Quantum Computing Threatens Bitcoin Security as Web3 Begins Post-Quantum Migration

Bitcoin, Ethereum and other major blockchains rely on elliptic-curve cryptography to authenticate transactions. A sufficiently capable quantum computer could derive private keys from public keys exposed onchain, allowing an attacker to sign valid transfers without breaching a wallet, device or exchange. That distinction matters because “Q-day” — when quantum machines can break standard public-key cryptography — may arrive without the conventional forensic evidence that normally identifies a security intrusion.

Christopher Smith, CEO and co-founder of Quantus Network, said on Aug. 10 that an initial attack could resemble scattered cases of lost or stolen keys. Targets may include Tether’s minting key rather than Satoshi Nakamoto’s Bitcoin holdings, valued at about $63 billion at the time. Google in March accelerated its post-quantum migration target to 2029, while Smith put the odds of cryptography-breaking capability emerging by 2028 at 50%.

Bitcoin transactions rely on elliptic-curve digital signatures. A sufficiently powerful quantum computer could use Shor's algorithm to derive a private key from a public key, leaving older addresses whose keys have already been exposed at greatest risk. A February 2026 estimate put nearly 7 million BTC at risk, including about 1 million attributed to Satoshi Nakamoto, with a combined value of about $440 billion. The issue has implications for holders' property rights and consensus across the network.

On June 13, 2026, an independent quantum computing advisory board convened by Coinbase said quantum computers could not yet break Bitcoin but urged immediate planning for quantum-resistant signatures. It estimated that about 6.7 million BTC was at risk but did not endorse freezing or restricting older coins. A May 6 report from Project Eleven set 2033 as its baseline year for Q-Day, with 2030 as the earliest scenario.

Bitcoin transactions use elliptic-curve digital signatures to secure assets. A quantum computer running Shor’s algorithm could potentially derive private keys from public keys, putting older wallets and transaction security at risk. Ethereum, by contrast, has planned a mechanism allowing accounts to adopt quantum-resistant signatures, bringing corporate crypto treasury strategies and onchain governance capabilities into focus.

Google Quantum AI and other institutions published research on March 30, 2026, estimating that fewer than 500,000 physical qubits could crack a key in about nine minutes. Citi warned on May 18 that the potential attack timeline had shortened. Bit Digital had already announced on July 7, 2025, that it would sell about 280 Bitcoin and, alongside a $172 million fundraising, increase its holdings to 100,603 Ethereum.

Bitcoin uses elliptic-curve cryptography to protect assets and communications, but sufficiently powerful quantum computers could eventually break its current encryption. Experts say the more immediate danger is a “harvest now, decrypt later” strategy, in which attackers intercept and store large volumes of encrypted communications today, then recover sensitive historical data once the technology matures. The threat extends beyond wallet private keys.

Security experts and an early-stage venture investor have recently warned that historical communications and infrastructure data across the Bitcoin ecosystem may already be targets for quantum attacks. Ethereum has begun work on a post-quantum migration, but as of this report, neither Bitcoin nor related companies had publicly committed to specific safeguards, disclosed investment amounts or set completion dates. The upgrade timetable and division of responsibility therefore remain unclear.

Bitcoin uses elliptic-curve digital signatures to prove asset ownership. If a large-scale quantum computer could use Shor's algorithm to derive private keys, older addresses whose public keys have been exposed could be vulnerable to theft. Wall Street research and brokerage firm Bernstein said the risk is concentrated in Satoshi-era wallets holding about 1.7 million BTC, rather than posing an immediate threat to mining or the entire network.

Bernstein said on April 8, 2026, that Google had cut its estimate of the number of qubits needed to break the cryptography by about 20-fold to fewer than 500,000, but Bitcoin still had three to five years to upgrade. On April 13, the firm said BTC's nearly 50% retreat from its October 2025 peak of $126,198 had already priced in most of the quantum risk. The real challenge, it said, lies in securing community consensus and migrating wallets.

Quantum computers capable of breaking public-key cryptography could threaten Bitcoin signatures and asset ownership, making the technology a long-term market risk. Strategy, formerly MicroStrategy, co-founder and Executive Chairman Michael Saylor said banks, the internet and crypto assets all face the same pressure to upgrade, while Bitcoin could adopt quantum-resistant cryptography through updates to its nodes, wallets and protocol.

Saylor told Natalie Brunell’s “Coin Stories” on Feb. 23, 2026, that any quantum breakthrough posing a material threat was at least 10 years away. At a Mizuho event on April 8, he again said the risk was overstated and could be addressed through upgrades. He also said Bitcoin had likely bottomed at about $60,000 in early February; its price was around $71,200 when the report was published on April 9.

Bitcoin uses public- and private-key cryptography to verify asset ownership and transactions. If powerful quantum computers become capable of deriving private keys from public keys, assets held at some addresses could be stolen. John Martinis, a Nobel physics laureate and former head of quantum hardware at Google, said the risk now raises questions about Bitcoin’s long-term security and its capacity for decentralized governance.

Martinis recently warned that quantum computers could become capable of breaking Bitcoin’s public-key cryptography within the next 5 to 10 years, and that the community should not wait for an attack before responding. He called for early planning on post-quantum cryptography, software upgrades and asset-migration mechanisms. The reports did not provide an exact publication date, the value of assets at risk or the scale of quantum computer that could break Bitcoin in practice.

Quantum computers capable of using Shor’s algorithm to break elliptic-curve cryptography could derive private keys from public keys, threatening trillions of dollars in assets on Bitcoin, Ethereum and Solana. Although the risk is not imminent, migration could take years and would require decisions on legacy coins as well as community consensus. Early preparation has therefore become a core security priority.

A March 28, 2026, report said the Ethereum Foundation has operated a quantum research team since 2025 and is planning a phased rollout of post-quantum signatures and LeanVM. Bitcoin has proposed BIP360 to allow funds to move gradually to more secure addresses. Solana tested the Project Eleven-led Winternitz Vault in December 2025. The three networks still have no common timeline.

Quantum computers could theoretically derive private keys from public keys exposed on-chain, allowing attackers to forge signatures and steal assets. Cybersecurity organization Project Eleven estimates that about 7 million Bitcoin may face long-term exposure, worth roughly $470 billion at recent prices. Most wallets whose public keys have not been revealed are currently unaffected, however, meaning the risk does not extend across the entire network.

Galaxy Digital research head Alex Thorn said on March 19, 2026, that the quantum threat was real but did not yet pose an existential crisis for Bitcoin. Research analyst Will Owens added on March 20 that related proposals had increased markedly since late 2025. Developers are advancing quantum-resistant addresses, BIP 360 and phased upgrade plans, while investors should currently view the issue as a long-term technical challenge.

Public blockchains such as Bitcoin and Ethereum rely on elliptic-curve cryptography to protect private keys and transactions. A quantum computer operating at a practical scale could use Shor’s algorithm to break current signature mechanisms. Quantum computing is therefore seen as an opportunity for crypto and Web3 security to move beyond software hardening and migrate across chips, key custody systems and underlying network infrastructure.

The U.S. National Institute of Standards and Technology released its first three post-quantum cryptography standards — FIPS 203, 204 and 205 — on August 13, 2024, covering key encapsulation and digital signatures. The industry’s next priorities include assessing risks to wallets and nodes, adopting cryptographically agile architectures, and establishing quantum-resistant trust mechanisms for cross-chain governance and autonomous AI systems.