On August 26, a transaction settled into a Bitcoin block that no ordinary wallet could have produced. Its signature was not ECDSA. Four weeks later, on September 23, StarkWare announced that preparing such a transaction had fallen from $320 to $66 — a 79% reduction, credited to 62 improvements submitted during an open optimization challenge that opened on September 16. The number traveled fast. The definition behind it traveled slowly.
Because $66 is not the price of a quantum-safe Bitcoin transaction. It is the price of the offline cryptography that precedes one — a distinction StarkWare states plainly in its own materials and that most of the amplification dropped on the floor.
Context
QSB — Quantum-Safe Bitcoin — is the work of Avihu Levy, a StarkWare researcher who published the scheme in April, and Tomer Giladi, the engineer who carried it to mainnet. Levy describes it, without embellishment, as a stopgap.
The design is a bypass rather than an upgrade. Bitcoin's signatures rest on ECDSA, and Shor's algorithm dissolves elliptic-curve discrete logarithms in polynomial time. Grover's algorithm treats hash functions far more gently — it square-roots the search effort, and a longer digest restores the margin. Hash-based signatures are therefore the conservative answer, and QSB swaps them in without asking the network to agree to anything. No soft fork. No activation threshold. No miner signaling.
That is the whole trick, and it is a real one. The native alternative, BIP-360 and its proposal for post-quantum address types, would harden the base layer — but it requires a consensus change, and consensus change in Bitcoin is a decade-long political weather system. QSB skips the queue. MARA's Slipstream submitted the first transaction; Eigen Labs and Yukon Research co-organized the optimization challenge; contributors included human researchers and, per the announcement, AI agents.
To build in public is to trust the void. It is also, as this episode shows, to accept that the public will repeat your number without your caveats.
The challenge itself is worth pausing on. Sixty-two accepted improvements in seven days is not organic developer growth; it is a prize structure doing what prize structures do. But the involvement of autonomous agents is genuinely novel as a model of research labor — machine intelligence applied to the drudgery of cryptographic parameter tuning, with humans adjudicating the results. If that pattern holds, it will reshape how protocol teams allocate scarce attention. In the chaos of DeFi, I found my silence. Here I find a different noise: the sound of optimization being mistaken for validation.
Core
Three thousand one hundred GPU hours to prepare a single transaction. Divide $320 by that figure and you land near $0.10 per GPU hour — mainstream cloud spot pricing. That tells you something structural: this is a batched workload designed for rented clusters, not a signing routine a person performs.
The 62 accepted improvements cluster around two computational tasks, which suggests a two-stage recomputation pipeline — commitment or key-material generation, followed by signature assembly. Density at that scale means the design is not merely expensive. It is unavailable to phones, to hardware wallets, to anyone who wants to sign offline in a basement. That is not a flaw in the cryptography. It is a property of the deployment, and it is the second thing the headline obscured.
The first is the fee. Hash-based post-quantum signatures are enormous — kilobytes to tens of kilobytes, against 64 to 71 bytes for Schnorr or ECDSA. SegWit's witness discount softens the byte bill fourfold; it does not erase it. A transaction costing $66 to compute and tens of dollars to relay is not a $66 transaction. It is one whose visible cost is roughly half its real one, and the hidden half is the half the network charges.
Set against the native alternatives, the tradeoff sharpens. A soft-fork address type would be enforced by the protocol itself, available to every wallet that upgrades, and priced in the same fee market as everything else. QSB inverts that: it asks nothing of the network and therefore receives nothing from it. No default adoption, no wallet-standard pressure, no miner incentive to prioritize these transactions. A bypass solution carries the full cost of the problem and none of the network effect of the cure.
I learned this pattern auditing MakerDAO's early governance contracts in 2017. Six months inside those stability fee calculations produced a logic flaw that threatened user solvency; I reported it anonymously on GitHub and the team fixed it. The lesson I carried away was procedural rather than technical: the metric that is published is the metric that gets optimized, so the parameter missing from the dashboard is the one worth pricing. Here the dashboard shows computation. It does not show bytes.
Reframed honestly, the achievement is real but different from the story. Moving from $320 to $66 is a shift from prohibitively expensive to merely very expensive — still ten to sixty times an ordinary Bitcoin fee, before the network charges anything at all. That is progress. It is not affordability. In a consolidating market, where little reprices on fundamentals, narrative is the only asset that moves quickly — which is precisely why the framing deserves this much scrutiny.
The part that stays with me longest rhymes with work I did in 2026, when a small team of ethicists and developers designed a decentralized identity framework for AI agents on Polkadot. We used zero-knowledge proofs so agents could demonstrate ethical compliance without exposing the data that proved it. The elegance was real. So was the corollary: verification that requires heavy machinery quietly relocates trust from the individual to whoever owns the machinery.
QSB has the same shape. Your keys remain yours. Your ability to use them may depend on a GPU cluster you rent, and clusters have operators. Emergency migration, done this way, arrives as a service rather than a right. I suspect Levy would agree — it is, after all, why he reached for the word stopgap.
Contrarian
Now the uncomfortable part, and it is not about cryptography.
The evidence base is one mainnet transaction, cost figures from a self-run benchmark, no third-party audit, and no disclosed peer review. An optimization challenge is external participation, not external verification. A hundred people shaving seconds off your benchmark can improve your number without telling you whether the number should be trusted. Optimizing a benchmark and auditing a benchmark are different acts performed by different people. Openness is not a feature; it is a philosophy — a challenge is an invitation, an audit is a reckoning.
The rhythm is suggestive too. Challenge opens September 16; the cost announcement lands September 23. Seven days is a sprint, and sprints are scheduled. That is not dishonesty. It is public relations moving at the tempo it is built for.
The deeper bind is temporal. QSB is a put option on a date nobody knows. If cryptographically relevant quantum computers arrive inside a decade, QSB becomes indispensable — and remains unready, having never carried a non-test transaction or disclosed a total cost. If the threat is fifteen years out, the commercial window never opens. Its value is a function of a calendar it does not control, and migration windows historically run longer than the threats they answer.
There is a quieter fact underneath. Avoiding consensus change also avoids activation thresholds, miner signaling, and the informal vetoes that decide what Bitcoin becomes — a process that is never quite a vote, always a negotiation among parties with the standing to be in the room. A bypass sidesteps that room. But a bypass no default wallet adopts protects no one, because the danger was never the absence of a clever tool. It was the absence of a network that uses it. Code is poetry, but community is the chorus.
Takeaway
Watch two numbers, and neither is $66. Watch the first disclosed total cost that includes the byte bill, and watch the first QSB transaction that is not a test. Until both exist, this is a credible research direction wearing a commercial headline — a stopgap awaiting a calendar, and a dashboard with one line item missing. Truth emerges when the ledger is transparent.
