A new research paper from Google's quantum division has reignited debate over Bitcoin's ability to withstand advances in quantum computing. The whitepaper suggests future machines could break widely used encryption, including elliptic curve cryptography underpinning Bitcoin wallets, far more efficiently than previously estimated. Under advanced conditions, attacks once thought decades away might crack encryption in minutes. The findings do not indicate an immediate threat—current quantum computers remain far below the required scale—but reduce the estimated resources needed, narrowing the theory-practice gap and shifting attention to preparation. Google has set a 2029 target to transition internal systems to post-quantum cryptography, reflecting a broader defensive shift among large tech firms and governments.
Is Bitcoin under threat?
For Bitcoin, the implications are specific and structural. The network relies on digital signatures that could in principle be reversed by a sufficiently powerful quantum computer. Roughly one-third of the total Bitcoin supply sits in addresses where public keys have been exposed, creating defined targets under certain attack models. Separate analyses estimate that about 6.7 million Bitcoin may be exposed to varying degrees under quantum attack scenarios, including coins in older address formats where public keys remain permanently visible on-chain. More immediate concerns focus on transaction windows: when a transaction is broadcast, its public key becomes visible before confirmation. Google's research suggests a theoretical attacker could exploit that gap, solving for the private key within the same timeframe it takes for a block to be mined. This shifted developer conversation from abstract risk to engineering timelines. Binance founder Changpeng Zhao pushed back on exaggerated concerns, arguing most cryptographic systems including Bitcoin can migrate to quantum-resistant algorithms without destabilizing the network. He noted execution remains a constraint: coordinating upgrades across a decentralized ecosystem could lead to competing proposals, software fragmentation, and potential forks, while self-custody asset holders must actively migrate funds.
The Bitcoin ecosystem has begun early-stage quantum resistance work. BIP 360 proposes new transaction formats to remove or reduce exposure to vulnerable cryptographic assumptions. The proposal remains draft form, but test implementations run in experimental environments, allowing developers to evaluate quantum-safe signatures. Even proponents describe it as a starting point. Any upgrade requires broad coordination across a decentralized network, a process that can take years. Estimates suggest full migration could take the better part of a decade depending on adoption and coordination. The risk, developers say, is as much organizational as technological—Bitcoin has no central authority to mandate upgrades, and core protocol changes require global consensus.
Banking, traditional finance at risk as well
The issue extends beyond cryptocurrency. The same class of cryptography secures banking systems, government communications, and large parts of the internet. Google and cybersecurity agencies warn attackers may already be collecting encrypted data in anticipation of future quantum capabilities—a “store now, decrypt later” strategy. Any viable quantum attack would not be isolated to crypto markets but would extend across financial institutions and critical systems relying on public-key encryption. Bitcoin is not uniquely vulnerable, but it is uniquely transparent: its ledger makes exposure visible, and its open-source development model makes its response observable in real time. Market reaction has remained muted so far, with prices largely unaffected by the latest research. Yet the debate has moved quantum threat from theory to a practical timeline, with the organizational challenges facing the Bitcoin community potentially larger than the technical ones.