There is a question that keeps some of the brightest minds in cryptography awake at night.
What happens when quantum computers become powerful enough to break the cryptography that protects Bitcoin, Ethereum, and other major cryptocurrencies?
For years, this felt like a distant theoretical concern. A problem for the next generation to solve.
Not anymore.
In March 2026, Google's quantum research team published research that changed the conversation. Their findings suggested that future quantum computers may be able to break the cryptographic systems safeguarding cryptocurrencies with roughly 20 times less hardware than previously estimated. Google also highlighted a 2029 migration timeline as a planning horizon for moving vulnerable systems toward post-quantum cryptography.
The migration clock is already running.
The Quantum Threat, Explained Simply
To understand the risk, you need to understand the lock.
Most cryptocurrencies today rely on cryptographic systems based on elliptic-curve cryptography (ECC). This mathematics is used to secure digital signatures and prove ownership of funds. Think of it as a digital lock that would be extremely difficult for today's classical computers to pick.
Quantum computers don't play by those rules.
They use a fundamentally different approach to computation. A sufficiently powerful quantum computer running Shor's algorithm could theoretically derive a private key from a public key much more efficiently than a classical computer.
Google's research estimates that, under specific hardware and error-rate assumptions, a quantum computer with fewer than 500,000 physical qubits could execute the relevant attack in a matter of minutes.
Google's estimate is still far beyond today's hardware, but the research suggests that the long-term quantum threat may require substantially less hardware than earlier estimates assumed.
Not All Blockchains Face the Same Exposure
The quantum threat is more complex than simply asking whether someone could steal cryptocurrency. The exposure can differ considerably depending on how a blockchain handles keys, signatures, addresses and privacy.
| Factor | Example Blockchains | Potential Quantum Risk |
|---|---|---|
| UTXO-based | Bitcoin, Cardano | Public-key exposure can increase through address reuse; staking and signing keys may also require migration. |
| Account-based | Ethereum, Solana, XRP Ledger | Depending on the protocol, public-key information can become exposed on-chain after transactions or other key-use events. |
| Privacy-preserving | Zcash, Monero | Depending on the underlying privacy construction, sufficiently powerful quantum computers could create risks to the confidentiality of historical transactions. |
| Smart-contract platforms | Ethereum, Solana | Compromised cryptographic keys controlling high-value applications, bridges or administrative functions could create systemic risks. |
One of the significant concerns is that privacy-preserving blockchains may face not only future theft risks but also potential degradation of historical privacy. The exact impact would depend on the privacy system and what information a quantum attacker could obtain.
The Solution: Post-Quantum Cryptography (PQC)
Here's the good news: the core cryptographic building blocks for a post-quantum transition already exist.
Post-quantum cryptography (PQC) refers to cryptographic algorithms and standards designed to resist attacks from both classical and quantum computers. These systems can run on conventional computing hardware; they do not require quantum computers themselves.
The National Institute of Standards and Technology (NIST) finalized three major post-quantum cryptographic standards in August 2024:
- FIPS 203 / ML-KEM — A post-quantum key-encapsulation mechanism, formerly associated with Kyber.
- FIPS 204 / ML-DSA — A post-quantum digital-signature standard, formerly associated with Dilithium.
- FIPS 205 / SLH-DSA — A hash-based post-quantum digital-signature standard, formerly associated with SPHINCS+.
These standards provide important building blocks for a post-quantum migration, although individual blockchain networks will need to determine which schemes and implementation designs best fit their architectures.
The Size Problem
One of the biggest practical obstacles isn't the underlying cryptography. It's the size.
Post-quantum signatures can be dramatically larger than the signatures used by many blockchain systems today.
Hedera's post-quantum research notes that post-quantum signatures can be substantially larger than current cryptographic signatures.
| Signature Scheme | Public Key Size | Signature Size |
|---|---|---|
| Ed25519 | 32 bytes | 64 bytes |
| ECDSA | 33 bytes | ~70 bytes |
| ML-DSA-87 | 2,592 bytes | 4,627 bytes |
| SLH-DSA-256s | 64 bytes | 29,792 bytes |
Source: NIST FIPS 204/FIPS 205 specifications and Hedera's post-quantum cryptography analysis.
In plain English, some post-quantum signatures can be dozens or even hundreds of times larger than today's commonly used signatures. That creates a difficult engineering tradeoff for blockchains, where larger signatures can increase storage, bandwidth and transaction-processing requirements.
A Coinbase advisory board analysis has also warned that replacing vulnerable cryptographic systems across networks, wallets and exchanges could take years. Some proposed quantum-resistant approaches could significantly increase blockchain data requirements.
How the Industry Is Preparing
Parts of the crypto industry are already preparing for a post-quantum transition.
Google's 2029 Wake-Up Call
Google has been involved in post-quantum cryptography research and migration planning for years. In March 2026, its cryptocurrency-focused research highlighted the need for the industry to begin preparing for quantum-resistant cryptography well before cryptographically relevant quantum computers become available.
