Menu

Quantum Computing

IBM completes HRL Laboratories buyout to speed its quantum roadmap

IBM completes HRL Laboratories buyout to speed its quantum roadmap

, , , , , ,

BlockchainAugust 26, 2026·5 min read

IBM has closed its acquisition of HRL Laboratories to accelerate development of Quantum Starling, a fault-tolerant quantum computer the company aims to deliver by 2029. The deal signals IBM’s confidence in meeting an ambitious timeline while competing for government funding and enterprise adoption in a race toward commercially viable quantum systems.

  • IBM completed HRL Laboratories acquisition to speed quantum computing roadmap toward 2029 Starling delivery target
  • IBM demonstrated cooled modular cryogenic cells in Poughkeepsie that link via short connections instead of long noisy cables
  • U.S. government backing includes $1 billion CHIPS award for Anderon foundry in Albany to fabricate quantum wafers for multiple vendors
  • 2029 Target year for IBM Quantum Starling fault-tolerant system delivery before end of decade
  • 20,000x Expected computational power increase of Starling compared to current quantum hardware
  • $2 billion Total U.S. government quantum computing initiative spanning nine firms including IBM

IBM has completed its acquisition of HRL Laboratories, integrating the research organization into its quantum computing division as the company accelerates development of Quantum Starling, a large-scale fault-tolerant quantum computer scheduled for delivery by 2029.

The company declined to disclose purchase terms but framed the acquisition as a strategic move to compress the timeline on a project that represents IBM’s flagship bet on near-term quantum commercialization.

IBM already operates more than 90 quantum systems deployed across Fortune 500 companies, universities, and government agencies, a user base that will serve as both early adopters and testbeds for Starling when the system reaches market.

IBM demonstrates modular cryogenic architecture with short-link quantum processor design

The timing of the HRL acquisition announcement coincides with significant technical progress on Quantum Starling’s underlying infrastructure.

On August 19, IBM reported that engineers at its Poughkeepsie, New York facility had successfully linked and cooled the first pair of modular cryogenic cells, each standing approximately eight feet tall and operating below 15 millikelvin, roughly 180 times colder than deep space.

This breakthrough addresses a longstanding engineering constraint in quantum systems: traditional cylindrical refrigeration units required long, noisy connections between processors that degraded qubit coherence and limited scalability.

The new box-shaped modular design places cryogenic cells side by side with short connections joined into a shielded tunnel that maintains each chip near absolute zero while minimizing electromagnetic interference.

IBM’s L-Coupler technology binds multiple processors together so they function as a single logical unit, allowing the system to scale horizontally rather than forcing engineers to stack processors vertically in a single cryogenic vessel.

The company estimates that Starling will eventually house hundreds of processors operating under this modular architecture, enabling computational power roughly 20,000 times greater than current quantum hardware.

The modular approach directly influenced IBM’s decision to acquire HRL Laboratories, whose expertise in quantum systems engineering and materials science aligns with the scaling challenges ahead. By folding HRL’s research capabilities into its quantum division, IBM aims to validate this architecture at production scale before the 2029 target date.

U.S. government backs Anderon quantum foundry with $1 billion CHIPS award matching IBM’s cash commitment

IBM’s quantum ambitions are now embedded in a broader federal strategy to establish domestic quantum manufacturing capacity.

In May, IBM and the U.S. Department of Commerce announced Anderon, described as America’s first pure-play quantum foundry, backed by a proposed $1 billion CHIPS award and $1 billion in matching funding from IBM. The foundry will be headquartered in Albany, New York, and will fabricate 300-millimeter quantum wafers for multiple vendors rather than exclusively serving IBM’s internal needs, a significant departure from IBM’s traditional vertical integration model.

Arvind Krishna, IBM’s Chairman and CEO, stated that IBM’s decades of experience in silicon fabrication would prove essential to developing the broader quantum technology industry. The government and IBM jointly pegged the sector’s economic potential at up to $850 billion by 2040, signaling confidence in quantum computing’s transition from research phase to industrial application.

This public-private partnership reflects Washington’s concern that quantum leadership will determine technological and economic dominance in the coming decade, particularly in cryptography and materials simulation.

