Bitcoin Goes Quantum-Resistant: What BIP-360 Means for Dynasty Trusts and Multi-Generational Inheritance Plans

Dynasty trusts are designed to outlast everything: administrations, bull markets, bear markets, tax law changes, and the families that created them. A well-drafted Bitcoin dynasty trust can legally hold Bitcoin for 100 years or more — making it one of the most long-horizon ownership structures ever conceived for a monetary asset. The problem is that Bitcoin's cryptographic foundation, untouched for 15 years, may not survive that same 100-year window.

BIP-360 — Bitcoin Improvement Proposal 360 — is Bitcoin's response. Covered this week by CoinTelegraph and TechFlow, it introduces Pay-to-Quantum-Resistant-Hash (P2QRH) addresses, the first formalization of quantum-resistant cryptography within the Bitcoin protocol. This is a genuine technical advance. It is also widely misunderstood: BIP-360 does not protect existing Bitcoin. It does not automatically safeguard the coins sitting in the cold storage vault managing your dynasty trust's holdings. It does not apply to any address created before the upgrade — and it requires active migration by whoever holds the keys.

For families structuring irrevocable trusts today, the implications are specific and urgent. The trust documents you sign this year create legal structures designed to operate for decades — spanning the exact window when quantum computers capable of breaking elliptic curve cryptography may emerge. Most of those documents say nothing about quantum obsolescence. That is a gap that needs to close before ink dries on the trust deed.

This guide covers the technical mechanics of BIP-360, the quantum threat timeline, why dynasty trusts are uniquely exposed, the trust document provisions that address this risk, and a six-step action plan for Bitcoin families to quantum-proof their inheritance structure now — while the window is open.

1. What BIP-360 Actually Is

Bitcoin's current cryptographic security rests on Elliptic Curve Digital Signature Algorithm (ECDSA) using the secp256k1 curve. When you spend Bitcoin, you generate a digital signature proving you know the private key that corresponds to the public key associated with that address. The security assumption: no classical computer can derive a private key from its corresponding public key within any tractable timeframe. This assumption has held for 15 years.

The problem is that this assumption breaks under sufficiently powerful quantum hardware. Shor's algorithm — a quantum computing algorithm formalized in 1994 — can solve the discrete logarithm problem that protects ECDSA signatures in polynomial time rather than exponential time. Run Shor's algorithm on a quantum computer with enough stable qubits, and you can derive any Bitcoin private key from its public key. Every ECDSA-protected address becomes vulnerable.

BIP-360 addresses this by introducing a new address type: Pay-to-Quantum-Resistant-Hash (P2QRH). P2QRH addresses use post-quantum cryptographic signature schemes standardized by NIST in 2024 as quantum-resistant alternatives to classical cryptography:

• FALCON (Fast Fourier Lattice-based Compact Signatures over NTRU): A lattice-based digital signature scheme. Produces compact signatures (660–1,280 bytes depending on security level) and is NIST-selected as a primary post-quantum signature standard. Fast signing and verification. Well-analyzed security properties.
• CRYSTALS-Dilithium: A second NIST-selected lattice-based signature scheme. Larger signatures than FALCON but simpler implementation. Selected as NIST's recommended post-quantum signature algorithm for general use (now standardized as FIPS 204).

P2QRH is designed to be backwards-compatible with Bitcoin's existing transaction model. It does not require a hard fork — the upgrade can activate via soft fork, meaning the existing chain's history and all prior transactions remain valid. New P2QRH addresses will work alongside existing address types (P2PKH, P2WPKH, P2TR) on the same network. Nodes that haven't upgraded will simply see P2QRH transactions as valid under their existing rules.

2. What BIP-360 Does NOT Do (This Is the Critical Part)

The most dangerous misreading of BIP-360 is the assumption that activating it on the Bitcoin network will protect all existing Bitcoin. It will not. The upgrade is a forward-looking capability addition — not a retroactive security patch.

