en.cryptonomist.ch
Crypto’s biggest theoretical threat doesn’t come from a market crash or a regulator’s pen — it comes from physics. Researchers are edging closer to quantum computers powerful enough to break the math that secures digital assets, and that has pushed quantum computing crypto risk from a fringe worry into a topic major exchanges, blockchain founders and standards bodies are now discussing openly.
Key takeaways
- More than $2 trillion in digital assets rely on elliptic curve cryptography that has been known to be quantum-vulnerable for over 30 years, according to Quantus co-founder Christopher Smith.
- That figure covers nearly the entire crypto market, valued around $2.16 trillion.
- Google researchers estimate that breaking a 256-bit elliptic curve could eventually take fewer than 500,000 physical qubits — roughly 20 times less than an earlier estimate — reshaping timelines for the threat.
- Binance’s Bitcoin cold wallet, reportedly holding over $10 billion, and Tether’s administrative minting key are cited as prime potential targets.
- Binance’s chief security officer says today’s quantum machines are nowhere near capable of breaking that cryptography, even as the industry begins migrating toward post-quantum standards.
Quantum Computing Threatens Over $2 Trillion in Crypto Assets
The scale of exposure is what makes this story matter beyond a niche cryptography debate. Nearly the entire value of the crypto market — $2.16 trillion — sits behind a single type of cryptographic protection that was flagged as theoretically breakable by quantum machines more than three decades ago. “Over $2 trillion in digital assets is secured by elliptic curve cryptography, which has been known to be quantum-vulnerable for over 30 years,” Smith told Fortune.
Elliptic Curve Cryptography Vulnerability
Elliptic curve cryptography is the mathematical backbone that proves ownership of a wallet and authorizes transactions across most blockchains, including Bitcoin. Until recently, it was treated as effectively unbreakable because a classical supercomputer would need hundreds of millions of years to crack the private key tied to a public address. That assumption is what quantum computing threatens to undo.
Quantum Computers’ Unique Capabilities
The reason lies in how these machines process information. Traditional computers rely on bits fixed at either 0 or 1, limited by how small transistors can physically get. Quantum computers instead use subatomic particles and trapped ions to perform calculations through qubits, theoretically letting them run computations in a fraction of the time today’s hardware would need. That speed advantage is precisely what turns a 30-year-old vulnerability into an active planning problem for the industry.
Adding urgency, Google researchers have estimated that the computational resources needed to attack elliptic-curve cryptography may be considerably lower than previously assumed. According to Google’s research, breaking a 256-bit elliptic curve could eventually require fewer than 500,000 physical qubits — about 20 times fewer than an earlier estimate — reflecting algorithmic progress rather than an equivalent leap in existing quantum hardware. Google has reportedly moved its own post-quantum migration target to 2029 on the back of that finding.
Key Targets and Specific Risks Highlight Urgency
Not every wallet or protocol carries the same exposure, and that distinction is central to understanding where the real danger sits. Smith pointed to concentrated, high-value targets rather than the blockchain as a whole.
High-Value Wallets and Administrative Keys
Binance’s Bitcoin cold wallet, which Smith said contains more than $10 billion, is an obvious target for an eventual quantum attack given the scale of funds in a single address. Even more concerning, according to Smith, is the administrative key controlling USDT. That key governs the stablecoin’s issuance, and a compromise could let an attacker manipulate assets across the wider crypto system. “This could be used to instantly wreck everything in DeFi,” Smith warned.
Differing Vulnerabilities Within Crypto Infrastructure
Coinbase pushed back against treating the entire ecosystem as equally exposed. The exchange told Fortune that bitcoin‘s core infrastructure remains largely safe, and that the genuine weak point sits at the wallet level — where private keys tied to individual addresses are what a sufficiently powerful quantum machine would actually target.
