Quantum

Security

Satoshi Nakamoto

<p>Nine crypto organizations have created the Quantum Alliance to define common standards to protect blockchains against future quantum computers. The group estimates that 6.04 million BTC already have a visible public key, but these funds cannot be stolen with machines available today.</p>
<div class="in-brief">
 <div class="in-brief--container"><span></span><span></span>
  <h2 class="in-brief--title" id="in-brief">In brief</h2>
  <ul>
   <li>Nine crypto organizations create the Quantum Alliance to prepare blockchains for future quantum threats.</li>
   <li>Over 6 million BTC could become vulnerable, but no current quantum computer can hack them.</li>
   <li>The Quantum Alliance aims to establish common standards to strengthen blockchain and wallet security.</li>
   <li>The arrival of Q-Day remains uncertain, despite some forecasts indicating a threat as early as 2028.</li>
   <li>The migration to post-quantum cryptography raises technical challenges, especially for lost or inactive bitcoins.</li>
  </ul>
 </div>
</div>
<h2 id="more-than-6-million-bitcoins-could-eventually-be-exposed">More than 6 million bitcoins could eventually be exposed</h2>
<p>The threat concerns <a href="https://www.cointribune.com/en/coinbase-says-bitcoins-post-quantum-transition-will-take-years/" rel="noopener noreferrer nofollow">the cryptography that proves bitcoin ownership</a>, not the general operation of the blockchain. Bitcoin uses signatures based on elliptic curves to verify that a transaction has indeed been authorized by the holder of a private key.</p>
<div class="my-4">
 <div class="ads "></div>
</div>
<div class="affiliate-button"><a href="https://kraken.pxf.io/K0XRaaes" rel="noopener noreferrer nofollow">Start your crypto adventure safely with Kraken</a><a href="https://www.cointribune.com/en/sponsored-content/" rel="noopener noreferrer nofollow">This link uses an affiliate program.</a>
</div>
<p><a href="https://decrypt.co/381236/crypto-firms-launch-quantum-alliance-as-6-million-bitcoin-sit-exposed" rel="noopener noreferrer nofollow">Several points</a> help measure the exact nature of the risk :</p>
<ul>
 <li>About 6.04 million BTC supposedly have a public key already visible ;</li>
 <li>This amount represents nearly 30.2% of the existing supply ;</li>
 <li>Some broader calculations estimate between 6.4 and 6.9 million BTC ;</li>
 <li>Bitcoins attributed to Satoshi Nakamoto could be among the affected funds ;</li>
 <li>No current quantum computer can retrieve a Bitcoin private key.</li>
</ul>
<p>A public key allows other users to verify a signature. Classical computers cannot turn it into a private key within a realistic timeframe. A future error-corrected quantum machine could, however, apply Shor’s algorithm to solve this mathematical problem.</p>
<p>Estimates vary depending on address types and method used. Some calculations count only outputs where the public key appears directly on the blockchain. Others add reused addresses, funds associated with old formats, or certain bitcoins secured by Taproot.</p>
<p>The term <em>“exposed bitcoins”</em> thus describes a potential long-term vulnerability. It does not mean that 6 million BTC are currently accessible to hackers.</p>
<h2 id="the-quantum-alliance-wants-to-define-verifiable-standards">The Quantum Alliance wants to define verifiable standards</h2>
<p>The Quantum Alliance brings together representatives from Quantus, American Fortress, Intmax, Keystone, Midnight Foundation, Postquant Labs, Abelian, The Vault, and Hacken. Its members work in blockchains, hardware wallets, cybersecurity, zero-knowledge proofs, and quantum infrastructures.</p>
<p>The group is inspired by the Internet Engineering Task Force, which develops open technical standards for the Internet. Its proposals will have to rely on public evidence, rough consensus, and functional implementations. A company’s size or the amount of tokens it holds will not give it more weight.</p>
<p>The work will be divided into four groups focused on blockchain migration, post-quantum zero-knowledge systems, wallet security, and cross-network compatibility. The Alliance must publish criteria to verify if a project is truly <em>“quantum-ready”</em>.</p>
<p>This clarification addresses a current weakness of the sector. A blockchain can claim to be quantum-resistant without specifying whether this protection covers signatures, consensus, bridges, oracles, or keys used to issue stablecoins.</p>
<div class="my-4">
 <div class="ads "></div>
</div>
<p>Christopher Smith, founder of Quantus, says:</p>
<blockquote class="wp-block-quote">
 <p>In the future, post-quantum cryptography will simply be called cryptography, and everything else will be in a museum.</p>
</blockquote>
<p>He wants to prepare standards now that projects can adopt during their migration.</p>
<h2 id="h-the-date-of-q-day-remains-impossible-to-predict">The date of Q-Day remains impossible to predict</h2>
<p>The Quantum Alliance cites several estimates placing a first practical attack toward the late 2020s. A <em>“Quantum Doom Clock”</em> created by two of its contributors points to March 2028 as the first possible window.</p>
<p>This date does not represent a scientific consensus. Other experts envision the 2030s instead, while the necessary advancements in error correction and logical qubit production remain considerable.</p>
<p>A Google study published in 2026 estimates that a machine with fewer than 500,000 physical qubits could, under certain assumptions, break the elliptic cryptography used by Bitcoin in a few minutes. This calculation describes a future architecture. Current processors remain far too small and unstable to execute such an attack.</p>
<p>The real challenge concerns migration. New post-quantum signatures could protect funds transferred to adapted addresses. They would not automatically solve the cases of lost wallets, deceased owners, or holders who never move their bitcoins.</p>
<p>Proposal BIP-361 considers a gradual transition to new signatures, then a restriction of the old ones. It raises a sensitive question: should coins that do not migrate be frozen to prevent theft, at the risk of altering the rights attached to legitimately held bitcoins?</p>
<p>The Alliance will not be able to impose an answer on Bitcoin, whose rules evolve by consensus. Its usefulness will lie mainly in creating common tests and comparable migration methods. The <a href="https://www.cointribune.com/en/bitcoin-the-quantum-threat-is-approaching-in-small-steps/" rel="noopener noreferrer nofollow">threat</a> remains theoretical, but the time needed for a worldwide upgrade justifies preparing this transition well before the arrival of a machine capable of attacking the keys.</p>

Quantum Alliance Targets Bitcoin’s Future Security

Table of Contents

Cointribune EN

Other articles published on Oct 18, 2026

Solana Rapidly Closes The RWA Gap With Ethereum

Lesser-known memecoin ecosystems you should be watching...

TIA and INJ lead gains for the week.

MemeCore x LayerZero x Stargate

Meteora is making SERIOUS money.

Most Americans polled oppose betting on elections: Reuters

Join our free newsletter for daily crypto updates!