Bitcoin’s Quantum-Proof Upgrade Faces Governance Challenge

Bitcoin uses elliptic-curve digital signatures to protect private keys and authorize transactions. If a large-scale quantum computer could use Shor’s algorithm to break public-key cryptography, assets could be transferred without authorization. The threat extends beyond Bitcoin, forcing Web3 to reassess the underlying security of wallets, nodes and cross-chain protocols.

The latest assessments indicate that quantum computers could threaten the security of Bitcoin private keys within the next 5–8 years. The Web3 ecosystem is therefore accelerating adoption of the post-quantum cryptography standards published by the U.S. National Institute of Standards and Technology (NIST) in August 2024. Reports have not disclosed the cost of the migration or a firm completion date.

Bitcoin transactions use elliptic-curve digital signatures to secure assets. A quantum computer running Shor’s algorithm could potentially derive private keys from public keys, putting older wallets and transaction security at risk. Ethereum, by contrast, has planned a mechanism allowing accounts to adopt quantum-resistant signatures, bringing corporate crypto treasury strategies and onchain governance capabilities into focus.

Google Quantum AI and other institutions published research on March 30, 2026, estimating that fewer than 500,000 physical qubits could crack a key in about nine minutes. Citi warned on May 18 that the potential attack timeline had shortened. Bit Digital had already announced on July 7, 2025, that it would sell about 280 Bitcoin and, alongside a $172 million fundraising, increase its holdings to 100,603 Ethereum.

Bitcoin uses elliptic-curve cryptography to protect assets and communications, but sufficiently powerful quantum computers could eventually break its current encryption. Experts say the more immediate danger is a “harvest now, decrypt later” strategy, in which attackers intercept and store large volumes of encrypted communications today, then recover sensitive historical data once the technology matures. The threat extends beyond wallet private keys.

Security experts and an early-stage venture investor have recently warned that historical communications and infrastructure data across the Bitcoin ecosystem may already be targets for quantum attacks. Ethereum has begun work on a post-quantum migration, but as of this report, neither Bitcoin nor related companies had publicly committed to specific safeguards, disclosed investment amounts or set completion dates. The upgrade timetable and division of responsibility therefore remain unclear.

Bitcoin, with a market capitalization of about $1.3 trillion, relies on elliptic-curve cryptography to secure transactions. If large-scale quantum computers become viable, exposed public keys could potentially be used to derive private keys. Bitcoin developers have therefore proposed BIP-360, adding a quantum-resistant migration to the network’s long-term technical roadmap to reduce the potential risk to existing assets.

Proposed in 2025, BIP-360 introduces Pay-to-Merkle-Root (P2MR), which removes Taproot’s public-key spending path and instead locks scripts with a Merkle root, allowing keys to remain hidden until funds are spent. The proposal remains a draft, with no mainnet activation date, and does not yet introduce a complete post-quantum signature scheme. It nevertheless establishes a foundation for future upgrades.

Bitcoin transactions rely on elliptic-curve digital signatures. A sufficiently powerful quantum computer running Shor’s algorithm could derive private keys from exposed public keys and steal assets. Replacing the signature mechanism would require network-wide consensus and asset migration, drawing attention to StarkWare’s upgrade-free approach as a fallback until longer-term changes such as BIP-360 are completed.

On April 9, 2026, StarkWare Chief Product Officer and BIP-360 co-author Avihu Levy published the QSB paper and open-source code. The system uses Bitcoin’s existing Script constraints and hash-based proofs to create quantum-resistant transactions without a soft fork or miner activation. Each transaction requires substantial offline GPU computation at an estimated cost of $75–$200, and the tool is currently intended for emergency recovery.

Quantum computers could eventually break the elliptic-curve digital signatures Bitcoin currently uses, putting early addresses with exposed public keys and dormant assets at risk. Grayscale said viable post-quantum cryptographic solutions already exist. The key question is whether Bitcoin can migrate its network protocol and wallets before the threat becomes viable.

Grayscale’s latest research said the main bottleneck is not engineering capability but how the decentralized community handles vulnerable early addresses, whether it restricts legacy signatures and which upgrade path it uses to reach consensus. The report did not disclose potential losses, a specific publication date or a timeline for quantum attacks, but warned that governance delays could prolong the transition.

Bitcoin relies primarily on elliptic-curve digital signatures to protect assets. If a practical quantum computer emerges, it could theoretically break addresses whose public keys have been exposed. A transition to quantum resistance is therefore a long-term concern, but protocol changes would require compatibility across nodes, wallets and exchanges worldwide. A flawed upgrade could also directly jeopardize network security.

Jan3 founder Samson Mow opposed accelerating the deployment of a quantum-resistant fix in a recent report. He warned that new signatures could become significantly larger, increasing the burden on block space, bandwidth and verification while creating compatibility vulnerabilities. Mow argued that Bitcoin should not sacrifice its defenses against current attacks before the quantum threat becomes imminent. The report provided no specific launch date or figures for the potential increase.

Quantum computers capable of using Shor’s algorithm to break elliptic-curve cryptography could derive private keys from public keys, threatening trillions of dollars in assets on Bitcoin, Ethereum and Solana. Although the risk is not imminent, migration could take years and would require decisions on legacy coins as well as community consensus. Early preparation has therefore become a core security priority.

A March 28, 2026, report said the Ethereum Foundation has operated a quantum research team since 2025 and is planning a phased rollout of post-quantum signatures and LeanVM. Bitcoin has proposed BIP360 to allow funds to move gradually to more secure addresses. Solana tested the Project Eleven-led Winternitz Vault in December 2025. The three networks still have no common timeline.

Bitcoin and Ethereum both rely on elliptic-curve cryptography to secure transaction signatures. A practical quantum computer running Shor's algorithm could potentially derive private keys from public keys. Although the threat is not imminent, migrating on-chain assets and coordinating network-wide upgrades would take years. The two communities' ability to replace their cryptographic systems will therefore shape long-term security and market confidence.

On March 26, 2026, Castle Island Ventures partner Nic Carter criticized Bitcoin's slow response. ARK Invest estimated on March 11 that one-third of BTC was at risk. Ethereum has established a post-quantum roadmap for 2029, while Google has also set 2029 as its migration deadline. Bitcoin, meanwhile, is still discussing BIP-360.

Quantum computers could theoretically derive private keys from public keys exposed on-chain, allowing attackers to forge signatures and steal assets. Cybersecurity organization Project Eleven estimates that about 7 million Bitcoin may face long-term exposure, worth roughly $470 billion at recent prices. Most wallets whose public keys have not been revealed are currently unaffected, however, meaning the risk does not extend across the entire network.

Galaxy Digital research head Alex Thorn said on March 19, 2026, that the quantum threat was real but did not yet pose an existential crisis for Bitcoin. Research analyst Will Owens added on March 20 that related proposals had increased markedly since late 2025. Developers are advancing quantum-resistant addresses, BIP 360 and phased upgrade plans, while investors should currently view the issue as a long-term technical challenge.