The quantum threat to crypto targets wallet signatures, not mining, researchers say

[NatureBoyDylan81]

Analytics Insight takes a more technical angle on the same quantum crypto story, drawing a sharp distinction between mining and wallet signatures that a lot of the other coverage glosses over. Bitcoin mining relies on SHA-256 hashing, and Grover's algorithm only offers a square root speedup against hash functions, which leaves 256 bit hashes with roughly 128 bit effective security, still well beyond practical attack range even with a capable quantum computer

The actual vulnerability sits with digital signatures instead, since Bitcoin and Ethereum both rely on ECDSA and Solana uses EdDSA, and Shor's algorithm could theoretically solve the underlying math behind those schemes given enough stable qubits. That distinction matters because a quantum attacker would not be decrypting coins stored on chain, they would be forging a valid signature after somehow obtaining an exposed public key

On timelines, the piece cites Citi Institute placing the odds of a cryptographically relevant quantum computer at roughly 19 to 34 percent by 2034, rising to 60 to 82 percent by 2044. Google has separately cut its own estimate for breaking 256 bit elliptic curve cryptography down to about 1200 logical qubits, though today's processors are still working with noisy physical qubits and error correction remains the central bottleneck holding real machines back

The article leans on something called Mosca's theorem to frame the actual planning question, which weighs how long your data needs to stay secure against how long migration takes and when a capable quantum computer might realistically arrive. That framing matters most for long term holdings like cold storage, inheritance plans and dormant wallets that could sit exposed for years before anyone gets around to moving them

Ethereum's own roadmap reportedly targets full post quantum protection around 2029 as well. Putting it roughly in line with Google's internal migration target, so at least on the timeline question there seems to be some rough consensus forming across different corners of the industry

Quantum Threat to Crypto Is Real as Migration Window Narrowswww.analyticsinsight.net

[BretHart_WCW]

The mining versus signatures distinction is genuinely the most useful framing I have seen across all this coverage. So much of the panic seems to conflate the two when they are actually completely separate mathematical problems with very different exposure levels. Genuinely appreciate an executive being willing to publicly downplay a trending fear rather than milking it for attention or using it to sell a security product.

That is not the incentive structure most companies operate under when a scary headline is circulating.

[DigitalNomad62]

Long term holdings being the actual danger zone here rather than actively traded coins is a counterintuitive point worth sitting with. 972 million dollars lost to hacks in just the first half of this year makes the quantum threat look almost quaint by comparison.

That is real money being stolen right now through boring methods like phishing while everyone debates a hypothetical future attack

The people least engaged with security updates are exactly the ones most exposed when a migration deadline eventually passes. Su specifically calling out the industry's advantage of seeing the threat coming before it becomes operational is an optimistic framing compared to most cybersecurity problems. Which usually get discovered only after damage is already done

[Anvil79]

Mosca's theorem applied to dormant wallets and inheritance planning is such a specific and genuinely underexplored angle. Most coverage focuses on active exchanges and hot wallets, but cold storage that nobody touches for a decade is arguably the more exposed category

[Layla86]

Would like to see this same Mosca's theorem framework applied concretely to a few specific real world wallet categories. Cold storage, exchange hot wallets, smart contract treasuries, rather than just described abstractly

[MellowRunner]

Appreciate an article that actually distinguishes confidentiality from authenticity as separate concerns here.

That is an important conceptual split that most popular coverage of this topic completely ignores. Basic security hygiene, secure your keys.

Use reputable wallets, install updates promptly, is such unglamorous advice compared to headlines about billion dollar wallets and quantum computers, but it is obviously the advice that actually protects the most people day to day. The contrast between Su's calm framing and Christopher Smith's more urgent tone elsewhere is pretty stark. Two people supposedly looking at the same underlying research land in very different places

[BookerT]

Ethereum and Google both roughly targeting 2029 for post quantum migration is a coincidence worth noting.

Binance not recommending any custody changes right now while simultaneously acknowledging the long term risk is a fairly balanced position. Reacting prematurely to a threat that does not exist yet would probably create more operational risk than it prevents
Or maybe not a coincidence at all given how much cross pollination there probably is between these research teams

Cryptonews covered Binance chief security officer Jimmy Su's recent company Q&A addressing quantum computing fears head on, and his central message is pretty blunt, current quantum computers are nowhere near the scale and reliability needed to break the cryptography protecting digital assets today. Su described the whole topic as a real long term security issue rather than something users need to react to right now, which is a notably calmer tone than a lot of the recent coverage

What Su actually recommends instead is refreshingly mundane, keeping recovery phrases and private keys secure, using reputable wallet software, installing security updates promptly, and limiting unnecessary address reuse. He specifically pointed to phishing, malware and stolen credentials as the attacks actually stealing crypto right now, noting that hacks cost the industry roughly 972 million dollars in just the first half of 2026 alone

Su did acknowledge the same Google research everyone else is citing, that breaking 256 bit elliptic curve cryptography could eventually require fewer than 500000 physical qubits, which he called a real reason for increased preparation even while insisting current machines remain far from that capability. His framing was that the industry has a genuine advantage here because the threat is visible well before it becomes operational, giving developers time to test new cryptographic systems without the pressure of an active attack

Binance itself is apparently treating quantum as a long term infrastructure issue. Monitoring developments, evaluating post quantum standards, and preparing systems for an eventual migration, but notably not recommending any immediate change to custody practices for regular users based on quantum concerns specifically.

Su also explicitly warned against rushing into unproven products marketed as quantum proof. Which feels like a pointed jab at whatever cottage industry of dubious security products has presumably sprung up around this fear over the past few months

Binance CSO: Quantum Computing Not an Immediate Threat to Crypto Holderscryptonews.net

[Dan]

The square root speedup from Grover's algorithm against hash functions leaving 128 bit effective security is exactly the kind of detail that gets lost in most coverage. Headlines just say quantum threatens crypto without specifying which primitive is actually at risk

[MegaMike16]

Forging a signature after obtaining an exposed public key rather than decrypting stored coins directly is a distinction that changes how I think about the actual attack surface here. That is a much narrower and more specific vulnerability than blanket decryption fears suggest

[Erin82]

Google cutting their logical qubit estimate to 1200 from previous numbers is a big jump, though the noisy physical qubits and error correction bottleneck mentioned here is doing a lot of work to keep this from being an immediate concern.

Logical qubits and physical qubits are very different things and that distinction gets lost in a lot of the more alarmist coverage

[SpikeDudley05]

The warning against unproven quantum proof products is honestly the most useful part of the whole Q&A. Fear based marketing around a real but distant threat is exactly the environment where scammy security products thrive. Would be curious to know what specific unproven quantum proof products Su had in mind when he gave that warning, feels like there is a story behind that comment that the article does not fully unpack.

Someone is clearly already trying to monetize this fear. Every quantum security related industry statement seems obligated to include the being prepared before it changes framing at this point. It has basically become the standard boilerplate line across every company addressing this topic

[Lynx70]

Citi's odds of 19 to 34 percent by 2034 rising to 60 to 82 percent by 2044 is a pretty wide range to plan around. Quantum being visible well before it becomes operational really is a rare structural advantage in security.

Most vulnerabilities get exploited quietly for months or years before anyone even notices, this one is getting years of advance public warning instead

That is basically saying nobody actually knows, just that the probability keeps climbing the further out you look