Google says fewer qubits could crack BTC

TLDR

Google researchers have shown that a powerful quantum computer would need far fewer qubits than previously thought to break Bitcoins cryptography, but such a machine does not exist yet.

1. Googles new estimates cut the required resources to crack Bitcoins elliptic-curve cryptography by about 20 times, to under 500,000 physical qubits and roughly 1,2001,450 logical qubits.
2. The main threat is to wallets whose public keys are exposed, with studies estimating around one third of all Bitcoin, roughly 6.9 million BTC, is theoretically vulnerable under this model.
3. The industry now treats quantum risk as a late?2020s to early?2030s problem, pushing post?quantum upgrades and better key practices rather than an immediate reason to abandon Bitcoin.

Deep Dive

1. Googles New Estimates

Googles Quantum AI team updated its resource estimates for breaking the 256?bit elliptic curve cryptography (ECDLP?256) used by Bitcoin, finding that fewer than 500,000 physical qubits and about 1,2001,450 high?quality logical qubits could suffice, a roughly 20?fold reduction from prior millions of qubits estimates. That conclusion is summarized in reports that quantum computers may need far fewer qubits to compromise Bitcoin and Ethereum than previously believed.

In a modeled on?spend attack, their circuits could derive a private key from an exposed public key in about nine minutes, giving around a 41% chance of beating Bitcoins typical 10?minute confirmation time. Google validated its math using zero?knowledge proofs rather than publishing the actual attack circuits, to avoid handing out a ready?made exploit.

2. Current Risk To Bitcoin

Crucially, no one has built a cryptographically relevant quantum computer anywhere near 500,000 high?quality qubits, so this is a future capability, not a present one. Current hardware is still in the tens to low hundreds of noisy qubits.

The risk is about what happens if such machines arrive before Bitcoin and other chains migrate to quantum?safe cryptography. Googles scenarios focus on public key exposure: live transactions (on?spend attacks) and already exposed keys in old wallet types. One widely cited summary notes that about 6.9 million BTC already has public keys on chain, including early Satoshi?era coins and Taproot outputs, making them the most attractive future targets.

Mining itself and proof?of?work are not the primary concern here; the vulnerable part is the signature scheme that proves ownership of coins.

3. Migration And User Takeaways

Google has set 2029 as its own deadline to migrate core systems to post?quantum cryptography and explicitly urges the crypto ecosystem to do similar, which has triggered the strongest push yet for post?quantum planning across Bitcoin and Ethereum. A Coindesk overview frames this as compressing the expected timeline for Q?day from the distant future to possibly the end of this decade, with at least a 10% chance of a quantum break by 2032.

For long?term holders, the practical near?term response is not panic but tracking three things: protocol?level post?quantum proposals, wallet support for more conservative key exposure, and whether major ecosystems reach consensus on a multi?year migration roadmap.

Conclusion

Googles work does not mean Bitcoin can be cracked today, but it removes the comfort of many decades away and turns quantum attacks into a planning problem for the next one to two halving cycles. The key question is whether Bitcoins developers, miners, wallets, and large holders can coordinate a shift to post?quantum cryptography before practical quantum hardware arrives, since the coins with exposed public keys form a large, fixed bounty that future attackers will target first.