Binance’s own security team has offered a more measured read on timing. Chief security officer Jimmy Su said current quantum computers are “nowhere near the scale and reliability needed to break the cryptography protecting digital assets,” framing the danger as a long-term planning concern rather than a threat users need to react to today. Su said phishing, malware, social engineering and weak wallet hygiene remain far more urgent risks for ordinary users right now, and he cautioned against rushing into unproven products marketed as “quantum proof.” Su also acknowledged that artificial intelligence could speed up the timeline by helping researchers solve engineering hurdles still holding quantum hardware back — a factor Smith raised as well when describing why forecasts keep shifting earlier.
This is a key reason the story keeps resurfacing: estimates of when a capable quantum computer might arrive have compressed sharply as AI accelerates the underlying research, even though no such machine exists yet.
Industry Response and Migration Challenges
The cryptography needed to defend against a quantum attack already exists — the harder problem is getting everyone to adopt it before it’s needed. The National Institute of Standards and Technology finalized three post-quantum algorithms, ML-KEM, ML-DSA and SLH-DSA, in 2024 and has urged organizations to begin migrating now, with a roadmap aiming to phase out vulnerable algorithms from its standards by 2035.
Standards and Proposed Migration Timeline
Google has floated 2029 as a target for cryptocurrency systems to complete their migration away from vulnerable cryptography. Coinbase’s independent Quantum Advisory Council has separately examined what happens to coins whose owners never move them in time — the so-called “abandoned coins” problem, which raises governance questions about assets left sitting in exposed addresses long after a migration deadline passes.
Need for Broad, Coordinated Action
What makes this different from a routine software patch is that blockchain security depends on everyone acting, not just one company. A developer can build a quantum-resistant system, but if an exchange doesn’t support it, users can’t move funds. If a wallet provider doesn’t implement it, users stay exposed. If users simply don’t migrate, vulnerable addresses keep sitting on-chain indefinitely. “Custodians, exchanges, mobile and hardware wallet providers, blockchain developers and users will all need to take action to protect digital assets,” Smith said.
Momentum is building on that front. Coinbase is a founding member of the Bitcoin Security Consortium, an initiative backed by BlackRock, Fidelity Digital Assets, Block, Blockstream and Strategy, alongside other firms that have pledged funding toward Bitcoin security and quantum research, including engineering work tied to proposals such as BIP-360. The company says it has also published a position paper on quantum risk and is coordinating with outside developers on potential upgrades.
Estimates for when an actual quantum attack becomes feasible still vary widely — Smith has put the odds at roughly 50-50 by 2028, while other security researchers point to the early 2030s as more likely. What both sides agree on is that building a machine capable of executing such an attack remains beyond current capabilities, but the migration work has to start well before that machine exists. As Smith put it: “To be ready, being a year too early is much better than being a day too late.”
FAQ
Why are quantum computers a threat to cryptocurrencies?
Quantum computers use qubits to perform calculations far faster than classical machines, which could eventually let them break the elliptic curve cryptography that secures most digital assets and derive private keys from exposed public keys.
Which crypto assets are most at risk from quantum attacks?
Nearly the entire crypto market, worth around $2.16 trillion, relies on elliptic curve cryptography, making it broadly vulnerable — with high-value concentrated targets like Binance’s Bitcoin cold wallet and Tether’s administrative minting key seen as especially attractive to attackers.
Is the crypto industry ready for the quantum threat?
The industry is preparing through post-quantum cryptography standards from NIST and coordinated efforts like the Bitcoin Security Consortium, but broad participation across exchanges, wallets and users remains a challenge that hasn’t been fully solved.
When will quantum computers be capable of breaking cryptocurrency cryptography?
No quantum computer capable of breaking this cryptography exists today, but researchers warn that AI-assisted advances could accelerate the timeline, with Google proposing a 2029 target for migration and other experts pointing anywhere from 2028 to the early 2030s.
Article produced with the assistance of artificial intelligence and reviewed by the editorial team.