Here is what BIP-360 explicitly does not do:

• Does not retroactively protect existing addresses. Every Bitcoin held in a P2PKH, P2SH, P2WPKH, P2WSH, or P2TR address after BIP-360 activates remains protected only by ECDSA. The quantum risk for those addresses is unchanged.
• Does not automatically migrate existing UTXOs. Coins held in old addresses stay in old addresses. There is no automatic protocol-level migration. Migration requires a transaction signed by the original private key.
• Does not currently have soft fork activation. BIP-360 is a proposal — not yet activated on Bitcoin mainnet. It requires developer consensus, miner signaling, and a soft fork activation process. Timeline is uncertain; activation within the next few years is plausible but not guaranteed.
• Does not protect coins if the migration transaction itself is delayed. Ironically, the migration transaction — moving coins from an ECDSA address to a P2QRH address — is itself an ECDSA transaction (since it spends from an ECDSA input). If a quantum adversary is actively monitoring the network when you broadcast the migration, they could theoretically attack the exposed public key in the mempool before the transaction confirms. Migration urgency matters — it should happen with appropriate mining fee priority.

3. The Quantum Threat Timeline: What the Experts Actually Say

The quantum threat to Bitcoin is not science fiction. It is a formally assessed national security risk with explicit timelines published by the US government's own agencies. Understanding the timeline is the foundation for rational planning — neither panic nor dismissal serves families here.

The Government's Own Assessment

The three most credible public estimates come from NIST, CISA, and NSA:

The consensus: a cryptographically relevant quantum computer (CRQC) — one with enough stable, fault-tolerant qubits to run Shor's algorithm against real-world key sizes — is likely 10–30 years away. The earlier end of that range (10–15 years) would place CRQC arrival squarely within the anticipated lifespan of a dynasty trust created in 2026. The later end (25–30 years) does not provide much comfort when dynasty trusts are designed to run 100 years.

The "Harvest Now, Decrypt Later" Threat

The most immediately actionable threat does not require a quantum computer to exist yet. The "harvest now, decrypt later" (HNDL) attack model is already operational: adversaries record data — transactions, communications, encrypted files — today, storing it until sufficiently powerful quantum hardware becomes available to decrypt it retroactively.

For Bitcoin, the relevant form of this attack involves public key exposure. When Bitcoin is received at an address but never spent, only the address hash is publicly visible — not the full public key. The ECDSA vulnerability requires knowing the public key. Once a transaction is broadcast spending from that address, the full public key becomes permanently visible on the blockchain. From that moment, the address is fully exposed to a future quantum attack.

Two categories of Bitcoin addresses are most at risk:

• Addresses from which Bitcoin has been spent at least once (the public key is already on the blockchain and cannot be hidden)
• Legacy P2PK (Pay-to-Public-Key) addresses — used extensively in Bitcoin's early years (2009–2012) — where the public key was included directly in the output script and has always been visible

4. Why Dynasty Trusts Are Uniquely Exposed

Every Bitcoin security risk is amplified when the holding structure is a dynasty trust. The very features that make dynasty trusts excellent vehicles for multigenerational Bitcoin preservation — long time horizons, irrevocable design, restricted access, institutional custody — are the same features that create quantum migration risk. Let's work through each dimension.

The 100-Year Horizon Sits Inside the CRQC Window

A dynasty trust created in 2026 and designed to hold Bitcoin for three generations will still be operative in 2076. A 100-year trust runs to 2126. The NIST estimate of a 10–30 year window for CRQC places the earliest threat arrival at 2036 and the likely window between 2036 and 2056. A dynasty trust's operational window encompasses the entire quantum risk period — not a portion of it. There is no version of this calculation where "just hold it in existing addresses" works as a long-term plan.

Irrevocable Documents with No Technology Adaptation Authority

Most irrevocable trust documents — including well-drafted Bitcoin dynasty trusts — grant trustees authority over investment decisions, distributions, and administrative functions. What they almost never address is custody technology migration. There is no standard clause authorizing a trustee to migrate Bitcoin to a new address type as cryptographic standards evolve. Without explicit authority, a trustee who migrates the trust's Bitcoin to P2QRH addresses may be acting outside the scope of the trust instrument. A conservative trustee, advised by cautious counsel, may decline to act at all without court approval — which could take months and cost tens of thousands of dollars in legal fees.

The irrevocable trust problem is compounded by the fact that adding provisions after the fact typically requires either court modification (expensive, uncertain) or use of trust protector amendment powers — if those exist, and if quantum migration is within their scope. Neither should be assumed.

