What's happening
Google's Quantum AI team has published a research paper demonstrating that the elliptic curve cryptography (ECC-256) securing Bitcoin and Ethereum wallets could be broken with approximately 10,000 physical qubits — roughly 20 times fewer resources than previous estimates of hundreds of thousands. Using Google's own quantum circuits as a baseline, the researchers calculate that a neutral-atom quantum computer with about 26,000 qubits could crack ECC-256 in approximately 10 days, while RSA-2048 would require about 102,000 qubits and three months.
The paper identifies a specific attack vector: "on-spend attacks" targeting transactions still in the mempool (the waiting area before transactions are confirmed on the blockchain). When a user broadcasts a transaction, their public key is temporarily exposed, creating a window during which a quantum computer could derive the private key and redirect funds.
Why it matters for markets
The 20x reduction in estimated quantum resources fundamentally compresses the timeline for when cryptocurrency encryption becomes vulnerable. Previous estimates suggested that breaking current cryptography would require quantum computers with millions of qubits — hardware that appeared decades away. The new estimates bring the threat horizon closer to the late 2020s or early 2030s, aligning with Google's own internal 2029 deadline for post-quantum cryptography migration.
Approximately 6.9 million Bitcoin — roughly one-third of all Bitcoin in existence — are at heightened risk because their public keys have been exposed through previous transactions or through Bitcoin's Taproot upgrade. Unlike centralized systems such as banks and military networks that can push software updates to users, Bitcoin's decentralized architecture makes migration to quantum-resistant cryptography significantly more complex, requiring broad community consensus and coordination.
Ethereum developers have already launched an extensive post-quantum migration effort, while prominent voices in the Bitcoin community are urging acceleration of BIP 360 and other quantum-resistant upgrade proposals.
Sectors and assets to watch
Google (GOOGL) is positioned both as the source of the threat assessment and as a company actively developing quantum hardware through its Quantum AI division. Quantum computing hardware companies IonQ (IONQ) and Rigetti Computing (RGTI) benefit from increased urgency around quantum capabilities, though the threat they represent to crypto markets creates complex dynamics.
Post-quantum cryptography companies and cybersecurity firms offering quantum-safe solutions are immediate beneficiaries of the accelerated migration timeline. The cryptocurrency mining sector — including companies with large Bitcoin treasuries — faces valuation pressure from the perceived long-term risk to the asset class.
Centralized exchanges like Coinbase and payment processors handling cryptocurrency face potential compliance obligations to implement quantum-resistant custody solutions as the threat timeline compresses.
What to watch next
Monitor the Bitcoin and Ethereum communities' response to the paper, particularly any acceleration of quantum-resistant upgrade proposals (BIP 360 for Bitcoin, Ethereum's ongoing PQC migration). Track quantum computing hardware milestones — each advance in qubit count and error rates brings the threat timeline closer.
Watch for institutional investor reaction to the compressed threat timeline, including any changes to Bitcoin ETF flows or corporate treasury allocation policies. Monitor Google's own progress toward its 2029 PQC migration deadline as a signal for when the company believes the quantum threat becomes operationally relevant.