Google warns quantum breakthroughs threaten crypto security

TLDR

Google's Quantum AI team says powerful quantum computers could break todays crypto wallet cryptography with far fewer resources than previously thought, pulling quantum risk for Bitcoin and Ethereum closer in time.

1. Google estimates that around 1,200-1,450 high quality qubits and under 500,000 physical qubits could recover private keys in minutes, a big reduction from earlier multi million qubit estimates.
2. The main vulnerabilities are addresses with exposed public keys and older wallet types on Bitcoin and Ethereum, not mining itself, putting millions of BTC and tens of millions of ETH at theoretical risk.
3. No such quantum computer exists yet, but the research increases urgency for post quantum upgrades and users should watch protocol roadmaps, wallet standards, and serious progress in quantum hardware.

Deep Dive

1. What Google Found

Googles Quantum AI group published a whitepaper showing that a cryptographically relevant quantum computer might crack the 256 bit elliptic curve scheme used by Bitcoin and Ethereum with fewer than 500,000 physical qubits and 1,200-1,450 logical qubits, roughly 20 times fewer resources than many prior estimates suggested, according to multiple summaries of the work, including CoinDesk and Cointelegraph.

They model a so called on spend attack, where a public key is exposed when you broadcast a Bitcoin transaction. A fast enough quantum computer could derive the private key in roughly 9 minutes and redirect the funds before the transaction confirms in about 10 minutes.

For Ethereum, whose account model permanently exposes public keys after first use, the paper also considers at rest attacks, where rich, long lived accounts could be drained over days once a suitable machine exists.

2. Where Crypto Is Vulnerable

The highest risk cluster is not mining or consensus but addresses where public keys are already visible. Google linked that to roughly 6.9 million BTC worth of outputs with exposed keys, partly worsened by Taproots design, as reported by CoinDesk.

Separate analysis cited by CryptoBriefing highlights about 1.7 million early Bitcoin pay to public key (P2PK) coins and tens of millions of ETH in top exposed accounts as a long term fixed prize pool if a capable quantum machine appears.

By contrast, proof of work mining only gets modest speedups from quantum algorithms, so network hashpower is considered much less vulnerable than user keys in this research.

3. Timeline And Mitigation

Googles team and co author Justin Drake (an Ethereum researcher) stress that such a machine does not exist today, but the reduced requirements narrow the gap, with Drake putting at least a 10 percent chance on a key recovery attack being possible by 2032 in comments cited by Cointelegraph. Other Google material has flagged the late 2020s as a rough milestone for concern if hardware progress is fast.

The big mitigation is migration to post quantum cryptography, meaning new signature schemes that resist known quantum algorithms. Google explicitly urges blockchains to adopt post quantum signatures and script types, and some projects are already experimenting with quantum resistant wallets and accounts, as noted by CryptoBriefing.

For users, risk is path dependent: coins in modern, non reused addresses and in systems that can upgrade to post quantum schemes are better positioned than large, exposed, legacy wallets that never move. Watching Bitcoin and Ethereum core discussions, wallet standards, and any concrete post quantum improvement proposals will be key.

Conclusion

Googles research does not mean quantum attacks on crypto are imminent, but it shows that the resource gap is smaller than many assumed and that the most vulnerable funds are already identifiable. The durable takeaway is that cryptography, not mining, is the real quantum bottleneck and that a coordinated shift to post quantum signatures over the next decade is becoming a strategic requirement for Bitcoin, Ethereum, and other major chains.