Cold Storage Vaults and the "Who Decides?" Problem

The standard Bitcoin dynasty trust custody architecture involves deep cold storage: hardware wallets, multisig, or institutional custodians holding Bitcoin in air-gapped environments. This is excellent practice. It also means migration requires deliberate, coordinated action from multiple parties: the custodian must support P2QRH, the trustee must authorize the migration transaction, and the signers in a multisig arrangement must each participate.

Who decides when migration is necessary? On what timeline? Who bears the cost? Who decides which custodian to use for the migrated coins? None of these questions have answers in most trust documents. The result: in a dynasty trust scenario, quantum migration may require trustee decision, trust protector review, beneficiary consultation, custodian cooperation, and potentially court approval — all while the Bitcoin sits in an aging ECDSA address growing more vulnerable by the year.

Dormant Inherited Addresses: The Highest-Risk Category

The most dangerous category is not active, well-managed trust holdings — it is inherited addresses that have gone dormant. A common real-world scenario: Bitcoin is bequeathed to an heir through a trust. The heir does not understand custody, never touches the coins, and the trust goes months or years without a technical review. Meanwhile, the original custodian may have been replaced, the wallet software is outdated, and no one is thinking about quantum migration. These dormant inherited addresses — exactly the addresses most likely to be on legacy ECDSA infrastructure with exposed public keys — are precisely where the quantum threat concentrates.

5. Trust Document Provisions Families and Attorneys Need Now

The response to quantum risk in dynasty trust documents is not complicated. It requires four specific provisions that address the problem at its source. None of these require anticipating the exact technology — they simply give trustees the authority and framework to respond as technology evolves.

Provision 1: Digital Asset Technology Adaptation Clause

This is the foundational provision. It grants the trustee explicit, broad authority to migrate the trust's digital assets to new address types, signature schemes, or custody architectures as cryptographic standards evolve — without requiring court approval for each migration decision.

"The Trustee is authorized, in its sole discretion, to migrate Bitcoin and other digital assets held in trust to new address types, wallet technologies, or signature schemes, including but not limited to quantum-resistant address formats as defined by the Bitcoin protocol or applicable NIST post-quantum cryptography standards, as such standards are promulgated or updated from time to time. Such migration shall be deemed consistent with the Trustee's investment and administrative duties, and the Trustee shall not be required to seek court approval prior to executing such migrations. The Trustee shall document the rationale for any such migration in the trust records and notify the trust protector within 30 days of any material change in the trust's digital asset custody architecture."

Provision 2: Quantum Risk Protocol in the Investment Policy Statement

The Investment Policy Statement (IPS) is the trustee's primary investment governance document. A well-drafted IPS for a Bitcoin dynasty trust should include an explicit quantum risk section:

• Monitoring requirement: The trustee or investment director shall review NIST post-quantum cryptography standards at least every three years, or upon any material development in quantum computing capability as assessed by CISA, NSA, or NIST.
• Threshold trigger: If NIST, CISA, or NSA issues a formal advisory that CRQC poses an imminent threat (within 5 years) to ECDSA security, the trustee shall initiate migration planning within 90 days.
• Migration priority: Addresses from which Bitcoin has previously been spent (public key exposed) shall be prioritized for quantum migration over addresses with unexposed public keys.
• Documentation: A quantum migration readiness review shall be included in the trust's annual report to beneficiaries, noting the current custody architecture's quantum exposure status.

Provision 3: Custodian Quantum Readiness as Due Diligence Requirement

The trustee's due diligence obligation extends to evaluating the quantum readiness of the trust's Bitcoin custodians. Most custody agreements written today are silent on quantum migration. Families working with a private trust company or institutional custodian should require — as a condition of continuing custody — written documentation of the custodian's post-quantum migration roadmap.

Specifically:

• Does the custodian have a written post-quantum cryptography migration plan?
• Has the custodian evaluated P2QRH or equivalent Bitcoin address upgrades?
• What is the custodian's anticipated timeline for supporting quantum-resistant address types?
• Can the custodian guarantee client notification and migration assistance upon BIP-360 activation?

If a custodian cannot answer these questions with specificity, that is itself a trustee due diligence finding — and potentially grounds for custodian transition to one with a more robust quantum readiness posture.

Provision 4: Mandatory Technical Review Cycle

Trust documents should specify a minimum frequency for technical custody architecture reviews. A three-to-five-year cycle is appropriate for the current phase of quantum computing development. As the CRQC timeline becomes clearer, this cycle may need to shorten.

