Developers emphasize a long-term, phased strategy given uncertainties in quantum computing timelines, with concern for collect-now, decrypt-later threats and the need for careful planning across infrastructure and user adoption.

User guidance advises not to panic, avoid address reuse, keep wallets updated, monitor P2MR support, and plan asset migration for holders with significant balances.

BIP-360 formally incorporates quantum resistance into Bitcoin’s roadmap for the first time by introducing Pay-to-Merkle-Root (P2MR) and removing Taproot key-path spending, signaling an incremental, not radical, change.

Limitations of BIP-360 include that existing UTXOs aren’t automatically upgraded, it does not introduce post-quantum signatures, and absolute quantum immunity isn’t guaranteed without broader, coordinated action.

Practical impact may include new quantum-hardened wallet addresses, slightly larger transaction sizes and fees due to added witness data, and the need for ecosystem-wide updates from wallets, exchanges, and custodians.

P2MR preserves essential scripting functionality such as multisig, timelocks, conditional payments, asset inheritance, and advanced escrow, keeping Bitcoin’s smart-contract expressiveness intact.

The quantum risk to Bitcoin centers on exposure of public keys rather than the SHA-256 hash function, making public-key exposure the core mitigation focus.

Deployment is expected to be phased, with gradual adoption of P2MR outputs followed by wallet and platform support, mirroring SegWit and Taproot rollouts.

Overall, BIP-360 is framed as the first step toward a quantum-resistant era, laying groundwork for future upgrades while noting that full post-quantum security requires ecosystem-wide coordination over time.

P2MR removes key-path spending and requires use of the Merkle-tree-based script path, reducing elliptic-curve public-key exposure while maintaining scripting capabilities through Tapscript Merkle trees.