TLDR
Europol has warned that future quantum computers could target cryptocurrency wallet keys and urged the industry to start preparing for post-quantum security now.
- Europol says wallet public keys, not blockchain hashes, are the main quantum exposure and estimates millions of Bitcoin sit in addresses that are already vulnerable.
- The agency stresses that no current quantum computer can break crypto, but transitions to quantum-safe signatures could take years and strain block space and fees.
- Crypto users should watch for wallet and protocol migration plans, avoid reusing addresses, and follow guidance from major networks and custodians on quantum-resistant upgrades.
Deep Dive
1. What Europol Actually Said
Europols cybercrime centre published two reports on 7 Oct 2026 stating that cryptocurrency wallets are the primary exposure to quantum attacks, not blockchains themselves.
The concern is that a sufficiently powerful quantum computer could derive a private key from an exposed public key, allowing an attacker to move funds without permission. Studies cited in the reports estimate roughly 67 million BTC sit in addresses with exposed public keys, including many old or dormant wallets.
Europol also highlighted harvest now, decrypt later tactics, where attackers store encrypted or on-chain data today and wait for future quantum machines that might decrypt it.
Confidence: high because Europols reports are covered consistently by multiple independent outlets.
2. How The Quantum Risk Works
Most crypto wallets use public key cryptography: the public key is visible to the network, and the private key authorizes transactions. Classical computers cannot feasibly reverse this math, but future quantum computers could run algorithms such as Shors that make key recovery realistic.
Hash functions that secure blockchain history are much more resistant, so Europol does not forecast a chain rewrite or crypto collapse. The main risk is ownership of funds in wallets whose public keys are exposed and never moved.
Post-quantum signatures exist, but they are 10 to 120 times larger than current Bitcoin signatures, which could increase fees and require months of focused block space to migrate all outputs.
The long term risk is concentrated in older, reused or exposed addresses, not in typical modern wallets that follow best practices.
3. What To Watch And Do Next
Europol recommends a phased migration to post-quantum cryptography and better key management, noting that decentralized networks need years to coordinate upgrades. NIST has already finalized several post-quantum standards, and migration of high-risk systems is encouraged before 2035, as discussed in quantum-threat coverage.
Bitcoin, Sui, NEAR and other ecosystems are exploring quantum-safe account types and signature schemes, while custodians are testing quantum-aware wallet controls. These plans will shape how and when ordinary users need to move funds.
For everyday users, the near-term focus is simple habits: avoid address reuse, prefer reputable wallets that track quantum developments, and pay attention when your network or custodian announces migration guidance.
Over time, networks with credible quantum roadmaps and clear user migration plans could gain a security reputation advantage.
Conclusion
Europols warning frames quantum computing as a future ownership risk for exposed wallet keys rather than an imminent threat to blockchains.
The practical takeaway is early preparation and coordinated migration, not panic: developers, custodians and users need time to adopt quantum-resistant signatures and move vulnerable funds before powerful quantum hardware arrives.
