Europol warns quantum threat to crypto wallets

TLDR

Europol says future quantum computers could steal funds from vulnerable crypto wallets by breaking exposed public keys, while blockchains themselves are largely resistant.

1. Europols reports highlight wallet keys, not blockchains, as the main quantum attack surface and stress that no machine today can actually break crypto.
2. Older and reused addresses with visible public keys, especially in Bitcoin (BTC), hold millions of coins that would eventually need migration to safer schemes.
3. Regulators, developers and custodians are starting post?quantum planning; users can already reduce exposure by better key hygiene and watching for wallet/protocol upgrades.

Deep Dive

1. Europols Main Message

Europols European Cybercrime Centre released two reports on 7 Oct 2026 warning that the biggest quantum risk is to wallet keys that authorize transactions, not to blockchain hash functions themselves. In one report, it states that cryptocurrencies will not collapse due to quantum computing, but a sufficiently powerful quantum computer using algorithms like Shors could derive private keys from exposed public keys and sign unauthorized transfers. Europol also flags harvest now, decrypt later strategies: attackers can store encrypted or on?chain data today and wait until hardware improves, which is especially relevant for long?lived financial records and wallet keys. Coverage in outlets such as CoinDesks summary of the report stresses that there is no timeline for such machines, so the focus is on preparing early.

2. Why Some Wallets Are Exposed

The core distinction is between:

1. Public?key signatures for wallets. Many coins sit in addresses where public keys are already visible or become visible after a spend. Europol cites research showing roughly 6 to 6.9 million BTC in such addresses, around 30% of supply, including early Satoshi era coins and heavily reused exchange wallets, which are permanently vulnerable once a capable quantum computer exists.
2. Hash functions for blockchain integrity. Hashes like Bitcoins SHA?256 are much harder to attack; even with Grovers algorithm, breaking a 256?bit hash still needs about 2? quantum operations, which Europol and analyses such as Bitcoin.coms coverage of the report describe as astronomically difficult.

Because exposed public keys cannot be made safe retroactively, the only protection for those coins is to move them to outputs secured by quantum?resistant schemes once such options are available.

3. How Crypto Is Preparing And What To Watch

Standards bodies and crypto projects are already sketching defenses. NIST has finalized several post?quantum cryptography standards, and Europol calls for phased migrations using those schemes despite their signatures being 10 to 120 times larger, which could strain block space as noted in analyses like Decrypts review of the reports. Bitcoin developers are debating draft proposals for new output types and migration strategies, while custodians such as BitGo and Coinbase are testing quantum?resistant wallet controls. Newer chains like Sui (SUI) and Monad (MONAD) are exploring native post?quantum accounts and flexible key rotation.

For everyday users, practical risk reduction today is simpler: avoid reusing addresses, prefer modern wallet types, keep private keys offline where possible, and pay attention when major wallets or networks announce post?quantum upgrade paths.

Conclusion

Europols warning reframes the quantum threat from blockchains will break to vulnerable wallets will be picked off. The main challenge is not inventing quantum?safe algorithms, but coordinating a global, gradual migration of keys and wallets before quantum hardware becomes strong enough to matter. For crypto users, the takeaway is to treat address reuse and legacy keys as a structural risk and to follow emerging post?quantum standards, rather than panic about an imminent collapse.