Bitcoin Quantum Exposure
Current unspent outputs grouped by whether the exact spending key is cryptographically linked to curve-valid secp256k1 public material disclosed on the canonical chain.
Threat model: Hypothetical fast secret-scalar recovery from a curve-valid secp256k1 public point. Exposure is a precondition under this hypothetical model—not a claim that bitcoin is stealable today. Taproot key-path and hash-locked outputs without a strict disclosure proof remain separate from proven exposure.
Classification states
The five states exactly partition every UTXO and every satoshi in the snapshot.
| State | Outputs | UTXO share | Value | Value share |
|---|---|---|---|---|
| Strict proof: key exposed | 102,595,758 | 61.7066% | 6,920,302.61506132 BTC | 34.4962% |
| Invalid key material | 2,287 | 0.0014% | 0.21294407 BTC | 0.0000% |
| Revealed script unresolved | 81,171 | 0.0488% | 97,889.05621188 BTC | 0.4880% |
| Unsupported semantics | 291,227 | 0.1752% | 2,628.12639185 BTC | 0.0131% |
| No strict disclosure proof | 63,293,372 | 38.0680% | 13,040,249.87496992 BTC | 65.0028% |
Proven exposure by output type
Only the strict-proof state is shown here. Zero rows remain explicit in the downloadable dataset.
| Output type | Exposed outputs | Share of proven | Exposed value |
|---|---|---|---|
| P2PK compressed | 10,266 | 0.0100% | 6,136.55992472 BTC |
| P2PK uncompressed | 34,345 | 0.0335% | 1,709,682.97238126 BTC |
| P2PKH | 17,459,852 | 17.0181% | 1,176,399.85050750 BTC |
| P2SH | 5,634,447 | 5.4919% | 1,181,321.66931180 BTC |
| Bare multisig | 2,447,288 | 2.3854% | 60.27943304 BTC |
| P2WPKH | 22,237,706 | 21.6751% | 1,942,844.53766622 BTC |
| P2WSH | 383,976 | 0.3743% | 679,397.46949776 BTC |
| P2TR | 54,387,878 | 53.0118% | 224,459.27633902 BTC |
| P2a Anchor | 0 | 0.0000% | 0.00000000 BTC |
| Unknown witness version | 0 | 0.0000% | 0.00000000 BTC |
| Empty | 0 | 0.0000% | 0.00000000 BTC |
| Other nonstandard | 0 | 0.0000% | 0.00000000 BTC |
| Op Return Unexpected | 0 | 0.0000% | 0.00000000 BTC |
| Other Provably Unspendable | 0 | 0.0000% | 0.00000000 BTC |
Strict proof path
Why a current UTXO is classified as proven exposed.
| Reason | Outputs | Share of proven | Value |
|---|---|---|---|
| Direct P2pk | 44,611 | 0.0435% | 1,715,819.53230598 BTC |
| Direct P2tr | 54,387,878 | 53.0118% | 224,459.27633902 BTC |
| Direct Bare Multisig | 2,447,288 | 2.3854% | 60.27943304 BTC |
| Revealed P2pkh | 17,459,852 | 17.0181% | 1,176,399.85050750 BTC |
| Revealed P2wpkh | 22,237,706 | 21.6751% | 1,942,844.53766622 BTC |
| Revealed P2sh P2pk | 215 | 0.0002% | 2,490.25110446 BTC |
| Revealed P2sh P2pkh | 33 | 0.0000% | 0.18280167 BTC |
| Revealed P2sh Multisig | 1,031,815 | 1.0057% | 146,250.80002615 BTC |
| Revealed P2sh P2wpkh Complete Input | 4,341,555 | 4.2317% | 882,108.29650797 BTC |
| Revealed P2sh P2wsh Complete Input | 260,829 | 0.2542% | 150,472.13887155 BTC |
| Revealed P2wsh P2pk | 897 | 0.0009% | 0.04769107 BTC |
| Revealed P2wsh P2pkh | 4 | 0.0000% | 0.00284773 BTC |
| Revealed P2wsh Multisig | 383,075 | 0.3734% | 679,397.41895896 BTC |
Creation age of proven outputs
Age of the current UTXO at the fixed snapshot anchor.
