If You Don't Move Your Crypto Before Q-Day, Here's What Actually Happens

By CoinAINews Staff | 

Here's a nightmare scenario that keeps crypto security experts up at night: one morning, you open your wallet, and everything is just... gone. Not because you fell for a phishing scam or an exchange collapsed. Because a machine finally figured out the math that was supposed to keep your coins safe.

That's the reality of Q-Day—the moment when a sufficiently powerful quantum computer can break the cryptography protecting digital assets. And if you don't move your assets in time, the outcome depends on a mix of technology and governance decisions that are still being debated.

The Short Answer: Your Coins Could Become Unspendable—or Worse

If a user doesn't migrate their cryptocurrency to a quantum-resistant address before Q-Day arrives, their assets could be at risk in several ways. An attacker with a cryptographically relevant quantum computer could derive the private key from an exposed public key and potentially spend the coins themselves.

The underlying cryptographic risk is well understood, although the timing and feasibility of a practical quantum attack remain uncertain. Once a public key is exposed on-chain, an attacker can record it and potentially use it later if a cryptographically relevant quantum computer becomes available. They don't need a quantum computer today. They just need to wait.

Why Some Addresses Are Already Vulnerable

Not all addresses face the same level of risk. For Bitcoin, quantum exposure depends heavily on the cryptographic scheme used and whether the relevant public key has already been revealed on-chain.

Address Type	Risk Level	Why
P2PK (old Bitcoin addresses)	🔴 Extremely High	Public key is written directly into the script and is visible from the moment coins are received.
P2PKH (most modern addresses)	🟡 Conditional	Public key is hidden behind a hash until you spend. Once spent, the key becomes visible on-chain; reusing the address keeps the key exposed.
Taproot	🟡 Conditional	Uses Schnorr signatures and improves efficiency and privacy, but remains vulnerable to a sufficiently powerful quantum computer.

Research cited in discussions around Bitcoin's quantum risk estimates that more than 34% of bitcoin had revealed a public key on-chain as of March 1, 2026. Coinbase's Quantum Advisory Council estimates that roughly 1.7 million BTC sit in P2PK addresses with exposed public keys. When address reuse and other vulnerable output types are considered, approximately 7 million BTC could currently be vulnerable to future quantum attacks.

What Happens After a Post-Quantum Upgrade?

Here's where it gets tricky. A blockchain can add post-quantum cryptography to protect new addresses and future transactions. But that does not retroactively secure funds that remain locked to an old, quantum-vulnerable public key.

Think of it like upgrading the locks on a building. The new locks protect new tenants, but if you don't change your own lock, the old one is still vulnerable.

Once funds are successfully migrated under a quantum-resistant authentication scheme, an attacker who later derives the old private key would no longer control those migrated funds. But if your funds stay at the old address when a quantum computer arrives, an attacker could potentially derive your private key and spend your coins.

The Governance Dilemma: What Happens to Unmoved Coins?

Once the technical migration is complete, the real fight begins—and it's not technical at all. It's governance.

The debate over what should happen to dormant or quantum-vulnerable Bitcoin is already underway, with proposals ranging from migration deadlines and freezes to mechanisms that would allow legitimate holders to prove control.

BIP-361, a draft proposal authored by Bitcoin researchers including Jameson Lopp, outlines a phased transition that would eventually render certain legacy outputs unspendable unless users migrate to quantum-resistant alternatives. The proposal is currently a draft informational BIP—it has not been activated and does not currently require Bitcoin holders to move their funds.

But the pushback is fierce. Critics argue that making dormant coins unspendable undermines Bitcoin's core principles of immutability and user autonomy.

Which Blockchains Are Preparing?

Several major networks are already exploring migration paths. The plans vary significantly in timeline and approach:

Blockchain	Timeline	Approach
XRPL	2028 target	Ripple has outlined a four-phase plan:  Q-Day readiness, risk assessment  (H1 2026), Devnet integration (H2 2026),  and full mainnet transition by 2028.
Stellar (XLM)	End of 2027	Quantum Preparedness Plan: quantum-safe  signers for existing accounts without changing addresses.
Sui	Q1 2027 target	ML-DSA-65 and SLH-DSA-SHA2-128s;  users can update keys without  migrating assets.
Zcash	Under development	Ironwood upgrade is designed to  introduce quantum-recoverable notes  through ZIP 2005, laying groundwork  for a future Recovery Protocol.
Ethereum	Under discussion	EIP-8141 (Frame Transactions) is being  explored as a precondition for  post-quantum migration and  remains under consideration.
Bitcoin	No official timeline	BIP-361 is a draft proposal; there is  currently no consensus or migration  deadline.

