
Software security, markets, and bitcoin cash. Working on $BCH and @Bitauth, previously @BitPay. Lead maintainer @ChaingraphCash, @Libauth, and @BitauthIDE.
New Hampshire
Joined November 2009
- Tweets1.7K
- Following728
- Followers5.1K
- Likes3K
GPT-6 Pro seems to underperform astra max right now?
Anecdata model ranking on large scale software project planning:
Opus 5.5: originality, overall knowledge
Astra: getting the details right
@grok 4.7: clearest writing/thinking
IMO Grok also outperforms on faster iteration/experimentation (esp. managing resources in autoresearch loops), even if it's less knowledgable right now on many subfields – I expect Grok to move up the ranks fast.
Can an upgrade make BTC's Taproot quantum secure?
No – not without confiscating BTC from users.
These aren't ancient, "abandoned" addresses either. BTC confiscations could hit holders who moved funds as recently as today.
it's true, taproot is uniquely quantum vulnerable:
"Taproot is uniquely quantum vulnerable – even more than typical single-signature wallets (P2PKH).
P2PKH addresses are quantum-vulnerable only at spend time, and could be made quantum-secure (via an upgrade) without moving funds. On the other hand, all Taproot addresses leave a quantum-vulnerable master public key exposed on-chain, enabling long-running attacks and theft by the earliest cryptographically-relevant quantum computers (CRQCs)."
blog.bitjson.com/quantumroot…
Post-quantum vaults are now live on Bitcoin Cash's Chipnet, the 6-month-early preview network. 🔥
CashVM makes quantum readiness ultra-efficient: sweeps from quantum-ready addresses cut transaction sizes vs. P2PKH/P2WPKH by up to 10.9%, despite the increase from 20-byte hashes to 32-byte hashes (for highest-level, NIST Category 5 quantum security strength).
Users who regularly buy or earn Bitcoin Cash to a Quantumroot vault will save on fees after just 6 payments. 🚀
Maximum Quantum Security
With NIST Post-Quantum Cryptography Category 5 security, Quantumroot is expected to remain secure for decades into the post-quantum era.
Quantumroot implements the standard LM-OTS signature scheme (RFC 8554), which itself relies only on SHA256 for security – no lattice-based or other relatively-experimental cryptography. From a cryptographic-security perspective, Quantumroot is maximally conservative.
Low Transaction Fees
Bitcoin Cash's highly parallel architecture – the "UTXO model" – offers better performance and lower-level control than account-based systems, enabling Quantumroot to offer 100-1000× lower fees than equivalent vaults on Ethereum.
Privacy Nonces
Pre-quantum transactions do not expose associations between vault addresses: a 32-byte privacy nonce included in the hidden token-based spending path prevents even quantum attackers from connecting the address with recovery policies unless revealed by a post-quantum recovery.
Sweep-Free Upgrades
The hidden recovery path can be upgraded without sweeping the vault: only unassociated token UTXOs are moved on-chain. This simplifies user experiences and makes it easier for vaults to upgrade recovery, inheritance, or business continuity policies.
Other details:
- Post-quantum contract code adds zero bytes to pre-quantum spends.
- On average, post-quantum spends are just ~1.5KB per payment. (With sufficient aggregation, ZK-STARK BCH covenants/apps could improve this further.)
- P2PKH addresses can support 708 input sweeps per 100KB transaction; Quantumroot increases that to 891 inputs.
- Post-quantum sweeps can fit 868 inputs or 448 unique addresses per 100KB transaction.
For more details and links to on-chain transactions, see the blog post:
blog.bitjson.com/quantumroot…
For a deep dive and walkthrough of the CashVM contracts, see the August 20 tech talk:
youtube.com/watch?v=OjS539Ud…
The May 2026 upgrade is now active on Chipnet at block 279,792! 🎉
This upgrade completes the restoration of Bitcoin Script on Bitcoin Cash (CashVM), making CashVM a simple, ultra-efficient, high-level programming environment for sound money.
Left: 2016 opcodes, right: 2026 opcodes 🔥 (source: vm.cash)
Over the last decade, Bitcoin Cash has delivered:
• 2018: Opcode restoration (OP_CAT, OP_XOR, OP_DIV, OP_MOD, etc.),
• 2019: Schnorr signatures with multisig batch verification,
• 2020: Density-based signature limits,
• 2022: OP_MUL and introspection,
• 2023: Cross-covenant commitments (CashTokens),
• 2025: Density-based general limits and BigInts,
• 2026: Loops, functions, bitwise, and Pay-2-Script.
Each upgrade carefully preserved Bitcoin Cash's transaction-level parallelization, enabling global-scale, layer-1 throughput – without compromising Bitcoin Cash's scalability, decentralization, and censorship-resistance.
Fully-validating, archival BCH nodes run on consumer hardware and still outperform clusters of high-powered, centralized sequencers required by account-based networks.
With this upgrade, CashVM becomes even more powerful, allowing contract developers to efficiently implement post-quantum cryptography, homomorphic encryption, zero-knowledge proof systems, and more – without waiting for network upgrades.
Case Study: Quantumroot
Quantumroot is a quantum-secure vault contract design offering full 256-bit classical, 128-bit quantum security strength. Possible since May 2025, but made 10-100× more efficient by the 2026 upgrade: Quantumroot sweep transactions are 15% smaller per-UTXO than P2PKH wallets.
Upgrade Details
The 2026 upgrade includes four Bitcoin Cash Improvement Proposals (CHIPs):
Loops CHIP
Introduces the well-established, OP_BEGIN/OP_UNTIL loop construction to CashVM, bounded by the density-based limits activated in the 2025 upgrade. Loops eliminate duplication in repeated procedures, significantly reducing transaction sizes and enabling previously impractical constructions.
Functions CHIP
Enables factoring of contract bytecode into reusable functions with OP_DEFINE/OP_INVOKE, eliminating duplicated logic and reducing transaction sizes. Functions improve the efficiency of complex financial and cryptographic computations, including zero-knowledge proof verification, homomorphic encryption, post-quantum cryptography, and more.
Bitwise CHIP
Re-enables bitwise operations, including OP_INVERT for bit inversion, arithmetic shifts (OP_LSHIFTNUM and OP_RSHIFTNUM) for numeric values, and binary/logical shifts (OP_LSHIFTBIN and OP_RSHIFTBIN) for binary data. These operations allow CashVM contracts to more efficiently implement a variety of financial and cryptographic algorithms.
Pay-2-Script CHIP
Makes Pay-2-Script (P2S) outputs standard, enables longer token commitments (up to 128 bytes), and unifies the standard unlocking bytecode length limit with the consensus limit (10,000 bytes). These changes improve wallet ecosystem safety, simplify contract design, and reduce transaction sizes for many vault, multi-party covenant, and decentralized financial applications.Technical Specs
For more details, see the CHIPs:
- Loops: github.com/bitjson/bch-loops
- Functions: github.com/bitjson/bch-funct…
- Bitwise: github.com/bitjson/bch-bitwi…
- Pay-2-Script: github.com/bitjson/bch-p2s
10⁸th is just-verify-a-ZKP territory, but lower numbers are reasonable for toy VM comparisons. First take: a simple, single input (<10KB) computation can get to the 5334th Fibonacci number (1,115 decimal digits) in 2026 CashVM. L1 fee ~0.0001 BCH (script, metrics):
Some initial work with Fibonacci numbers using loops/function was already done by @bitjson
I know compute is a lot cheaper on UTXO chains than EVM, i agree this would be a very interesting case to benchmark
bitcoincashresearch.org/t/ch…














