Post-quantum addresses in bitcoin: BIG MISTAKE - HAWK quantum algorithm broken

First, take a look here: https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/2r2u6SbHun4/m/S-ZUsHNICQAJ

What's that? Another post-quantum algorithm massively neutralized. Now they're doubling the number of bits by default to fix this.

This is not a new thing in cryptography. When RSA (one of the earliest public key cryptography algorithms) was first discovered, people thought that RSA keys are secure with a small size (~200 bits). Then what happened? Index-calculus-style techniques and the number field sieve algorithms and others were discovered, and they DESTROYED RSA that have smaller keys! That's why RSA keys are 2048+ bits nowadays.

Same with some elliptic curves using MOV attack.

The security of cryptographic algorithms DOES NOT ONLY depend on their parameters. It depends on what attacks humans (and AI now) can figure out.

We're lucky Satoshi picked something that's secure for bitcoin, the Secp256k1 curve. Worked out well so far.

Developing a secure quantum algorithm will take YEARS, and lots of algorithms will be broken. Rushing it doesn't help.

Conclusion: Now imagine us moving to post-quantum in bitcoin, because everyone is rushing it, and we end up with a broken algorithm. Now THAT, would literally destroy bitcoin. Imagine the irony, where Secp256k1 is still safe, but the "new shiny" post-quantum algo is broken.