Use It Once: why reusing a bitcoin address is dangerous

[windpath]

After last week's "bunker mode" post, we wrote up the one piece of it everyone agrees on: don't reuse addresses.

Link: Use It Once: Why Reusing a Bitcoin Address Is Dangerous

What's in it:

• Three separate reasons: the public key stays visible for every later deposit after the first spend, reuse feeds chain-analysis clustering, and one key with many coins turns a signing bug into a total loss (the August 2013 Android alert).
• The numbers: 5,172,596 BTC (25.7% of supply) is reuse-exposed, and about 3.69M BTC of that had its key revealed in the last five years, twice the Satoshi-era P2PK pile. Data: ChainQuery quantum-exposure report, snapshot 2026-10-11, block 970,878.
• Why it persists: Corallo's April 2026 bitcoin-dev post on custodian whitelists, and why the biggest reused balances are institutional (top exposed addresses).
• Fixes for people who need one address forever: an xpub on your own server, silent payments (BIP-352), Lightning, and what each costs.
• What to do if you already reused, without rushing: one spend, that address only, to a fresh non-Taproot address, on a quiet fee day.

If any number or quote is off, say so here and it gets fixed and credited.

[SquirrelJulietGarden]

After last week's "bunker mode" post, we wrote up the one piece of it everyone agrees on: don't reuse addresses.

Bitcoin privacy guide: Segregating your Bitcoin.
Bitcoin privacy techniques: Practical guide.
Guidelines for sending BTC transactions.

Non custodial wallets provide change addresses, coin control, and users can choose UTXOs for their transactions. If any non custodial wallet that does not have these important features, it's a bad wallet. Above are some guides for Bitcoin privacy with principles like use change addresses, don't reuse address, don't combine UTXOs in different addresses together.

[sergiorus]

Just thought about it recently and about how different such approaches can be within the crypto community.

For example, altcoiners religiously use the same address to build their ''onchain reputation'' - a footprint of multi-year DeFi usage and overall protocol participation. That, in the past, would get one eligible for various airdrops and tokensale whitelists.

Needless to say they might be in for some troubles soon but luckily airdrops and tokensales are dead anyway, so no one will anything if they start applying basic onchain hygiene ASAP.

[bitmover]

Link: Use It Once: Why Reusing a Bitcoin Address Is Dangerous

What's in it:

• Fixes for people who need one address forever: an xpub on your own server, silent payments (BIP-352), Lightning, and what each costs.
• What to do if you already reused, without rushing: one spend, that address only, to a fresh non-Taproot address, on a quiet fee day.

If any number or quote is off, say so here and it gets fixed and credited.

Address reuse isnt dangerous by itself, public keys exposed arent a big deal. Most of satoshi coins have their keys exposed and nobody was able to get the private keys and get his coins.

I think using lightning is more dangerous than address reuse. Lots of bad wallets with bad implementation.

[windpath]

Non custodial wallets provide change addresses, coin control, and users can choose UTXOs for their transactions. If any non custodial wallet that does not have these important features, it's a bad wallet.

Agreed, and thanks for the guides. The chapter covers the same ground from the reuse side, plus one case people miss: dust sent to an address you already emptied. Freeze it with coin control and never spend it alongside your other coins.

altcoiners religiously use the same address to build their "onchain reputation"

Good point. Account-based chains are built around one address, so reuse there is the design rather than a habit. There's a 2026 paper (Stuetz et al.) on public keys reused across UTXO and account-based chains; it's in the chapter's sources if you want the numbers.

Address reuse isnt dangerous by itself, public keys exposed arent a big deal. Most of satoshi coins have their keys exposed and nobody was able to get the private keys

Fair, and the chapter says the same: no computer today can derive a private key from a public key, and "exposed" means visible, not stolen. Satoshi's coins are the best evidence of that.

But exposure is only one of three reasons, and the other two don't depend on quantum at all:

• Privacy. Everyone who ever paid a reused address can see every other payment to it, and reuse is one of the main reasons chain-analysis clustering works so well.
• Key safety. In 2013 a broken random number generator in Android wallets let attackers recover keys from addresses that had signed more than once. One address per payment means one bad signature costs one payment; a reused address puts everything behind it.

On Lightning: no argument that some wallets have had bad implementations. The chapter only suggests it for tip jars and donation pages that need a fixed address, and lists the trade-offs.

[Amphenomenon]

Just thought about it recently and about how different such approaches can be within the crypto community.

For example, altcoiners religiously use the same address to build their ''onchain reputation'' - a footprint of multi-year DeFi usage and overall protocol participation. That, in the past, would get one eligible for various airdrops and tokensale whitelists.

Needless to say they might be in for some troubles soon but luckily airdrops and tokensales are dead anyway, so no one will anything if they start applying basic onchain hygiene ASAP.

This is not just for airdrop there will be a more better reason why this was applied (DEFI) and it doesn't have to change. The thing is that some of these cryptocurrency have their purpose while some might be useless.

