Quantum computing threat to Bitcoin accelerates as experts warn cryptographic defenses may need urgent upgrade

May 26, 2026

Recent breakthroughs, including a March 2026 Google paper, have accelerated the timeline for quantum computers to threaten Bitcoin's cryptography. Experts warn that a capable machine could break a private key in minutes, putting millions of inaccessible coins at risk. The "Harvest Now, Decrypt Later" strategy poses an immediate threat, while Bitcoin's decentralized governance presents a major hurdle to implementing a necessary, but costly, post-quantum security upgrade.

Quantum computing threat timeline

▪The Global Risk Institute estimates a 19% to 34% probability of a cryptographically relevant quantum computer arriving by 2034.
▪A report from Quantus warns that quantum computing progress has accelerated faster than the cryptocurrency industry's post-quantum planning.
▪Quantum hardware company IonQ's roadmap targets 1,600 logical qubits by 2028, while IBM's roadmap projects 2,000 logical qubits by 2033.

Google Quantum AI breakthrough

▪A March 2026 paper from Google Quantum AI demonstrated that Shor's algorithm could break the secp256k1 elliptic curve cryptography used by Bitcoin.
▪Using such a machine, a Bitcoin private key could be derived from an exposed public key in approximately nine minutes.
▪Google's research estimated this would require 1,200 logical qubits and fewer than 500,000 physical qubits, a 20-fold reduction from prior estimates.

Bitcoin cryptographic architecture vulnerabilities

▪Bitcoin's ownership security relies on the Elliptic Curve Digital Signature Algorithm (ECDSA), which is vulnerable to attack by Shor's algorithm.
▪An estimated 2.3 to 3.7 million inaccessible Bitcoins, including those believed to belong to Satoshi Nakamoto, cannot be migrated to quantum-resistant addresses.
▪Older P2PK Bitcoin addresses permanently expose their public keys on the blockchain, making them a standing target for future quantum attacks.

Harvest Now Decrypt Later

▪Venture capitalist Andrew Gault warns the most dangerous vulnerability is encrypted data currently in motion, like payment authentications, being harvested.
▪A Citi report modeled that a quantum attack on a single top-five U.S. bank's Fedwire access could trigger a $2 trillion to $3.3 trillion economic cascade.
▪Adversaries can collect encrypted blockchain data today and decrypt it later when quantum computers are available, a strategy known as "Harvest Now, Decrypt Later."

Post-quantum cryptography migration challenges

▪The U.S. National Institute of Standards and Technology (NIST) finalized post-quantum encryption standards in August 2024.
▪Post-quantum signatures are hundreds of times larger than current ones, which would reduce Bitcoin's throughput by 52-57% and increase fees 2-3 times.
▪Stanford cryptographer Dan Boneh warned that a hasty transition to post-quantum cryptography is more likely to cause a catastrophic bug than a quantum attack.
▪Hardware wallets face significant memory and computing constraints in supporting larger post-quantum algorithms like ML-DSA-87.

Bitcoin governance upgrade coordination

▪A 2026 study estimated that achieving community consensus on a PQC migration for Bitcoin could take 10 to 15 years.
▪Bitcoin's decentralized governance makes coordinating a network-wide upgrade to post-quantum cryptography a significant challenge.
▪In contrast to Bitcoin, Ethereum has a coordinated response led by founder Vitalik Buterin, including a quantum emergency roadmap.