Addressing Bitcoin Security Threats

By Blockstream Engineering · Last updated June 2026

Two Layers of Bitcoin Security

Bitcoin security operates on two distinct layers that reinforce each other. The protocol layer covers the rules, code, and infrastructure that make Bitcoin work as a decentralized network. The individual layer covers the choices each bitcoin holder makes about storing, transacting, and planning for the future.

A threat at either layer affects the other. If mining becomes dangerously centralized, every individual holder faces increased risk of censorship or reorganization attacks. If too many individuals leave their bitcoin on exchanges, the resulting concentration creates systemic risk: exchange failures become network-wide events.

Individual Security: Protecting Your Bitcoin

The threats you face as a bitcoin holder are specific and addressable. Each of the practices below mitigates a known attack vector or failure mode.

UTXO Management

Every Bitcoin transaction creates unspent transaction outputs (UTXOs) that represent discrete amounts of bitcoin in your wallet. The UTXO set is the complete database of all spendable outputs, maintained by every full node in src/txdb.cpp using a LevelDB-backed coin cache. As of early 2026, the UTXO set contains over 170 million entries. How you manage your UTXOs directly affects your privacy and your exposure to certain attacks.

The core principle: never merge UTXOs from different sources in a single transaction. When you combine inputs from separate transactions, you reveal on-chain that those UTXOs belong to the same person. A payment received from your employer and a payment received from a peer-to-peer purchase become permanently linked on the blockchain.

Practical UTXO hygiene includes:

• Coin control. Use wallet software that lets you select which UTXOs to spend. The Blockstream app provides coin control features that let you choose specific inputs for each transaction, preventing accidental merges of unrelated UTXOs.
• Labeling. Tag each UTXO with its source when you receive it. This makes future spending decisions clearer: you know which coins came from where and can keep sensitive sources separate.
• Consolidation timing. If you need to merge small UTXOs, do so during periods of low fees and only among UTXOs from the same source. Consolidating during high-fee periods wastes money; consolidating across sources wastes privacy.

Transaction Hygiene

Address reuse is one of the most common and most avoidable privacy mistakes in Bitcoin. Every time you provide a Bitcoin address to receive a payment, that address becomes linked to that transaction on a public blockchain. Reusing the same address for multiple payments lets anyone who knows one of your transactions trace all the others.

Generate a new receiving address for every transaction. Modern wallet software handles this automatically using hierarchical deterministic (HD) wallets defined by BIP 32, which derive unlimited addresses from a single recovery phrase. The derivation path (BIP 44/49/84/86) determines the address type: legacy (1...), nested SegWit (3...), native SegWit (bc1q...), or Taproot (bc1p...). Each new address is derived by incrementing the address index at the end of the path, requiring no additional backup as long as the original recovery phrase is secured.

Additional transaction hygiene practices:

• Avoid round numbers. Sending exactly 0.1 bitcoin makes it easier for chain analysis to identify which output is the payment and which is change. Odd amounts provide slightly better ambiguity.
• Run your own node. When your wallet queries a public server for balance and transaction data, that server learns which addresses you own. Connecting to your own Bitcoin node ensures no third party sees your address queries.
• Consider timing. Broadcasting transactions at predictable times can create patterns. Varying transaction timing adds a small but real layer of ambiguity.

Backup Strategy

A recovery phrase is the master key to your bitcoin. If you lose it, you lose access permanently. If someone else finds it, they have full control of your funds. The backup strategy has to account for both failure modes: loss and theft.

The Three-Location Rule

Store your recovery phrase in at least three geographically separate locations. A single location creates a single point of failure: a house fire, a flood, or a burglary can destroy your only copy. Three locations ensure that any single disaster leaves at least two copies intact.

Material Matters

Paper degrades. It burns, it gets wet, ink fades over years. Metal backup plates survive fire, flood, and long-term storage. Stamp or engrave your recovery phrase onto steel or titanium and store those plates in your designated locations.

Test Your Recovery

After writing down or stamping your recovery phrase, verify it works by performing a test recovery on your hardware wallet. Jade Plus supports recovery verification during the initial setup process, and you can also test recovery at any time by wiping the device and restoring from your recovery phrase. If the same addresses and balances appear after restoration, your backup is confirmed.

Passphrase Considerations

An optional passphrase (sometimes called a "25th word") adds a second factor to your recovery phrase. Even if someone finds your metal backup, they cannot access your bitcoin without the passphrase. This is powerful protection, but it introduces its own risk: forgetting the passphrase means permanent loss. If you use a passphrase, it needs its own backup strategy, stored separately from the recovery phrase.

