The post-quantum transition can’t be postponed any longer

A whitepaper published yesterday by Google Quantum AI shows that a fast-clock quantum computer (with similar architecture to their existing Willow chip) could derive a private key from an exposed public key in approximately nine minutes. Bitcoin settles a block every 10 minutes.

That is, on average, a one-minute margin between the system working and an adversary hijacking live transactions directly from the mempool before they confirm. That multi-trillion dollar minute means that not just Satoshi’s coins, but the entire supply of Bitcoin now and forever is at risk.

For years, the industry’s position on quantum has been some version of “we’ll deal with it when it’s real.” Even for those who took this threat seriously, most believed that the first real threat to Bitcoin was at least a decade away, and would come in the form of “long-range” attacks on dormant assets. This paper, the latest in a string of accelerating breakthroughs make that position untenable.

This research presents a seismic shift that violently accelerates the timeline. The implications for the digital asset ecosystem are acute. If we do not coordinate an urgent upgrade effort immediately, digital assets as we know them may not be viable.

The pace of change is accelerating

Historically, estimates suggested we would need tens of millions of physical qubits running a trillion error-corrected operations to threaten Bitcoin. But critically, those estimates were based not on the elliptic-curve cryptography Bitcoin uses, but on an older algorithm known as RSA-2048.

Google’s whitepaper shatters those prior resource estimates with an architecture for breaking the 256-bit Elliptic Curve Discrete Logarithm Problem (ECDLP) used in Bitcoin specifically.

This paper brings the physical requirement down to fewer than half a million qubits and reduces the number of operations by multiple orders of magnitude. It achieves this using just 1,200 logical qubits at an error rate of 0.1%, a threshold that appears achievable in the near-term. Google has reportedly moved up its own quantum timelines to 2029.

More importantly, the architecture it used (superconducting) featured fast physical clock speeds. That means it isn’t just “lost” or dormant coins that are at risk; every single active Bitcoin transaction could be vulnerable to a quantum attacker snatching it directly from the mempool.

But the Google paper is not an isolated event. It is one of two converging breakthroughs.

Researchers from Oratomic announced a parallel breakthrough using neutral-atom hardware. Leveraging high-rate quantum low-density parity check (qLDPC) codes, they demonstrated that Shor’s algorithm can be executed at cryptographically relevant scales using approximately 10,000 to 22,000 reconfigurable atomic qubits. What once required millions of qubits has been compressed by orders of magnitude in just a few short years on two separate technological tracks, simultaneously.

Multiple tech trees with one target

How is it possible that quantum made little progress for so long, but we are now witnessing the timeline collapse so quickly? Simply put, small iterative improvements in physical fidelity, error correction, control architectures, and algorithm design are creating a feedback loop that compounds progress.

Faster machines enable better error-correction research, lowering the resource bar for the next generation of machines and accelerating timelines at non-linear speeds.

Perhaps the most dangerous misconception is that quantum progress relies on a single “miracle” breakthrough in one specific type of physics. The quantum threat is not a single moonshot that might stall. Superconducting, photonic, neutral-atom and ion-trap architectures represent entirely different engineering roadmaps, physics and funding pipelines. Only one needs to succeed for quantum computing to become cryptographically relevant.

It’s true that none of these systems has been fully proven at scale yet. But they are increasingly being proven, with serious names and serious capital behind them. Are we really willing to roll the dice with trillions of dollars on the line?

The clock is ticking on migration

The instinct to defer until a cryptographically relevant quantum computer is publicly confirmed fundamentally misunderstands how decentralized networks upgrade. Migrating a decentralized network like Bitcoin is not like flipping a switch on an enterprise server. Trillions of dollars of assets are at risk, and all networks need to perform an unprecedented upgrade to introduce new cryptography at the most foundational level.

Unfortunately, solving one problem creates new challenges. Post-Quantum Cryptography (PQC) requires significantly larger digital signatures, thereby increasing bandwidth, storage and compute requirements. Implementing this requires a hard fork, and reaching the necessary community consensus will be an arduous, politically fraught process.

Even after a consensus is reached, the sheer logistics of moving the assets are staggering. At bitcoin’s current transaction rate, migrating the network to post-quantum addresses would take several months – assuming the network processed nothing else and every block was full.

If we wait until Q-Day (when a quantum computer relevant to cryptography is publicly confirmed) to begin this process, it will be too late. Digital signatures will have already lost their authority, and any attempt to fix the problem retroactively will spark intense financial volatility. In a worst-case scenario, there may be competing forks, shattered institutional trust and a crisis of provenance for trillions of dollars in assets.

Urgency, not panic

This is not a call for panic. It is a call for realism. Executives and institutions that now hold a massive portion of the circulating bitcoin supply, stablecoin issuers and major protocol teams need to acknowledge that the risk profile has fundamentally changed. The quantum threat is no longer a theoretical exercise for academics; it is an engineering reality moving at breakneck speed.

We must act now. The world needs proactive migration strategies, tools to register post-quantum ownership, and an industry-wide mandate to upgrade before the first silent theft occurs. The quantum adversary is coming, and they will not declare themselves. But we can prepare. We must coordinate this upgrade today to ensure the foundation of digital trust survives into the quantum era.