Quantum computing threat to Bitcoin accelerates as experts warn cryptographic defenses may need urgent upgrade

Recent breakthroughs, including a March 2026 Google paper, have accelerated the timeline for quantum computers to threaten Bitcoin's cryptography. Experts warn that a capable machine could break a private key in minutes, putting millions of inaccessible coins at risk. The "Harvest Now, Decrypt Later" strategy poses an immediate threat, while Bitcoin's decentralized governance presents a major hurdle to implementing a necessary, but costly, post-quantum security upgrade.

Quantum computing threat timeline

• ▪The Global Risk Institute estimates a 19% to 34% probability of a cryptographically relevant quantum computer arriving by 2034
• ▪A report from Quantus warns that quantum computing progress has accelerated faster than the cryptocurrency industry's post-quantum planning
• ▪Quantum hardware company IonQ's roadmap targets 1,600 logical qubits by 2028, while IBM's roadmap projects 2,000 logical qubits by 2033

Google Quantum AI breakthrough

• ▪A March 2026 paper from Google Quantum AI demonstrated that Shor's algorithm could break the secp256k1 elliptic curve cryptography used by Bitcoin
• ▪Using such a machine, a Bitcoin private key could be derived from an exposed public key in approximately nine minutes
• ▪Google's research estimated this would require 1,200 logical qubits and fewer than 500,000 physical qubits, a 20-fold reduction from prior estimates

Bitcoin cryptographic architecture vulnerabilities

• ▪Bitcoin's ownership security relies on the Elliptic Curve Digital Signature Algorithm (ECDSA), which is vulnerable to attack by Shor's algorithm
• ▪An estimated 2.3 to 3.7 million inaccessible Bitcoins, including those believed to belong to Satoshi Nakamoto, cannot be migrated to quantum-resistant addresses
• ▪Older P2PK Bitcoin addresses permanently expose their public keys on the blockchain, making them a standing target for future quantum attacks

Harvest Now Decrypt Later

• ▪Venture capitalist Andrew Gault warns the most dangerous vulnerability is encrypted data currently in motion, like payment authentications, being harvested
• ▪A Citi report modeled that a quantum attack on a single top-five U.S. bank's Fedwire access could trigger a $2 trillion to $3.3 trillion economic cascade
• ▪Adversaries can collect encrypted blockchain data today and decrypt it later when quantum computers are available, a strategy known as "Harvest Now, Decrypt Later."

Post-quantum cryptography migration challenges

• ▪The U.S. National Institute of Standards and Technology (NIST) finalized post-quantum encryption standards in August 2024
• ▪Post-quantum signatures are hundreds of times larger than current ones, which would reduce Bitcoin's throughput by 52-57% and increase fees 2-3 times
• ▪Stanford cryptographer Dan Boneh warned that a hasty transition to post-quantum cryptography is more likely to cause a catastrophic bug than a quantum attack
• ▪Hardware wallets face significant memory and computing constraints in supporting larger post-quantum algorithms like ML-DSA-87

Bitcoin governance upgrade coordination

• ▪A 2026 study estimated that achieving community consensus on a PQC migration for Bitcoin could take 10 to 15 years
• ▪Bitcoin's decentralized governance makes coordinating a network-wide upgrade to post-quantum cryptography a significant challenge
• ▪In contrast to Bitcoin, Ethereum has a coordinated response led by founder Vitalik Buterin, including a quantum emergency roadmap