Inheritance Planning

Self-custody means no third party can recover your bitcoin on behalf of your heirs. Unlike a bank account, there is no institution holding a copy of your keys to fall back on. If you become incapacitated or die without a plan, your bitcoin becomes permanently inaccessible. Millions of bitcoin are estimated to be permanently lost, and some portion of that total belongs to people who died without sharing access instructions.

Effective inheritance planning requires a balance: your heirs need enough information to recover your bitcoin, but that information must not put your funds at risk while you are alive.

Letter of Instruction

A letter of instruction is a sealed document, stored with your estate documents, that explains what bitcoin is, that you own some, and the steps required to access it. This letter does not contain your recovery phrase. It contains the locations of your backups, the hardware wallet model you use, and step-by-step recovery instructions written for someone who may have zero Bitcoin knowledge. Update this letter whenever you change your custody setup.

Multisig With Trusted Parties

A 2-of-3 multisig arrangement distributes three signing keys across three parties (for example, you, a trusted family member, and an estate attorney). Any two keys can move the funds, but no single party has unilateral access. This means your family member and attorney can recover the bitcoin if you are incapacitated, but neither can steal it alone while you are alive.

Multisig setups require more technical knowledge upfront, but they eliminate the single point of failure inherent in singlesig inheritance plans. Several wallet applications support collaborative multisig setups, including Sparrow and Nunchuk.

Dead Man's Switch

A dead man's switch is a time-based mechanism that triggers if you fail to check in within a set period. The simplest version is a trusted person who receives a sealed envelope if you do not contact them within a defined timeframe. More sophisticated versions use timelocked Bitcoin transactions or Miniscript conditions that automatically make funds spendable by a designated key after a certain block height. Jade Plus supports Miniscript, enabling these programmable custody arrangements through compatible wallet software.

Protocol Security: Protecting the Network

Individual security practices protect your bitcoin. Protocol security protects the network that makes bitcoin valuable in the first place. These are the structural defenses built into Bitcoin's design and maintained by its community.

Development Conservatism

Bitcoin's slow, careful approach to code changes is a deliberate security strategy. Every proposed change to the Bitcoin protocol undergoes extensive review by multiple independent developers over months or years. The bar for inclusion is high: a change must demonstrably improve the protocol without introducing new risks, and it must achieve broad community consensus before activation.

This conservatism exists because Bitcoin secures hundreds of billions of dollars in value. A bug in Bitcoin Core can affect every user on the network.

Soft forks like SegWit and Taproot spent years in testing and public debate before activation. This process frustrates developers who want faster feature additions, but it is what makes Bitcoin reliable enough to store generational wealth.

Mining Decentralization

Proof-of-work mining secures Bitcoin against double-spend attacks and transaction censorship. The security of this system depends on mining power being distributed across many independent operators in many jurisdictions. When mining concentrates in a single country or within a few large pools, the network becomes vulnerable to coordinated attacks or regulatory pressure.

Several ongoing efforts work to distribute mining more broadly:

• Geographic distribution. After China's mining ban in 2021, hashrate redistributed across North America, Central Asia, Northern Europe, Latin America, and Africa. This geographic spread makes coordinated government action against miners significantly harder.
• Stratum V2. The next-generation mining protocol that shifts block template construction from pool operators to individual miners. Under the original Stratum protocol, the pool operator decides which transactions to include in a block. Under Stratum V2, individual miners build their own block templates from their own node, using the protocol's dedicated Template Distribution Protocol rather than the legacy getblocktemplate call. This removes the pool operator as a potential censorship point and distributes transaction selection across thousands of independent miners.
• Pool diversity. Miners can reduce centralization risk by distributing their hashrate across multiple pools rather than directing everything to the largest pool offering the lowest fees. Smaller pools with transparent operations deserve support even if their payout variance is slightly higher.

Under the Hood: 51% Attack Cost Estimation

Estimating the cost of a 51% attack requires calculating three components: hardware acquisition, energy expenditure, and opportunity cost. With Bitcoin's hashrate exceeding 800 EH/s as of Q1 2026 (per mempool.space / Coin Metrics), an attacker would need to out-hash the entire honest network, deploying more than 800 EH/s of dedicated mining capacity to control a majority. The most efficient ASICs available (approximately 200 TH/s per unit) would require roughly 4 million machines at approximately $3,000-5,000 each, totaling $12-20 billion in hardware alone. Global ASIC manufacturing capacity could not fulfill such an order in less than several years.

