The quantum question is getting harder to ignore: is your crypto strategy Q-day ready?

[Taz]

The post quantum conversation has escaped the academic corner this year. Major chains are publishing migration roadmaps, governments and standards bodies keep pushing post quantum guidance, and quantum companies are raising and listing at a pace that suggests the hardware timeline, whatever it is, keeps getting closer rather than further away

The honest technical framing as I understand it, a sufficiently powerful quantum computer running Shor's algorithm threatens the elliptic curve signatures most chains use, not the hash functions. The nightmare scenario is not decrypting the blockchain, it is deriving private keys from exposed public keys, which puts old reused addresses and famously dormant wallets in the conversation, including the Satoshi era coins

Nobody credible claims Q day is imminent, estimates run years out and some say decades. But migration for a decentralised chain is measured in years too, and Bitcoin's governance moves at a geological pace on far smaller questions, which is exactly the mismatch worth discussing

So the thread questions. Does quantum risk factor into your holdings or your practice at all yet, does simple hygiene like never reusing addresses cover the individual risk for now, and does the first credible quantum scare cause a repricing regardless of whether the actual capability exists? Not financial advice in any direction, just the arguments please

[Glenn83]

Hygiene covers most of it today, unspent modern addresses only expose a hash until you spend. The dormant coin overhang is the systemic problem no individual can fix

[WildManSteve40]

The Satoshi coins question is the whole ballgame. A million coins that can never be defensively migrated, sitting there as a bounty for the first machine that can take them

[WearyCoder]

Or they get provably burned or frozen by consensus before then, which would be the most dramatic soft fork argument in the chain's history. That debate alone will take five years, better start soon

[Abbie22]

Repricing happens on the first credible SCARE, not the first capability, guaranteed. Markets price stories and a quantum headline is a hell of a story

[Oscar_57]

Am I the only one who thinks this is the most overrated risk in crypto? Every credible estimate is far out and the mitigation path is known. Meanwhile people lose coins weekly to plain old phishing

[NatureBoyRyan65]

Both risks are real, one is just on a longer fuse. The argument is that the long fuse attaches to the slowest possible migration process ever designed

[SlowSocket]

The chains publishing actual migration roadmaps now look smart either way, it costs little and reads as adult supervision to institutions doing custody diligence

[Warden]

Post quantum signatures are huge compared to current ones though, block space economics change materially. The migration is not a drop in swap and that part gets skated over

[Stuart_67]

Harvest now decrypt later gets mentioned in every one of these threads and it mostly does not apply to public blockchains, the data was never encrypted. The risk is forgery, keep the threat model straight

[Louise84]

Practical takeaway I am adopting from this thread, fresh addresses always, cold storage stays cold, and revisit the whole question yearly. Cheap insurance against a maybe

[Mark7]

The uncomfortable summary is that individuals can protect themselves fairly easily and the collective cannot, which is the most crypto sentence ever written