Europol warns crypto wallets face quantum risk

TLDR

Europol has warned that future quantum computers could put cryptocurrency wallet keys at risk and is urging early moves toward post?quantum security.

1. Europols reports say wallets and exposed public keys, not blockchains themselves, are the main quantum vulnerability, and no attack?capable quantum computers exist yet.
2. Research cited by Europol suggests roughly 67 million BTC sit in addresses with exposed public keys, which would be permanently vulnerable once quantum attacks become practical.
3. The agency recommends phased migration to quantum?resistant signatures, better key management, and avoiding public key exposure, with multi?year coordination across developers, custodians, and users.

Deep Dive

1. What Europol Actually Warned

In two reports released on 7 Oct 2026, Europols European Cybercrime Centre said cryptocurrency wallets are the primary point of exposure to future quantum attacks, while the hash functions securing blockchains are comparatively resistant. A sufficiently powerful quantum computer could derive a private key from an exposed public key and sign transactions without the owners consent, but Europol explicitly notes such machines do not yet exist and gives no timeline for them. It stresses that cryptocurrencies are unlikely to collapse from quantum computing; the concern is targeted theft from vulnerable wallets rather than a broken chain.

Confidence: high because multiple independent summaries quote the same core findings from Europols reports.

2. How Large The Exposure Could Be

The main risk is any address where the public key is already visible on chain. Analyses cited by Europol estimate that roughly 6.06.9 million BTC, about 30 percent of supply, sit in such exposed outputs, including many early and long?dormant wallets. Once a public key is revealed, there is no cryptographic way to make it safe again; funds must be moved to new, quantum?resistant outputs before attackers have suitable hardware. Europol also highlights harvest now, decrypt later, where attackers store encrypted or public?key data today to attack it years in the future, which is particularly relevant because blockchains are permanent public records.

3. How Crypto Can Prepare In Practice

Europols guidance focuses on preparation, not panic. It calls for:

1. Phased adoption of post?quantum signature schemes and quantum?resistant wallet formats, informed by emerging NIST standards.
2. Better key hygiene, including avoiding address reuse and minimizing unnecessary public key exposure.
3. Long?term migration plans so networks can gradually move exposed balances without clogging block space, since full Bitcoin migration has been estimated to take tens of days of block capacity.

Conclusion

Europols warning reframes quantum risk in crypto as a wallet and key?management problem rather than an imminent threat to blockchain integrity. The technical path to post?quantum security is emerging, but the hard part will be coordinating slow, orderly migrations of exposed balances across decentralized networks. Paying attention to address reuse, key exposure, and future wallet upgrades now can reduce the chances that quantum advances later turn into a scramble to protect long?held assets.