XRPL: Ripple's Four-Phase Roadmap to 2028

Ripple has laid out a detailed four-phase plan to make the XRP Ledger quantum-resistant by 2028. Phase 1 (Q-Day readiness) is an emergency measure that would force a migration to quantum-safe accounts if quantum threats arrive sooner than expected. Phase 2 (H1 2026) involves Ripple's cryptography team conducting a full assessment of quantum vulnerability and testing NIST-recommended algorithms. Phase 3 (H2 2026) involves integrating quantum-resistant signatures alongside existing ones on the developer test network. Phase 4 targets a full mainnet upgrade by 2028.

Stellar: Quantum Preparedness Plan

Stellar's Quantum Preparedness Plan aims to enable every Stellar account to add a quantum-safe signer through a native protocol upgrade by the end of 2027, keeping the same address and history. The network's structural advantage lies in separating account identity from signing keys—accounts can rotate keys through the existing set_options operation without changing their address.

Sui: Native Post-Quantum Signatures

Sui is adding two NIST-approved post-quantum signature schemes: ML-DSA-65 for everyday accounts and SLH-DSA-SHA2-128s for high-value Move vaults. Quantum-safe vaults are targeted for Mainnet in 2026, with native ML-DSA-65 accounts reaching Testnet by end of 2026 and native account authentication on Mainnet targeted for Q1 2027. All timelines remain subject to audits and Testnet feedback.

Zcash: Ironwood Upgrade

Zcash's Ironwood upgrade is designed to introduce quantum-recoverable notes through ZIP 2005. This is designed as groundwork for a smoother future transition—it does not by itself make the protocol fully secure against quantum adversaries, but allows funds in the Ironwood pool to be retrieved through a future Recovery Protocol if needed.

Ethereum: EIP-8141 Under Consideration

Ethereum's EIP-8141 (Frame Transactions), proposed by Vitalik Buterin, aims to decouple accounts from fixed signature schemes and provide a native migration path for post-quantum signature schemes. The proposal is currently under consideration for inclusion in future upgrades but has not yet been finalized.

Bitcoin: BIP-361 Remains a Draft

BIP-361, titled "Post Quantum Migration and Legacy Signature Sunset," was first assigned on February 11, 2026, and remains a draft informational proposal. It has not been activated and does not currently require Bitcoin holders to move their funds. The proposal would gradually restrict legacy transactions through a multi-phase transition, but a separate post-quantum signature standard would need to be agreed upon first.

The Bottom Line

The quantum threat is real enough that major blockchains are building migration paths—but no existing quantum computer is currently capable of breaking the cryptography used by major blockchains, and the timeline for a cryptographically relevant quantum computer remains uncertain. Google Quantum AI research has provided estimates under specific assumptions, but there is still no reliable date for Q-Day.

If you don't migrate in time, your options could be limited:

• Your coins could be stolen by someone with a quantum computer.
• Your coins could be frozen by the network if it chooses a "burn" approach.
• Your coins could become trapped in an address that no one can spend from or protect.

Most blockchains are building migration paths, and users may have a migration window once individual networks activate their post-quantum transition. The timing and duration will depend on each blockchain's governance and upgrade process.

If a blockchain establishes a migration deadline, that window may not remain open indefinitely. And for a generation of holders accustomed to the idea that crypto is "unstoppable," the quantum threat raises an uncomfortable question: what happens to an unstoppable asset when the math that protects it stops working?

The answer depends largely on governance decisions made by each blockchain community—and on whether you move in time.

---

This article is for informational purposes only and does not constitute investment advice. The quantum threat timeline remains uncertain, and users should follow official guidance from their blockchain networks regarding post-quantum migration.