Four unpatched bugs, a 5-year quantum clock, and a miner standoff are pushing Bitcoin to a critical crossroad

Bitcoin entered BIP-110’s final ordinary 2,016-block window on July 25 with miner support at 0.89%. The proposal requires 1,109 blocks, or 55%, for ordinary lock-in, and its mandatory version-bit phase can begin in August if support stays below that threshold.

Jameson Lopp has framed Consensus Cleanup, covenants, and quantum preparation as Bitcoin’s next agenda. He also occupies two sides of that transition: Lopp opposes BIP-110 and co-authored BIP-361, a draft plan for post-quantum migration.

BIP-110 gives those debates a live governance reference because developers, miners, node operators, exchanges, custodians and holders each supply a different form of consent. The next proposals attach that coordination test to block validation, theft-resistant custody and the ownership status of vulnerable coins.

Known bugs enter the upgrade queue

Consensus Cleanup combines four protocol repairs in BIP-54. Antoine Poinsot and Matt Corallo completed the specification in May, and Bitcoin Inquisition has run the rules on its experimental signet since February.

The package covers the timewarp attack, extreme block-validation costs, a Merkle-tree ambiguity involving 64-byte transactions, and future duplicate-transaction checks.

The timewarp flaw gives majority hash power a route to drive mining difficulty toward its minimum within 38 days, pulling subsidy forward through faster block production and altering miner incentives.

A separate weakness is that specially crafted blocks can take several minutes on high-end hardware and hours on weaker machines.

BIP-54 caps signature operations per transaction, cutting the worst-case validation burden by a factor of 40. It also invalidates a 64-byte transaction form that miners have treated as nonstandard since 2019 and that Bitcoin last recorded on-chain in 2016.

Because those repairs tighten consensus validity, review centers on edge cases across the specification, reference code, test vectors, and months of signet use. An extended delay would leave four documented weaknesses in the protocol and increase the likelihood that a future attack would compress the review schedule.

Consensus Cleanup gives Bitcoin a maintenance test with defined faults and measurable remedies, allowing approval to demonstrate that the network can process defensive protocol work through ordinary review.

Prolonged delay would convert known weaknesses into accumulated technical debt.

Covenants move into active testing

Bitcoin Inquisition activated BIP-446’s OP_TEMPLATEHASH on July 27 at signet block 314,928. The opcode lets a Tapscript commit to the exact transaction that can spend an output, giving wallets and second-layer systems a covenant primitive.

A vault uses that primitive via a first transaction that announces an attempted withdrawal and creates a delay during which the owner can redirect funds to a safer address or block the thief’s payout.

Current constructions can use presigned transactions and destroyed signing keys, an operational model that becomes fragile across large balances and long storage periods.

BIP-448 proposes a three-opcode Tapscript package that combines OP_TEMPLATEHASH with OP_CHECKSIGFROMSTACK and OP_INTERNALKEY.

Gregory Sanders, Antoine Poinsot and Steven Roose connect the package to rebindable transactions, simpler payment channels, multiparty Lightning designs, statechains and Ark variants.

Reviewers can compare a standalone TEMPLATEHASH activation, with its smaller review surface and earlier vault tooling, against BIP-448’s broader payment-system support and lower chance of another soft fork.

A longer testing period keeps current consensus rules in place and extends reliance on custodians or fragile presigned constructions.