The Quantum Threat to Crypto in 2026 Who Is Ready and Who Is Running Out of Time
Google's latest quantum paper cut the qubit estimate by 20x. New post-quantum blockchains just launched. Bitcoin developers are proposing no-fork fixes. Here is where the industry stands on Q-Day.
Google dropped a paper on March 31 that changed the quantum computing conversation overnight. Their new approach to Shor's algorithm needs roughly 1,200 to 1,450 logical qubits to break Bitcoin's elliptic curve signatures. That is about 20 times fewer than previous estimates suggested.
Three major quantum papers in three months have compressed the Q-Day timeline. Google now puts viable quantum attacks on Bitcoin as early as 2029. The attack window shrinks from days to minutes. Wall Street broker Bernstein calls it manageable. Nobel physicist John Martinis calls Bitcoin an early target. Both cannot be entirely right.
What blockchain projects are doing right now
The response across the crypto industry splits into three camps: build new chains, retrofit old ones, and debate whether the urgency is real.
New chains with quantum resistance built in. Naoris Protocol launched its mainnet on April 1 as the first NIST-approved post-quantum L1. Circle's Arc blockchain will debut with quantum-resistant signatures from day one, no retrofits needed. QRL released Testnet V2 on March 31 with full EVM compatibility and NIST-approved algorithms. Mainnet launch follows pending audits.
Retrofitting the giants. StarkWare's Avihu Levy proposed quantum-safe Bitcoin transactions without a soft fork, using legacy scripts. The cost would sit around $200 per transaction. BIP-360 targets quantum-proofing via hash-based signatures. The Ethereum Foundation has had a dedicated post-quantum security team since January, backed by a $1 million research prize.
The skeptics. Adam Back of Blockstream says the threat remains 10 plus years out and suggests using Liquid as a testbed. Samson Mow warns that rushed quantum fixes could trigger a Blocksize Wars 2.0. CoinShares estimates only about 10,200 BTC face real immediate quantum risk, pushing back on the narrative that millions of coins are in danger.
The dormant wallet problem
About 6.9 million BTC sit in addresses using old public key cryptography. If a quantum computer reaches the threshold before those owners move their coins, those funds are gone. No fork, no upgrade, no warning.
The harvest now, decrypt later strategy makes this more than a theoretical concern. Adversaries are already collecting encrypted data for future decryption. Every Satoshi in a reused address or exposed public key is potentially on a countdown clock.
The fix on paper looks simple: move coins to new addresses with quantum-resistant signatures. In practice, getting millions of dormant wallet holders to act before an unspecified deadline is a coordination problem that makes any software upgrade look straightforward.
The migration cost no one wants to discuss
StarkWare's proposal would make quantum-safe Bitcoin transactions cost roughly $200 each. That works for institutional holders and active traders. It does not work for everyday users or micro-transactions. Any quantum migration on Bitcoin forces a hard tradeoff between security and accessibility.
Ethereum faces a different problem. The planned seven hard forks through 2029 require massive coordination and carry real risk of chain splits. The Ethereum Foundation knows this. Their early team formation and research prize signal they are treating this as an existential timeline, not an academic exercise.
Where things stand
NIST's post-quantum cryptography standards are live. FIPS 203, 204, and 205 were published in 2024, with HQC added in 2025. The EU is mandating national PQC strategies this year. The cryptographic infrastructure is ready.
What remains is the hardest part. Convincing competing blockchain communities with different incentives to coordinate on a migration that costs real money and carries real risk. The technology side is largely solved. The human side is not.
Quantum-resistant tokens are already up 50 percent since the Google paper. Markets price in threats before protocols address them. The question is whether the major chains move fast enough to keep that bet from paying off.