| Age band | Outputs | Share of proven | Value |
|---|---|---|---|
| Lt 1d | 150,735 | 0.1469% | 91,941.59874300 BTC |
| 1d To Lt 7d | 486,295 | 0.4740% | 217,883.25894763 BTC |
| 7d To Lt 30d | 1,150,336 | 1.1212% | 588,439.20653166 BTC |
| 30d To Lt 90d | 2,420,058 | 2.3588% | 497,240.29686674 BTC |
| 90d To Lt 365d | 9,691,074 | 9.4459% | 1,325,898.63863826 BTC |
| 1y To Lt 5y | 71,597,076 | 69.7856% | 1,497,554.48234320 BTC |
| 5y To Lt 10y | 11,776,124 | 11.4782% | 675,447.24768893 BTC |
| Ge 10y | 5,324,060 | 5.1894% | 2,025,897.88530190 BTC |
Disclosure age of proven outputs
Time from the first strict on-chain disclosure to the snapshot anchor.
| Disclosure age | Outputs | Share of proven | Value |
|---|---|---|---|
| Lt 1d | 22,647 | 0.0221% | 6,877.36691006 BTC |
| 1d To Lt 7d | 122,514 | 0.1194% | 14,269.80990691 BTC |
| 7d To Lt 30d | 424,599 | 0.4139% | 60,956.87369953 BTC |
| 30d To Lt 90d | 1,299,031 | 1.2662% | 137,142.66427043 BTC |
| 90d To Lt 365d | 6,050,857 | 5.8978% | 1,170,302.18599814 BTC |
| 1y To Lt 5y | 76,179,450 | 74.2520% | 2,339,597.54347502 BTC |
| 5y To Lt 10y | 11,935,141 | 11.6332% | 1,158,548.49612128 BTC |
| Ge 10y | 6,561,519 | 6.3955% | 2,032,607.67467995 BTC |
| Not Disclosed | 0 | 0.0000% | 0.00000000 BTC |
| Not Applicable | 0 | 0.0000% | 0.00000000 BTC |
Identity domains
Non-additive identity views; compressed and x-only domains must not be summed together.
| Identity domain | Identities | Outputs | Value |
|---|---|---|---|
| Ecdsa Point33 | 13,255,082 | 48,207,880 | 6,695,843.33872230 BTC |
| Taproot Xonly32 | 4,969,493 | 54,387,878 | 224,459.27633902 BTC |
Balance concentration
Non-additive cumulative thresholds by identity domain, including the strict-proof subset.
