ShorWatch

Quantum exposure analysis for Bitcoin. Spending an address publishes its public key forever. See which of your coins are exposed. Read-only · nothing stored.

[ShorWatch @shorwatch]

A quantum computer running Shor's algorithm can derive a private key from a public key. It cannot derive one from a hash of a public key.

That single distinction decides which of your coins are exposed today.

[ShorWatch @shorwatch]

"Ledger hack" is the wrong phrase. Ledger was not breached. Devices sold by a reseller were tampered with: an implant read the 24 words off the screen at setup and sent them over LTE.

Confirmed, unconfirmed, and what to check without touching the device:
https://t.co/demo9MCo8T

[ShorWatch @shorwatch]

"Does the Taproot tweak protect the key?"

No. Q = P + t·G is a commitment, not an encryption. Whoever solves the discrete log of Q gets p + t, which is a valid key-path signing key. No machine can do that today. The tweak is simply not where the protection is.

[ShorWatch @shorwatch]

A Taproot address is a public key written into the output. Other address types write a hash.

So a funded bc1p address is exposed at rest from day one, spent or not. A deliberate trade, worth understanding before parking long-term coins:
https://t.co/pmPlmj4KT2

[ShorWatch @shorwatch]

https://t.co/FbmeBtlTU1: paste an address or an extended public key.

Read-only, non-custodial, no account. An xpub is expanded to addresses in your browser and never leaves it. Nothing is stored.

[ShorWatch @shorwatch]

A quantum computer running Shor's algorithm can derive a private key from a public key. It cannot derive one from a hash of a public key.

That single distinction decides which of your coins are exposed today.

[ShorWatch @shorwatch]

No countdown, no date. A cryptographically relevant quantum computer does not exist yet, and anyone selling you a year is guessing.

What is knowable today is your exposure. That part is just arithmetic over public data.