Google's research can be read in full here: Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly.
Google has also worked with government organizations and industry researchers on post-quantum migration efforts.
Ethereum's Conservative Pivot
The Ethereum research community has taken an interesting approach to future cryptographic infrastructure. Instead of automatically adopting every new cryptographic construction, researchers are placing greater emphasis on conservative and well-studied primitives.
In August 2026, Ethereum researcher Justin Drake discussed a research direction that moves away from relying heavily on the Poseidon hash function in certain future infrastructure designs and instead emphasizes traditional SHA and BLAKE hashes.
The underlying argument is straightforward: security through simplicity can be valuable when building infrastructure that may need to remain secure for decades.
Drake has also pointed to setbacks affecting several newer cryptographic approaches and argued for caution around assumptions that have not received sufficient long-term scrutiny.
Ethereum's preliminary research targets include 2027 for a production-grade leanVM and 2028 for infrastructure-layer deployment. These should be treated as research targets rather than confirmed Ethereum mainnet upgrade dates.
Hedera's Phased Migration
Hedera has outlined a deliberate, multi-phase transition approach.
- Post-quantum TLS for node-to-node communication when suitable libraries become available.
- Post-quantum TLS for client connections.
- Post-quantum event signing using hybrid signatures.
- Post-quantum key types for users as the technology matures.
This phased approach is designed to allow the network to introduce stronger cryptography without requiring an abrupt system-wide transition.
Anchorage's "Turnstile" Solution
Custodial bank Anchorage Digital has proposed a potential mechanism for addressing one of the hardest problems: migrating funds controlled by legacy cryptographic keys.
The company's Post-Quantum Turnstile concept uses STARK-based zero-knowledge proofs to transfer control toward a post-quantum key without requiring the old private key to be exposed.
Anchorage says the research could apply to an estimated two-thirds of Bitcoin's circulating supply. The company has also estimated that roughly 6 million BTC held at addresses with disclosed public keys could potentially be exposed to future quantum attacks.
These figures represent estimates of potential vulnerability, not predictions that the affected Bitcoin will necessarily be stolen.
The Challenges Ahead
The Governance Problem: Dormant Wallets
What happens to Bitcoin that hasn't moved in years?
If a network eventually upgrades to post-quantum signatures, some owners may never migrate their keys. Those funds could become difficult to spend using the upgraded system, while legacy cryptography could remain a target for a sufficiently capable quantum attacker.
This creates a governance challenge. Decentralized networks cannot simply order every holder to upgrade. Any migration strategy must consider lost keys, inactive wallets, exchanges, custodians and users who may not understand the technical changes.
The Size-Security Tradeoff
Post-quantum signatures can be large. Blockchains are already balancing scalability, bandwidth, storage and decentralization.
Balancing quantum resistance with throughput and decentralization could become one of the most significant engineering challenges facing blockchain infrastructure.
Crypto-Agility Is Essential
The Coinbase advisory board has emphasized the importance of crypto-agile strategies for exchanges, wallets and custodians.
Crypto-agility means designing systems so cryptographic algorithms can be replaced or upgraded without forcing a complete redesign of the surrounding infrastructure.
What This Means for Crypto Users
Don't Panic. Prepare.
The quantum threat is real, but there is currently no public evidence that a cryptocurrency has been compromised by a cryptographically relevant quantum computer.
Google's 2029 timeline should therefore be understood as a migration warning and planning horizon, not as a guaranteed date when Bitcoin or another cryptocurrency will be hacked.
For ordinary crypto users, there is no need for panic. But staying informed will become increasingly important.
- Avoid unnecessary address reuse where your wallet and blockchain design make public-key exposure relevant.
- Stay informed by following migration announcements from your wallet, exchange and blockchain developers.
- Use test transactions when moving large amounts, particularly when migrating to new wallet infrastructure.
- Watch for post-quantum support and follow reputable wallet or exchange instructions when new key types become available.
The Bottom Line
Can cryptocurrencies prevent quantum computers from breaking their cryptographic defenses?
Yes — but it will require one of the most complex and coordinated upgrades in the history of digital infrastructure.
The core cryptographic alternatives already exist, and NIST has standardized important post-quantum primitives. The harder challenge is deploying those technologies across decentralized blockchain networks without creating unacceptable costs in performance, storage, bandwidth or usability.
Google's 2029 migration horizon has helped turn a distant theoretical problem into an engineering issue that blockchain developers need to plan for today.
The industry is responding in different ways. Ethereum researchers are emphasizing conservative cryptographic primitives. Hedera is developing a phased migration strategy. Anchorage Digital is researching mechanisms for moving funds away from vulnerable legacy keys.
The quantum era is coming.
But so is the post-quantum solution.
Editorial Note
```Quantum computing capabilities, cryptographic standards and blockchain migration timelines are subject to change. This article is based on information available as of August 2026 and should not be treated as financial or investment advice.
This article is for informational purposes only and does not constitute financial, legal or investment advice.
```
0 Comments