| Domain | Minimum balance | Groups | Outputs | Value | Proven outputs | Proven value |
|---|---|---|---|---|---|---|
| Ecdsa Point33 | 0.00000000 BTC | 7,603,414 | 39,742,169 | 4,835,063.92047970 BTC | 39,742,169 | 4,835,063.92047970 BTC |
| Ecdsa Point33 | 1.00000000 BTC | 120,451 | 6,068,094 | 4,715,502.48043886 BTC | 6,068,094 | 4,715,502.48043886 BTC |
| Ecdsa Point33 | 10.00000000 BTC | 47,639 | 1,529,034 | 4,524,221.56894038 BTC | 1,529,034 | 4,524,221.56894038 BTC |
| Ecdsa Point33 | 100.00000000 BTC | 3,268 | 323,409 | 2,541,630.98383713 BTC | 323,409 | 2,541,630.98383713 BTC |
| Ecdsa Point33 | 1,000.00000000 BTC | 383 | 161,206 | 1,654,344.95372510 BTC | 161,206 | 1,654,344.95372510 BTC |
| Taproot Xonly32 | 0.00000000 BTC | 4,969,493 | 54,387,878 | 224,459.27633902 BTC | 54,387,878 | 224,459.27633902 BTC |
| Taproot Xonly32 | 1.00000000 BTC | 13,303 | 711,341 | 203,142.13962599 BTC | 711,341 | 203,142.13962599 BTC |
| Taproot Xonly32 | 10.00000000 BTC | 1,851 | 30,243 | 172,846.35006045 BTC | 30,243 | 172,846.35006045 BTC |
| Taproot Xonly32 | 100.00000000 BTC | 215 | 12,354 | 132,276.47798911 BTC | 12,354 | 132,276.47798911 BTC |
| Taproot Xonly32 | 1,000.00000000 BTC | 35 | 787 | 92,016.37719927 BTC | 787 | 92,016.37719927 BTC |
| P2sh Hash160 | 0.00000000 BTC | 6,246,488 | 12,154,226 | 3,914,547.84367577 BTC | 5,634,447 | 1,181,321.66931180 BTC |
| P2sh Hash160 | 1.00000000 BTC | 191,643 | 1,223,256 | 3,676,265.05603310 BTC | 803,116 | 1,165,412.28341956 BTC |
| P2sh Hash160 | 10.00000000 BTC | 24,045 | 327,097 | 3,244,767.37527122 BTC | 241,763 | 1,127,614.71576642 BTC |
| P2sh Hash160 | 100.00000000 BTC | 4,034 | 114,529 | 2,723,509.04706132 BTC | 94,852 | 1,061,350.11429351 BTC |
| P2sh Hash160 | 1,000.00000000 BTC | 386 | 23,904 | 1,605,072.79245866 BTC | 19,045 | 936,503.75957131 BTC |
| P2wsh Sha256 | 0.00000000 BTC | 1,178,470 | 2,734,242 | 1,425,646.93793530 BTC | 383,976 | 679,397.46949776 BTC |
| P2wsh Sha256 | 1.00000000 BTC | 29,765 | 136,909 | 1,395,245.06712644 BTC | 86,934 | 677,908.57331594 BTC |
| P2wsh Sha256 | 10.00000000 BTC | 5,691 | 71,335 | 1,332,761.86712367 BTC | 57,145 | 675,102.04964477 BTC |
| P2wsh Sha256 | 100.00000000 BTC | 1,228 | 27,012 | 1,180,150.06581125 BTC | 23,000 | 666,050.86533633 BTC |
| P2wsh Sha256 | 1,000.00000000 BTC | 182 | 8,486 | 815,815.62594712 BTC | 8,011 | 607,854.86939314 BTC |
| Bare Multisig Script Sha256 | 0.00000000 BTC | 2,423,686 | 2,449,466 | 60.32288292 BTC | 2,447,288 | 60.27943304 BTC |
| Bare Multisig Script Sha256 | 1.00000000 BTC | 4 | 10 | 5.98014231 BTC | 10 | 5.98014231 BTC |
| Bare Multisig Script Sha256 | 10.00000000 BTC | 0 | 0 | 0.00000000 BTC | 0 | 0.00000000 BTC |
| Bare Multisig Script Sha256 | 100.00000000 BTC | 0 | 0 | 0.00000000 BTC | 0 | 0.00000000 BTC |
| Bare Multisig Script Sha256 | 1,000.00000000 BTC | 0 | 0 | 0.00000000 BTC | 0 | 0.00000000 BTC |
Sanitized proof samples
Auditable chain coordinates without raw scripts, key material, or internal identity values.
