Can Cryptocurrencies Survive the Quantum Computing Threat? - Uniblock
Feb 12, 2024
Can Cryptocurrencies Survive the Quantum Computing Threat?
There's a $718 billion problem hanging over the cryptocurrency industry, and it's not market volatility or regulatory crackdowns. It's the looming threat of quantum computers.
David Liu
CTO & Co-Founder
Crypto
10 Minutes
The Quantum Sword of Damocles
There's a $718 billion problem hanging over the cryptocurrency industry, and it's not market volatility or regulatory crackdowns. It's the looming threat of quantum computers.
According to Project Eleven, a quantum computing research firm, approximately $718 billion worth of Bitcoin is currently held in addresses vulnerable to quantum attacks. This includes the legendary 1 million Bitcoin (worth roughly $75 billion today) attributed to Bitcoin's mysterious creator, Satoshi Nakamoto, sitting dormant in Pay-to-Public-Key (P2PK) addresses since 2009.
The threat isn't imminent, but it's real. Industry experts estimate we have between 3 to 15 years before quantum computers become powerful enough to break the cryptographic foundations of Bitcoin, Ethereum, and virtually every major cryptocurrency. Some researchers, like Hayk Tepanyan of BlueQubit, warn that cryptographically relevant quantum computers could emerge in as little as 3 to 5 years.
So the question isn't if cryptocurrencies need to become quantum-resistant, it's how and when.
The intersection of quantum computing and blockchain technology represents one of the most critical challenges facing the cryptocurrency industry. Chainalysis
Understanding the Quantum Threat
How Shor's Algorithm Breaks ECDSA
Modern cryptocurrencies rely on the Elliptic Curve Digital Signature Algorithm (ECDSA) for transaction signing. This is the same cryptographic primitive that protects your private keys from being derived from your public keys.
Enter Shor's algorithm, a quantum computing algorithm developed in 1994 that can solve the elliptic curve discrete logarithm problem exponentially faster than any classical computer. In plain English: a sufficiently powerful quantum computer could derive your private key from your public key, giving an attacker complete control over your funds.
The danger is particularly acute because public keys are visible on the blockchain. Once you spend from an address, your public key is exposed. For early Bitcoin addresses (P2PK) and reused addresses, public keys have been sitting on the blockchain for years, waiting for a quantum computer sophisticated enough to crack them.
Meanwhile, Grover's algorithm provides a quadratic speedup for attacking hash functions like SHA-256, reducing Bitcoin's 256-bit security to approximately 128 bits. While this doesn't completely break the hash function, it significantly weakens the security margin.
The NIST Solution: Post-Quantum Cryptography Standards
NIST's post-quantum cryptography standards represent the gold standard for quantum-resistant security. Quantropi
The good news? We already have the cryptographic tools to defend against quantum attacks. In August 2024, the U.S. National Institute of Standards and Technology (NIST) finalized its first three post-quantum cryptography standards after an eight-year evaluation process:
These algorithms are designed to resist attacks from both classical and quantum computers by relying on mathematical problems that remain hard even for quantum computers:
- Lattice-based cryptography: Finding the shortest vector in a high-dimensional lattice
- Hash-based signatures: Security derived from the properties of cryptographic hash functions
- Code-based cryptography: Decoding random linear codes
- Multivariate cryptography: Solving systems of multivariate polynomial equations
Quantum-Resistant Cryptocurrencies: The Early Adopters
While most major cryptocurrencies are still planning their quantum upgrades, several projects have already implemented quantum-resistant features from day one:
Quantum Resistant Ledger (QRL): The Pioneer
QRL is the first industrial implementation of a post-quantum secure blockchain, using XMSS (eXtended Merkle Signature Scheme), a hash-based signature scheme approved by NIST.
What makes QRL unique is its forward security: even if a private key is compromised, it cannot be used to forge signatures for past transactions. QRL's design also includes crypto-agility, allowing future upgrades as cryptographic standards evolve.
Mochimo: Optimized for Efficiency
Mochimo is a cryptocurrency specifically designed with quantum resistance in mind, using WOTS+ (Winternitz One-Time Signature Plus). The project has focused on reducing key sizes for improved scalability and efficiency, addressing one of the biggest challenges facing post-quantum cryptography.
