Far more resources are being invested into quantum attacks than into coordinating the cryptographic updates needed to mitigate them, and it's becoming a serious problem.
But we have the opportunity to change that.
My latest in @CoinDesk
The offense attacking cryptography is highly coordinated, well funded, and rapidly advancing. We need the defense to keep pace.
The latest from Project Eleven CEO & Co-Founder @apruden08 in @CoinDesk ⬇️
The offense attacking cryptography is highly coordinated, well funded, and rapidly advancing. We need the defense to keep pace.
The latest from Project Eleven CEO & Co-Founder @apruden08 in @CoinDesk ⬇️
The conclusion from BlackRock's Quantum Computing and Blockchains paper:
"It is a much less daunting task to upgrade current cryptographic systems (including Bitcoin, Ethereum, and others) to a quantum-secure standard than it is to build a CRQC from where quantum computing
10. BlackRock says quantum risk may be one of the last major “walls of worry” for digital assets, and resolving it could increase valuations.
This is the institutional-investor framing. BlackRock says quantum-negative headlines are hard to quantify, but they view quantum risk as
9. Ethereum is described as more technically complex than Bitcoin, but with a clearer roadmap.
The report says Ethereum has a more defined migration path, but faces more layers of quantum vulnerability: validator BLS signatures, KZG proofs, EOA signatures, and application-layer
8. BlackRock explicitly mentions PQ BIPs and Taproot-based migration paths, along with zero-knowledge proof migrations even after PQ migration is complete.
They say several post-quantum-related Bitcoin Improvement Proposals have been accepted into the repository, though still in
7. BlackRock calls Bitcoin’s PQ migration technically easier than building a CRQC, but socially hard.
They say implementing PQ signatures in Bitcoin is a much lower hurdle than the remaining challenges to build a functional CRQC. But Bitcoin’s problem is governance: no central
6. They say short-range attacks may be “in play.”
Historically, the comforting view was that exposed old addresses are the problem, and normal hashed addresses are safe unless a quantum computer can break ECC inside Bitcoin’s ~10-minute block window.
BlackRock says Google’s
5. Satoshi’s coins are explicitly part of the debate.
BlackRock notes that migration is not possible for inactive/lost-key UTXOs, including the roughly 1.1 million BTC in P2PK addresses widely believed to be Satoshi’s. They also cite estimates that 2.3–3.7 million BTC, or 11–19%
4. Nearly 7 million BTC, about 35% of circulating supply, is potentially vulnerable to long-range quantum attacks.
BlackRock says roughly 1.9 million BTC sit in address types that expose unhashed public keys, and another 5 million BTC are in reused addresses where public keys