New research heightens quantum risk for BTC

TLDR

New research suggests a powerful quantum computer could break Bitcoins current cryptography much sooner and with far fewer resources than older estimates implied.

1. A Google-led paper finds that fewer than 500,000 qubits could crack Bitcoins elliptic curve signatures in minutes under ideal conditions.
2. Around 6.7 million BTC, roughly a quarter to a third of supply, sit in addresses that would be especially vulnerable if quantum attacks became practical.
3. Quantum computers that strong do not exist yet, but Bitcoin has no agreed migration plan, so the main risk is time pressure, not an imminent overnight break.

Deep Dive

1. What The New Research Actually Says

A whitepaper from Google Quantum AI, the Ethereum Foundation, and Stanford estimates that a future quantum computer could solve the 256 bit elliptic curve problem that secures Bitcoin signatures in about 9 minutes in a best case scenario, using fewer than 500,000 physical qubits, roughly a 20 times reduction in resource estimates compared with older work. Coverage of the paper highlights that this would allow an attacker to derive a private key from a public key during the 10 minute Bitcoin block interval and perform an "on spend" theft of funds before the transaction confirms.

Separate reporting on the same research notes even more aggressive scenarios, such as 26,000 qubits cracking some blockchain encryption in about 10 days, though these are still model based projections, not demonstrations of real hardware.

2. How Much Bitcoin Is At Risk

The joint paper estimates that about 6.7 million BTC are in addresses whose public keys are already exposed or have been reused, making them the most straightforward targets if a capable quantum computer appears, with a vulnerable value of roughly $450 billion at the time of that analysis. This aligns with prior estimates that 25 to 35 percent of Bitcoins supply is in such high risk locations.

By design, Bitcoins UTXO model only reveals a public key when coins are spent, so many modern single use addresses are safer than always exposed account models. However, older coins, reused addresses, and some script types remain a large, quantified attack surface.

3. Mitigations And What To Watch

Bitcoin developers are discussing quantum resistant upgrades, such as new output types using hash based or post quantum signatures and proposals like BIP 360 that would let users move coins into quantum safer address formats, but there is no finalized roadmap or activation timeline yet. In contrast, Ethereum has already launched a public post quantum hub and is planning multiple hard forks to phase in quantum safe schemes by the late 2020s, reflecting a more proactive stance.

For individual users, the most cited mitigations are operational rather than speculative hardware timing: avoid address reuse, favor modern wallet types that minimize public key exposure, and stay alert for future migration tools that the ecosystem may agree on.

Conclusion

The new research significantly tightens the theoretical resource and time estimates for a quantum attack on Bitcoins current signature scheme, which raises the urgency of planning but does not imply an immediate break. The real risk is a race between hardware progress and Bitcoins ability to coordinate a conservative, widely accepted upgrade path, so the key things to monitor are cryptography proposals, wallet level best practices, and how quickly the community can converge on a post quantum transition plan.