| Current outpoint | State | Type | Value | Created | First evidence | Proof kind |
|---|---|---|---|---|---|---|
| 00000d321149…:0 | Strict proof: key exposed | P2PK uncompressed | 0.00000800 BTC | 940,511 | 0 | Direct Bare Multisig Script |
| 033e83e3204b…:0 | No strict disclosure proof | P2PKH | 0.00065279 BTC | 475,387 | – | |
| 183bde2cb0a9…:0 | Invalid key material | P2TR | 0.00000500 BTC | 904,026 | 904,026 | |
| 1dfe487d9eea…:1 | Unsupported semantics | Unknown witness version | 0.00000546 BTC | 950,699 | – | |
| 315a08706f6f…:0 | Strict proof: key exposed | P2TR | 0.00137197 BTC | 959,573 | 955,350 | Direct Bip340 Xonly Output |
| 41a3e9ee1910…:2 | Invalid key material | P2PK compressed | 0.00005376 BTC | 774,743 | 774,743 | |
| 44001fc204c0…:29 | Invalid key material | P2WPKH | 0.00004558 BTC | 869,013 | 317,679 | Original Sec Hash160 Match |
| 481a269c9deb…:0 | Strict proof: key exposed | P2PKH | 0.00093160 BTC | 890,664 | 942,522 | Original Sec Hash160 Match |
| 492c1f8997be…:1 | Strict proof: key exposed | P2WPKH | 0.00251085 BTC | 920,268 | 870,440 | Original Sec Hash160 Match |
| 577c97463737…:13 | Strict proof: key exposed | P2SH | 0.00024878 BTC | 908,377 | 812,649 | Exact P2sh Multisig Proof |
| 696f4c3686ac…:1 | Unsupported semantics | Other nonstandard | 0.00007800 BTC | 320,938 | – | |
| 74b36ba66fcf…:0 | Revealed script unresolved | P2WSH | 0.00000330 BTC | 942,202 | 957,354 | Exact P2wsh Script Hash |
| 7f46911477fa…:0 | Strict proof: key exposed | P2PK compressed | 0.00024320 BTC | 251,871 | 251,871 | Direct P2pk Script |
| a801b67f05e7…:12 | No strict disclosure proof | P2WPKH | 0.00008577 BTC | 679,159 | – | |
| b4970cef45fb…:0 | No strict disclosure proof | P2SH | 0.90000000 BTC | 665,538 | – | |
| c107d4950f2f…:27 | Invalid key material | P2PKH | 0.00000685 BTC | 704,162 | 559,266 | Original Sec Hash160 Match |
| d176d4960a78…:2 | No strict disclosure proof | P2WSH | 0.00000330 BTC | 684,110 | – | |
| d9e4a4ee63cb…:0 | Invalid key material | Bare multisig | 0.00000684 BTC | 370,374 | 370,374 | |
| eb96a65e4a33…:1 | Strict proof: key exposed | Bare multisig | 0.00000790 BTC | 903,379 | 786,182 | Direct Bare Multisig Script |
| f6206a176b02…:2 | Invalid key material | P2PK uncompressed | 0.00010000 BTC | 506,129 | 506,129 | |
| fe401cb9e464…:0 | Revealed script unresolved | P2SH | 0.00000546 BTC | 832,805 | 832,805 | Exact P2sh P2wpkh Same Input |
| ffffaa697d07…:1 | Strict proof: key exposed | P2WSH | 0.00116132 BTC | 931,180 | 866,963 | Exact P2wsh Multisig Proof |
Diagnostics
Explicit ambiguity and unsupported-path accounting, never silently folded into proven exposure.
| Diagnostic | Occurrences | Outputs | Value |
|---|---|---|---|
| Duplicate Target Identity | 109,208,414 | 0 | 0.00000000 BTC |
| Future Creation Timestamp | 0 | 0 | 0.00000000 BTC |
| Future Disclosure Timestamp | 0 | 0 | 0.00000000 BTC |
| Invalid Original Sec | 1,071,703 | 769,655 | 7.10620252 BTC |
| Invalid Taproot Lift X | 57 | 57 | 0.08363098 BTC |
| Malformed Scriptsig Push Parse | 0 | 0 | 0.00000000 BTC |
| Malformed Witness Script | 99 | 18 | 0.02938117 BTC |
| Witness V0 Uncompressed Key | 0 | 23 | 0.12343609 BTC |