Start now →

The post-quantum transition can’t be postponed any longer

By Alex Pruden · Published March 31, 2026 · 7 min read · Source: CoinDesk
BitcoinAI & Crypto
OpinionShare this articleX (Twitter)LinkedInFacebookEmail

The post-quantum transition can’t be postponed any longer

Google’s new research potentially puts the entire bitcoin supply – and the very foundation of digital trust – at risk, explains Pruden.

By Alex Pruden|Edited by Betsy Farber Mar 31, 2026, 6:05 p.m. Make preferred on
Google show peak retail interest in cryptocurrencies. (Pixabay)

A whitepaper published yesterday by Google Quantum AI shows that a fast-clock quantum computer (with similar architecture to their existing Willow chip) could derive a private key from an exposed public key in approximately nine minutes. Bitcoin settles a block every 10 minutes.

That is, on average, a one-minute margin between the system working and an adversary hijacking live transactions directly from the mempool before they confirm. That multi-trillion dollar minute means that not just Satoshi’s coins, but the entire supply of Bitcoin now and forever is at risk.

For years, the industry's position on quantum has been some version of "we'll deal with it when it's real." Even for those who took this threat seriously, most believed that the first real threat to Bitcoin was at least a decade away, and would come in the form of “long-range” attacks on dormant assets. This paper, the latest in a string of accelerating breakthroughs make that position untenable.

This research presents a seismic shift that violently accelerates the timeline. The implications for the digital asset ecosystem are acute. If we do not coordinate an urgent upgrade effort immediately, digital assets as we know them may not be viable.

The pace of change is accelerating

Historically, estimates suggested we would need tens of millions of physical qubits running a trillion error-corrected operations to threaten Bitcoin. But critically, those estimates were based not on the elliptic-curve cryptography Bitcoin uses, but on an older algorithm known as RSA-2048.

Google’s whitepaper shatters those prior resource estimates with an architecture for breaking the 256-bit Elliptic Curve Discrete Logarithm Problem (ECDLP) used in Bitcoin specifically.

This paper brings the physical requirement down to fewer than half a million qubits and reduces the number of operations by multiple orders of magnitude. It achieves this using just 1,200 logical qubits at an error rate of 0.1%, a threshold that appears achievable in the near-term. Google has reportedly moved up its own quantum timelines to 2029.

More importantly, the architecture it used (superconducting) featured fast physical clock speeds. That means it isn't just "lost" or dormant coins that are at risk; every single active Bitcoin transaction could be vulnerable to a quantum attacker snatching it directly from the mempool.

But the Google paper is not an isolated event. It is one of two converging breakthroughs.

Researchers from Oratomic announced a parallel breakthrough using neutral-atom hardware. Leveraging high-rate quantum low-density parity check (qLDPC) codes, they demonstrated that Shor's algorithm can be executed at cryptographically relevant scales using approximately 10,000 to 22,000 reconfigurable atomic qubits. What once required millions of qubits has been compressed by orders of magnitude in just a few short years on two separate technological tracks, simultaneously.

Physical Quibits required for Shor's algorithm

Multiple tech trees with one target

How is it possible that quantum made little progress for so long, but we are now witnessing the timeline collapse so quickly? Simply put, small iterative improvements in physical fidelity, error correction, control architectures, and algorithm design are creating a feedback loop that compounds progress.

Faster machines enable better error-correction research, lowering the resource bar for the next generation of machines and accelerating timelines at non-linear speeds.

Perhaps the most dangerous misconception is that quantum progress relies on a single "miracle" breakthrough in one specific type of physics. The quantum threat is not a single moonshot that might stall. Superconducting, photonic, neutral-atom and ion-trap architectures represent entirely different engineering roadmaps, physics and funding pipelines. Only one needs to succeed for quantum computing to become cryptographically relevant.

It’s true that none of these systems has been fully proven at scale yet. But they are increasingly being proven, with serious names and serious capital behind them. Are we really willing to roll the dice with trillions of dollars on the line?

The clock is ticking on migration

The instinct to defer until a cryptographically relevant quantum computer is publicly confirmed fundamentally misunderstands how decentralized networks upgrade. Migrating a decentralized network like Bitcoin is not like flipping a switch on an enterprise server. Trillions of dollars of assets are at risk, and all networks need to perform an unprecedented upgrade to introduce new cryptography at the most foundational level.

Unfortunately, solving one problem creates new challenges. Post-Quantum Cryptography (PQC) requires significantly larger digital signatures, thereby increasing bandwidth, storage and compute requirements. Implementing this requires a hard fork, and reaching the necessary community consensus will be an arduous, politically fraught process.