Bitcoin: The 7-Year Upgrade Path
Bitcoin developers have merged BIP 360, a proposal introducing Pay-to-Merkle-Root (P2MR) output types designed to reduce long-term quantum risk. This new address type would replace the "key-to-spend" path that exposes public keys.
However, Bitcoin's decentralized nature means consensus is required, and that's notoriously difficult to achieve. Co-author Hunter Beast estimates it could take 7 years to fully upgrade Bitcoin to post-quantum cryptography.
Ethereum: The $2 Million Quantum Defense
Ethereum has elevated post-quantum security to a top strategic priority. In early 2026, the Ethereum Foundation launched a $2 million quantum defense team to accelerate the transition to quantum-resistant technologies.
Vitalik Buterin has outlined conditions for a "self-sustaining, quantum-safe Ethereum," with quantum resistance as a key element of "The Splurge" phase in Ethereum's roadmap. The network plans to transition to zero-knowledge proofs and quantum-resistant signatures.
The Implementation Challenges
Making cryptocurrencies quantum-resistant is technically feasible, but it comes with significant trade-offs:
1. The Signature Size Problem
Post-quantum cryptographic signatures are dramatically larger than current ECDSA signatures. SPHINCS+ signatures can be 40 times larger than ECDSA signatures, potentially crushing network throughput and dramatically increasing transaction fees.
Ethereum researchers have noted that new post-quantum signatures could cause "massive fee shock" due to their size. CryptoSlate
2. The Timing Dilemma
There's a critical balance between upgrading too early and too late:
- Too early: New cryptographic schemes might prove vulnerable. In 2022, one NIST-standardized post-quantum signature scheme was broken using a consumer-grade laptop in just 53 hours.
- Too late: Billions of dollars in cryptocurrency could be stolen by quantum attackers, potentially destroying confidence in the entire ecosystem. DL News
3. The Consensus Problem
Upgrading existing blockchains requires consensus among decentralized communities, a notoriously difficult process. Bitcoin's history shows that major upgrades can lead to network splits, as seen with the Bitcoin Cash hard fork in 2017.
As noted by Bitcoin Core developer Luke Dashjr, some developers don't even agree that quantum computing is a real threat, believing Bitcoin has "much bigger problems to address."
4. "Harvest Now, Decrypt Later" Attacks
Adversaries could collect encrypted transaction data and public keys today, waiting to decrypt them once quantum computers become available. This is particularly concerning for long-term financial data and high-value transactions.
What This Means for Crypto Users
Immediate Actions You Can Take
- Don't reuse addresses: Every time you reuse an address, you increase the risk of exposing your public key.
- Move funds from P2PK addresses: If you have old Bitcoin in P2PK addresses, consider moving them to newer address types.
- Monitor developments: Keep an eye on quantum-resistant wallet solutions and hardware wallets that support post-quantum algorithms.
- Stay informed: Follow projects like QRL, Ethereum's quantum roadmap, and Bitcoin's BIP 360 progress.
The Migration Approaches
The industry is pursuing multiple strategies:
- Building new quantum-resistant blockchains (like QRL and Mochimo)
- Upgrading existing blockchains (Bitcoin's BIP 360, Ethereum's quantum roadmap)
- Hybrid classical/post-quantum systems during a transitional period
- Hash-based signatures for immediate protection
The Bottom Line
Yes, cryptocurrencies can absolutely be made quantum-resistant. The cryptographic tools already exist, with NIST having finalized the first post-quantum standards in August 2024. The challenge is not whether it's technically possible, but rather how to implement these solutions at scale without disrupting the user experience or fragmenting the community.
The cryptocurrency industry is actually ahead of many other sectors in recognizing the quantum threat. With proper preparation, blockchains can evolve to remain secure in the quantum era, though this will require continued collaboration between cryptography experts, blockchain developers, and standardization bodies like NIST.
As Ethereum researcher Justin Drake noted, the blockchain's task is to transition to quantum-resistant technologies "soon without downtime or loss of funds."