Ethereum co-founder Vitalik Buterin has warned that quantum computers could pose a serious threat to crypto security as early as 2028. His view is that current encryption systems may not withstand fast progress in atomic-level computing, which could force blockchains to upgrade sooner than many expect.
Buterin puts the odds of quantum machines breaking today’s cryptography before 2030 at about 20%, while his median timeline is closer to 2040. His message is simple: the industry should prepare before the threat arrives, not after damage is done.
Why ECDSA is central to the quantum risk
Most digital assets rely on the Elliptic Curve Digital Signature Algorithm, or ECDSA, to secure wallets and validate on-chain transactions. A wallet owner signs a transaction digitally, and the underlying math is meant to stop attackers from deriving a private key from a public key.
If quantum hardware reaches the required scale, that protection could weaken sharply. The article points to Shor’s algorithm as the main concern, since it could allow an attacker to calculate private keys from public keys, forge transactions, and steal funds. That is the most direct danger. The mechanics are technical, but the outcome is straightforward.
Public keys are generally exposed only after coins are spent, which means many addresses remain relatively safe until they are used. Once exposed, though, those addresses could become vulnerable if quantum systems become powerful enough. Some studies cited in the source suggest that a large share of existing Bitcoin could be at risk if no upgrade takes place.
Experts also mention Grover’s algorithm as a possible threat to hashing systems such as SHA-256, though that risk is described as slower-moving and less severe than a break in digital signatures.
Ethereum is exploring defenses while Bitcoin faces a harder path
Ethereum is already working on defensive options. According to the source, developers are studying post-quantum cryptography modules and reviewing signature systems based on hashes and lattices. A sudden network-wide switch would be disruptive given Ethereum’s size, so account abstraction and gradual migration are being considered as ways to manage the transition.
Bitcoin has a tougher route. Its conservative design and broad community approval process make upgrades slower and harder to coordinate. The article notes that unspent coins are still relatively safe for now, but that does not remove the longer-term challenge.
Some networks have moved earlier on this front. Quantum Resistant Ledger (QRL) and IOTA have already integrated quantum-resistant signatures into their infrastructure, and wallets such as BMIC are offering similar protection.
The threat is not active yet, but the preparation window matters
The source makes a clear distinction: quantum systems capable of breaking current crypto encryption have not been launched yet, but the threat is still real. Research progress and supporting infrastructure are advancing fast enough that waiting could prove costly.
Buterin’s position is that earlier upgrades are the safer option. For blockchains, wallets, and users, quantum computing is not yet an immediate attack surface, but it is already becoming a live issue in cryptographic planning and upgrade design.