QuantCapEU law enforcement agencies urged developers, exchanges, and users to initiate phased post-quantum migrations immediately to prevent future unauthorized fund transfers.
Quantum computers threaten exposed private keys rather than blockchains, Europol warns
EU law enforcement agencies urged developers, exchanges, and users to initiate phased post-quantum migrations immediately to prevent future unauthorized fund transfers.
Europol said cryptocurrency wallets, not blockchains themselves, are the primary point of exposure to future quantum-computing attacks, though computers capable of such attacks do not yet exist. About 6.9 million bitcoin are held at addresses with exposed public keys, including early and long-dormant wallets whose private keys could eventually be derived by a sufficiently powerful quantum computer. Europol urged the industry to begin a phased shift to quantum-resistant security, warning that the main challenge is coordinating a global networkwide migration before vulnerable wallets become targets.
Cryptocurrency wallets, rather than blockchains themselves, are the main point of exposure to future quantum-computing attacks, Europol said in a report published Wednesday.
Quantum computers capable of carrying out such attacks do not exist yet, and Europol did not predict when they will. However, the European Union’s law enforcement agency said “proactive adaptation, rather than systemic collapse, is the most likely outcome.”
Europol urged the industry to begin a phased transition now through wallet upgrades, post-quantum cryptography and coordination among developers, miners, exchanges and users.
Bitcoin researchers and institutions increasingly see 2029 as the point by which credible quantum-resistant migration plans need to be in place. IBM said in July that it expects quantum computing to generate significant commercial revenue in the next two to four three years.
A sufficiently powerful quantum computer could derive a private key from a public key and spend the associated funds, Europol’s European Cybercrime Center said in its Quantum Computing and Cryptocurrencies report.
The agency aimed to draw a clear distinction often lost in warnings about quantum computing: the hash functions that help secure a blockchain’s history, including bitcoin mining, remain far more resistant to quantum attacks than the public-key cryptography used to control wallets.
“Cryptocurrencies will not collapse due to quantum computing,” Europol said. The immediate concern is ownership of the assets held in wallets, not whether a quantum computer could rewrite the bitcoin blockchain.
That distinction is more critical for addresses from the earliest days of Bitcoin - referred to as the "Satoshi era" - whose public keys have already become visible onchain. A powerful enough quantum computer could use those keys to drive the corresponding private key. Roughly 6.9 million bitcoin sit in addresses with exposed public keys, including early pay-to-topublic-key outputs and many long-dormant holdings.
Europol said exposed keys cannot be made safe retroactively, an issue that has sparked massive debates and controversies across the bitcoin community as the dilemma of whether or not to freeze BTC in Satoshi-era wallets increases as the quantum threat nears.
The more difficult task today is updating the network itself. Europol cited a 2024 study estimating that converting every bitcoin unspent transaction output, or UTXO, to a quantum-resistant format would require at least 76 days of cumulative block space. Reserving 25% of each block for the migration, that study adds, would stretch that process to about 300 days.
New post-quantum signature schemes can be 10 to 120 times larger than bitcoin’s current Elliptic Curve Digital Signature Algorithm (ECDSA) signatures, the report said. The ECDSA is the cryptographic mechanism that proves ownership of bitcoin and authorizes the transfer of funds on the network.
Bitcoin’s challenge is less about finding replacement cryptography than persuading a global, decentralized network to adopt it before exposed wallets become targets.
1Ether is about to lose a steady buyer as Tom Lee says Bitmine will stop token purchases1 hour ago 2Crypto trading giant GSR's new vault business is a $100M bet on onchain credit1 hour ago 3Swift blockchain ledger requires key internal layers, Taurus co-founder warns2 hours ago 4Here’s what bitcoin needs to break above $87,0002 hours ago 5Live updates: Bitcoin falls 4%, tumbling below $83,000 as interest rates surge3 hours ago 6Bitcoin’s recovery stalls just short of rescuing its last underwater cohort3 hours ago 7Liquidations jump to $547 million as oil rally hits crypto market3 hours ago 8Rain is seeking a national trust bank charter to bypass third-party banks5 hours ago 9Robinhood adds $25 million of bitcoin to its balance sheet5 hours ago 10Down but not out. Bitcoin's stair-step bullish trajectory is still intact6 hours ago
The Definitive Stablecoin Landscape Series: Asia Pacific
The Definitive Stablecoin Landscape Series: Asia Pacific
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Why it matters:
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Pudgy Penguins’ Abstract becomes second Ethereum layer 2 to shut in a week
Cardano gives token issuers power to freeze, seize and restrict assets
Ethereum’s Glamsterdam test gets last-minute fix before major capacity jump