Safety

Recovery and return

Owners who have lost the credentials needed to authorize a transaction may be unable to follow an ordinary owner-initiated migration. Potomac’s proposed program is recovery and return: use quantum cryptanalysis to recover access, and return assets through an accountable process whose governance is established before any operation involves third-party assets.


Lost credentials and migration

Why lost keys make migration hard

Owners who no longer possess the credentials needed to authorize transactions may be unable to complete an ordinary migration. What happens to those assets also depends on the rules adopted by the network. Potomac’s recovery-and-return program is intended to address this problem through technical research and a governance framework developed before operations begin.

This does not mean that all inactive balances have lost owners, or that those balances become the property of the first organization able to move them. A wallet may be in long-term storage, controlled through arrangements invisible on the chain, or subject to circumstances the company does not know.


Claims and ownership

Evidence independent of the recovered key

A claims process must consider evidence independent of a newly recovered private key. Otherwise the recovery itself would manufacture its own supposed proof of ownership. The process must be able to handle incomplete records, estates, competing claims, and cases in which no claimant has yet appeared.

Inactivity is not a sufficient decision rule. The absence of a response must not be treated as consent.


Network rules

What networks decide

Recovery possibilities depend on the rules that networks adopt. Communities may choose migration mechanisms, restrictions on old signature systems, or alternative rescue procedures. A company cannot promise that all historically spendable assets will remain spendable by the same means.

The proposed program must evaluate technical feasibility and network authority separately. It should participate in research and public discussion without presenting its preferred outcome as an already accepted protocol decision. The proposals below are proposals, not adopted network policy.

Bitcoin BIP 360 (draft)
Draft migration work that distinguishes exposure scenarios by public-key exposure and output type.
Bitcoin BIP 361 (draft)
Draft migration and rescue proposals showing that protocol decisions can change what happens to legacy funds.
Ethereum emergency research proposal
A research proposal for a network response and alternative recovery evidence in a quantum emergency, not an adopted program.

Custody and return

Custody and return

Before any transfer, the program needs a documented answer to who controls the assets, how that control is secured, what approvals are required, and what happens if a decision is disputed. Returned assets require a verified destination and an auditable chain of decisions.

Unclaimed or disputed assets raise questions that this framework does not settle. Custody, holding periods, fees, dispute resolution, and possible final disposition remain governance decisions to be developed with appropriate expertise. The program must not quietly treat these assets as Potomac revenue.


Financial conflicts

The incentives of a recovery company

A company that is paid for successful recovery could have an incentive to classify more assets as recoverable or more claims as sufficient. Its own financial interest is therefore a reason for stronger review.

The proposed framework separates technical verification from claims decisions and asset disposition. It requires disclosure of financial interests, recusal where appropriate, independent challenge, and clear records. Any future fee model will be stated separately from the value of the assets involved.


Unresolved

Decisions still to be made

Authority
Who can authorize target-specific recovery, and what evidence establishes that authority.
Claims rules
Standards of evidence, handling of estates and competing claims, and cases with no claimant.
Custody design
Control, security, approvals, and dispute handling for recovered assets.
Fees and disposition
Any fee model, holding periods, and the final disposition of unclaimed assets.
Review responsibilities
Who reviews, with what independence, and how objections are escalated.
Secure intake
A secure channel and handling policy before any recovery evidence is solicited.

How these decisions will be governed