A separate $2 billion government quantum computing effort spans nine firms, with IBM in line for approximately $1 billion, GlobalFoundries near $375 million, and D-Wave Quantum, Rigetti Computing, and Quantinuum each receiving roughly $100 million.

IBM shares rose more than 6% when news of the Anderon CHIPS award broke, suggesting investor confidence that federal backing materially de-risks IBM’s quantum roadmap and ensures sustained R&D funding through the 2029 Starling milestone.

Quantum threat to Bitcoin cryptography intensifies investor focus on migration timelines

The convergence of IBM’s hardware progress, government funding, and the Starling timeline has sharpened institutional focus on quantum computing’s most immediate threat: the potential to break Bitcoin’s cryptographic security.

Shor’s algorithm, a quantum computing procedure capable of working backward from a public key to derive the private key, poses an existential risk to any blockchain system relying on elliptic-curve or RSA cryptography. Recent reader polling found that 47% of respondents expect quantum computing to compromise Bitcoin by 2035, a date that sits only six years after Starling’s planned delivery.

Institutional investors and blockchain operators face a critical gap between IBM’s projected Starling timeline and the unknown threshold at which quantum hardware becomes sufficiently powerful to execute Shor’s algorithm at scale.

Google researchers have begun modeling the hardware requirements, but no consensus exists on whether a 2029 system or a system five years later will pose immediate cryptographic risk. This ambiguity has already triggered discussions within Bitcoin and Ethereum developer communities about post-quantum cryptographic migration strategies.

For institutions holding long-term cryptocurrency positions or operating blockchain infrastructure, the HRL acquisition and Anderon foundry represent concrete evidence that quantum computing is transitioning from theoretical threat to engineered milestone.

The pace of IBM’s progress, reinforced by $1 billion in federal matching capital and the addition of HRL’s engineering expertise, suggests that quantum systems capable of attacking current blockchain security may arrive sooner than previously modeled.

IBM has set a clear 2029 deadline for Quantum Starling’s commercial delivery, and the HRL acquisition signals the company is allocating additional engineering resources to meet that schedule. The next critical verification will come from IBM’s demonstration of multi-cell cryogenic systems scaling beyond the current two-cell proof-of-concept, expected within the next 12 to 18 months. Simultaneously, cryptography researchers and blockchain developers are racing to define post-quantum migration standards, the Crypto Coin Show will track whether Bitcoin, Ethereum, and other major networks adopt quantum-resistant signatures before 2035, and whether IBM’s 2029 Starling delivery date accelerates that timeline.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

CZ Floats Freezing Satoshi’s Bitcoin Over Quantum Risk

CZ Floats Freezing Satoshi’s Bitcoin Over Quantum Risk

, , , , , ,

BitcoinJune 20, 2026·6 min read

Binance founder Changpeng Zhao has proposed a community-driven mechanism to freeze dormant Bitcoin addresses vulnerable to quantum computing attacks, a debate that highlights the institutional crypto industry’s growing concern over cryptographic security timelines. The proposal, framed as a network-wide decision rather than unilateral action, raises fundamental questions about asset protection, network governance, and the coordination burden of implementing quantum-resistant upgrades across a decentralized system.

  • Satoshi Nakamoto’s estimated 1.1 million BTC, worth approximately $70 billion at current prices, remains locked in quantum-vulnerable addresses since 2009-2010.
  • Google Quantum AI research published in March estimated a quantum attack could require fewer than 500,000 qubits and run in minutes, well below previous threat assessments.
  • More than one-third of all Bitcoin in circulation has exposed public keys on-chain, leaving those addresses theoretically vulnerable to private-key derivation by sufficiently advanced quantum computers.
  • 1.1M BTC Satoshi’s estimated holdings compared to Bitcoin’s 21 million total supply.
  • 500K qubits Required quantum resource estimate versus earlier projections of millions required.
  • 1 year Proposed community timeline before dormant quantum-vulnerable addresses would lock via network fork.

Changpeng Zhao framed the quantum security question on the Galaxy Brains podcast not as a Binance directive but as a thought experiment for Bitcoin’s decentralized governance.