Bitcoin helps regarding this and it can be one factor why someone will opt for it depending on what they need or want, this is not an issue for every cryptocurrency.

[Leon Zimmer]

Yes, you could expose your pubkey. But it cannot currently be used to steal your coins, Satoshi has some unspent coins. So its not really that important.

More relevant risk from address reuse is loss of privacy. This is less serious, as there is an immediate impact, unlike when your signing key is exposed, e.g. because of 2013 Android or currently theoretical quantum computer. But every transaction you receive to a previously used address permanently leaks association with all past and future transactions to or from that address. It makes life easy for chain analysis companies, so not reusing addresses for the average user, or for example using silent payments or xpub server if you need a persistent identifier for donations instead of somewhat premature lightning deploy (wallets are not there yet), is highly recommended. Still over 5+ million BTC can be found sitting on reused addresses, sadly, despite years of warnings.

[Bitcoin-Forever]

Yes, you could expose your pubkey. But it cannot currently be used to steal your coins, Satoshi has some unspent coins. So its not really that important.

Exposing your wallet address does not mean harm to you for any reason as a bitcoin user, but some new to easily be tricked when they lack the experience to know how some kind of attack are being coordinated using this conventional address poison pattern, because hackers knows their way through and how they could easily scam when they send a dust transaction to them with a similar address to the one they have been receiving coins, hence the reason why some may suggest not to expose the address.

[osasshem]

Having an exposed wallet address only reveals how much of BTC has been received by that address for the number of years and what possible balance is left there.
Taking it further, when it comes to participants in signature campaigns, making continuous request for change of wallet address might be a burden to the campaign manager, don't you think so?

Pieter Wuille, who opened its discussion of a post-quantum output type, wrote "Address reuse is entrenched".

This statement is based on experience and how users will find difficulties of constantly changing their addresses. If it is for payment of a job done, it's easy to switch addresses, but if it becomes a long list of workers being paid in Bitcoin, changing/updating the spreadsheet regularly (possibly weekly or monthly) as the case may be.

[sergiorus]

Just thought about it recently and about how different such approaches can be within the crypto community.

For example, altcoiners religiously use the same address to build their ''onchain reputation'' - a footprint of multi-year DeFi usage and overall protocol participation. That, in the past, would get one eligible for various airdrops and tokensale whitelists.

Needless to say they might be in for some troubles soon but luckily airdrops and tokensales are dead anyway, so no one will anything if they start applying basic onchain hygiene ASAP.

This is not just for airdrop there will be a more better reason why this was applied (DEFI) and it doesn't have to change. The thing is that some of these cryptocurrency have their purpose while some might be useless.

Bitcoin helps regarding this and it can be one factor why someone will opt for it depending on what they need or want, this is not an issue for every cryptocurrency.

What reason? I don't see any point in having an ''onchain reputation anymore''. It was simply to lure everyone to get doxxed - some incentivisation via airdrops and tokensales was necessary but that is dead. There will be no more airdrops and tokensales are a compelte extraction now, they just let everyone buy in so they collect as much money as possible.

Imho there's no point in doing this mental gymnastics that one day a wallet with ''onchain reputation'' and ''heavy DeFi usage'' will bring some benefits again, that's just cope. Furthermore it's a matter of a security now (both of your funds and even health) and everyone should abandon their doxxed wallets and/or wallets with a massive onchain footprint and go anon and maintain an impeccable onchain hygiene.

[Alpha Marine]

I've always thought this to be oversimplified. It's easy to say "don't reuse a bitcoin address", but how realistic is that? The statement carried weight because even Satoshi himself said something like that. If I remember correctly, I know I have seen a post of Satoshi where he said it.
But is it possible for a person that uses Bitcoin regularly to never reuse an address?
If you use Bitcoin to receive payment, you certainly can't be changing your address every time you make a transaction with it.
There are many other examples where it's not realistic to always change your address.

And I also feel the dangers of reusing an address are exaggerated.
There is absolutely nothing anybody can do to you address if you reuse it, at least not right now.
The only danger is people might be able to trace it to you and all the transactions you've ever done. 
It could also make you a target, but that is in rare cases.
Except there are other risks I can't think of, I don't think it's that big of a deal.

[Harbor_62]

Could the section on already reused addresses also cover an address that is still published on a website or saved by regular payers? Moving the existing balance is one part of the problem. A practical example of replacing those payment instructions would make that section more useful.

[QuietAbacus]

Abandon their wallets could use some clarification here. Do you mean stop reusing particular addresses, or migrate to an entirely new wallet? Those are different actions, and readers may interpret the wording differently. It would help to specify which one you recommend and why.

[Amphenomenon]

This is not just for airdrop there will be a more better reason why this was applied (DEFI) and it doesn't have to change. The thing is that some of these cryptocurrency have their purpose while some might be useless.

Bitcoin helps regarding this and it can be one factor why someone will opt for it depending on what they need or want, this is not an issue for every cryptocurrency.

