Let's goooo!!

Also, quantum attackers will have to break UTXOs one by one. At first, they might be able to break one a month or so, and then slowly ramp up from there. Anything under 50 BTC (Satoshi coinbases) will be safe for years, even in legacy UTXOs, and can therefore be treated as safe in analysis. What many people miss is that it cannot be an all-at-once attack; it will likely unfold over a decade, and it will not start before breaking a key becomes profitable. Even with a BTC at $1,000,000, they'll need a quantum computer able to break a keypair for less than $50,000,000 or they'll lose money. That is a much higher bar than simply breaking a key once for the hype, which is already a very distant goal.