
quantum risk isn’t “bitcoin dies overnight”, it’s “signature scheme eventually needs an upgrade.” the urgent edge case is address reuse: once you’ve spent from an address, the pubkey is exposed and that’s the part a strong enough QC would target, so best practice is still don’t reuse addresses and consolidate UTXOs to fresh ones. sha256 is a different story (grover is quadratic), so it’s mainly an ecdsa/schnorr migration problem that can be handled with a softfork + long transition window.
