BIP-0360 P2MR: Bitcoin proposal removes Taproot key-path to reduce long-term quantum risk
Bitcoin developers published BIP-0360 (Pay-to-Merkle-Root, P2MR), a draft proposal that links outputs to a script-tree Merkle root and removes Taproot’s key-path spending option. Under P2MR all spends must use the script path and reveal the executed script plus a Merkle proof; Taproot-style Tapscript and script-tree features remain supported. The design aims to reduce long‑exposure quantum key‑recovery risk from publicly visible on‑chain public keys, trading increased on‑chain size and fees (P2MR outputs are ~103 bytes minimal; witness sizes ~37 bytes larger than Taproot key‑path spends) and reduced privacy because script‑path spends are exposed. P2MR offers protection primarily against long‑duration attacks by future cryptographically relevant quantum computers (CRQCs) but does not defend against short‑window mempool attacks that require stealing private keys before confirmation — post‑quantum signatures would be needed for that. Activation is opt‑in, would need wallet and library support, community review and widespread testing, and may introduce a new bech32m address prefix (likely bc1z); existing Taproot (bc1p) outputs are unaffected. No nodes have implemented P2MR and no deployment timeline is set. Co‑author commentary stresses minimal, opt‑in changes and clearer user communication on quantum readiness. For traders: the proposal signals ongoing focus on futureproofing Bitcoin against quantum threats but increases per‑transaction costs and reduces some privacy; short‑term market impact is limited absent deployment or standards for post‑quantum signatures.
Neutral
BIP-0360 (P2MR) is a technical, opt‑in protocol proposal that alters output construction to reduce long‑term quantum risk but increases on‑chain size, fees, and reveals script usage. As a draft with no implementations or activation timeline, it is unlikely to produce immediate price movement for BTC. Traders may factor the proposal into longer‑term risk narratives around Bitcoin’s quantum readiness, but adoption requires broad wallet/library support, community consensus and possibly new address formats — a multi‑year process. Short term: neutral impact because the change is non‑mandatory and no rollout is imminent. Medium/long term: mixed effects — institutional or privacy‑sensitive users might adopt P2MR for perceived quantum safety, raising fee demand slightly on certain outputs; conversely, higher fees and reduced privacy could slow adoption. Overall, until deployment or concrete shifts to post‑quantum signatures occur, market stability and price drivers remain governed by macro factors rather than this proposal alone.