
Blockstream CEO Adam Back has urged the Bitcoin industry to begin preparing for quantum computing threats now, even as he downplays the immediate practicality of quantum attacks. In a recent Bloomberg interview, Back emphasized that "the prudent thing to do is to prepare Bitcoin and give people the option to migrate their keys to a quantum ready format, and to have, let's say, a decade in which to do that." He noted that "the current hardware…generally doesn't have any error correction," highlighting the technological gap that must be bridged before quantum computers pose a practical threat. Back stressed that "We don't have to agree about the timeline for quantum computers to become powerful enough to be a threat, because the prudent thing to do is to prepare Bitcoin and give people the option to migrate their keys to a quantum ready format." This approach aligns with recent developments showing that Google researchers recently found that breaking Bitcoin's elliptic curve cryptography could require fewer than 500,000 physical qubits, representing a 20-fold reduction from prior estimates. The 2029 deadline aligns with predictions from tech giants like IBM for early fault-tolerant quantum systems, providing external benchmarks for industry progress.
As reported by CoinDesk, Bernstein analysts emphasized that scaling quantum systems to the level needed to break widely used encryption remains a complex, multi-step challenge. The report highlighted that quantum computers could eventually weaken cryptographic systems like elliptic curve encryption, which underpin crypto wallets, by solving problems beyond the reach of classical machines. However, the firm cautioned that the threat spans industries from finance to defense and should be treated as a manageable, long-term risk rather than an existential one for Bitcoin. The immediate risk remains negligible, as Google's most advanced chip has just 105 qubits, highlighting the vast technological gap that must be bridged before quantum computers pose a practical threat to current cryptographic systems. Bitcoin mining, which relies on SHA-based hashing, remains effectively secure even in advanced quantum scenarios, according to the broker's assessment. Developers are exploring concrete solutions, but proposed upgrades like BIP 360 require consensus in Bitcoin's decentralized governance system, which is known for debate and slow adoption, potentially extending to months of network downtime.
Back pointed to "a 20-person research team that's been working on this. Publishing papers and implementing things, putting them live." He cited Blockstream's Liquid network as an early proving ground for post-quantum cryptography implementation. This active development work supports Back's argument that "There's a 20-person research team that's been working on this. Publishing papers and implementing things, putting them live." The industry's challenge is less about reacting to a breakthrough and more about coordinating a slow, orderly migration, before the risk becomes urgent. Post-quantum cryptography (PQC) is already moving from theory to implementation, particularly after NIST finalized standards in late 2024, with ongoing research and deployment efforts already underway across the ecosystem. Developers are exploring concrete solutions, including hash-based signatures and commit/reveal schemes, though adoption faces significant friction due to Bitcoin's decentralized governance structure. Bitcoin contributors are advancing proposals such as BIP360 to address signature vulnerabilities before they materialize, while the Ethereum Foundation has published its own four-part roadmap to upgrade its $260 billion network by the same 2029 date.
The quantum threat has sparked intense debate within the Bitcoin community about whether to rush post-quantum cryptography implementation. Google has urged a PQ upgrade by 2029 to prevent nearly 7 million BTC from being at risk, with the company warning that advanced quantum processors may require around 500,000 physical qubits or 1,200–1,450 stable logical qubits to compromise crypto security. However, Jan3's Samson Mow has strongly opposed this timeline, warning against a hurried push for untested and unverified post-quantum solutions. Mow cautioned that "Solving the QC problem later rather than sooner is the best course of action," and slammed Coinbase CEO Brian Armstrong's call for a 'sooner' PQ upgrade, stating it could expose Bitcoin to attack from current classical computers. The proposed PQ solutions would also reduce Bitcoin transactions due to larger block sizes, with PQ signatures likely being 10-125x larger than current ones and massively reducing throughput. Market players advocate for a compulsory quantum update that would render Satoshi's coins unspendable, a move seen by others as a 'violation of Bitcoin values' that would likely never achieve consensus. Chaincode Labs research suggests that between 20% and 50% of all Bitcoin could be vulnerable in a quantum scenario — worth roughly $400 billion to $900 billion, sparking debate among developers about how quickly they need to act.
According to CoinDesk, the quantum threat is concentrated in roughly 1.7 million BTC held in older, 'legacy' wallets, while newer practices and protocols reduce vulnerability. The report emphasized that exposure is highest in older wallets that use elliptic curve encryption, making them the primary target for potential quantum attacks. The latest research identifies approximately 6.9 million BTC, representing about 32% of the total Bitcoin supply, as residing in wallets with exposed public keys and thus at risk. This includes the high-value prize of 1.1 million BTC from Satoshi's original wallets, worth roughly $75 billion at current prices, which have not been moved since their creation, leaving their public keys permanently visible on the blockchain. The attack vector is a real-time transaction hijacking, modeled to have a 41% success rate against Bitcoin's 10-minute block confirmation, though no quantum computer today possesses the required qubits. The threat is concentrated in roughly 1.7 million BTC held in older, 'legacy' wallets, making them the primary target for potential quantum attacks.
According to CoinDesk, the report suggests that Bitcoin and crypto have a three to five year window to transition to post-quantum security measures. The firm recommended that quantum should be seen as a medium to long-term system upgrade cycle rather than an immediate existential threat. This assessment comes as the cryptocurrency industry continues to grapple with various security challenges, including the recent Drift exploit that highlighted the need for comprehensive security frameworks beyond just technical code improvements. Developers are exploring upgrades like hash-based signatures to build defenses, but adoption faces slow, decentralized governance hurdles. The report noted that one recent academic paper said that attacking the Bitcoin blockchain through quantum mining would demand the energy output of a star, further emphasizing the practical challenges of quantum attacks. Meanwhile, Grayscale's head of research Zach Pandl reinforced that "Investors should not fret. In our view, there is no security threat to public blockchains from quantum computers today," but urged acceleration of PQ upgrade efforts. Galaxy Digital's Alex Thorn argues the threat is greatly exaggerated and not an immediate risk, stressing that we are still far from the advent of computers capable of breaking modern encryption, while framing the issue as a manageable future upgrade rather than a near-term existential threat.