The energy requirement compounds the cost. At approximately 15 J/TH for current-generation ASICs, sustaining more than 800 EH/s consumes about 12 GW of continuous power, comparable to the continuous electricity demand of a mid-sized industrialized country. At $0.05/kWh, that is roughly $14 million per day in electricity costs alone. These figures come from the physics of SHA-256d computation: each hash attempt requires the same energy regardless of the attacker's intent.

The opportunity cost is the final deterrent. An entity capable of deploying more than 800 EH/s of mining infrastructure would control roughly half the network's hashrate and could earn around half of all daily block rewards and fees by mining honestly, on the order of tens of millions of dollars per day at recent bitcoin prices. The rational economic choice is honest mining, which makes a 51% attack self-defeating by design.

Regulatory Engagement

Bitcoin operates across every legal jurisdiction on Earth. Regulatory threats to the protocol typically take the form of proposed rules that would restrict self-custody, mandate surveillance at the protocol level, or require licensing for node operation.

The Bitcoin community's approach to these threats is education, not traditional lobbying. Policymakers often conflate Bitcoin with speculative token projects and draft regulations accordingly. Effective engagement means explaining how Bitcoin works at a technical level, why self-custody is a feature rather than a loophole, and how proposed rules would affect ordinary citizens rather than just financial intermediaries.

Organizations like the Bitcoin Policy Institute, advocacy groups in multiple countries, and individual Bitcoiners who attend regulatory hearings contribute to this effort. The goal is informed regulation rather than prohibitive regulation.

Your Role in Bitcoin Security

Every individual participant in the Bitcoin network contributes to its security. This extends beyond protecting your own bitcoin to structural decisions that strengthen or weaken the network for everyone.

Run a Node

A Bitcoin full node independently validates every transaction and every block against the consensus rules. When you run a node, you do not trust anyone else's version of the blockchain. You verify it yourself.

Thousands of independent nodes enforcing the same rules make it functionally impossible for miners, developers, or governments to change Bitcoin's properties (its 21 million supply cap, its block reward schedule, its transaction rules) without the consent of the node operators. Each additional node raises the cost of any attempt to alter the protocol.

Blockstream Satellite, a satellite broadcast service Blockstream previously operated (transferred to an independent mining entity in April 2025), broadcasted the Bitcoin blockchain from space, enabling node operation even without a traditional internet connection. This added a layer of resilience against network-level censorship: even if local internet infrastructure is disrupted or filtered, satellite-connected nodes can continue validating blocks.

Choose Self-Custody

Any bitcoin held on an exchange is not in your control. The exchange holds the private keys. If the exchange is hacked, goes bankrupt, freezes accounts under regulatory pressure, or simply decides to restrict withdrawals, your bitcoin is at risk. The history of exchange failures from Mt. Gox to FTX demonstrates that these are not hypothetical scenarios.

Moving bitcoin to a self-custodial wallet removes the exchange as a single point of failure. A hardware wallet like Jade Plus keeps your private keys in cold storage (offline), signs transactions air-gapped via QR codes, and never exposes key material to a network-connected device. Jade Plus uses an open-source Virtual Secure Element with a blind oracle PIN model: the device and a remote server each hold half the information needed to derive signing keys, but neither possesses enough to reconstruct them alone. Even if the physical device is stolen, the attacker cannot extract usable key material without PIN server verification. The entire security model is open-source and publicly auditable.

The cumulative effect of many individuals choosing self-custody is a more decentralized network. When large amounts of bitcoin sit on exchanges, those exchanges become high-value targets and systemic risks. When bitcoin is distributed across millions of self-custodial wallets, no single breach can affect the broader ecosystem.

Support Decentralization

Concentrating bitcoin on a small number of platforms creates the structural risk Bitcoin was designed to eliminate. Practical steps to support decentralization:

• Withdraw to self-custody. Do not leave bitcoin on exchanges longer than necessary.
• Use multiple wallet configurations. Distribute holdings across singlesig and multisig setups to avoid dependence on any single tool or vendor.
• Buy from peer-to-peer markets when possible. Peer-to-peer purchases bypass centralized platforms and support Bitcoin's function as a peer-to-peer currency.
• Transact on Bitcoin. Using bitcoin for payments, not just holding it as an investment, exercises the network and maintains its utility as a payment system.

