THE GLOBAL AUTHORITY ON CRYPTO ASSETS
Bitcoin’s Quantum Deadline: 2028 Threat Sparks Urgent Cryptography Race
The security of the world’s most valuable digital asset is being scrutinised as major tech players warn that Cryptographically Relevant Quantum Computers (CRQCs) could emerge between 2025 and 2029, capable of cracking Bitcoin’s foundational security mechanism.
LONDON, DECEMBER 13, 2025
The quiet, theoretical threat posed by quantum computing has rapidly moved from science fiction to a clear and present danger for the entire global digital economy, and especially for cryptocurrencies. For Bitcoin (BTC), the timeline for potential vulnerability—once projected decades away—is now being aggressively pulled forward, with numerous experts and hardware timelines pointing to a critical window opening between now and the end of the decade.
This urgency is being driven by rapid advancements in the engineering of fault-tolerant qubits. Companies like IBM, for instance, have publically stated goals that align with having a quantum machine capable of running complex computations—like cracking existing encryption—by 2029. This timeline, which is supported by independent projects like the “Quantum Doomsday Clock” that project a vulnerability as early as March 2028, has initiated a quiet but intense security race within the core Bitcoin development community.
The primary point of failure is not the blockchain’s famous mining algorithm, SHA-256, but its digital signature scheme: the Elliptic Curve Digital Signature Algorithm (ECDSA). ECDSA is the mathematical basis that secures every Bitcoin wallet, ensuring only the holder of the private key can spend the funds. This is the cryptographic lock that quantum computers, powered by Shor’s algorithm, can efficiently pick.
THE MECHANICS OF THE QUANTUM THREAT
Classical computers rely on the immense difficulty of solving the Elliptic Curve Discrete Logarithm Problem (ECDLP) to secure public-key cryptography. This process is so mathematically difficult it would take a classical supercomputer billions of years.
However, Shor’s algorithm, developed by mathematician Peter Shor, exploits the unique capabilities of quantum mechanics—namely superposition and entanglement—to solve this exact mathematical problem exponentially faster.
Once a public key for a Bitcoin address is revealed (which happens the first time any funds are spent from that address), a sufficiently powerful quantum computer running Shor’s algorithm could theoretically derive the corresponding private key in mere seconds or minutes.
The most immediate and critical vulnerability exists in what are known as “legacy” or “re-used” Bitcoin addresses. These are addresses where the public key has already been exposed to the network. Analysts estimate that millions of Bitcoin—potentially hundreds of billions of dollars in value—reside in wallets that are currently susceptible to a quantum attacker who has simply archived the exposed public key.
CRQC: THE CRYPTOGRAPHICALLY RELEVANT BENCHMARK
It is important to note that the threat is not from current quantum machines, which mostly possess only dozens or hundreds of ‘noisy’ qubits. To break the secp256k1 curve used by Bitcoin’s ECDSA, a quantum computer requires approximately 1,600 to 2,600 logical qubits, which translates to millions of physical qubits once error correction is factored in.
The moment this technological threshold is crossed marks the arrival of the Cryptographically Relevant Quantum Computer (CRQC), or “Q-Day.” The accelerating pace of quantum hardware development is the reason why the traditional 20-40 year timeline is being aggressively revised. Sudden advancements in error correction, a constant focus for labs like Google and IBM, could dramatically shorten this timeline further.
While the second cryptographic element of Bitcoin, the SHA-256 hashing algorithm used in mining, is also threatened by Grover’s algorithm, this attack is less catastrophic. Grover’s algorithm only provides a square-root speed-up, meaning the defense can likely be addressed by simply increasing the security parameter (e.g., doubling the key length), giving developers a greater time buffer.
PROTECT YOUR BTC: GUIDE TO POST-QUANTUM WALLETS
THE BITCOIN RESPONSE: CRYPTO AGILITY AND PQC
The potential for a “harvest now, decrypt later” attack—where encrypted data is stolen today and decrypted once a CRQC is available—makes immediate action necessary. The Bitcoin core development community is not idle, but the transition to a quantum-resistant protocol is fraught with political and technical challenges inherent to decentralized, global governance.
The solution lies in adopting Post-Quantum Cryptography (PQC)—new mathematical schemes believed to be secure against both classical and quantum attacks. These algorithms are typically based on different “hard” problems, such as those found in lattice mathematics, hash functions, or codes.
The most significant progress this year has come from the U.S. National Institute of Standards and Technology (NIST), which, as of 2025, has finalized its primary PQC standards for digital signatures, selecting lattice-based schemes like ML-DSA (Dilithium) and hash-based schemes like SLH-DSA (SPHINCS+) as critical components for a quantum-safe future.
Integrating these PQC algorithms into the Bitcoin protocol requires a consensus mechanism upgrade, likely in the form of a Soft Fork, similar to SegWit or Taproot. The proposed solution involves a “dual-layer” approach, where transactions would be signed with both the legacy ECDSA and a new PQC signature, allowing for a phased transition and maintaining backward compatibility.
GOVERNANCE CHALLENGES AND THE BURN DILEMMA
The primary hurdle is not the technology, but the governance and the philosophical question of the “legacy” funds. Developers face a moral and economic dilemma: should they allow the millions of Bitcoin in quantum-vulnerable addresses to be potentially ‘stolen’ by the first quantum attacker, or should the protocol upgrade include measures to ‘burn’ those funds, making them permanently unspendable to secure the integrity of the total supply?
Leading cryptographers believe that due to the complexity of the coordinated global upgrade, crypto agility—the ability to swiftly swap cryptographic primitives—is the key. Organizations and users must begin the migration now by ensuring new transactions use the latest, most secure address formats (like Taproot, which offers some quantum resistance benefits by keeping the public key private unless spent through complex scripts).
In summary, the 2025-2029 window is no longer speculative but is tied to concrete hardware development goals. While the threat to older Bitcoin remains existential, the ongoing work in PQC standardization and the intellectual capacity of the Bitcoin development community suggest that a solution will be available. The critical variable is the time it takes for the globally decentralized network to reach consensus and fully implement the required upgrade, a race against the accelerating power of quantum hardware.
SIGN UP FOR REAL-TIME PQC & CRYPTO SECURITY ALERTS
Good information