IonQ estimate - a future quantum computer could crack Bitcoin's encryption in 26 days

[Zenith Theo]

IonQ published a detailed resource estimate claiming a future fault tolerant quantum computer with nearly 20,000 qubits could break secp256k1, the elliptic curve cryptography standard that secures Bitcoin, in just under 26 days per attempt. This is described as the first fully compiled end to end resource estimate for running Shor's algorithm against this specific standard, meaning the calculation accounts for the algorithm itself, the compiler, the hardware layout, and the error correction layer rather than stopping at a rough high level qubit count like previous estimates typically have.

The specific numbers involved are genuinely staggering once you look at them closely. The model calls for 19,397 physical qubits alongside 1,457 logical qubits, requiring about 39 million logical Toffoli gates to complete the calculation successfully. Crucially, no quantum computer capable of anything remotely close to this scale currently exists anywhere, with the best available systems today counting only a few hundred physical qubits and error rates still far too high for the level of correction this attack would actually require in practice.

Success probability matters a lot here too and gets less attention in most headline coverage of this story. IonQ calculated a rigorous lower bound of just 40.7 percent for a single attempt, with an estimate that this could reach around 63.3 percent under some additional mathematical assumptions that have not been fully proven yet. That is a meaningfully important caveat, since this is not a guaranteed break on some fixed 26 day countdown timer, it is instead the expected runtime for one attempt that still might not even succeed depending on how those assumptions ultimately hold up.

Niccolo de Masi, IonQ's chairman and CEO, has publicly placed what the industry calls Q Day, the moment quantum computers become powerful enough to break current cryptographic standards, at 2028 based on his own reckoning. For context, Google has reportedly moved its own internal deadline for migrating to post quantum cryptography up to 2029, suggesting the broader industry calendar around this threat has been shifting notably earlier compared to older projections that used to place it comfortably in the 2030s instead. Only certain types of Bitcoin addresses are actually at risk here too, specifically those with an already exposed public key such as early P2PK format addresses and reused addresses, while addresses that have never made a transaction only expose a hash of the key and stay considerably more protected until their very first use

Ionq Quantum Computer Break Bitcoin 26 Dayspasqualepillitteri.it

[RVD17]

The distinction between a guaranteed 26 day countdown versus the actual expected runtime for one uncertain attempt is exactly the kind of nuance that gets completely lost once headlines start circulating this story more widely online. Most people are going to read break Bitcoin in 26 days and assume it is basically already happening any day now. The 40 to 63 percent success probability caveat buried further down completely changes the practical risk picture here

[QuantumLeap38]

Only exposed public key addresses being genuinely at risk here is a detail that should honestly calm down a lot of the panic these kinds of headlines tend to generate among casual crypto holders online. Most modern wallets use address formats that never expose the actual public key until you send a transaction from them.

Satoshi's original coins sitting in early P2PK addresses are a real and specific concern though given how much bitcoin sits there completely untouched for over a decade now

[Rocket]

19,397 physical qubits when the best systems today only manage a few hundred at most really puts into perspective just how far away this actual scenario genuinely still is from happening in reality. That is not some incremental engineering improvement away, that is multiple orders of magnitude of scaling combined with dramatically better error correction all at once. Feels like the headline vastly oversells how imminent this threat actually is right now today

[MickFoley00]

Google moving their internal post quantum migration deadline up to 2029 is honestly the more concrete and immediately actionable signal buried in this whole story for me personally. A specific major company adjusting their own internal security timeline says more practically than any single research paper's theoretical resource estimate alone. Curious what specific evidence actually drove that particular internal timeline shift at Google

[Hollow Ronan]

Niccolo de Masi placing Q Day specifically at 2028 is a notably aggressive and bold prediction compared to a lot of more conservative industry timelines that still generally place serious quantum threats sometime well into the 2030s instead. Worth remembering IonQ has a fairly obvious direct commercial incentive to make quantum threats sound imminent and urgent given their entire core business model. Doesn't necessarily mean the estimate itself is wrong, but definitely worth keeping that inherent bias in mind while reading

[BackRowBob]

The mempool exposure window mentioned in some of the coverage around this story is a genuinely underappreciated risk that most casual bitcoin holders probably never even think about at all. Your public key becomes briefly visible during the few minutes it takes for a transaction to actually confirm on chain. A sufficiently fast quantum attacker could theoretically exploit that narrow window specifically, which is a completely different and honestly scarier threat model than just old dormant wallets sitting untouched

[Annie71]

Framing this whole paper as a capability milestone first and a security finding second is a pretty clever way for IonQ to spin what is essentially still a theoretical estimate into something that sounds a lot more like an already achieved engineering result. Doesn't make the underlying research any less legitimate or valuable as pure science, but definitely shapes how the story gets covered and subsequently panicked about across financial and crypto media outlets everywhere