 2.0499% | 613,715.75786249 BTC |
| 90d–< 365d | 7,896,794 | 7.8064% | 1,329,216.81190008 BTC |
| 1y–< 5y | 72,118,939 | 71.2938% | 1,513,834.04531759 BTC |
| 5y–< 10y | 11,557,670 | 11.4254% | 673,899.49462551 BTC |
| ≥ 10y | 5,670,505 | 5.6056% | 2,028,723.34271691 BTC |
Disclosure age of proven outputs
Time from the first strict on-chain disclosure to the snapshot anchor.
| Disclosure age | Outputs | Share of proven | Value |
|---|---|---|---|
| < 1d | 72,106 | 0.0713% | 11,705.69299411 BTC |
| 1d–< 7d | 237,754 | 0.2350% | 33,777.50983687 BTC |
| 7d–< 30d | 806,821 | 0.7976% | 87,374.54061598 BTC |
| 30d–< 90d | 1,652,432 | 1.6335% | 183,146.46262476 BTC |
| 90d–< 365d | 6,480,886 | 6.4067% | 819,528.14837486 BTC |
| 1y–< 5y | 73,549,190 | 72.7077% | 2,599,202.50419557 BTC |
| 5y–< 10y | 11,916,264 | 11.7799% | 1,151,016.03530470 BTC |
| ≥ 10y | 6,441,905 | 6.3682% | 2,034,135.85650455 BTC |
Age distribution
Compare output creation age with time since first strict on-chain disclosure. Labels include the selected metric's share.
Identity domains
Non-additive identity views; compressed and x-only domains must not be summed together.
| Identity domain | Identities | Outputs | Value |
|---|---|---|---|
| Ecdsa Point33 | 13,328,733 | 47,383,923 | 6,702,244.49559646 BTC |
| Taproot Xonly32 | 5,081,695 | 53,773,435 | 217,642.25485494 BTC |
Balance concentration
Non-additive cumulative thresholds by identity domain, including the strict-proof subset.
| Domain | Minimum balance | Groups | Outputs | Value | Proven outputs | Proven value |
|---|---|---|---|---|---|---|
| Ecdsa Point33 | 0.00000000 BTC | 7,718,527 | 39,038,816 | 4,894,519.11745674 BTC | 39,038,816 | 4,894,519.11745674 BTC |
| Ecdsa Point33 | 1.00000000 BTC | 117,345 | 5,530,277 | 4,776,203.36305078 BTC | 5,530,277 | 4,776,203.36305078 BTC |
| Ecdsa Point33 | 10.00000000 BTC | 47,227 | 1,026,428 | 4,591,841.88403865 BTC | 1,026,428 | 4,591,841.88403865 BTC |
| Ecdsa Point33 | 100.00000000 BTC | 3,270 | 337,562 | 2,619,113.42696251 BTC | 337,562 | 2,619,113.42696251 BTC |
| Ecdsa Point33 | 1,000.00000000 BTC | 385 | 169,214 | 1,722,059.38200741 BTC | 169,214 | 1,722,059.38200741 BTC |
| Taproot Xonly32 | 0.00000000 BTC | 5,081,791 | 53,773,689 | 217,652.55455445 BTC | 53,773,689 | 217,652.55455445 BTC |
| Taproot Xonly32 | 1.00000000 BTC | 13,909 | 744,972 | 195,580.34051913 BTC | 744,972 | 195,580.34051913 BTC |
| Taproot Xonly32 | 10.00000000 BTC | 1,947 | 37,523 | 163,849.98802731 BTC | 37,523 | 163,849.98802731 BTC |
| Taproot Xonly32 | 100.00000000 BTC | 228 | 18,926 | 120,999.71766832 BTC | 18,926 | 120,999.71766832 BTC |
| Taproot Xonly32 | 1,000.00000000 BTC | 31 | 978 | 76,739.50378239 BTC | 978 | 76,739.50378239 BTC |
| P2sh Hash160 | 0.00000000 BTC | 6,152,147 | 11,879,734 | 3,726,352.90893281 BTC | 5,459,489 | 1,106,601.32562233 BTC |
| P2sh Hash160 | 1.00000000 BTC | 183,870 | 1,174,514 | 3,495,523.48601570 BTC | 771,524 | 1,090,962.77845268 BTC |
| P2sh Hash160 | 10.00000000 BTC | 23,060 | 313,018 | 3,082,331.00483197 BTC | 232,242 | 1,055,015.74637817 BTC |
| P2sh Hash160 | 100.00000000 BTC | 3,879 | 109,466 | 2,582,192.69613998 BTC | 92,406 | 990,495.63876326 BTC |
| P2sh Hash160 | 1,000.00000000 BTC | 352 | 19,534 | 1,509,848.96501185 BTC | 17,178 | 876,365.28848634 BTC |
| P2wsh Sha256 | 0.00000000 BTC | 1,184,183 | 2,815,474 | 1,592,995.09518914 BTC | 421,372 | 701,119.97834005 BTC |
| P2wsh Sha256 | 1.00000000 BTC | 37,683 | 150,304 | 1,558,967.84525687 BTC | 94,357 | 699,421.62499079 BTC |
| P2wsh Sha256 | 10.00000000 BTC | 6,817 | 67,646 | 1,477,022.73417989 BTC | 53,008 | 696,651.73371043 BTC |
| P2wsh Sha256 | 100.00000000 BTC | 1,543 | 20,462 | 1,306,287.91634259 BTC | 17,721 | 688,805.73693233 BTC |
| P2wsh Sha256 | 1,000.00000000 BTC | 224 | 4,541 | 895,868.31069518 BTC | 4,036 | 631,795.86448196 BTC |
| Bare Multisig Script Sha256 | 0.00000000 BTC | 2,440,061 | 2,466,155 | 60.15831073 BTC | 2,463,977 | 60.11486085 BTC |
| Bare Multisig Script Sha256 | 1.00000000 BTC | 4 | 10 | 5.98014231 BTC | 10 | 5.98014231 BTC |
| Bare Multisig Script Sha256 | 10.00000000 BTC | 0 | 0 | 0.00000000 BTC | 0 | 0.00000000 BTC |
| Bare Multisig Script Sha256 | 100.00000000 BTC | 0 | 0 | 0.00000000 BTC | 0 | 0.00000000 BTC |
| Bare Multisig Script Sha256 | 1,000.00000000 BTC | 0 | 0 | 0.00000000 BTC | 0 | 0.00000000 BTC |
Sanitized proof samples
Auditable chain coordinates without raw scripts, key material, or internal identity values.
