A new report from post-quantum security firm Project Eleven is reigniting debate around one of Bitcoin’s longest-running existential threats: quantum computing.
The report warns that “Q-Day” the point at which quantum computers become capable of breaking modern public-key cryptography could arrive as early as 2030.
According to the company’s analysis, the odds of a cryptographically relevant quantum breakthrough happening by 2033 are now greater than 50%.
Key Takeaways
- Project Eleven says quantum computers could threaten Bitcoin cryptography by 2030–2033.
- Up to 6.9 million BTC may be vulnerable because their public keys are already exposed on-chain.
- Bitcoin could face a slow transition since major upgrades require global network coordination.
- Researchers warn quantum computing progress may accelerate faster than expected.
- Developers are already discussing quantum-resistant Bitcoin migration proposals.
Quantum Threat Could Put 6.9M BTC at Risk
Project Eleven estimates that roughly 6.9 million BTC, worth more than $560 billion at current prices, may already be exposed to future quantum attacks because their associated public keys are visible on-chain. That includes coins stored in older address formats, reused wallets, and early Bitcoin-era transactions.
The warning lands at a time when governments, cloud providers, and financial institutions are beginning to accelerate their own migration timelines. Google, for example, is reportedly targeting 2029 for parts of its transition toward quantum-resistant cryptographic systems.
Why Bitcoin Could Face a Difficult Transition
Unlike centralized financial infrastructure, Bitcoin cannot simply roll out a network-wide software patch overnight. Any major cryptographic upgrade would require coordination between miners, developers, exchanges, wallet providers, custodians, and node operators across the globe.
Historically, even relatively modest Bitcoin upgrades have taken years to implement. Project Eleven pointed to SegWit as an example. The upgrade, proposed in 2015 and activated in 2017, triggered years of debate and eventually contributed to a chain split that resulted in Bitcoin Cash.
The company framed its argument using Mosca’s Inequality, a cybersecurity principle that states systems become vulnerable if the time needed to upgrade exceeds the time remaining before a threat becomes viable.
In other words, if Bitcoin needs ten years to complete a quantum-safe migration and functional attacks become possible in seven years, the network is already behind schedule.
Quantum Progress May Not Be Linear
One of the report’s more striking arguments is that quantum computing breakthroughs are unlikely to arrive gradually. Project Eleven said advances in hardware and algorithms may compound rapidly, creating sudden jumps in capability rather than predictable incremental improvements.
The company described the likely trajectory as “nothing, and then all at once.” That concern gained attention after a researcher reportedly succeeded in deriving a 15-bit elliptic curve key using quantum hardware earlier this year.
While Bitcoin uses 256-bit elliptic curve cryptography, vastly more complex than a 15-bit demonstration, the experiment was viewed by some researchers as proof that practical attacks are no longer purely theoretical.
Project Eleven CEO Alex Pruden said the report is meant to encourage preparation rather than predict an exact deadline.
Millions of BTC Could Be Vulnerable
The report estimates that between 5.6 million and 6.9 million BTC could eventually become accessible to attackers once sufficiently powerful quantum systems emerge.
The risk primarily affects wallets where public keys have already been exposed. Bitcoin’s newer address standards, including many addresses beginning with “bc1,” offer stronger protection because they hash public keys until coins are spent.
However, older pay to public key hash addresses and reused wallets remain more exposed. Some of the vulnerable coins are believed to include dormant holdings linked to Bitcoin creator Satoshi Nakamoto, though there is no evidence those funds are currently at risk.
Project Eleven also argued the threat extends well beyond crypto. The same elliptic curve cryptography used across Bitcoin, Ethereum, and stablecoin networks also secures banking infrastructure, cloud services, authentication systems, and military communications.
Proposed Solutions Are Already Emerging
Developers and researchers are already discussing possible migration paths. One proposal, BIP-361, would introduce a structured migration period allowing users to move funds into quantum-resistant addresses over several years.
Another idea from Paradigm researcher Dan Robinson involves timestamp-based ownership proofs. The concept would allow users to prove control of wallets today and potentially reclaim assets later on a quantum-safe version of Bitcoin without revealing sensitive on-chain activity.
Still, no formal Bitcoin roadmap for post quantum migration currently exists. That uncertainty is creating a growing tension between Bitcoin’s commitment to immutability and the practical need to adapt to new security threats.
While practical quantum attacks on Bitcoin may still be years away, the report highlights how slowly decentralized systems move when major upgrades are required. For now, the debate is shifting from whether Bitcoin needs quantum-resistant protections to whether the industry can coordinate a transition before the threat becomes real.
