Tony Kim
Apr 01, 2026 19:24
New Google whitepaper estimates 1,200 logical qubits could crack Bitcoin’s elliptic curve signatures. Fireblocks outlines institutional defense strategy.
Google Quantum AI just dropped a whitepaper that should be on every institutional crypto investor’s radar. Co-authored with the Ethereum Foundation and Stanford researchers, “Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities” delivers updated estimates for breaking the cryptography protecting Bitcoin, Ethereum, and virtually every major blockchain.
The headline number: a quantum computer with just 1,200 logical qubits could theoretically crack secp256k1, the elliptic curve underpinning BTC’s digital signatures. That’s significantly fewer resources than previous estimates suggested.
Why This Isn’t a Fire Drill—Yet
Before panic sets in, understand the distinction that most coverage misses. Those 1,200 qubits are logical qubits—abstract, error-corrected units. Today’s quantum processors run on noisy physical qubits. The translation? You’d need roughly 500,000 physical qubits operating with sustained fault-tolerant error correction to actually execute the attack. No machine comes close.
Current state-of-the-art processors operate in the hundreds to low thousands of physical qubits with error rates far too high for the sustained computation required. The paper also specifies 70-90 million Toffoli gate operations—a level of computational work that remains firmly theoretical.
But here’s what matters for risk management: the gap is narrowing. And the research distinguishes two attack vectors worth tracking:
At-rest attacks target exposed public keys on old or reused addresses, giving attackers extended time to compute private keys. This is the nearer-term concern.
On-spend attacks would intercept transactions in the mempool and forge redirects before confirmation—a more distant but catastrophic scenario requiring much faster quantum hardware.
Practical Defense Measures Available Now
Fireblocks, which published the analysis, notes that its default P2WPKH Bitcoin addresses hide public keys until spending occurs. The Google paper explicitly flags this address type as resilient to at-rest attacks.
The actionable hygiene rule: stop reusing addresses. Once you spend from an address, that public key lives on-chain permanently. Any subsequent deposits lose hash-based protection. Fireblocks Network users can configure automatic address rotation for each incoming transfer—quantum hygiene that’s available today.
The Real Timeline Problem
Post-quantum cryptography algorithms exist. NIST has finalized standards including ML-DSA, SLH-DSA, and FN-DSA. The technical solutions aren’t the bottleneck.
Coordination is. Every wallet, protocol, infrastructure provider, and user must migrate in sequence without breaking networks or stranding assets. Bitcoin’s BIP 360 proposal for post-quantum addresses is in discussion. Ethereum and Solana are tracking similar upgrades. These migrations take years.
One bright spot: Bitcoin’s proof-of-work mechanism is immune to quantum attacks via Grover’s algorithm. The consensus layer remains secure even as signature schemes face future pressure.
Fireblocks says it’s auditing its full cryptographic stack—certificates, encrypted data, TLS, authentication—against post-quantum requirements. A comprehensive PQC strategy document is promised for later this year.
The quantum threat to crypto is real and advancing. It’s also manageable—if the industry starts the multi-year migration work now rather than waiting for the first successful attack.
Image source: Shutterstock
