AmericanFortress Proposes Quantum-Safe Wallet Scheme: Can It Prevent a Future Crypto Disaster?
AmericanFortress has published a post-quantum security proposal called ZK-PoSP. Its pitch is unusually direct: protect existing Bitcoin, Ethereum, and Solana wallet addresses from future quantum attacks without making users move their funds or replace their keys. The proposal is available in the International Association for Cryptologic Research’s ePrint archive. The threat may still be years away, perhaps much longer. I’ll be honest: that makes the whole subject easy to dismiss. But BTC and ETH holders still face an uncomfortable question. What happens if the cryptography protecting their wallets can eventually be broken? Nobody wants to answer that after the break happens.
Zero-Knowledge Proof of Seed Provenance, shortened to ZK-PoSP, allows a wallet to prove it knows the seed behind an address without revealing the seed itself. It works as a fallback alongside current signature systems if quantum computers learn to break elliptic curve cryptography. Specifically, it covers secp256k1, used by Bitcoin and Ethereum, plus Ed25519, which is common on Solana. Hierarchical deterministic wallet standards are included too: BIP32 and SLIP-10. AmericanFortress says earlier post-quantum proposals have not protected existing addresses in the same way. Most migration discussions focus on replacing vulnerable keys. That’s only half right; preserving existing addresses may be the harder operational problem. My take: if the claim survives scrutiny, that is the real selling point. Moving a personal wallet is annoying. Moving billions of dollars for a custodian? Full-blown operational trouble.
Quantum attacks remain theoretical. Google’s Quantum AI team estimates that breaking 256-bit elliptic curve cryptography may require fewer than 1,500 logical qubits, while current machines rely on noisy physical qubits and cannot come close to doing that. So why prepare now? Because blockchain upgrades do not happen on command. The Bitcoin Security Consortium, backed by companies including BlackRock and Coinbase, recently committed $15 million over three years and selected post-quantum cryptography as its first research target. That does not make a breakthrough imminent. It does show that BlackRock, Coinbase, and the other participating institutions consider the possibility serious enough to fund before the hardware exists. Counter to the usual advice, “wait for a clearer threat” is a poor fit here. If every wallet had to migrate at once, a custodian holding billions in BTC for an ETF could land in a legal and operational nightmare. Waiting would be reckless.
ZK-PoSP depends on hash functions. It also depends on its zero-knowledge proof system behaving as expected. AmericanFortress therefore calls the scheme’s post-quantum security “conjectured”: no one can test those assumptions against a quantum computer powerful enough to pose a real threat. That word matters. In laboratory tests, though, the reported costs are low—a one-time proof for an address costs about $0.002 to produce on a 16-core server, and each transaction proof costs roughly $0.00125. Is that enough to declare the system practical? Not yet. Those figures exclude the expense and difficulty of adding it to a working blockchain, so they mainly show that proof generation may be affordable. I find the distinction important: cheap proofs do not automatically mean a cheap upgrade. CEO Michal “Mehow” Pospieszalski said the present implementation is practical for institutional settlement. He expects faster hardware and improved proof systems to cut signing times further.
Adoption is the hard part. AmericanFortress says blockchains could add ZK-PoSP with a node-level software update, while wallet providers would handle proof generation. Sounds tidy. It isn’t. Until a network accepts and enforces those proofs, wallets with public keys already visible on-chain remain vulnerable to a future quantum attacker. Publishing code alone will not solve that. Developers must accept it, and node operators must run it. Ethereum already has a post-quantum team working on hash-based signatures and migration tools. ZK-PoSP would still need support from the separate communities around Bitcoin, Ethereum, and Solana—communities that are often opinionated and rarely move in lockstep. Yes, that undercuts the proposal’s apparent simplicity. Bear with me: the cryptographic mechanism can be straightforward while the governance is painfully slow. Agreement could take years.
What this means
The strongest part of the AmericanFortress proposal is also the plainest: existing wallet addresses would not have to move. That matters most for custodians and corporate treasuries holding large amounts of BTC or ETH. An address change can trigger audits and revised contracts. Then come compliance checks and nervous phone calls. Skip the forced migration, and a genuine institutional headache disappears. In my view, that benefit is more persuasive than the futuristic quantum framing because the operational burden is easy to picture today. It could also make institutions less uneasy about holding crypto for decades. Still, let’s not get ahead of ourselves. A useful design is not a live-network deployment. The Bitcoin Security Consortium’s $15 million commitment nevertheless shows that established firms are prepared to spend money on the problem before it becomes an emergency.
Investors should watch developers and node operators more closely than company announcements. A testnet deployment would reveal far more than another white paper. The Bitcoin Security Consortium’s funding choices deserve attention; so does the work of Ethereum’s post-quantum team. The immediate risk looks low. The upgrade risk doesn’t. Blockchain changes of this size are slow, technical, and usually political. Over the next three to five years, working prototypes and serious network debates could give holders more confidence in BTC, ETH, and SOL. Will that lift prices? Honestly, anyone claiming certainty is guessing. A credible post-quantum plan would address one possible future danger. It would not erase the many other risks these assets still carry.