During his conversation with Galaxy Research head Alex Thorn, Zhao suggested the network could implement a community-approved upgrade that would freeze coins left in quantum-vulnerable addresses roughly one year after activation. The proposal would use a blockchain fork to lock these funds irreversibly, preventing either theft by hypothetical quantum attackers or recovery by miners and developers.

Zhao later clarified on social media that reports characterizing him as personally seizing Satoshi’s address were inaccurate, though he acknowledged the challenge of distinguishing Satoshi’s holdings from other early-miner addresses using only on-chain analysis.

Google’s Quantum Threat Estimates Accelerate Defensive Timeline Pressure

The urgency behind Zhao’s proposal stems directly from Google Quantum AI’s March research publication, which substantially compressed the timeline for practical quantum computing threats to Bitcoin’s cryptographic foundation.

The research team estimated that a quantum computer powerful enough to derive private keys from public keys could operate with fewer than 500,000 qubits and complete such attacks within minutes.

This represented a dramatic downward revision from earlier academic projections that had suggested millions of qubits would be necessary, effectively moving the threat from theoretical distant future to credible near-term risk category.

The practical vulnerability exists because Bitcoin transactions reveal public keys on-chain, creating a theoretical vector for private-key extraction. Once a quantum computer obtains the private key, it can spend funds without the legitimate owner’s consent.

Data analyzed in March showed that more than one-third of all Bitcoin ever mined had exposed public keys on-chain at some point, creating an exposed surface area far larger than many institutional investors had previously considered.

Satoshi Nakamoto’s estimated 1.1 million BTC, mined during 2009 and 2010 and never moved, represents the single largest concentration of these quantum-vulnerable coins.

At Bitcoin’s price near $63,244, Satoshi’s dormant hoard carries a market value of roughly $70 billion.

For institutional investors holding Bitcoin or analyzing systemic risk, this figure matters not merely as a notional wealth statistic but as a measure of locked liquidity that could theoretically enter circulation if either quantum theft occurred or if the network implemented recovery mechanisms.

The sheer capital value amplified the urgency of the quantum transition debate among exchanges, miners, and protocol developers.

BIP-361 Draft Proposal Offers Hard Choices on Dormant Coin Recovery

Zhao’s framework aligns substantially with BIP-361, a draft proposal authored by Jameson Lopp and five other researchers currently in community discussion. The BIP proposes a two-phase mechanism: first, blocking all new transactions to quantum-vulnerable addresses roughly three years after upgrade activation; second, invalidating legacy signatures on those addresses two years thereafter.

The approach codifies an uncomfortable binary choice facing the network, either allow a quantum thief to claim exposed coins, permit slow community recovery of dormant funds, or implement permanent lockdown to ensure neither outcome materializes.

The BIP-361 authors frame this as governance pragmatism rather than technical capability. They argue that adopting quantum-resistant cryptography network-wide requires coordination timelines measured in years, not months, and that doing so after a quantum computer has already begun draining addresses would be too late.

The proposal even invokes Satoshi Nakamoto’s own commentary on lost coins to justify the lockdown approach: “Lost coins only make everyone else’s coins worth slightly more.

Think of it as a donation to everyone.” By this logic, permanently freezing dormant quantum-vulnerable coins would distribute their value proportionally across remaining circulating supply rather than allowing either external theft or centralized recovery.

Implementing such a fork requires consensus from miners, node operators, exchanges, and the broader developer community. Unlike a voluntary soft fork that users can ignore, this mechanism would force a hard-fork choice: accept the new quantum-protection rules or fork away from the main chain.

Institutional exchanges like Binance would face operational pressure to adopt the upgraded chain to avoid serving two incompatible assets, creating implicit pressure for consensus even absent formal voting mechanisms.

Competing Legal Claims Cloud the Precedent for Dormant Asset Governance

The quantum security debate exists within a contested legal landscape that complicates any unilateral network action on dormant addresses. An anonymous plaintiff and two Wyoming limited-liability companies have filed suit in New York seeking to claim roughly 39,069 idle Bitcoin addresses under abandoned-property law, including Satoshi’s holdings.

The lawsuit contests whether these coins constitute abandoned property subject to state seizure and transfer rather than permanently lost assets.

