Tomas Susanka

Why 0.01 Bitcoin Is The New $1,000,000? Quantum computers can't crack Bitcoin today, so why is @Trezor 's CTO telling the industry to prepare anyway? 👇 Speaking at BTC Prague 2026, Tomáš Sušánka @tsusanka makes the case for quantum-resistant Bitcoin without the fear mongering. Qubit counts have climbed from 5 to over 1,100 since 2016, multiple hardware approaches are now in serious development, and two new papers suggest breaking Bitcoin's cryptography may take far fewer qubits than the 8 to 10 million once assumed, with one estimate as low as 10,000. He works through the strongest counterarguments one by one, then lands on the real issue: this is an asymmetric risk, the same logic that makes you wear a seatbelt. Sušánka doesn't expect a relevant quantum computer within 10 years, but with roughly 6 to 7 million BTC already exposed, he argues Bitcoin should adopt post-quantum addresses now, out of precaution rather than fear.

@PospisilAdam @toly @P3b7_ @Trezor We already benchmarked it a year ago 😉 github.com/trezor/trezor-… (On older models, Trezor Safe series will have better results)

@toly @P3b7_ @tsusanka @Trezor if you’d like to jump on Falcon soon 🙂

We'll support all the main PQC schemes especially if they're used by major blockchains. So Falcon for sure (hope it will be officially standardized soon) Hawk to be defined. It's promising but far from being standardized. We just start with the _main_ standards...

Silent Swap is a clipboard hijacker. It sits quietly in the background, spots when you copy a crypto address, and swaps in the hacker's address before you paste. So you think you're sending to a known contact but you're actually paying a hacker. It hides sneakily inside a fake 'Google Notes' browser extension and the attack itself is simple. It corrupts what your screen shows you at the moment you send. This is why you can't fully trust a device that connects to the internet. Your computer can be compromised without you knowing, and the malware doesn't even need your keys, it just needs to control what you see. A hardware wallet is never connected to the internet. The real destination address appears on the hardware wallet's own screen, so if it's been swapped, you can see the mismatch and catch it before you confirm. But it only works if you check. The hardware wallet gives you the chance to catch this, it doesn't remove your part in catching it. Read the full address on the hardware wallet's screen before you approve, don't just glance and click. And the basics still apply to everyone. Never install cracked software, and treat unfamiliar browser extensions with suspicion.

Binance is mass-notifying millions of EU users in a letter to move to self-hosted wallets after the EU passed MiCA. "Not your keys, not your coins" straight from the source. Time to get a hardware wallet. TAKE CONTROL

"Quantum crypto-graphy, does anybody know what that is?" We do.

@Dantoshi I'm not getting rid of that. Am I?

@tsusanka Good talk Dr. Quantum.

That's a wrap on BTC Prague 2026 🇨🇿⚡ Three days here in Prague, full of great talks and great people. See you next year everyone!

One of the things I am most proud of, but least talked about is the great work @JosefTetek is doing with @TrezorAcademy. This documentary is exemplary for the hard work done on the ground to educate around bitcoin in the places where it is needed most.

Claude Fable was released few hours ago and there is already a new top result at ecdsa.fail 🤯

Earn yield on USDC or USDT on Ethereum without leaving Trezor Suite. No dApps, no browser extensions, no new accounts. Powered by Morpho, one of the most stress-tested and audited lending protocols on Ethereum. Start now with just a few clicks.

How close is the quantum threat to crypto, and what do we need to do to prepare? We shot a quick FAQ answering users' top questions. Perfect background listening if you're doing some chores today! youtube.com/watch?v=AVE63P…

I'm fascinated with Durov's technique of multi-layered deception. It reminds me of the techniques used by scammers, politicians, and flim-flam artists of all kinds. If you pack half a dozen lies into every message, it becomes impractical for truth-seekers to untangle it. ⤵️

I do agree with this but at the same time I just wouldn't underestimate how long it can take to agree on something and execute in a decentralize network such as Bitcoin.

Blind signing is becoming a thing of the past. What you see is what you sign. Great to be working with @ethereumfndn and the coalition making it happen.

Clear Signing for hardware wallets is a non-negotiable standard. It is one of our top priorities this year as we collaborate with the @ethereumfndn and our ecosystem partners. We are executing an aggressive roadmap to ensure that you never have to sign a transaction you don't fully understand. Let’s do this.

@n1ckler @blksresearch How do you know which one is the primary device? On a blank computer, you'd scan the blockchain, see your transactions on the SHRINCS key path, but realize you don't have the state -> fallback to SLH-DSA? 🤔

Yes, syncing the state between two devices seems to be difficult to implement in a way where the end user can not mess up. In the original SHRINCS proposal, the state would only ever be on the primary device, which can use the compact SHRINCS path to produce small signatures. Any other device that the seed is imported into, would have to use the larger fallback path.

A post-quantum upgrade for Bitcoin might eventually arrive. The question is which scheme. NIST's standardized options (ML-DSA, SLH-DSA) would tank throughput from 6.5 TPS to under 0.5. Stateful hash-based signatures could be a way out.

Good news! Falcon doesn't need a large CPU or even a FPU, and even runs (experimentally) on Trezor HW Wallet!

Pretty happy about this. We always try to keep an eye on this and not let it slip