Quantum Computing Could Break Bitcoin — Industry Must Set a Date

There is a recurring question in the industry: when will a quantum machine be strong enough to break Bitcoin? For more than thirty years, elliptic-curve cryptography has been understood to be vulnerable to quantum computing, yet crypto still lacks any mechanism that would force every user to make the switch.

That cryptographic foundation protects $2 trillion in digital assets, according to Fortune, while the entire crypto market is valued at $2.8 trillion. Almost all of this asset class sits on a form of cryptography that the industry itself considers obsolete.

Developers are able to add new kinds of signatures, yet the actual transfer of assets remains reliant on custodians making changes on behalf of clients and on self-custodied users taking action on their own.

No one is forced to join in, so waiting seems a reasonable choice for each party until the danger suddenly shifts.

So there was a big drop in the hardware requirements for the memory efficient version of Shor’s algorithm, and it’s not the number you think.

Three days ago it was 672 qubits and 823m T gates. Now it is 660 qubits and 490m T gates. The memory requirements dropped by about 2% but…

— Yuvi Lightman | Quantus (@YuviLightman), October 23, 2026

What Moving First Costs

Replacement signature standards have already been finalized by NIST, so quantum-resistant options exist right now. Moving from ECDSA to ML-DSA is not a simple swap, because the newer signatures and public keys take up far more space.

Custodians are also tied to a factor outside their control: a wallet cannot become post-quantum in isolation. The network beneath it must accept the new signature type first, and only then can a custodian transfer assets onto it.

Signatures are just one part of the cryptography embedded throughout these systems. Peer-to-peer messaging, consensus mechanisms, zero-knowledge proving systems, bridges, and custody setups all rely on separate assumptions, so strengthening transaction signatures leaves those other areas untouched.

The greater barrier is the temptation to hold off. Those who act first bear the cost of redesign, custody overhauls, hardware support, and new operational workflows while the hazard still appears remote.

Those who move later can watch others absorb the expense and then pick from more proven technology. For each player, postponement seems sensible, even though it raises the total risk borne by the industry.

Certain assets may never make the jump, and Coinbase has pointed to the still-unanswered question of abandoned or unmigrated coins. Inactive owners tend to ignore voluntary upgrades, while accounts that are lost or abandoned will not act at all.

Voluntary Action Needs Enforcement

Coinbase provides a sensible starting point, since its separation of Bitcoin’s core infrastructure from wallet-level exposure is technically accurate. Bitcoin’s hashing, mining, and historical ledger are distinct from the signature layer that a quantum device would target.

Describing the immediate exposure as wallet-level keeps a genuine cryptographic danger from being mistaken for a claim that Bitcoin as a whole would collapse at once.

The term “Wallet-level” points to where the cryptography fails, but the financial fallout could reach well past that border.

One wallet can be worth billions, and an administrative key can hold power over a large stablecoin. If enough value or authority sits behind a single exposed signature, the failure can pass through markets, counterparties, and protocols that were never directly targeted.

Custody erases the line between a contained technical breakdown and a system-wide financial occurrence. Cold storage shields a private key against theft or device tampering, but that protection is irrelevant if the key can be calculated from a public key that is visible.

Multisig arrangements still guard against operational slip-ups, yet five locks are no help when every one of them uses the same vulnerable mechanism.

COULD QUANTUM COMPUTING DRAIN SATOSHI’S BITCOIN FORTUNE?

An AI just cracked an unsolved 1941 Enigma cipher in 10 hours, reigniting fears around Bitcoin’s private keys.

Standard AI can't brute-force a 256-bit key, but future quantum attacks could target exposed Satoshi-era…

— BeInCrypto (@beincrypto), October 20, 2026

Altering the underlying math has a real price. A plain ECDSA signature takes 64 bytes, while an ML-DSA-65 signature occupies 3,309 bytes — fifty-two times more — and ML-DSA-87 reaches 4,627 bytes before the larger public keys are even included.

That bulk is felt in bandwidth, storage, transaction fees, and the throughput assumptions that were built when signatures were compact, as well as in hardware wallets and custody systems engineered for the older dimensions.

Because waiting is so appealing, a voluntary shift will eventually have to carry penalties. Protocols may phase out legacy signatures, and exchanges or custodians can refuse to support vulnerable address types and keys.

Insurance providers can treat classical exposure as a different pricing risk, while institutional trading partners and regulators may add demands of their own. Eventually, remaining on the outdated cryptography must be more expensive than making the change.

The First Scare Sets the Deadline

Pressure will hit the digital asset industry in an uneven pattern. Big custodians and exchanges will be first to act, since they hold the most visible and valuable targets. Parts of the custody infrastructure are already adjusting.

At least one hardware wallet family already has post-quantum signature support built in, but the network still decides where that safeguard can actually apply. Smaller service providers and individual holders will take longer to shift.

If the migration window stays open indefinitely, vulnerable wallets remain a permanent legacy reserve waiting for quantum power — the crypto equivalent of unclaimed property. Setting a deadline would force a political choice over whether to freeze, burn, or limit assets owned by people who did not or could not move them. Each possible route has a governance price.

Google’s 2029 migration target applies only to Google’s own infrastructure. It has no bearing on when Q-Day actually comes.

The crypto industry cannot read 2029 as a license to delay, since shifting every protocol, wallet, custodian, exchange, and holder takes years.

The first believable alarm will push the migration forward. Choosing a date today is the only scenario in which the industry sets the conditions itself.

Before that moment arrives, a dated requirement has to be in place, whether through protocol rules, regulated custody standards, or requirements for market access. If not, the timeline will be dictated by a regulator — or by whoever stages the first successful attack.