Galaxy Research’s analysis of the lawsuit expressed skepticism that the plaintiffs would prevail, but the case itself illustrates an uncomfortable gap in Bitcoin’s governance framework.

No clear consensus exists on whether a dormant address represents abandoned property susceptible to legal claim, a permanent loss subject to network-wide wealth redistribution, or an asset whose owner simply chose not to move funds.

A quantum-protection fork that locked these coins would effectively resolve that question in favor of permanent lockdown, foreclosing any future legal remedy or recovery mechanism.

For institutional investors, the lawsuit risk adds another layer of governance uncertainty atop the quantum timeline question.

Institutional Custody and Exchange Liability Drive Adoption Pressure

Zhao’s framing as a community question masks genuine pressure on institutions to adopt quantum-resistant measures regardless of explicit consensus. Binance and other major exchanges hold customer Bitcoin in custody, creating fiduciary exposure if quantum theft occurred and the exchange had not migrated customer funds to quantum-resistant addresses.

Even if the network did not implement BIP-361 or a similar lockdown mechanism, an exchange holding coins in quantum-vulnerable addresses could face liability claims from customers whose holdings were compromised.

This creates an incentive structure where major exchanges might adopt quantum-resistant practices unilaterally before the network formally implements network-wide protection. A single large exchange migrating customer funds to quantum-safe addresses would signal to competitors and institutional clients that the threat was serious enough to justify action.

Once several major custodians moved, the practical network effect could accelerate adoption even without explicit protocol governance.

The quantum threat thus operates as both a technical protocol question and a business-continuity problem for institutions holding customer assets.

Timeline Uncertainty Remains the Core Unresolved Question for Asset Managers

Zhao’s one-year proposed freezing timeline reflects genuine uncertainty about how quickly the network can execute a quantum-resistant upgrade without fragmenting consensus. Bitcoin’s upgrade process requires sustained discussion, developer work, miner signaling, and node operator deployment, a process that has historically consumed years even for non-controversial changes.

A quantum-protection mechanism would prove far more contentious because it explicitly affects coin ownership and accessibility, raising philosophical objections alongside technical concerns.

The Google research compressed the threat timeline substantially, but even 500,000-qubit quantum computers remain years away from likely deployment. The practical window for coordinating a network

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Bitcoin Address Reuse Warning Puts Quantum Risk Back In Focus

Bitcoin Address Reuse Warning Puts Quantum Risk Back In Focus

, , , , , ,

BitcoinJune 15, 2026·6 min read

A Coinbase-linked advisory has surfaced concerns about Bitcoin address reuse and legacy cold wallets as long-term exposure points if quantum computing advances threaten current cryptographic assumptions. For institutional custodians and large holders, this signals the need for migration planning well before quantum risk becomes an active threat rather than a theoretical one.

  • Coinbase-linked discussion flagged address reuse and legacy Bitcoin wallets as future quantum-risk exposure points for large holders
  • Exposed public keys become visible on-chain when coins are spent, creating potential vulnerability under quantum-capable computing scenarios
  • Institutional custodians face custody model adaptation challenges if ecosystem requires migration to quantum-resistant signatures in future
  • Future Timeline when quantum risk becomes active threat, not immediate emergency or security break
  • Legacy Wallets and reused addresses representing class of coins requiring special attention in post-quantum migration
  • Long-term Planning horizon institutions need to develop clear migration paths before threat becomes urgent

Bitcoin’s quantum-risk debate has crossed a threshold from academic developer discussion into institutional custody planning.

A Coinbase-linked advisory discussion has put address reuse and legacy cold wallets back into focus as long-term exposure points, not because Bitcoin faces an immediate break in its cryptographic security, but because institutions holding large balances need clear migration paths before the risk becomes urgent.

The issue centers on a specific technical fact: when Bitcoin is spent from an address, the public key becomes visible on-chain. Under today’s cryptographic assumptions, that visibility poses no immediate problem.

But if quantum computing advances to the point where it can attack the elliptic-curve digital signature algorithm that secures Bitcoin transactions, those exposed public keys could become more sensitive targets.

