Turning Quantum Theft Into a Losing Trade: Cory Fields’ Bitcoin “Landmine” Deterrent

Bitcoin dev Cory Fields sketches hidden wallet “landmines” and auctions to seize a quantum thief’s collateral—ideas that would need post-quantum wallets and new consensus rules.

Bitcoin
Cryptocurrency
Regulations
Economy
Because Bitcoin
Because Bitcoin

Because Bitcoin

November 8, 2026

Bitcoin’s quantum conversation tends to fixate on cryptography—swap ECDSA for a post-quantum scheme and move on. Cory Fields shifts the frame: change the economics so that even a capable quantum attacker faces negative expected value. His idea is simple to state and hard to implement—hide “landmines” in wallets that could let rightful owners capture a thief’s collateral. Pair that with auction mechanisms for dormant coins, and quantum attacks start to look like a poor bet rather than an inevitable breach.

The interesting pivot here is incentive design. Instead of assuming perfect cryptography forever, Fields leans on game theory: require anyone attempting to spend certain outputs to post collateral, and embed conditions that let the real owner seize that collateral if an attack is detected. If the collateral at risk exceeds the likely payoff, rational attackers hesitate. That flips the narrative from “Can we make theft impossible?” to “Can we make theft unprofitable?”

Two auction formats sit alongside these traps to handle a thorny edge case: apparently abandoned coins. Many older UTXOs have exposed public keys and no reachable owner to spring a trap. Without a human in the loop, deterrence breaks down. Fields’ auctions aim to route those scenarios through market-based processes that could still impose a cost on would-be quantum thieves, even when nobody shows up to claim the funds.

It’s important to keep the scope clear. Everything is hypothetical. This is not something Bitcoin can do today. It would likely require: - Quantum-safe wallets so users can migrate without revealing classical vulnerabilities. - New consensus rules to recognize collateralized spending paths and the hidden triggers that reassign collateral upon proof of quantum-style theft. - Broad social agreement on activation and parameters, from how traps are encoded to how (and when) auctions execute on abandoned balances.

Technically, the path is nontrivial. Wallets would need to conceal landmines without leaking signals that invite targeted probing. Scripts would need a way to escrow collateral and adjudicate rightful claims deterministically on-chain. And the network would need to avoid griefing vectors where honest spenders are harassed or where sophisticated adversaries force collateral forfeitures without actual theft.

Where this proposal becomes compelling is the attacker’s psychology. Quantum capability doesn’t guarantee profit if the first move triggers a financial ambush. Attackers often chase asymmetric payoffs; if the collateral posting is sizable and reliably clawed back on malicious activity, that asymmetry fades. Even partial quantum progress—enough to threaten old outputs but not freshly upgraded wallets—could be blunted if attacking looks like lighting money on fire.

From a business standpoint, adoption is the hard part. Wallet providers, exchanges, miners, and custodians would need to coordinate upgrades, educate users, and price new operational risks. Institutions may prefer clean post-quantum signature upgrades over behavioral traps that add procedural complexity. Yet for jurisdictions or firms that value layered defenses—cryptography plus economics—landmines could serve as a transitional shield while a full post-quantum migration unfolds.

Ethically, the design has to thread a needle. Seizing a thief’s collateral sounds fair, but rules that touch “abandoned” coins risk overreach if misapplied. Auctions would need transparent, predictable logic to avoid arbitrary redistribution or rent-seeking. Consent matters—users should opt into booby-trapped outputs rather than having them imposed by default. And any scheme must preserve fungibility and privacy as much as possible.

Fields’ proposal doesn’t replace the need for post-quantum signatures; it complements them. Think of it as defense-in-depth that leverages Bitcoin’s native strength: programmable, verifiable incentives. If the community can’t agree on the cryptography timeline, it might still agree on economics—make the quantum thief pay upfront and, with some probability, lose the stake. That alone could buy the network meaningful time.

The takeaway isn’t that Bitcoin is ready for quantum landmines; it isn’t. It’s that reframing quantum risk through incentives could reshape the attacker’s calculus. If theft looks like a losing trade, fewer players will step onto the field.