Even after a consensus is reached, the sheer logistics of moving the assets are staggering. At bitcoin's current transaction rate, migrating the network to post-quantum addresses would take several months – assuming the network processed nothing else and every block was full.

If we wait until Q-Day (when a quantum computer relevant to cryptography is publicly confirmed) to begin this process, it will be too late. Digital signatures will have already lost their authority, and any attempt to fix the problem retroactively will spark intense financial volatility. In a worst-case scenario, there may be competing forks, shattered institutional trust and a crisis of provenance for trillions of dollars in assets.

Urgency, not panic

This is not a call for panic. It is a call for realism. Executives and institutions that now hold a massive portion of the circulating bitcoin supply, stablecoin issuers and major protocol teams need to acknowledge that the risk profile has fundamentally changed. The quantum threat is no longer a theoretical exercise for academics; it is an engineering reality moving at breakneck speed.

We must act now. The world needs proactive migration strategies, tools to register post-quantum ownership, and an industry-wide mandate to upgrade before the first silent theft occurs. The quantum adversary is coming, and they will not declare themselves. But we can prepare. We must coordinate this upgrade today to ensure the foundation of digital trust survives into the quantum era.


Google

Note: The views expressed in this column are those of the author and do not necessarily reflect those of CoinDesk, Inc. or its owners and affiliates.

More For You

Encryption Supremacy: Zcash and Privacy in the Age of Scale

By CoinDesk Research3 hours ago  logoCommissioned byGenZcash
Encryption Supremacy - Zcash and Privacy in the Age of Scale

Most crypto privacy models weaken as blockchain data grows. Encryption-based models like Zcash strengthen. CoinDesk Research maps the five privacy approaches and examines the widening gap.

Why it matters:

As blockchain adoption scales, the metadata available to machine learning models scales with it. Obfuscation-based privacy approaches are structurally degrading as a result. This report provides a comprehensive comparison of all five major crypto privacy architectures and a framework for evaluating which models remain durable as AI capabilities improve.

View Full Report

More For You

The time for clear financial privacy rules is now

By Steve Yelderman|Edited by Betsy Farber3 hours ago
3D Render of a Safe with Coins and Banknotes, Blue, Economy Concept – Stock Photo

Despite recent regulatory progress in the industry, privacy remains an area that needs to be addressed, says Yelderman.

Read full storyLatest Crypto News Iranian President Masoud Pezeshkian (John Lamparski/Getty Images)

Bitcoin, stocks rise, oil slides, after report of Iran's willingness to end conflict

2 hours ago
Charles Hoskinson at Consensus Hong Kong 2026 (Photo by Olivier Acuna/Modified by CoinDesk)

Charles Hoskinson not a fan of CLARITY Act, warns of 'weaponization' by future lawmakers

2 hours ago
Jan-Oliver Sell, CEO of Qivalis (Qivalis)

Why 12 European banks are teaming up to save the euro from digital dollarization

3 hours ago
3D Render of a Safe with Coins and Banknotes, Blue, Economy Concept – Stock Photo

The time for clear financial privacy rules is now

3 hours ago
A person holding a payments card sits at a computer (Rupixen/Unsplash)

Mercado Libre shuts down Mercado Coin, ending its loyalty-driven crypto experiment

4 hours ago
A technician monitors cryptocurrency mining rigs at a Bitfarms facility in Saint-Hyacinthe, Quebec, Canada.

Bitfarms targets zero bitcoin on the balance sheet as it pivots to AI

4 hours ago
Top StoriesEthereum

Google warns five quantum attack paths could put $100 billion on Ethereum at risk

6 hours ago
Google (Getty Images)

Bitcoin bulls scramble for post-quantum protection as Google drops bombshell paper

7 hours ago
Losing streak

Downside risk remains as bitcoin nears record-tying six-month losing streak

6 hours ago
Coinbase CEO, Brian Armstrong, at Consensus 2019 (CoinDesk)

Coinbase’s Base to focus on tokenized markets, stablecoins, developers this year

6 hours ago
Quantum Computing Optics (Ben Wicks/Unsplash)

Breaking Bitcoin with quantum may be easier than thought, with Taproot partly to blame, Google says

14 hours ago
Polymarket founder and CEO Shayne Coplan (Jesse Hamilton/CoinDesk)

Prediction markets backlash builds possible stormcloud for 2027

7 hours ago
This article was originally published on CoinDesk and is republished here under RSS syndication for informational purposes. All rights and intellectual property remain with the original author. If you are the author and wish to have this article removed, please contact us at [email protected].

NexaPay — Accept Card Payments, Receive Crypto

No KYC · Instant Settlement · Visa, Mastercard, Apple Pay, Google Pay

Get Started →