The Community's Role

Bitcoin has no CEO, no marketing department, and no customer support team. Its security depends on a distributed community of developers, reviewers, researchers, and users who maintain the protocol through voluntary contribution.

Code Review

Bitcoin Core, the reference implementation of the Bitcoin protocol, is maintained by a small group of developers and reviewed by a larger community. Every change is publicly proposed, publicly debated, and tested extensively before merge. More reviewers means more eyes on the code, more potential bugs caught, and higher confidence in releases.

You do not need to be a C++ expert to contribute. Testing release candidates, running beta software, and reporting bugs all strengthen the review process.

Responsible Disclosure

When security researchers discover vulnerabilities in Bitcoin software, responsible disclosure protects the network: report the bug privately to the development team, give them time to develop and deploy a fix before the vulnerability becomes public knowledge. A publicly disclosed zero-day could be exploited before nodes can upgrade.

The Bitcoin security community has a strong track record here. Major vulnerabilities have been found and fixed without exploitation because researchers prioritized network safety over personal recognition.

Open-Source Development Support

Bitcoin's security model depends on open-source software that anyone can audit. This model only works if the developers maintaining that software can sustain their work long-term. Supporting open-source development through grants, donations, or direct employment ensures critical infrastructure receives ongoing attention.

Organizations like Brink, Spiral, the Human Rights Foundation, and Blockstream employ Bitcoin developers and fund protocol research. Individual contributions to these organizations directly fund the people who maintain the code securing every bitcoin in existence.

Putting It All Together

Bitcoin security is not a checklist you complete once. It is an ongoing practice at both the individual and protocol layers. The table below summarizes the key actions by difficulty and impact.

Start with the low-difficulty, high-impact actions and work upward as your knowledge and confidence grow.

Frequently Asked Questions

What is the biggest security mistake individual bitcoin holders make?

Leaving bitcoin on exchanges. Exchange custody means trusting a third party with your private keys. History shows that exchanges get hacked (Bybit: $1.5 billion in 2025), go bankrupt (FTX: $8 billion in customer assets), freeze withdrawals, and comply with seizure orders. Self-custody with a hardware wallet like Jade Plus removes these exchange-custody risks by keeping private keys on a dedicated device you control. The second most common mistake is writing down a recovery phrase but never testing that the backup actually works.

How do I create an inheritance plan for my bitcoin?

Start with a letter of instruction stored with your estate documents. This letter explains that you own bitcoin, describes your custody setup (hardware wallet model, software used), and provides the locations of your recovery phrase backups. It should not contain the recovery phrase itself. For stronger protection, consider a 2-of-3 multisig arrangement where your heirs hold one key, a trusted attorney holds another, and you hold the third. Any two keys can recover the funds.

Why does address reuse matter?

Bitcoin transactions are recorded on a public blockchain. When you reuse an address, every payment to and from that address becomes linked. Anyone who knows one of your transactions (an employer, a merchant, a peer-to-peer trading partner) can see all the others. Generating a new address for each transaction breaks these links and preserves your financial privacy. Address reuse also has a security dimension: spending from an address exposes its public key on-chain (Bitcoin uses ECDSA for legacy and SegWit outputs and Schnorr for Taproot, which activated in November 2021), which is relevant for long-term quantum resistance. An unused P2PKH/P2WPKH address only reveals a hash of the public key (via HASH160), adding a layer of protection that reuse removes.

Does running a Bitcoin node actually help the network?

Yes. Each full node independently enforces Bitcoin's consensus rules. The more nodes enforcing the rules, the harder it is for any party to change those rules without broad agreement. Nodes also relay transactions and blocks, improving network connectivity and resilience. Running a node is the most direct way an individual can contribute to Bitcoin's decentralization.

What is Stratum V2 and why does it matter for mining decentralization?

Stratum V2 is a next-generation mining protocol that lets individual miners construct their own block templates instead of relying on pool operators. Under the current system, pool operators decide which transactions go into blocks, creating a potential censorship bottleneck. Stratum V2 distributes this power across all participating miners, making transaction censorship significantly harder to coordinate.

How often should I test my recovery phrase backup?

Test your backup immediately after creating it, and then at least once a year. Testing means performing a full recovery: wiping your hardware wallet (or using a second device) and restoring from the recovery phrase. If the same wallet addresses and balances appear, the backup is valid. Annual testing catches degraded backups (faded ink, corroded metal) before they become a problem.