New analysis points to feasible attacks on Bitcoin and Ethereum wallets with far fewer qubits, prompting accelerated industry migration plans.
- ECC-256 quantum attack requires <1,200 logical qubits, far below prior million-qubit estimates.
- Google’s 2029 post-quantum crypto target reflects updated hardware and error-correction progress.
- Immediate address reuse cessation and migration to lattice- or hash-based signatures are recommended.
- Abandoned/unupgradable wallets with exposed keys remain a structural vulnerability without on-chain fixes.
Google Quantum AI and co-authors, including Justin Drake of the Ethereum Foundation, Dan Boneh of Stanford, and Craig Gidney, on Monday showing that the quantum resources needed to solve the elliptic curve discrete logarithm problem for 256-bit keys are far lower than previously thought.
Sponsored
The estimates suggest an attack on ECC-256, the cryptography securing Bitcoin, Ethereum, and most major blockchain wallets, could succeed with fewer than 1,200 logical qubits — or under 500,000 physical superconducting qubits running for minutes.
Google, which had already revised its internal post-quantum cryptography migration deadline to 2029 last week, cited these updated resource figures as a key factor.
Quantum Resource Estimates Revised
The research builds on advances in quantum circuits, error suppression, and fault-tolerant architectures.
Earlier benchmarks put requirements in the millions of physical qubits; the new study shows a roughly 20-fold reduction.
Researchers coordinated with U.S. officials and used zero-knowledge proofs so others can verify the results without giving a full attack guide.
However, a secondary study cited in the whitepaper suggests an even lower threshold of approximately 10,000 reconfigurable atomic qubits could challenge similar cryptographic schemes, underscoring the need for post‑quantum cryptography planning.
Implications for Blockchain Security
These findings apply directly to any system relying on the elliptic curve digital signature algorithm (ECDSA) for key derivation and transaction signing.
Once sufficiently powerful quantum hardware exists, exposed public keys would become the primary attack surface.
The disclosure does not compromise current classical security but compresses the timeline for protocol-level defenses and post-quantum migration.
Why This Matters
The whitepaper shortens the quantum threat timeline, showing that as quantum tech advances, the risk to crypto security grows, making clear reporting and a move to quantum-resistant systems urgent.
Check out Ciphera’s hottest crypto news today:
KuCoin Settles CFTC Case for $500K Over U.S. Derivatives
XRP’s Tug-Of-War Shifts As ETFs Collide With Leverage
People Also Ask:
The quantum threat refers to the potential for powerful quantum computers to break the cryptography securing Bitcoin, Ethereum, and other digital assets.
By solving the elliptic curve discrete logarithm problem, quantum computers could derive private keys from exposed public keys, enabling unauthorized transactions.
Developers are working on post-quantum cryptography, including lattice-based or hash-based signature schemes, and advising users to stop reusing addresses to reduce risk.
