The post-quantum transition can’t be postponed any longer
Google’s new research potentially puts the entire bitcoin supply – and the very foundation of digital trust – at risk, explains Pruden.
By Alex Pruden|Edited by Betsy Farber Mar 31, 2026, 6:05 p.m. Make preferred on
A whitepaper published yesterday by Google Quantum AI shows that a fast-clock quantum computer (with similar architecture to their existing Willow chip) could derive a private key from an exposed public key in approximately nine minutes. Bitcoin settles a block every 10 minutes.
That is, on average, a one-minute margin between the system working and an adversary hijacking live transactions directly from the mempool before they confirm. That multi-trillion dollar minute means that not just Satoshi’s coins, but the entire supply of Bitcoin now and forever is at risk.
For years, the industry's position on quantum has been some version of "we'll deal with it when it's real." Even for those who took this threat seriously, most believed that the first real threat to Bitcoin was at least a decade away, and would come in the form of “long-range” attacks on dormant assets. This paper, the latest in a string of accelerating breakthroughs make that position untenable.
This research presents a seismic shift that violently accelerates the timeline. The implications for the digital asset ecosystem are acute. If we do not coordinate an urgent upgrade effort immediately, digital assets as we know them may not be viable.
The pace of change is accelerating
Historically, estimates suggested we would need tens of millions of physical qubits running a trillion error-corrected operations to threaten Bitcoin. But critically, those estimates were based not on the elliptic-curve cryptography Bitcoin uses, but on an older algorithm known as RSA-2048.
Google’s whitepaper shatters those prior resource estimates with an architecture for breaking the 256-bit Elliptic Curve Discrete Logarithm Problem (ECDLP) used in Bitcoin specifically.
This paper brings the physical requirement down to fewer than half a million qubits and reduces the number of operations by multiple orders of magnitude. It achieves this using just 1,200 logical qubits at an error rate of 0.1%, a threshold that appears achievable in the near-term. Google has reportedly moved up its own quantum timelines to 2029.
More importantly, the architecture it used (superconducting) featured fast physical clock speeds. That means it isn't just "lost" or dormant coins that are at risk; every single active Bitcoin transaction could be vulnerable to a quantum attacker snatching it directly from the mempool.
But the Google paper is not an isolated event. It is one of two converging breakthroughs.
Researchers from Oratomic announced a parallel breakthrough using neutral-atom hardware. Leveraging high-rate quantum low-density parity check (qLDPC) codes, they demonstrated that Shor's algorithm can be executed at cryptographically relevant scales using approximately 10,000 to 22,000 reconfigurable atomic qubits. What once required millions of qubits has been compressed by orders of magnitude in just a few short years on two separate technological tracks, simultaneously.

Multiple tech trees with one target
How is it possible that quantum made little progress for so long, but we are now witnessing the timeline collapse so quickly? Simply put, small iterative improvements in physical fidelity, error correction, control architectures, and algorithm design are creating a feedback loop that compounds progress.
Faster machines enable better error-correction research, lowering the resource bar for the next generation of machines and accelerating timelines at non-linear speeds.
Perhaps the most dangerous misconception is that quantum progress relies on a single "miracle" breakthrough in one specific type of physics. The quantum threat is not a single moonshot that might stall. Superconducting, photonic, neutral-atom and ion-trap architectures represent entirely different engineering roadmaps, physics and funding pipelines. Only one needs to succeed for quantum computing to become cryptographically relevant.
It’s true that none of these systems has been fully proven at scale yet. But they are increasingly being proven, with serious names and serious capital behind them. Are we really willing to roll the dice with trillions of dollars on the line?
The clock is ticking on migration
The instinct to defer until a cryptographically relevant quantum computer is publicly confirmed fundamentally misunderstands how decentralized networks upgrade. Migrating a decentralized network like Bitcoin is not like flipping a switch on an enterprise server. Trillions of dollars of assets are at risk, and all networks need to perform an unprecedented upgrade to introduce new cryptography at the most foundational level.
Unfortunately, solving one problem creates new challenges. Post-Quantum Cryptography (PQC) requires significantly larger digital signatures, thereby increasing bandwidth, storage and compute requirements. Implementing this requires a hard fork, and reaching the necessary community consensus will be an arduous, politically fraught process.
Even after a consensus is reached, the sheer logistics of moving the assets are staggering. At bitcoin's current transaction rate, migrating the network to post-quantum addresses would take several months – assuming the network processed nothing else and every block was full.
If we wait until Q-Day (when a quantum computer relevant to cryptography is publicly confirmed) to begin this process, it will be too late. Digital signatures will have already lost their authority, and any attempt to fix the problem retroactively will spark intense financial volatility. In a worst-case scenario, there may be competing forks, shattered institutional trust and a crisis of provenance for trillions of dollars in assets.
Urgency, not panic
This is not a call for panic. It is a call for realism. Executives and institutions that now hold a massive portion of the circulating bitcoin supply, stablecoin issuers and major protocol teams need to acknowledge that the risk profile has fundamentally changed. The quantum threat is no longer a theoretical exercise for academics; it is an engineering reality moving at breakneck speed.
We must act now. The world needs proactive migration strategies, tools to register post-quantum ownership, and an industry-wide mandate to upgrade before the first silent theft occurs. The quantum adversary is coming, and they will not declare themselves. But we can prepare. We must coordinate this upgrade today to ensure the foundation of digital trust survives into the quantum era.
Note: The views expressed in this column are those of the author and do not necessarily reflect those of CoinDesk, Inc. or its owners and affiliates.
More For You
Encryption Supremacy: Zcash and Privacy in the Age of Scale
By CoinDesk Research3 hours ago
Commissioned byGenZcash
Most crypto privacy models weaken as blockchain data grows. Encryption-based models like Zcash strengthen. CoinDesk Research maps the five privacy approaches and examines the widening gap.
Why it matters:
As blockchain adoption scales, the metadata available to machine learning models scales with it. Obfuscation-based privacy approaches are structurally degrading as a result. This report provides a comprehensive comparison of all five major crypto privacy architectures and a framework for evaluating which models remain durable as AI capabilities improve.
View Full ReportMore For You
The time for clear financial privacy rules is now
By Steve Yelderman|Edited by Betsy Farber3 hours ago
Despite recent regulatory progress in the industry, privacy remains an area that needs to be addressed, says Yelderman.
Read full storyLatest Crypto News
Bitcoin, stocks rise, oil slides, after report of Iran's willingness to end conflict
2 hours ago
Charles Hoskinson not a fan of CLARITY Act, warns of 'weaponization' by future lawmakers
2 hours ago
Why 12 European banks are teaming up to save the euro from digital dollarization
3 hours ago
The time for clear financial privacy rules is now
3 hours ago
Mercado Libre shuts down Mercado Coin, ending its loyalty-driven crypto experiment
4 hours ago
Bitfarms targets zero bitcoin on the balance sheet as it pivots to AI
4 hours agoTop Stories
Google warns five quantum attack paths could put $100 billion on Ethereum at risk
6 hours ago
Bitcoin bulls scramble for post-quantum protection as Google drops bombshell paper
7 hours ago
Downside risk remains as bitcoin nears record-tying six-month losing streak
6 hours ago
Coinbase’s Base to focus on tokenized markets, stablecoins, developers this year
6 hours ago
Breaking Bitcoin with quantum may be easier than thought, with Taproot partly to blame, Google says
14 hours ago