| Current outpoint | State | Type | Value | Created | First evidence | Proof kind |
|---|---|---|---|---|---|---|
| 00000d321149…:0 | Strict proof: key exposed | P2PK uncompressed | 0.00000800 BTC | 940,511 | 0 | Direct Bare Multisig Script |
| 033e83e3204b…:0 | No strict disclosure proof | P2PKH | 0.00065279 BTC | 475,387 | – | |
| 183bde2cb0a9…:0 | Invalid key material | P2TR | 0.00000500 BTC | 904,026 | 904,026 | |
| 1dfe487d9eea…:1 | Unsupported semantics | Unknown witness version | 0.00000546 BTC | 950,699 | – | |
| 41a3e9ee1910…:2 | Invalid key material | P2PK compressed | 0.00005376 BTC | 774,743 | 774,743 | |
| 44001fc204c0…:29 | Invalid key material | P2WPKH | 0.00004558 BTC | 869,013 | 317,679 | Original Sec Hash160 Match |
| 577c97463737…:13 | Strict proof: key exposed | P2SH | 0.00024878 BTC | 908,377 | 812,649 | Exact P2sh Multisig Proof |
| 600ae20a8502…:0 | Strict proof: key exposed | P2WPKH | 0.00000546 BTC | 833,988 | 797,960 | Original Sec Hash160 Match |
| 696f4c3686ac…:1 | Unsupported semantics | Other nonstandard | 0.00007800 BTC | 320,938 | – | |
| 74b36ba66fcf…:0 | Revealed script unresolved | P2WSH | 0.00000330 BTC | 942,202 | 957,354 | Exact P2wsh Script Hash |
| 7f46911477fa…:0 | Strict proof: key exposed | P2PK compressed | 0.00024320 BTC | 251,871 | 251,871 | Direct P2pk Script |
| a801b67f05e7…:12 | No strict disclosure proof | P2WPKH | 0.00008577 BTC | 679,159 | – | |
| b4970cef45fb…:0 | No strict disclosure proof | P2SH | 0.90000000 BTC | 665,538 | – | |
| bfdb7bef0903…:1 | Strict proof: key exposed | P2PKH | 0.00000546 BTC | 572,832 | 572,833 | Original Sec Hash160 Match |
| c107d4950f2f…:27 | Invalid key material | P2PKH | 0.00000685 BTC | 704,162 | 559,266 | Original Sec Hash160 Match |
| d176d4960a78…:2 | No strict disclosure proof | P2WSH | 0.00000330 BTC | 684,110 | – | |
| d9e4a4ee63cb…:0 | Invalid key material | Bare multisig | 0.00000684 BTC | 370,374 | 370,374 | |
| eb96a65e4a33…:1 | Strict proof: key exposed | Bare multisig | 0.00000790 BTC | 903,379 | 786,182 | Direct Bare Multisig Script |
| f6206a176b02…:2 | Invalid key material | P2PK uncompressed | 0.00010000 BTC | 506,129 | 506,129 | |
| fd8c886da860…:0 | Strict proof: key exposed | P2TR | 0.00046794 BTC | 970,364 | 956,512 | Direct Bip340 Xonly Output |
| fe401cb9e464…:0 | Revealed script unresolved | P2SH | 0.00000546 BTC | 832,805 | 832,805 | Exact P2sh P2wpkh Same Input |
| ffffaa697d07…:1 | Strict proof: key exposed | P2WSH | 0.00116132 BTC | 931,180 | 866,963 | Exact P2wsh Multisig Proof |
Diagnostics
Explicit ambiguity and unsupported-path accounting, never silently folded into proven exposure.
| Diagnostic | Occurrences | Outputs | Value |
|---|---|---|---|
| Duplicate Target Identity | 107,723,643 | 0 | 0.00000000 BTC |
| Future Creation Timestamp | 0 | 0 | 0.00000000 BTC |
| Future Disclosure Timestamp | 0 | 0 | 0.00000000 BTC |
| Invalid Original Sec | 1,094,640 | 786,915 | 7.25561108 BTC |
| Invalid Taproot Lift X | 71 | 71 | 0.08432552 BTC |
| Malformed Scriptsig Push Parse | 0 | 0 | 0.00000000 BTC |
| Malformed Witness Script | 99 | 18 | 0.02938117 BTC |
| Witness V0 Uncompressed Key | 0 | 23 | 0.12343609 BTC |