American investor and former pharmaceutical executive Martin Shkreli says the most credible long-term technical threat to Bitcoin is not artificial intelligence, but quantum computing—specifically Shor’s algorithm. In a recent appearance on the Bitcoin Rails podcast with host Isabel Foxen Duke, Shkreli argued that if large-scale quantum machines ever become practical, they could eventually challenge the elliptic curve cryptography that protects bitcoin wallets. At the same time, he stressed that today’s quantum hardware remains nowhere near the level required for such an attack.
Why Shor’s Algorithm Matters for Bitcoin
Shkreli’s core argument centers on the distinction between general computing power and algorithmic advantage. In his view, quantum computers are not interesting because they are “faster” in the conventional sense or because they will replace classical hardware such as Nvidia GPUs. Their significance lies in the fact that some quantum algorithms can fundamentally alter the complexity of specific problems.
That is where Shor’s algorithm comes in. The algorithm is known for its ability to attack mathematical problems such as integer factoring and discrete logarithms much more efficiently than classical methods. For Bitcoin, the relevant concern is elliptic curve cryptography, which underpins wallet security. If sufficiently powerful, fault-tolerant quantum computers ever become available, Shor’s algorithm could become a direct challenge to that cryptographic foundation.
According to Shkreli, this makes quantum computing a more plausible first mover against Bitcoin’s cryptography than AI. He did not dismiss the possibility that AI-assisted mathematical breakthroughs could emerge in the future, but he ranked quantum methods as the more likely route to breaking elliptic curve systems first.
The Hardware Gap Remains Enormous
Even while identifying quantum computing as the most serious theoretical risk, Shkreli made clear that current machines are far from capable of carrying out a meaningful attack on Bitcoin. The limiting factor, he said, is not hype but engineering reality.
One of the biggest barriers is gate fidelity. In quantum systems, each logical operation is performed with a certain probability of success. Shkreli pointed to state-of-the-art fidelities around 99.99%, a figure that may sound impressive at first glance. But a full implementation of Shor’s algorithm for a target as demanding as Bitcoin’s cryptography would require millions of gates. Once errors compound across that many operations, reliability quickly breaks down.
This means that high raw fidelity alone is not enough. To run useful large-scale quantum algorithms, developers would need either dramatically cleaner physical qubits or robust error-correction systems capable of transforming noisy hardware into dependable logical qubits. Both routes remain technically difficult and extremely resource-intensive.
Shkreli also emphasized that quantum hardware still struggles with familiar constraints such as noise, decoherence, and fragile numerical performance. He even noted that issues like cosmic-ray-induced bit flips are part of the real-world challenge. In that context, Shor’s algorithm remains more of a proven theoretical achievement than a production-ready attack tool.
Logical Qubits vs. Physical Qubits
To illustrate the scale of the challenge, Shkreli referenced rough resource estimates tied to Bitcoin’s 256-bit elliptic curve. In his discussion, a credible attack could require around 1 million logical qubits. Because logical qubits depend on heavy error-correction overhead, that could translate into hundreds of millions to 1 billion physical qubits, depending on the efficiency of the architecture and correction scheme.
That gap is central to the debate. Publicly accessible systems today are dramatically smaller. Shkreli cited IBM’s roughly 150-qubit systems as a useful reality check. These machines may be valuable for education, experimentation, and early-stage algorithm testing, but they are nowhere near the scale needed for a Bitcoin-grade cryptographic break.
In other words, there is a vast difference between demonstrating quantum operations in a lab or cloud environment and building a fault-tolerant machine capable of sustaining the huge number of reliable operations needed to attack a live cryptographic network.
Quantum Advantage Is About Complexity, Not Clock Speed
Another important point in Shkreli’s remarks was the common misconception that quantum computers are simply faster versions of classical machines. He argued that this framing misses the point. Quantum systems often operate at relatively slow effective speeds, sometimes measured in kilohertz or worse, and they are far from practical replacements for general-purpose computing infrastructure.
The reason they matter is mathematical. For a narrow class of problems, algorithms like Shor’s can reduce the difficulty from exponential time to polynomial time. That reduction in complexity is what gives quantum computing its disruptive potential. But unless hardware advances enough to support stable, large-scale execution, that potential remains theoretical.
This distinction is especially relevant for cryptocurrency discussions, where narratives often blur together advances in AI, semiconductors, and quantum science. Shkreli’s view is that the Bitcoin conversation should stay focused on cryptography: the risk is not that quantum machines will outperform data-center GPUs across the board, but that they may eventually become powerful enough to undermine specific cryptographic assumptions.
Timelines: Not a Five-Year Story
On timing, Shkreli avoided making a precise prediction. However, he was clear that a credible Shor-class attack on Bitcoin’s elliptic curve cryptography is not a five-year story. He suggested the timeline could extend to decades, largely because of the enormous gulf between current physical-qubit systems and the kind of error-corrected logical-qubit fleets that would be required for real cryptanalytic work.
That caution stands out in a market where future technologies are often discussed in compressed timelines. Shkreli’s message was not that Bitcoin faces an imminent existential threat, but that the industry should understand where the true long-term pressure point lies. Quantum risk is best viewed today as a strategic security topic rather than an immediate operational emergency.
His comments also imply that Bitcoin’s long-term resilience may eventually depend not only on quantum hardware timelines, but also on how early the broader ecosystem prepares for cryptographic migration if and when such a transition becomes necessary.
AI, Math Breakthroughs, and Alternative Risks
Although Shkreli placed quantum computing at the top of the risk hierarchy, he did not dismiss other possibilities. He acknowledged that non-quantum breakthroughs—especially mathematical advances potentially aided by AI—cannot be ruled out. A major discovery in cryptanalysis could, in theory, alter the threat landscape even without large-scale quantum hardware.
Still, his ranking remained consistent: if elliptic curve cryptography is eventually compromised, he believes quantum methods are the more likely first path. This framing is important because it separates speculative AI fears from the narrower, technically grounded concern associated with Shor’s algorithm.
For Bitcoin observers, that distinction may help clarify the debate. AI can accelerate research, automate discovery, and support mathematical exploration, but that does not automatically make it the primary direct threat to wallet cryptography. In Shkreli’s assessment, quantum remains the more credible route.
The Ethics of “Hacking Satoshi”
The conversation also touched on ethics. Asked about the idea of attacking wallets associated with Satoshi Nakamoto, Shkreli said the intellectual accomplishment would be significant, but actually taking those coins would amount to theft. He suggested that proving such a breakthrough would not require looting anyone’s wallet; the research itself could be published and demonstrated without transferring funds.
That perspective underscores a broader point: the quantum-Bitcoin debate is not only about whether a cryptographic break is theoretically possible, but also about how the community would respond to such a breakthrough if it ever arrived. Security research, responsible disclosure, and protocol adaptation would likely matter as much as the initial technical achievement.
A Long-Term Security Debate, Not an Immediate Crisis
Overall, Shkreli’s comments frame Bitcoin’s quantum risk in measured terms. He identifies Shor’s algorithm as the main long-term concern, not because current machines are close to breaking Bitcoin, but because the mathematics behind the algorithm targets the exact type of cryptography that secures wallets today. At the same time, he stresses that current quantum systems remain far too small, too noisy, and too unreliable to mount a real attack.
For now, the practical takeaway is restraint rather than alarm. The threat is credible in theory, but distant in engineering reality. Even so, as research into better qubits, stronger error correction, and scalable quantum architectures continues, the question of how Bitcoin and other crypto networks prepare for a post-quantum future is likely to remain an increasingly important topic.