A growing body of research suggests the quantum computing threat to Bitcoin may arrive sooner than previously estimated, with Google March 2026 whitepaper projecting that a cryptographically relevant quantum computer could break the elliptic curve digital signature algorithm protecting Bitcoin with fewer than 500,000 physical qubits.
The Numbers Behind the Threat
Bitcoin relies on the Elliptic Curve Digital Signature Algorithm (ECDSA) to secure private keys and authorize transactions. Quantum computers, using Shor algorithm, can theoretically solve the discrete logarithm problem that makes ECDSA secure, rendering private keys recoverable from public addresses.
Google quantum security team estimated in a March 2026 whitepaper that reaching the 500,000 physical qubit threshold is achievable with current engineering roadmaps, bringing Q-Day within the planning horizon of major cryptocurrency networks.
Harvest Now, Decrypt Later
Security experts warn that threat actors are already stockpiling encrypted blockchain data in what is known as a harvest now, decrypt later attack strategy. Adversaries collect encrypted communications and blockchain transaction data today, storing it until quantum computers become powerful enough to decrypt it.
Is Bitcoin Ready?
Bitcoin developers have been aware of the quantum threat for years. Discussions around a post-quantum signature scheme have been ongoing, with several proposals for a soft fork that would transition Bitcoin from ECDSA to quantum-resistant signature algorithms.
FAQ
Can quantum computers break Bitcoin today? No. Current quantum computers lack the qubit count and error correction capabilities needed to break ECDSA.
What happens to Bitcoin if quantum computers break it? Bitcoin would need to execute a hard fork or soft fork to transition to post-quantum signatures.
Are my existing Bitcoin holdings at risk? Not immediately. The primary risk is to future transactions if quantum becomes capable during the asset lifetime.