What reason? I don't see any point in having an ''onchain reputation anymore''. It was simply to lure everyone to get doxxed - some incentivisation via airdrops and tokensales was necessary but that is dead. There will be no more airdrops and tokensales are a compelte extraction now, they just let everyone buy in so they collect as much money as possible.

Imho there's no point in doing this mental gymnastics that one day a wallet with ''onchain reputation'' and ''heavy DeFi usage'' will bring some benefits again, that's just cope. Furthermore it's a matter of a security now (both of your funds and even health) and everyone should abandon their doxxed wallets and/or wallets with a massive onchain footprint and go anon and maintain an impeccable onchain hygiene.

You might not see it as being important but to them it is actually. This is like what I'm saying while it's useless to you they have a term they use for it and reason they gave which some may buy into and others wouldn't even care to do it.

It boils down to user preference and this is referring to those who are knowledgeable while the ignorant might just follow blindly thinking they are on the right track until something alarming happens either to them or someone else.

[X-ray]

Having an exposed wallet address only reveals how much of BTC has been received by that address for the number of years and what possible balance is left there.
Taking it further, when it comes to participants in signature campaigns, making continuous request for change of wallet address might be a burden to the campaign manager, don't you think so?

Pieter Wuille, who opened its discussion of a post-quantum output type, wrote "Address reuse is entrenched".

This statement is based on experience and how users will find difficulties of constantly changing their addresses. If it is for payment of a job done, it's easy to switch addresses, but if it becomes a long list of workers being paid in Bitcoin, changing/updating the spreadsheet regularly (possibly weekly or monthly) as the case may be.

I wouldn't take it too literal, bunker mode only when you have big amount and don't have any plan with it e.g saving it for a long term, new fresh address in this case is necessary and don't spend. As far as I can understand, the whole concern being raised which is normal computer breaking keys before qday is still speculation, no proof yet.

Abandon their wallets could use some clarification here. Do you mean stop reusing particular addresses, or migrate to an entirely new wallet? Those are different actions, and readers may interpret the wording differently. It would help to specify which one you recommend and why.

Migrate entirely to new wallet because once public key is exposed and it can be broken by quantum computer, but we're still quite far away for it, but it doesn't mean there is no threat looming.

[Agbamoni]

One reason I believe reusing a Bitcoin address is not an ideal method is that it helps estimate how much Bitcoin a person controls. For someone that cherish self privacy I don't want people knowing how much Bitcoin is in my possession, which could easily be tracked by a single address.

Yes, you could expose your pubkey. But it cannot currently be used to steal your coins, Satoshi has some unspent coins. So its not really that important

It is important to treat your pubkey the way you will treat your private keys.
The emergence of quantum computers has made us understand that exposing our pubkey could create a pattern that a quantum computer, or future computer, could ordinarily use to calculate your private key.

[pooya87]

Three separate reasons: the public key stays visible for every later deposit after the first spend, reuse feeds chain-analysis clustering, and one key with many coins turns a signing bug into a total loss (the August 2013 Android alert).

Technically not reusing address may only slightly decrease the risk of losing funds in this case. It will NOT remove the risk if the RNG is broken (all your keys will be weak) or in this particular case if the implementation is wrong (using random ephemeral key for signing instead of generating it deterministically using RFC-6979).

[Agbe]

Link: Use It Once: Why Reusing a Bitcoin Address Is Dangerous

Address reuse isnt dangerous by itself, public keys exposed arent a big deal. Most of satoshi coins have their keys exposed and nobody was able to get the private keys and get his coins.

I think using lightning is more dangerous than address reuse. Lots of bad wallets with bad implementation.

I will go with this because people have put fear to those who are not knowledgeable in the technicality of bitcoin that reusing of address is dangerous and it exposes the privacy of the wallet and someone asked me if that is applicable to the reused address in the forum and I told him "No" and only for receiving outside the forum as p2p.

But to avoid tracking of coins from only one address to the wallet always is not advisable therefore it is good to use different address to receive coins from friends or buying or others to have some degree of anonymity.

[nc50lc]

• Key safety. In 2013 a broken random number generator in Android wallets let attackers recover keys from addresses that had signed more than once. One address per payment means one bad signature costs one payment; a reused address puts everything behind it.

I see, bad PRNG that produces the same 'k' (nonce) used in two different transactions that used the same address as input.
That, alongside the signature and message hash in the transactions can be used to calculate its private key.

In that case, pooya has a point since if it's the PRNG that's broken, the user has more issues than just reusing addresses.
Bitcoin.org has an article regarding that as well (for reference): bitcoin.org/en/alert/2013-08-11-android

[coinrifft]

Abandon their wallets could use some clarification here. Do you mean stop reusing particular addresses, or migrate to an entirely new wallet? Those are different actions, and readers may interpret the wording differently. It would help to specify which one you recommend and why.

I guess he meant the former, which means to stop reusing a particular address because you can be followed by anyone thru blockchain or it's that we are going to be attack by quantum computers in the future.

Yes, it might be good to move or migrate to a new wallet address that is not vulnerable. In any case, it's good that at least this early, we know how to protect our Bitcoin from the dangers of quantum computing.