QBTC is a new blockchain that mirrors Bitcoin. Every Bitcoin holder will be able to claim an equal amount of QBTC by proving they own their Bitcoin address. The proof never reveals the public key, so the claim itself is safe from quantum-computer attack.Documentation Index
Fetch the complete documentation index at: https://docs.qbtc.net/llms.txt
Use this file to discover all available pages before exploring further.
In plain English
A few terms you’ll see repeatedly. Read these once and the rest of the docs become much easier.- UTXO — short for “unspent transaction output.” Think of a Bitcoin balance not as a single number but as a collection of separate coins (each one a UTXO). When you “have 0.5 BTC,” you actually control one or more UTXOs that add up to 0.5 BTC. Bitcoin’s entire ledger is a set of UTXOs.
- Public key — a long number derived from your Bitcoin private key. Your Bitcoin address is a hash (a one-way summary) of your public key. Bitcoin uses your public key to verify that signatures came from you.
- Why public keys matter for quantum — quantum computers can derive a private key from a public key. Once your public key is broadcast on Bitcoin (which happens every time you spend), a quantum-capable attacker could in principle reconstruct your private key and steal your coins.
- Zero-knowledge proof (ZK proof) — a cryptographic technique that proves you know a secret without revealing the secret itself. QBTC uses a ZK proof to confirm you own your Bitcoin address without ever broadcasting the public key.
What QBTC does
QBTC is a standalone blockchain that keeps a continuous mirror of Bitcoin’s UTXO set inside its own state. Every Bitcoin UTXO that exists right now has a corresponding 1:1 entitlement of QBTC waiting in that mirror. To convert a claim into spendable QBTC:- You open a quantum-safe wallet.
- The wallet generates a ZK proof that says, in effect, “I control the private key for this Bitcoin address. I want my claim delivered to this QBTC address.”
- You submit the proof to QBTC.
- The chain verifies the proof, marks the claim as exhausted, and credits the QBTC to your destination address.
The two design choices that make this work
1. The validator layer uses post-quantum signatures
Every block on QBTC is signed using ML-DSA, a lattice-based signature scheme standardized by NIST as FIPS 204. Even an adversary with a large-scale quantum computer cannot forge a QBTC validator signature or rewrite QBTC’s history. The chain is built on a fork of CometBFT that uses ML-DSA throughout the consensus pipeline.2. Claims use zero-knowledge proofs
The ZK proof reveals on-chain only:- The hash of your Bitcoin address (which is public on Bitcoin anyway).
- The destination QBTC address.
- Your Bitcoin public key.
- Your Bitcoin private key.
- The signature you produced.
What QBTC is, technically
- A Cosmos SDK application chain with its own validator set, staking, governance, and IBC support.
- Native token:
qbtc. Bech32 address prefix:qbtc. - Consensus: CometBFT, forked to use ML-DSA signatures instead of Ed25519.
- One custom module (
x/qbtc) that handles UTXO mirroring, claim verification, and the ZK PLONK verifier. - A per-validator sidecar process (
bifrost) that watches a Bitcoin full node and gossips new BTC blocks into QBTC, where more than 2/3 of bonded validator power must attest before they are processed.
How a claim flows, end to end
- At launch. QBTC starts with a snapshot of the Bitcoin UTXO set. Every UTXO becomes an entitlement entry in QBTC’s state.
- Continuous updates. As Bitcoin produces new blocks, QBTC’s validators ingest them and update the mirror. New UTXOs become new entitlement entries; spent ones are reconciled; coinbase outputs add new entries. Whoever currently controls a Bitcoin UTXO controls the corresponding QBTC entitlement.
- User claims. A holder uses a quantum-safe wallet to sign a ZK proof for the UTXO they want to claim, then submits it. QBTC is partnering with an established wallet to deliver this; native support will be live at mainnet. A single transaction can claim up to 50 UTXOs from the same Bitcoin address.
- Verification. Validators verify three things: the ZK proof is valid, the UTXO has an outstanding entitlement, and the destination QBTC address is well-formed.
- Release. The QBTC is minted into the destination address. The entitlement is exhausted to prevent double-claims. The original Bitcoin UTXO is untouched and remains on Bitcoin.
Read next
- The Quantum Threat to Bitcoin, why this needs to exist.
- Why a Parallel Chain, why a soft fork, hard fork, or bridge does not solve this.
- For BTC Holders, what to do as a Bitcoin owner.
- Architecture, the deeper technical view.