Bitcoin vs Quantum: Hype, Stages, Reality

TL;DR

Quantum computing poses a real but gradual threat to Bitcoin, with 35% of BTC supply vulnerable and post-quantum cryptography already in development.

Key Points

• 1.Quantum computers threaten Bitcoin through elliptic curve cryptography, not hashing. Hashing (used in mining) is relatively quantum-resistant, but elliptic curve digital signatures securing wallets are vulnerable — putting roughly 35% of BTC supply (about 6.9 million BTC) at risk.
• 2.Five stages of quantum development determine Bitcoin's risk timeline. Stage 0 (today): noisy, impractical machines with ~100 logical qubits; Stage 3: CRQCs slowly crack Bitcoin keys one at a time; Stage 4: keys broken in under 10 minutes, enabling theft of all vulnerable BTC within days.
• 3.The 'Qday apocalypse' framing is misleading — attacks would be slow and gradual. Satoshi's ~1.1 million BTC spans 22,000 wallets; at 1 hour per key it takes 3 years to crack all of them, and at 1 day per key it would take 60 years.
• 4.General consensus places the first Bitcoin key crack in the mid-2030s. Some analysts predict CRQCs could breach Bitcoin by 2030; others say decades away; a minority believe quantum computers will never crack Bitcoin, though the report dismisses that view.
• 5.Post-quantum cryptography (PQC) defenses are already ahead of the threat. Two PQC signature schemes were standardized in 2024; OpenSSH and OpenSSL now include PQC by default; major web platforms already protect a large share of global internet traffic against future quantum attacks.
• 6.Upgrading Bitcoin to PQC is harder than upgrading standard internet infrastructure. Blockchain storage and script computing constraints demand resource-efficient PQC; even soft forks create friction among developers, miners, and investors; no BIP has yet gained consensus due to trade-offs in speed, key size, and complexity.
• 7.Three scenarios frame Bitcoin's quantum future: pessimistic, optimistic, and balanced. The balanced scenario assumes a CRQC attack is 10–20 years away, allowing a PQC soft fork before crisis; the key unresolved controversy is whether to freeze or burn vulnerable coins versus letting them eventually be stolen to preserve Bitcoin's sovereignty ethos.