Coinbase Advisory Flags Address Reuse as Quantum Exposure Points

The discussion did not originate from a security breach or an active attack. Rather, a Coinbase-linked advisory reportedly flagged custody practices that look acceptable today but may require migration plans before quantum computing becomes a genuine threat. The specific concern is address reuse, the practice of spending Bitcoin from the same address multiple times.

Most Bitcoin users are already discouraged from reusing addresses for privacy reasons, but the quantum angle adds a security dimension that institutional operators cannot ignore.

For institutional custodians, the distinction matters enormously. A retail wallet holding a small balance presents one risk profile. A cold wallet holding large institutional balances presents another entirely.

Institutions do not need Bitcoin to be secure only in 2024 or 2025; they need confidence that their custody model can adapt over time as technology and threats evolve. That requirement creates a forward-looking problem that cannot be deferred until quantum computers actually threaten Bitcoin’s security.

The advisory is not a panic alert. It is a preparation signal. Custody practices that look acceptable today may need a documented migration plan before quantum risk becomes active.

For large holders and exchanges, this means identifying which addresses and wallets hold exposed public keys, understanding which of those represent legacy systems, and developing a timeline for moving to quantum-resistant approaches if the ecosystem eventually requires it.

Exposed Public Keys Create Long-term Migration Liability

Bitcoin’s transaction model works differently from many other systems. When a user spends Bitcoin, they must provide a signature proving ownership of the coins at that address. That signature is generated using a private key, but the transaction also reveals the corresponding public key on-chain.

In the current era of cryptographic security, knowing the public key does not allow an attacker to derive the private key or spend the coins. The mathematics of elliptic-curve cryptography make that computation effectively impossible with today’s computing power.

Quantum computers, if they reach sufficient capability, could change that equation. Shor’s algorithm, which runs on quantum computers, is theoretically capable of breaking elliptic-curve cryptography much faster than classical computers could. This does not mean quantum computers exist at that scale today or will exist tomorrow.

It means that addresses holding spent coins with exposed public keys represent a potential future liability class that serious custodians need to track.

The problem compounds for institutions holding Bitcoin in legacy wallets or cold storage systems that may not easily support newer quantum-resistant cryptographic schemes. A dormant address holding large institutional balances cannot be easily migrated if the entity controlling it no longer exists, is unreachable, or operates under governance structures that move slowly.

That is where the institutional custody problem becomes genuine: not as an immediate emergency, but as a long-term infrastructure challenge that requires planning and coordination across wallets, exchanges, developers, and custodians.

Institutional Custody Models Must Plan for Migration Before Urgency Arrives

Bitcoin is becoming more institutional every year. Banks, exchange-traded funds, custodians, public companies, and large asset managers are now material holders of Bitcoin. That shift changes the risk calculus around quantum-resistant migration.

Retail users holding small amounts in modern wallets can afford to wait and move quickly when a genuine threat appears. Large custodians holding billions in client assets cannot operate that way. They need clear paths, tested procedures, and documented plans before a crisis moment forces rushed migration.

The complexity lies not just in technical migration but in coordination. If the Bitcoin ecosystem eventually needs to adopt quantum-resistant signatures, that change would require consensus among developers, miners, and node operators. It would require exchanges to upgrade custody systems.

It would require wallet software to support new signature schemes. It would require institutions to migrate holdings from old addresses to new ones. That coordination problem becomes exponentially harder if it happens in response to an active threat rather than in response to a planned, predictable timeline.

This is why the Coinbase advisory discussion matters now. Good security planning happens before a threat becomes active, not after. If the industry waits until quantum risk becomes obvious and immediate, migration will be more stressful, more politically contentious, and more technically difficult.

Institutions that map their exposure today, understanding which addresses hold exposed keys, which wallets are legacy systems, and what governance changes would be required to migrate, will be far better positioned than those that defer the conversation.

Quantum Risk Moves from Theory to Institutional Planning Agenda

The quantum-computing threat to cryptocurrency has existed in academic literature for years. Cryptographers and protocol developers have understood the theoretical vulnerability for some time. What has changed is that the conversation is no longer confined to developer conferences and research papers.

It is now appearing in institutional custody discussions, advisory memos, and long-term planning documents at exchanges and custodians. That shift reflects a maturation of Bitcoin as an institutional asset class.

