Google researchers have issued a warning that advances in quantum computing could undermine the cryptographic systems protecting cryptocurrencies and broader digital infrastructure earlier than previously anticipated. The researchers demonstrated that future quantum computers may be capable of breaking elliptic curve cryptography using fewer qubits and computational steps than earlier estimates suggested. In a published blog post, the team called on the cryptocurrency community to begin transitioning to post-quantum cryptography, known as PQC, which is designed to resist quantum-based attacks.
Elliptic curve cryptography, specifically ECDSA over the secp256k1 curve, forms the security backbone of major blockchain networks, digital wallets, and large portions of internet infrastructure. Quantum computers function differently from conventional machines by using quantum bits, or qubits, which can exist in multiple states at once. Algorithms such as Shor’s algorithm theoretically enable sufficiently powerful quantum systems to solve the elliptic curve discrete logarithm problem, which currently secures cryptographic keys. If quantum systems reach the scale needed to exploit these weaknesses — an event commonly referred to as “Q-Day” — encrypted data, financial systems, and digital identities could be exposed.
The Google report outlines several mitigation strategies, noting that post-quantum cryptography is already well understood and deployable, though difficult to implement at scale. Recommended steps include transitioning blockchain systems, rotating cryptographic keys, and avoiding the reuse or unnecessary exposure of public keys. The researchers framed the findings as a call for proactive preparation rather than immediate alarm.
Bitcoin security researcher Justin Drake described the findings as a breakthrough, stating on social media that his confidence in Q-Day arriving by 2032 had risen significantly. He estimated at least a 10% chance that by 2032 a quantum computer could recover a secp256k1 ECDSA private key from an exposed public key. Drake added that while a cryptographically relevant quantum computer before 2030 still seems unlikely, preparation should begin immediately.
The broader debate around quantum risk is increasingly shaped by tension between technical caution and what some researchers characterize as fear, uncertainty, and doubt. Building a fault-tolerant quantum computer capable of executing such attacks remains a substantial engineering challenge. Shiv Shankar, CEO of Boundless, told Decrypt that the growing concern should be placed in context, noting that the risk was always expected to increase as the industry approached a target date for full migration to PQC. He said there was no cause for panic, pointing to the global concentration of expertise working on the problem.
Shankar also emphasized that the issue extends well beyond blockchain. He noted that if quantum computers were to recover a private key within the projected timeline, the entire internet would be at risk, making the stakes far broader than any single industry. He described the prospect of a full internet upgrade as significant, with zero-knowledge technology likely to become central to that transition.
Analysts at Bitfinex told Decrypt that quantum computing represents a genuine engineering challenge for the cryptocurrency sector but is far from an existential threat in its current form. They noted that the cryptographic foundations of Bitcoin and other protocols were always understood to have a finite lifespan, and that the current debate is not a surprise to those who have been following the field. The analysts said Drake’s framing was measured and worth taking seriously, describing a 10% probability of Q-Day by 2032 as a call to act with appropriate urgency rather than a signal of imminent crisis.
Originally reported by Decrypt.
