Key Highlights
- Research from quantum computing firm Alice & Bob indicates that Shor’s algorithm could be deployed against cryptographic systems sooner than anticipated, prompting calls for an immediate transition to post-quantum security.
- A modeled quantum attack on Bitcoin would currently require approximately 62 minutes—slower than the network’s 10-minute block confirmation window, yet dangerous for exposed addresses.
- More than 6 million bitcoins stored at addresses with previously revealed public keys face potential exposure to future quantum hardware, with key resource thresholds projected to align by the early 2030s.
Quantum Threat Timeline Accelerates for Bitcoin Cryptography
The timeline for safeguarding decentralized networks against quantum adversaries may be tightening faster than industry roadmaps anticipated. Cryptographic specialists are issuing fresh warnings regarding the vulnerability of the world’s leading cryptocurrency, urging developers and stakeholders to begin transitioning network defenses to post-quantum standards without delay.
Yes, it becomes of utmost importance that migration starts now,
Dahmun Goudarzi, senior cryptanalyst at Alice & Bob told CoinDesk. We know how hard and long this task can be, and this paper shows that Shor’s algorithm could be run sooner than later.
Attack Latency and the 10-Minute Block Window
According to the findings, executing a quantum exploit via Shor’s algorithm under current architectural assumptions would take roughly 62 minutes. Given that the Bitcoin blockchain operates on an average block confirmation time of 10 minutes, an attack requiring over an hour remains too slow to reliably intercept, calculate a private key for, and siphon funds from an unconfirmed transaction waiting in the mempool.
However, that protective buffer may not remain stable as quantum processor architectures scale. When asked whether adding more qubits could cut the time below 10 minutes, Dahmun Goudarzi said his team had not yet completed the necessary calculations. Nonetheless, theoretical limitations do not prevent such acceleration.
There is no architectural floor,
said Goudarzi, who holds a PhD in cryptography. He also said that further work could produce estimates comparable to Google’s earlier research, which modeled an attack taking about nine minutes.
Vulnerability Profiles: In-Flight Transactions vs. Exposed Public Keys
The practical implications of quantum decryption vary sharply based on how specific Bitcoin UTXOs are stored on-chain. Bitcoin faces two distinct categories of quantum risk: pending transactions awaiting confirmation, and BTC secured by addresses whose public keys are already visible on the public ledger. While in-flight transactions demand an extremely rapid decryption process to beat the 10-minute block creation process, dormant funds associated with exposed public keys provide an attacker with a virtually open-ended time frame to derive the corresponding private key.
This dynamic leaves a substantial portion of the circulating supply in a precarious position. More than 6 million bitcoins sit behind exposed, therefore vulnerable, public keys, making those assets potential targets for future quantum attacks should sufficiently powerful hardware materialize before mitigation measures are enacted.
Why This Matters
The migration to quantum-resistant cryptography represents one of the most operationally complex upgrades in the history of decentralized finance. While standard address formats, such as modern pay-to-public-key-hash (P2PKH) and SegWit addresses, conceal their full public keys until an outgoing transaction is broadcast, millions of legacy coins—including those mined in Bitcoin’s earliest era—have their public keys exposed permanently on-chain.
Upgrading the entire Bitcoin consensus protocol requires broad alignment across developers, miners, node operators, and users. Dahmun Gourdarzi stressed that Alice & Bob’s findings are theoretical. He said his company expects hardware improvements and declining resource requirements to converge in the early 2030s, leaving a finite window for the cryptocurrency ecosystem to coordinate, test, and deploy post-quantum cryptographic primitives before theoretical exploits become viable realities.
Frequently Asked Questions
Can a quantum computer steal Bitcoin transactions today?
No. The current modeled attack takes roughly 62 minutes to complete, which is significantly slower than Bitcoin’s average 10-minute block time, preventing an attacker from intercepting and executing an exploit on unconfirmed transactions before they are confirmed on-chain. Furthermore, the necessary quantum hardware remains theoretical.
Why are over 6 million bitcoins considered vulnerable?
These assets reside in addresses where the public key has already been revealed to the blockchain network. Unlike unconfirmed transactions that require a sub-10-minute crack, addresses with exposed public keys give an attacker an unrestricted amount of time to compute the matching private key using Shor’s algorithm.
When could quantum hardware become powerful enough to threaten Bitcoin?
According to Dahmun Goudarzi of Alice & Bob, the convergence of quantum hardware improvements and declining computational resource requirements is expected to materialize in the early 2030s.