The risk itself is not immediate. Bitcoin is not being broken by quantum computers today. There is no evidence of imminent quantum computing capability that would threaten elliptic-curve signatures at scale. This is not a story about an emergency. It is a story about responsible institutional planning happening in advance of a known long-term vulnerability.

Large holders and custodians cannot afford to treat quantum risk as either an emergency requiring immediate action or as a non-issue to be ignored. The middle path, planning and coordination well before the threat becomes active, is where serious institutions need to operate.

That planning requires understanding which addresses and wallets represent exposure, which require migration, and what clear procedural paths exist for moving to quantum-resistant systems if the ecosystem eventually requires it.

The open question for institutional Bitcoin holders is not whether quantum risk will arrive, but when the industry will coalesce around a clear migration pathway and timeline. Custodians that have already begun mapping their exposure and developing migration strategies will have significant advantages over those that wait for regulatory guidance or consensus to emerge under pressure. Watch for whether major custodians publish quantum-migration roadmaps in the next 12-18 months, and whether Bitcoin protocol developers begin consensus discussions around quantum-resistant signature scheme adoption as a long-term priority.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

qday-2-thumbnail

Q-Day Is Coming. Your Wallet Is Already Being Targeted.

, , , , , , , ,

Ripple reveals a four-phase plan to make the XRP Ledger quantum-safe by 2028

Ripple reveals a four-phase plan to make the XRP Ledger quantum-safe by 2028

, , , , , ,

BlockchainApril 20, 2026·5 min read

Ripple has unveiled a four-phase roadmap to make the XRP Ledger quantum-resistant by 2028, responding to mounting industry concern that quantum computers could break the cryptographic foundations securing blockchain networks. For institutional investors, the timeline signals both urgency around a technical threat and an opportunity to assess which networks are preparing defenses versus those still treating quantum risk as distant theory.

  • Ripple targets 2028 completion for full XRP Ledger quantum-safety upgrade via four distinct implementation phases beginning now.
  • Approximately 300,000 XRP accounts holding 2.4 billion XRP remain quantum-safe because their public keys have never been exposed on-chain.
  • Recent Google Quantum AI research has elevated quantum risk from theoretical to credible, forcing networks to prioritize post-quantum cryptography adoption timelines.
  • 2028 Target year for complete XRP Ledger quantum-resistance upgrade versus current baseline security.
  • 300,000 XRP accounts with 2.4 billion total XRP unexposed to quantum attacks today.
  • 2026 Year Phase Two begins with formal testing of post-quantum security methods and privacy research.

Ripple has moved faster than most blockchain networks in confronting the quantum computing threat, publishing a detailed four-phase plan to make its XRP Ledger resistant to quantum attacks by 2028.

The timeline addresses a concern that has shifted from academic speculation to credible near-term risk following recent research from Google Quantum AI showing that quantum computers sufficiently powerful to break widely-deployed cryptography could emerge within the next decade.

The roadmap reflects a broader industry split: while some networks remain skeptical of the threat, others are treating quantum-resistant upgrades as infrastructure priorities requiring years of testing and coordination.

Google Research Elevates Quantum Threat From Theoretical to Credible Risk

The Google Quantum AI paper reignited industry concern by demonstrating that the elliptic curve cryptography protecting blockchain wallets, transaction approvals, and digital asset storage could be vulnerable to sufficiently advanced quantum computers.

Most major blockchains, including Bitcoin and Ethereum, rely on this class of cryptography, creating a systemic vulnerability if quantum hardware advances faster than expected. The finding has split industry opinion sharply: some participants, including MicroStrategy founder Michael Saylor, have dismissed the concern as overblown, while others view it as requiring immediate preparation.

Ripple’s assessment differs. In its announcement, the company stated that “the threat has moved from theoretical to credible, and preparation timelines now matter.” The company also flagged a less-discussed vector called “harvest now, decrypt later,” in which bad actors collect encrypted blockchain data today and store it for decryption once quantum computers become powerful enough.

This attack surface means institutions cannot simply wait until quantum computers are demonstrably powerful before beginning upgrades; the window for protecting historical data closes today.