"The Trustee shall cause a technical review of the trust's digital asset custody architecture to be conducted no less frequently than every three (3) years, and additionally upon: (i) any material change in NIST post-quantum cryptography standards; (ii) any formal advisory from a US federal agency indicating increased quantum computing threat to commonly used cryptographic systems; or (iii) any material change in the security architecture of the trust's primary Bitcoin custodian. The results of each review shall be documented in writing, shared with the trust protector, and retained in the trust records."

6. Custodian Readiness: What to Ask Before You Sign Anything

The institutional Bitcoin custody market is sophisticated but not yet quantum-ready. As of early 2026, no major Bitcoin custodian has publicly announced support for P2QRH addresses — because BIP-360 has not activated yet. But the questions families should be asking their custodians now are not about current support. They are about roadmap and institutional readiness: does this custodian take quantum migration seriously, and do they have the technical infrastructure to support it when the time comes?

Seven Questions to Ask Your Bitcoin Custodian About Quantum Migration

1. "Do you have a written post-quantum cryptography roadmap?" Any custodian managing institutional Bitcoin should have this. A blank stare or "we'll deal with it when it comes" is a red flag.
2. "Are any of the Bitcoin addresses you hold for clients in legacy P2PK format?" P2PK (Pay-to-Public-Key) addresses — used in early Bitcoin — have fully exposed public keys and are the highest quantum risk category. A custodian should know whether any client holdings are in this format.
3. "How will you notify clients when BIP-360 activates on mainnet?" The notification process matters. Families managing dynasty trusts have trustees, co-trustees, trust protectors, and potentially multiple signers. The custodian's process for coordinating migration across complex trust structures should be documented in advance.
4. "What is your process for migrating client assets to P2QRH addresses once BIP-360 is live?" Look for specificity: who initiates, who authorizes, what documentation is required, what the migration transaction structure looks like, and how long the process takes.
5. "Do you have contractual obligations to complete quantum migration within a defined timeframe?" Voluntary roadmaps are not the same as contractual commitments. For dynasty trusts, trustees should seek custodians willing to commit contractually to migration support.
6. "What happens to our Bitcoin if your organization is acquired, wound down, or goes bankrupt before completing quantum migration?" This is a continuity-of-custody question that applies broadly, but quantum migration timing risk makes it particularly acute.
7. "Do you participate in Bitcoin development discussions related to BIP-360 or post-quantum cryptography?" Custodians who are engaged in the technical process — either through Bitcoin Core development, NIST working groups, or industry consortia — are more likely to be early and competent implementers.

7. The Self-Custody in Trust Problem: The Succession Gap No One Talks About

For families managing Bitcoin through self-custody arrangements — hardware wallets, multisig, or bare seed phrases — the quantum succession problem intersects with an existing failure mode that has nothing to do with quantum computers at all. It is the problem of what happens to private keys when the keyholder dies.

How Self-Custody Trust Structures Work (and Where They Break)

In a self-custody Bitcoin trust, the private key (or seed phrase) for the Bitcoin wallet is held by the trustee, a trust protector, the grantor, or a combination. In the simplest arrangements, a 24-word BIP-39 seed phrase is written down, sealed in an envelope, and stored in an attorney's safe or a bank safe deposit box.

The succession gap arises when:

1. The original keyholder dies or becomes incapacitated
2. The trust instrument does not clearly authorize a successor trustee to access and use the private keys
3. No one has tested whether the sealed seed phrase actually works
4. The successor trustee lacks the technical knowledge to execute a wallet recovery and migration transaction

Quantum migration amplifies every dimension of this problem. Migration from an ECDSA address to a P2QRH address requires spending from the old address — which requires signing with the original private key. If that key is in a sealed estate document held by a deceased grantor's attorney, and the trust document does not explicitly grant the trustee authority to access and use those keys for custody migration purposes, the trustee may be legally and practically unable to complete the migration.

The Multisig Migration Problem

Multisig arrangements add a layer of complexity. A 2-of-3 or 3-of-5 multisig trust wallet requires multiple signers to authorize any transaction — including a quantum migration transaction. If one of the required signers is deceased, incapacitated, or has lost their key, the migration may require a key recovery procedure that itself requires the original private key material. The order of operations matters: key recovery → signer coordination → migration transaction → confirm. Each step requires living, accessible keyholders with functioning key material. In a multigenerational trust context, that coordination window must be engineered in advance.

What Proper Self-Custody Documentation for Dynasty Trusts Requires

At minimum, a self-custody Bitcoin dynasty trust needs:

• Trustee key access authorization: Explicit trust document language granting the successor trustee authority to access and use the private keys held in the trust's estate documents for the sole purpose of custody migration and key management
• Key recovery test protocol: A documented, periodically tested procedure for recovering the wallet from the sealed seed phrase — tested while the original keyholder is alive and can verify the process works
• Successor technical advisor designation: Identification of a trusted technical advisor (or institutional partner) who will assist successor trustees in executing wallet operations, including quantum migration transactions, after the original keyholder is no longer available
• Key custodian continuity plan: If the attorney holding the sealed seed phrase retires, dies, or their firm dissolves, where does the key go? The answer must be in writing before the problem arises

The trustee's prudent investor standard already encompasses a duty to safeguard trust assets against foreseeable risks. A trustee who is aware of the quantum threat and fails to plan for migration is arguably breaching that duty — particularly as the threat becomes more formally documented by government agencies over the next decade.

8. Practical Action Plan: 6 Steps to Quantum-Proof Your Bitcoin Inheritance

Here is the specific action plan for Bitcoin families with significant holdings in trust structures. None of these steps require waiting for BIP-360 to activate. All of them are achievable in the next six to twelve months with any competent estate planning attorney and a technically capable advisor.

9. The Longer View: Bitcoin's Cryptographic Adaptability Is Its Most Underrated Feature

Bitcoin has made one major cryptographic upgrade in 15 years — Taproot, in 2021. BIP-360 represents the second, and arguably more consequential, upgrade. The fact that Bitcoin can implement post-quantum cryptography through a soft fork — preserving the existing chain, the existing supply, and all existing rights — is a feature, not a limitation. The network's conservative upgrade process exists precisely to ensure that when cryptographic upgrades do happen, they are battle-tested and broadly supported.

For families making long-duration commitments to Bitcoin in trust structures, this matters. Bitcoin's protocol can adapt to the quantum era. The question is whether your trust documents, your custodian agreements, and your key management procedures can adapt along with it. The protocol-level upgrade is coming. The estate planning upgrade needs to happen now.

The estate planning community has largely not engaged with this issue. Most trust attorneys with Bitcoin clients are focused on gift and estate tax efficiency, trust jurisdiction selection, and directed trust structures — all important. But the attorney who drafts a dynasty trust in 2026 without a technology adaptation clause is leaving a gap that will become increasingly difficult to close as the Bitcoin in that trust ages, keys are handed down, and the quantum timeline shortens.

BIP-360 is the signal to act. It does not make quantum migration urgent today — BIP-360 is not even activated yet. But it makes the planning urgency real, because the documents being signed today will still be governing Bitcoin custody in 2040, 2050, and beyond. The quantum-proof dynasty trust is not the trust with the best tax structure or the best jurisdiction. It is the trust that gives its trustees the authority and framework to adapt as the technology demands. That trust gets built today.

Frequently Asked Questions

Next Steps

Bitcoin's quantum resistance upgrade is coming. The protocol will adapt. The question for every family with significant Bitcoin in trust is whether their legal documents, their custodian relationships, and their key management procedures will adapt with it — or whether they will find themselves in 2040 with irrevocable trust documents that give trustees no authority to act, custodians with no migration roadmap, and private keys in the hands of heirs who have never signed a Bitcoin transaction.

The six steps above are actionable today. The trust document provisions are standard drafting modifications that any Bitcoin-literate estate planning attorney can implement. The custodian questions have answers that reveal whether your custody partner is prepared. The self-custody key access problem is solvable — but only while the original keyholder is alive to participate in solving it.

If you are structuring a new Bitcoin dynasty trust or reviewing an existing one, the Bitcoin Family Office works with families and their counsel to architect long-duration Bitcoin estate plans that account for custody technology evolution — including quantum migration planning, directed trust structures, and trustee authority frameworks designed for the next 100 years.

Work with The Bitcoin Family Office →