The threat has moved from theoretical to credible, and preparation timelines now matter.

Ripple, in company announcement

Other networks are beginning similar work. Tron founder Justin Sun indicated his blockchain is evaluating post-quantum technical defenses, and various research teams are exploring quantum-resistant alternatives based on lattice cryptography and other methods designed to withstand quantum attacks.

Ripple’s Four-Phase Roadmap Allocates Five Years for XRP Ledger Quantum Upgrade

Phase One, starting immediately, focuses on emergency preparedness. Ripple is building tools enabling users to migrate assets to post-quantum encryption schemes, including zero-knowledge proof methods that would function even if current cryptography is compromised. This phase treats quantum risk as imminent enough to warrant defensive infrastructure now, before Phase Two begins formal testing.

Phase Two launches in early 2026 and runs through year-end, involving formal research into quantum risks and testing of new security tools in collaboration with Project Eleven, an external research initiative. By the end of 2026, Ripple will test advanced post-quantum security methods and explore new privacy-preserving techniques.

Phase Three, spanning 2027, encompasses the formal transition work preparing the entire XRP Ledger for cryptographic upgrade. The fourth and final phase, completing by 2028, deploys native post-quantum cryptography across the entire ledger via formal network amendment, making the protocol resistant to quantum attacks.

The five-year timeline reflects the complexity of upgrading a decentralized network. Unlike centralized systems, blockchain changes require consensus among validators and developers, testing on testnets to prevent unintended breaks, and coordination across custody providers, exchanges, and wallet operators who must support the new cryptographic standards.

XRP’s Current Quantum Exposure Is Lower Than Bitcoin’s Due to Account Age Distribution

An important detail distinguishes XRP Ledger’s quantum vulnerability from Bitcoin’s. Quantum computers pose the greatest risk to wallets where the public key has already been published on-chain, which typically occurs after a wallet’s first transaction.

An April 2026 audit by XRPL validator “Vet” found that approximately 300,000 XRP accounts, collectively holding 2.4 billion XRP, have never executed a transaction and therefore have no publicly exposed cryptographic keys. These accounts remain immune to quantum attacks under current threat models because their public keys remain hidden.

Bitcoin’s holder base skews older, with a far larger proportion of accounts that executed transactions years or decades ago, exposing their public keys to quantum decryption risk.

The same audit noted that only two major dormant XRP accounts with combined holdings exceeding 21 million XRP have remained inactive for more than five years, suggesting most XRP holders either trade regularly or hold on exchanges, where private key management differs from self-custody scenarios.

This distinction matters for institutional custody and risk models. If a significant portion of an institution’s XRP holdings are in newly funded accounts that have never transacted on-chain, quantum risk from those specific holdings is currently lower than for similarly sized Bitcoin positions.

Institutional Investors Face Timing Risk as Quantum Threat Accelerates Timeline

The shift from theoretical to credible quantum threat compresses institutional decision-making timelines. Five years is a short window for upgrading a protocol relied upon by exchanges, custodians, and asset managers managing billions in value. Institutions must now decide whether to treat quantum-resistant upgrades as core infrastructure priorities or allocate resources assuming longer timelines.

Ripple’s public roadmap gives market participants specific milestones to monitor: Phase Two testing in 2026 will reveal whether post-quantum methods can be deployed without breaking wallet interoperability or exchange settlement processes.

The Google research also raises competitive questions among layer-one protocols. Networks that complete quantum-resistant upgrades first may attract institutional capital seeking maximum cryptographic assurance, while networks remaining on classical cryptography face increasing regulatory and operational scrutiny.

Some institutions may require quantum-resistant custody or settlement before adding to positions in networks still running unencrypted key material.

Ripple will publish Phase Two results by end of 2026, providing the first real-world test data on whether post-quantum cryptography can scale on a live decentralized network. Institutions should monitor that testing window closely to assess whether Ripple’s timeline is achievable and whether other networks, particularly Bitcoin and Ethereum, announce comparable roadmaps before the 2028 target. The absence of formal quantum upgrade plans from larger networks by mid-2026 would signal either technical confidence in longer timelines or institutional risk that upgrades may prove more difficult to coordinate than Ripple’s sequential phases assume.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe