Menu
MCAP $2.77T ▼-4.40%
BTC $82,523 ▼-0.01%
ETH $2,491 ▼-1.84%
BNB $739.89 ▼-3.00%
XRP $1.390 ▼-0.90%
SOL $110.01 ▼-3.19%
DOGE $0.0844 ▼-3.42%
ADA $0.237 ▼-5.55%
TRX $0.3327 ▼-0.81%
LINK $12.76 ▼-2.10%
AVAX $10.34 ▼-3.92%
HYPE $85.86 ▼-0.18%
DOT $1.160 ▲+5.14%

Quantum Computing

Every Crypto Coin Show story tagged Quantum Computing, newest first, alongside the guides and interviews that give it context.

Guide: What is Solana? How the high-speedNewsletter
From the interview archive
Europol flags $502 billion in Bitcoin vulnerable to quantum computer theft
Bitcoin

Europol flags $502 billion in Bitcoin vulnerable to quantum computer theft

, , , , , , , ,

BitcoinCrypto Coin Show News Team·October 7, 2026·4 min read

Europol said Wednesday that Bitcoin wallets with exposed public keys have no cryptographic fix once quantum computers become powerful enough to break them, a narrow but concrete warning aimed at individual holders rather than the blockchain itself. The agency’s cybercrime unit puts a figure on that exposure: roughly $502 billion in BTC already shows the public key an attacker would need, held in reused addresses, exchange custody and early wallet formats.

  • Glassnode counted 6.04 million BTC exposed as of May, equal to 30.2% of all bitcoin ever issued.
  • Quantum-resistant signatures run 10 to 120 times larger than today’s, which Europol warns could clog blocks and push up fees.
  • A full migration to quantum-safe wallets would need at least 76 days of Bitcoin’s entire network capacity, one study Europol cites found.
  • 30.2% share of all bitcoin supply Glassnode flags as quantum-exposed
  • $502B value of exposed BTC at bitcoin’s roughly $83,050 price
  • 300 days network capacity needed to spread a full wallet migration

Every Bitcoin wallet runs on two linked codes: a public key that anyone can see on the blockchain, and a private key that authorizes spending. Europol’s cybercrime unit said a sufficiently powerful quantum computer could work backward from an exposed public key to derive the private one, letting an attacker drain the wallet, according to a report first detailed by BeInCrypto. The hashing that chains Bitcoin’s blocks together is far harder to break, Europol’s report found, so the threat sits with individual holders rather than the network’s consensus layer.

Glassnode Counts 6.04 Million Exposed Bitcoin, 30.2% of Supply

Analytics firm Glassnode found that 6.04 million BTC carried an exposed public key as of May, equal to 30.2% of all coins issued. At bitcoin’s price near $83,050, that stash is worth approximately $502 billion, a sum comparable to the market capitalization of a major global bank.

Most standard Bitcoin addresses show only a scrambled fingerprint of the public key, not the key itself, so those coins are not counted as exposed. That protection disappears the moment an address sends a transaction, which reveals the public key and strips cover from any coins left behind at that address.

Exchange-held coins land in the exposed group more often than self-custodied ones, Glassnode found, because platforms tend to reuse deposit addresses across many transactions.

Taproot, the address format Bitcoin added in 2021, and Satoshi Nakamoto’s earliest coins both show the public key by default rather than a hashed version of it, putting both the newest and oldest corners of the network at risk.

Europol Rejects Claims That Quantum Computing Breaks Crypto Outright

Europol’s warning is deliberately narrow. The agency rejects broader claims that quantum computing will collapse cryptocurrency, framing the risk instead as falling on holders who have exposed their keys, not on the protocol as a whole.

Once a public key is exposed, it remains permanently vulnerable to future quantum decryption.

Europol, cybercrime unit report

A second Europol report describes a tactic called harvest-now-decrypt-later, where an attacker copies encrypted data or exposed public keys today and waits for quantum machines capable of cracking them later. Europol said it found no clear evidence this is happening at scale against crypto holdings, but the strategy means exposure recorded today could still be exploited years from now even if no quantum attack exists yet.

Wallet Migration Would Need 76 to 300 Days of Network Capacity

Europol’s cited research estimates that migrating all exposed coins to quantum-safe wallets would consume at least 76 days of Bitcoin’s entire transaction capacity if done all at once. Spreading that migration across a quarter of every block instead stretches the timeline to roughly 300 days, a tradeoff between network congestion and migration speed.

Europol set no date for when a quantum computer capable of this attack might exist. It argues that upgrading a network with no central operator takes years, and noted that some Bitcoin developers already back proposals to freeze coins in vulnerable wallets ahead of any attack.

The larger signature sizes Europol flags, up to 120 times current size, raise the same engineering tension already visible in other parts of crypto infrastructure, where security upgrades compete with throughput. The Ethereum Foundation’s recent proposal for native transaction assertions addresses a related signing-failure risk, while Bitcoin’s own node software has moved incrementally on security, as in Core Lightning’s v26.06.9 release earlier this year.

The CCS read. Custodians and exchanges carry more of this exposure than retail holders who never reuse addresses, since pooled deposit wallets are precisely the reused, always-public-key-visible structures Glassnode flags. Institutional custody providers should treat key rotation and address hygiene as a near-term operational item, not a theoretical one tied to a quantum computer that does not yet exist.

Europol has not set a timeline for when migration standards or network-level freezes might be proposed to Bitcoin’s developer community, leaving custodians and exchanges to decide on their own whether to rotate exposed addresses before any quantum capability materializes.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

IBM completes HRL Laboratories buyout to speed its quantum roadmap
AI News

IBM completes HRL Laboratories buyout to speed its quantum roadmap

, , , , , ,

BlockchainAugust 26, 2026·5 min read

IBM has closed its acquisition of HRL Laboratories to accelerate development of Quantum Starling, a fault-tolerant quantum computer the company aims to deliver by 2029. The deal signals IBM’s confidence in meeting an ambitious timeline while competing for government funding and enterprise adoption in a race toward commercially viable quantum systems.

  • IBM completed HRL Laboratories acquisition to speed quantum computing roadmap toward 2029 Starling delivery target
  • IBM demonstrated cooled modular cryogenic cells in Poughkeepsie that link via short connections instead of long noisy cables
  • U.S. government backing includes $1 billion CHIPS award for Anderon foundry in Albany to fabricate quantum wafers for multiple vendors
  • 2029 Target year for IBM Quantum Starling fault-tolerant system delivery before end of decade
  • 20,000x Expected computational power increase of Starling compared to current quantum hardware
  • $2 billion Total U.S. government quantum computing initiative spanning nine firms including IBM

IBM has completed its acquisition of HRL Laboratories, integrating the research organization into its quantum computing division as the company accelerates development of Quantum Starling, a large-scale fault-tolerant quantum computer scheduled for delivery by 2029.

The company declined to disclose purchase terms but framed the acquisition as a strategic move to compress the timeline on a project that represents IBM’s flagship bet on near-term quantum commercialization.

IBM already operates more than 90 quantum systems deployed across Fortune 500 companies, universities, and government agencies, a user base that will serve as both early adopters and testbeds for Starling when the system reaches market.

IBM demonstrates modular cryogenic architecture with short-link quantum processor design

The timing of the HRL acquisition announcement coincides with significant technical progress on Quantum Starling’s underlying infrastructure.

On August 19, IBM reported that engineers at its Poughkeepsie, New York facility had successfully linked and cooled the first pair of modular cryogenic cells, each standing approximately eight feet tall and operating below 15 millikelvin, roughly 180 times colder than deep space.

This breakthrough addresses a longstanding engineering constraint in quantum systems: traditional cylindrical refrigeration units required long, noisy connections between processors that degraded qubit coherence and limited scalability.

The new box-shaped modular design places cryogenic cells side by side with short connections joined into a shielded tunnel that maintains each chip near absolute zero while minimizing electromagnetic interference.

IBM’s L-Coupler technology binds multiple processors together so they function as a single logical unit, allowing the system to scale horizontally rather than forcing engineers to stack processors vertically in a single cryogenic vessel.

The company estimates that Starling will eventually house hundreds of processors operating under this modular architecture, enabling computational power roughly 20,000 times greater than current quantum hardware.

The modular approach directly influenced IBM’s decision to acquire HRL Laboratories, whose expertise in quantum systems engineering and materials science aligns with the scaling challenges ahead. By folding HRL’s research capabilities into its quantum division, IBM aims to validate this architecture at production scale before the 2029 target date.

U.S. government backs Anderon quantum foundry with $1 billion CHIPS award matching IBM’s cash commitment

IBM’s quantum ambitions are now embedded in a broader federal strategy to establish domestic quantum manufacturing capacity.

In May, IBM and the U.S. Department of Commerce announced Anderon, described as America’s first pure-play quantum foundry, backed by a proposed $1 billion CHIPS award and $1 billion in matching funding from IBM. The foundry will be headquartered in Albany, New York, and will fabricate 300-millimeter quantum wafers for multiple vendors rather than exclusively serving IBM’s internal needs, a significant departure from IBM’s traditional vertical integration model.

Arvind Krishna, IBM’s Chairman and CEO, stated that IBM’s decades of experience in silicon fabrication would prove essential to developing the broader quantum technology industry. The government and IBM jointly pegged the sector’s economic potential at up to $850 billion by 2040, signaling confidence in quantum computing’s transition from research phase to industrial application.

This public-private partnership reflects Washington’s concern that quantum leadership will determine technological and economic dominance in the coming decade, particularly in cryptography and materials simulation.

A separate $2 billion government quantum computing effort spans nine firms, with IBM in line for approximately $1 billion, GlobalFoundries near $375 million, and D-Wave Quantum, Rigetti Computing, and Quantinuum each receiving roughly $100 million.

IBM shares rose more than 6% when news of the Anderon CHIPS award broke, suggesting investor confidence that federal backing materially de-risks IBM’s quantum roadmap and ensures sustained R&D funding through the 2029 Starling milestone.

Quantum threat to Bitcoin cryptography intensifies investor focus on migration timelines

The convergence of IBM’s hardware progress, government funding, and the Starling timeline has sharpened institutional focus on quantum computing’s most immediate threat: the potential to break Bitcoin’s cryptographic security.

Shor’s algorithm, a quantum computing procedure capable of working backward from a public key to derive the private key, poses an existential risk to any blockchain system relying on elliptic-curve or RSA cryptography. Recent reader polling found that 47% of respondents expect quantum computing to compromise Bitcoin by 2035, a date that sits only six years after Starling’s planned delivery.

Institutional investors and blockchain operators face a critical gap between IBM’s projected Starling timeline and the unknown threshold at which quantum hardware becomes sufficiently powerful to execute Shor’s algorithm at scale.

Google researchers have begun modeling the hardware requirements, but no consensus exists on whether a 2029 system or a system five years later will pose immediate cryptographic risk. This ambiguity has already triggered discussions within Bitcoin and Ethereum developer communities about post-quantum cryptographic migration strategies.

For institutions holding long-term cryptocurrency positions or operating blockchain infrastructure, the HRL acquisition and Anderon foundry represent concrete evidence that quantum computing is transitioning from theoretical threat to engineered milestone.

The pace of IBM’s progress, reinforced by $1 billion in federal matching capital and the addition of HRL’s engineering expertise, suggests that quantum systems capable of attacking current blockchain security may arrive sooner than previously modeled.

IBM has set a clear 2029 deadline for Quantum Starling’s commercial delivery, and the HRL acquisition signals the company is allocating additional engineering resources to meet that schedule. The next critical verification will come from IBM’s demonstration of multi-cell cryogenic systems scaling beyond the current two-cell proof-of-concept, expected within the next 12 to 18 months. Simultaneously, cryptography researchers and blockchain developers are racing to define post-quantum migration standards, the Crypto Coin Show will track whether Bitcoin, Ethereum, and other major networks adopt quantum-resistant signatures before 2035, and whether IBM’s 2029 Starling delivery date accelerates that timeline.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

CZ Floats Freezing Satoshi’s Bitcoin Over Quantum Risk
Bitcoin

CZ Floats Freezing Satoshi’s Bitcoin Over Quantum Risk

, , , , , ,

BitcoinJune 20, 2026·6 min read

Binance founder Changpeng Zhao has proposed a community-driven mechanism to freeze dormant Bitcoin addresses vulnerable to quantum computing attacks, a debate that highlights the institutional crypto industry’s growing concern over cryptographic security timelines. The proposal, framed as a network-wide decision rather than unilateral action, raises fundamental questions about asset protection, network governance, and the coordination burden of implementing quantum-resistant upgrades across a decentralized system.

  • Satoshi Nakamoto’s estimated 1.1 million BTC, worth approximately $70 billion at current prices, remains locked in quantum-vulnerable addresses since 2009-2010.
  • Google Quantum AI research published in March estimated a quantum attack could require fewer than 500,000 qubits and run in minutes, well below previous threat assessments.
  • More than one-third of all Bitcoin in circulation has exposed public keys on-chain, leaving those addresses theoretically vulnerable to private-key derivation by sufficiently advanced quantum computers.
  • 1.1M BTC Satoshi’s estimated holdings compared to Bitcoin’s 21 million total supply.
  • 500K qubits Required quantum resource estimate versus earlier projections of millions required.
  • 1 year Proposed community timeline before dormant quantum-vulnerable addresses would lock via network fork.

Changpeng Zhao framed the quantum security question on the Galaxy Brains podcast not as a Binance directive but as a thought experiment for Bitcoin’s decentralized governance.

During his conversation with Galaxy Research head Alex Thorn, Zhao suggested the network could implement a community-approved upgrade that would freeze coins left in quantum-vulnerable addresses roughly one year after activation. The proposal would use a blockchain fork to lock these funds irreversibly, preventing either theft by hypothetical quantum attackers or recovery by miners and developers.

Zhao later clarified on social media that reports characterizing him as personally seizing Satoshi’s address were inaccurate, though he acknowledged the challenge of distinguishing Satoshi’s holdings from other early-miner addresses using only on-chain analysis.

Google’s Quantum Threat Estimates Accelerate Defensive Timeline Pressure

The urgency behind Zhao’s proposal stems directly from Google Quantum AI’s March research publication, which substantially compressed the timeline for practical quantum computing threats to Bitcoin’s cryptographic foundation.

The research team estimated that a quantum computer powerful enough to derive private keys from public keys could operate with fewer than 500,000 qubits and complete such attacks within minutes.

This represented a dramatic downward revision from earlier academic projections that had suggested millions of qubits would be necessary, effectively moving the threat from theoretical distant future to credible near-term risk category.

The practical vulnerability exists because Bitcoin transactions reveal public keys on-chain, creating a theoretical vector for private-key extraction. Once a quantum computer obtains the private key, it can spend funds without the legitimate owner’s consent.

Data analyzed in March showed that more than one-third of all Bitcoin ever mined had exposed public keys on-chain at some point, creating an exposed surface area far larger than many institutional investors had previously considered.

Satoshi Nakamoto’s estimated 1.1 million BTC, mined during 2009 and 2010 and never moved, represents the single largest concentration of these quantum-vulnerable coins.

At Bitcoin’s price near $63,244, Satoshi’s dormant hoard carries a market value of roughly $70 billion.

For institutional investors holding Bitcoin or analyzing systemic risk, this figure matters not merely as a notional wealth statistic but as a measure of locked liquidity that could theoretically enter circulation if either quantum theft occurred or if the network implemented recovery mechanisms.

The sheer capital value amplified the urgency of the quantum transition debate among exchanges, miners, and protocol developers.

BIP-361 Draft Proposal Offers Hard Choices on Dormant Coin Recovery

Zhao’s framework aligns substantially with BIP-361, a draft proposal authored by Jameson Lopp and five other researchers currently in community discussion. The BIP proposes a two-phase mechanism: first, blocking all new transactions to quantum-vulnerable addresses roughly three years after upgrade activation; second, invalidating legacy signatures on those addresses two years thereafter.

The approach codifies an uncomfortable binary choice facing the network, either allow a quantum thief to claim exposed coins, permit slow community recovery of dormant funds, or implement permanent lockdown to ensure neither outcome materializes.

The BIP-361 authors frame this as governance pragmatism rather than technical capability. They argue that adopting quantum-resistant cryptography network-wide requires coordination timelines measured in years, not months, and that doing so after a quantum computer has already begun draining addresses would be too late.

The proposal even invokes Satoshi Nakamoto’s own commentary on lost coins to justify the lockdown approach: “Lost coins only make everyone else’s coins worth slightly more.

Think of it as a donation to everyone.” By this logic, permanently freezing dormant quantum-vulnerable coins would distribute their value proportionally across remaining circulating supply rather than allowing either external theft or centralized recovery.

Implementing such a fork requires consensus from miners, node operators, exchanges, and the broader developer community. Unlike a voluntary soft fork that users can ignore, this mechanism would force a hard-fork choice: accept the new quantum-protection rules or fork away from the main chain.

Institutional exchanges like Binance would face operational pressure to adopt the upgraded chain to avoid serving two incompatible assets, creating implicit pressure for consensus even absent formal voting mechanisms.

Competing Legal Claims Cloud the Precedent for Dormant Asset Governance

The quantum security debate exists within a contested legal landscape that complicates any unilateral network action on dormant addresses. An anonymous plaintiff and two Wyoming limited-liability companies have filed suit in New York seeking to claim roughly 39,069 idle Bitcoin addresses under abandoned-property law, including Satoshi’s holdings.

The lawsuit contests whether these coins constitute abandoned property subject to state seizure and transfer rather than permanently lost assets.

Galaxy Research’s analysis of the lawsuit expressed skepticism that the plaintiffs would prevail, but the case itself illustrates an uncomfortable gap in Bitcoin’s governance framework.

No clear consensus exists on whether a dormant address represents abandoned property susceptible to legal claim, a permanent loss subject to network-wide wealth redistribution, or an asset whose owner simply chose not to move funds.

A quantum-protection fork that locked these coins would effectively resolve that question in favor of permanent lockdown, foreclosing any future legal remedy or recovery mechanism.

For institutional investors, the lawsuit risk adds another layer of governance uncertainty atop the quantum timeline question.

Institutional Custody and Exchange Liability Drive Adoption Pressure

Zhao’s framing as a community question masks genuine pressure on institutions to adopt quantum-resistant measures regardless of explicit consensus. Binance and other major exchanges hold customer Bitcoin in custody, creating fiduciary exposure if quantum theft occurred and the exchange had not migrated customer funds to quantum-resistant addresses.

Even if the network did not implement BIP-361 or a similar lockdown mechanism, an exchange holding coins in quantum-vulnerable addresses could face liability claims from customers whose holdings were compromised.

This creates an incentive structure where major exchanges might adopt quantum-resistant practices unilaterally before the network formally implements network-wide protection. A single large exchange migrating customer funds to quantum-safe addresses would signal to competitors and institutional clients that the threat was serious enough to justify action.

Once several major custodians moved, the practical network effect could accelerate adoption even without explicit protocol governance.

The quantum threat thus operates as both a technical protocol question and a business-continuity problem for institutions holding customer assets.

Timeline Uncertainty Remains the Core Unresolved Question for Asset Managers

Zhao’s one-year proposed freezing timeline reflects genuine uncertainty about how quickly the network can execute a quantum-resistant upgrade without fragmenting consensus. Bitcoin’s upgrade process requires sustained discussion, developer work, miner signaling, and node operator deployment, a process that has historically consumed years even for non-controversial changes.

A quantum-protection mechanism would prove far more contentious because it explicitly affects coin ownership and accessibility, raising philosophical objections alongside technical concerns.

The Google research compressed the threat timeline substantially, but even 500,000-qubit quantum computers remain years away from likely deployment. The practical window for coordinating a network

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Bitcoin Address Reuse Warning Puts Quantum Risk Back In Focus
Bitcoin

Bitcoin Address Reuse Warning Puts Quantum Risk Back In Focus

, , , , , ,

BitcoinJune 15, 2026·6 min read

A Coinbase-linked advisory has surfaced concerns about Bitcoin address reuse and legacy cold wallets as long-term exposure points if quantum computing advances threaten current cryptographic assumptions. For institutional custodians and large holders, this signals the need for migration planning well before quantum risk becomes an active threat rather than a theoretical one.

  • Coinbase-linked discussion flagged address reuse and legacy Bitcoin wallets as future quantum-risk exposure points for large holders
  • Exposed public keys become visible on-chain when coins are spent, creating potential vulnerability under quantum-capable computing scenarios
  • Institutional custodians face custody model adaptation challenges if ecosystem requires migration to quantum-resistant signatures in future
  • Future Timeline when quantum risk becomes active threat, not immediate emergency or security break
  • Legacy Wallets and reused addresses representing class of coins requiring special attention in post-quantum migration
  • Long-term Planning horizon institutions need to develop clear migration paths before threat becomes urgent

Bitcoin’s quantum-risk debate has crossed a threshold from academic developer discussion into institutional custody planning.

A Coinbase-linked advisory discussion has put address reuse and legacy cold wallets back into focus as long-term exposure points, not because Bitcoin faces an immediate break in its cryptographic security, but because institutions holding large balances need clear migration paths before the risk becomes urgent.

The issue centers on a specific technical fact: when Bitcoin is spent from an address, the public key becomes visible on-chain. Under today’s cryptographic assumptions, that visibility poses no immediate problem.

But if quantum computing advances to the point where it can attack the elliptic-curve digital signature algorithm that secures Bitcoin transactions, those exposed public keys could become more sensitive targets.

Coinbase Advisory Flags Address Reuse as Quantum Exposure Points

The discussion did not originate from a security breach or an active attack. Rather, a Coinbase-linked advisory reportedly flagged custody practices that look acceptable today but may require migration plans before quantum computing becomes a genuine threat. The specific concern is address reuse, the practice of spending Bitcoin from the same address multiple times.

Most Bitcoin users are already discouraged from reusing addresses for privacy reasons, but the quantum angle adds a security dimension that institutional operators cannot ignore.

For institutional custodians, the distinction matters enormously. A retail wallet holding a small balance presents one risk profile. A cold wallet holding large institutional balances presents another entirely.

Institutions do not need Bitcoin to be secure only in 2024 or 2025; they need confidence that their custody model can adapt over time as technology and threats evolve. That requirement creates a forward-looking problem that cannot be deferred until quantum computers actually threaten Bitcoin’s security.

The advisory is not a panic alert. It is a preparation signal. Custody practices that look acceptable today may need a documented migration plan before quantum risk becomes active.

For large holders and exchanges, this means identifying which addresses and wallets hold exposed public keys, understanding which of those represent legacy systems, and developing a timeline for moving to quantum-resistant approaches if the ecosystem eventually requires it.

Exposed Public Keys Create Long-term Migration Liability

Bitcoin’s transaction model works differently from many other systems. When a user spends Bitcoin, they must provide a signature proving ownership of the coins at that address. That signature is generated using a private key, but the transaction also reveals the corresponding public key on-chain.

In the current era of cryptographic security, knowing the public key does not allow an attacker to derive the private key or spend the coins. The mathematics of elliptic-curve cryptography make that computation effectively impossible with today’s computing power.

Quantum computers, if they reach sufficient capability, could change that equation. Shor’s algorithm, which runs on quantum computers, is theoretically capable of breaking elliptic-curve cryptography much faster than classical computers could. This does not mean quantum computers exist at that scale today or will exist tomorrow.

It means that addresses holding spent coins with exposed public keys represent a potential future liability class that serious custodians need to track.

The problem compounds for institutions holding Bitcoin in legacy wallets or cold storage systems that may not easily support newer quantum-resistant cryptographic schemes. A dormant address holding large institutional balances cannot be easily migrated if the entity controlling it no longer exists, is unreachable, or operates under governance structures that move slowly.

That is where the institutional custody problem becomes genuine: not as an immediate emergency, but as a long-term infrastructure challenge that requires planning and coordination across wallets, exchanges, developers, and custodians.

Institutional Custody Models Must Plan for Migration Before Urgency Arrives

Bitcoin is becoming more institutional every year. Banks, exchange-traded funds, custodians, public companies, and large asset managers are now material holders of Bitcoin. That shift changes the risk calculus around quantum-resistant migration.

Retail users holding small amounts in modern wallets can afford to wait and move quickly when a genuine threat appears. Large custodians holding billions in client assets cannot operate that way. They need clear paths, tested procedures, and documented plans before a crisis moment forces rushed migration.

The complexity lies not just in technical migration but in coordination. If the Bitcoin ecosystem eventually needs to adopt quantum-resistant signatures, that change would require consensus among developers, miners, and node operators. It would require exchanges to upgrade custody systems.

It would require wallet software to support new signature schemes. It would require institutions to migrate holdings from old addresses to new ones. That coordination problem becomes exponentially harder if it happens in response to an active threat rather than in response to a planned, predictable timeline.

This is why the Coinbase advisory discussion matters now. Good security planning happens before a threat becomes active, not after. If the industry waits until quantum risk becomes obvious and immediate, migration will be more stressful, more politically contentious, and more technically difficult.

Institutions that map their exposure today, understanding which addresses hold exposed keys, which wallets are legacy systems, and what governance changes would be required to migrate, will be far better positioned than those that defer the conversation.

Quantum Risk Moves from Theory to Institutional Planning Agenda

The quantum-computing threat to cryptocurrency has existed in academic literature for years. Cryptographers and protocol developers have understood the theoretical vulnerability for some time. What has changed is that the conversation is no longer confined to developer conferences and research papers.

It is now appearing in institutional custody discussions, advisory memos, and long-term planning documents at exchanges and custodians. That shift reflects a maturation of Bitcoin as an institutional asset class.

The risk itself is not immediate. Bitcoin is not being broken by quantum computers today. There is no evidence of imminent quantum computing capability that would threaten elliptic-curve signatures at scale. This is not a story about an emergency. It is a story about responsible institutional planning happening in advance of a known long-term vulnerability.

Large holders and custodians cannot afford to treat quantum risk as either an emergency requiring immediate action or as a non-issue to be ignored. The middle path, planning and coordination well before the threat becomes active, is where serious institutions need to operate.

That planning requires understanding which addresses and wallets represent exposure, which require migration, and what clear procedural paths exist for moving to quantum-resistant systems if the ecosystem eventually requires it.

The open question for institutional Bitcoin holders is not whether quantum risk will arrive, but when the industry will coalesce around a clear migration pathway and timeline. Custodians that have already begun mapping their exposure and developing migration strategies will have significant advantages over those that wait for regulatory guidance or consensus to emerge under pressure. Watch for whether major custodians publish quantum-migration roadmaps in the next 12-18 months, and whether Bitcoin protocol developers begin consensus discussions around quantum-resistant signature scheme adoption as a long-term priority.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

qday-2-thumbnail
Bitcoin

Q-Day Is Coming. Your Wallet Is Already Being Targeted.

, , , , , , , ,

Q-Day Is Coming. Your Wallet Is Already Being Targeted.
Exclusive · Bitcoin 2026, Las Vegas  ·  🎙 In the Lambo

Q-Day Is Coming.
Your Wallet Is Already
Being Targeted.

In a candid conversation at Bitcoin 2026, Krown Technologies CEO James Stephens warned that quantum computers may be capable of cracking Bitcoin wallet keys by 2027 — and the harvest of public keys has already begun.

BT
Bitcoin 2026 Exclusive Interview with James Stephens, CEO of Krown Technologies
Quantum Security Bitcoin
2027
Stephens’ projected year for the first major quantum breach event
20×
Fewer qubits needed to break encryption, per Google’s latest findings
2030
NIST’s revised deadline for post-quantum cryptography standards

The Threat Landscape

Seated inside a galaxy-wrapped Lamborghini on the floor of Bitcoin 2026 in Las Vegas — the same car bearing the words “Wen Lambo?” and “Are You Ready for Q-Day?” on the booth behind it — James Stephens didn’t mince words. “We are in the harvest now, decrypt later timeframe,” he said. “They’ve already started harvesting these public keys — and they’ll decrypt them later.” The remark, delivered with the calm of someone who has been sounding this alarm since 2022, lands differently now that quantum computing milestones are arriving ahead of schedule.

Stephens cited a cascade of recent developments that have compressed the timeline. NIST, the U.S. standards body, has moved its post-quantum cryptography deadline from 2040, to 2035, and now to 2030. Google recently announced that cracking classical encryption requires 20 times fewer qubits than previously estimated on a quantum computer. And most tellingly, a cryptographic key tied to a Bitcoin wallet — however small — has already been broken. “Every time we find out something new it seems to be every single week,” Stephens said, “and every time there are these aha moments, everything moves up.”

His personal timeline estimate: a first major breach event by 2027 or 2028. That is not a distant horizon. It is months away. And the complacency Stephens sees across the industry — in teams, in companies, in the broader conversation — may prove to be the most dangerous vulnerability of all. “Complacency on these teams and in these companies,” he said flatly, “are the real threat and the real killer.”

“Q-Day is not going to arrive on some horse with a trumpet sounding. It’s going to happen quietly. It’s going to happen lethally — and it will be everywhere.”

— James Stephens, CEO, Krown Technologies

A Founder Forged by Fraud

Stephens didn’t arrive at this mission from a research lab or a government agency. He arrived through personal loss. Nearly a decade ago, he was scammed, hacked, and defrauded in the crypto space — the full spectrum of threats that plague digital asset holders today. That experience became the catalyst for Krown Technologies, and for Qastle. “I looked at the threats. I knew what they were. I saw what was not being addressed,” he said. Back in 2022 and 2023, when he was already talking about quantum vulnerabilities, the response was polite but dismissive. “People would pat you on the back and say, that’s great, keep it up.” Now, he said, the phone doesn’t stop ringing.

What Gets Attacked — And How

A crucial distinction Stephens draws: the Bitcoin protocol itself is not the primary target. The vulnerability lives at the wallet level — specifically in the cryptographic keys that prove ownership of funds. Current wallet security relies on the assumption that deriving a private key from a public key is computationally infeasible. Quantum computing, at sufficient scale, invalidates that assumption entirely.

Hardware wallets, long considered the gold standard of Bitcoin security, offer no meaningful protection in a post-quantum world. “I have people who had cold wallets and they actually put theirs on Qastle,” Stephens noted, referring to Krown’s flagship quantum-resistant wallet. “The level of protection is cold-wallet level — even though we are a hot wallet.” For holders reluctant to move assets they haven’t touched in a decade, Stephens is sympathetic but direct: the threat doesn’t care how long you’ve held.

The Qastle Approach: Fighting Quantum with Quantum

Krown Technologies’ answer to the quantum threat is their Qastle wallet, built from the ground up with post-quantum cryptography. At its core is a partnership with Quantum Emotion, which provides Quantum Random Number Generation (QRNG) — what Stephens distinguishes as true entropy, as opposed to the pseudo-randomness used by most existing “quantum-resistant” solutions. The technology has been validated through IBM’s Qiskit framework using electron tunneling. The principle, as Stephens frames it: fight quantum with quantum.

Beyond the QRNG layer, Qastle stacks over six different post-quantum cryptographic algorithms (PQCs), each deployed where it performs best — whether for lattice-based signatures or key encapsulation. Stephens describes it as a layered defense: “however it sits, the QRNG on the keys and everything sits where it’s most powerful in defense.”

Users can bridge and swap assets without ever leaving the Qastle environment — covering Bitcoin, Ethereum, Solana, Base, and the Krown network natively — removing the need to expose keys on external DEXes or centralized exchanges. The philosophy is total containment: keep people protected by keeping them inside a secured perimeter.

The Camelot Ecosystem

Qastle is one organ in a larger body. Stephens describes Krown’s broader product vision using a medical analogy: imagine the Krown network as the human body, and every product in the ecosystem — Qastle, Excalibur, and what’s still to come — as the organs running inside it, all self-sustaining, all secured under the same chain. He calls this ecosystem Camelot. “We’re slowly putting all the organs into place under the chain,” he said. The roadmap is deliberate, not rushed — each piece added only when it can be executed without sacrificing innovation or standards.

Beyond the Wallet: Social Engineering and DeFi

Quantum attacks are not the only front. Stephens flagged social engineering — the human manipulation tactics that fuel billions of dollars in crypto fraud every year — as a parallel battle Krown is preparing to fight. He teased a forthcoming announcement targeting this threat specifically, calling scammers “the scum of the earth” and framing their defeat as a personal mission. With a string of high-profile DeFi hacks and protocol vulnerabilities marking the early months of 2026, the timing couldn’t feel more urgent.

Krown also plans to extend quantum protection to decentralized applications (DApps), either directly or through a licensing model, allowing the broader DeFi ecosystem to shelter under the same cryptographic umbrella as Qastle users.

What’s Coming Next

Stephens revealed a major product announcement ahead of his Tuesday keynote at the Genesis Stage: Excalibur, a dedicated quantum cold wallet currently in prototyping. It is designed for holders who want the physical reassurance of hardware storage without sacrificing post-quantum protection — the best of both worlds, delivered under the Camelot banner.

On the partnership front, Krown has locked in a six-year deal with the Bitcoin Conference series — including as title sponsor of the Miami event — and a matching six-year agreement with Canada’s Futurist Conference in Toronto, positioning Qastle as the official quantum wallet of both events. A five-year exclusive arrangement with Quantum Emotion means no competing quantum wallet products can reach this sector without going through Krown. As quantum headlines multiply over the coming years, attendees at every major Bitcoin event will see Qastle front and center. That, Stephens says, was always the plan.

How to Get Protected Now

Qastle is available today on the App Store and Google Play. Users can sign up and begin storing assets immediately, with Bitcoin, Ethereum, Solana, Base, and the Krown network supported natively from the main screen. Subscription options include monthly and annual plans, with two months free on the annual tier. Once inside Qastle, assets are protected at rest — no further action required. The message from Stephens is simple: don’t wait to be one of the people who wakes up and wishes they had moved sooner.

Ripple reveals a four-phase plan to make the XRP Ledger quantum-safe by 2028
XRP

Ripple reveals a four-phase plan to make the XRP Ledger quantum-safe by 2028

, , , , , ,

BlockchainApril 20, 2026·5 min read

Ripple has unveiled a four-phase roadmap to make the XRP Ledger quantum-resistant by 2028, responding to mounting industry concern that quantum computers could break the cryptographic foundations securing blockchain networks. For institutional investors, the timeline signals both urgency around a technical threat and an opportunity to assess which networks are preparing defenses versus those still treating quantum risk as distant theory.

  • Ripple targets 2028 completion for full XRP Ledger quantum-safety upgrade via four distinct implementation phases beginning now.
  • Approximately 300,000 XRP accounts holding 2.4 billion XRP remain quantum-safe because their public keys have never been exposed on-chain.
  • Recent Google Quantum AI research has elevated quantum risk from theoretical to credible, forcing networks to prioritize post-quantum cryptography adoption timelines.
  • 2028 Target year for complete XRP Ledger quantum-resistance upgrade versus current baseline security.
  • 300,000 XRP accounts with 2.4 billion total XRP unexposed to quantum attacks today.
  • 2026 Year Phase Two begins with formal testing of post-quantum security methods and privacy research.

Ripple has moved faster than most blockchain networks in confronting the quantum computing threat, publishing a detailed four-phase plan to make its XRP Ledger resistant to quantum attacks by 2028.

The timeline addresses a concern that has shifted from academic speculation to credible near-term risk following recent research from Google Quantum AI showing that quantum computers sufficiently powerful to break widely-deployed cryptography could emerge within the next decade.

The roadmap reflects a broader industry split: while some networks remain skeptical of the threat, others are treating quantum-resistant upgrades as infrastructure priorities requiring years of testing and coordination.

Google Research Elevates Quantum Threat From Theoretical to Credible Risk

The Google Quantum AI paper reignited industry concern by demonstrating that the elliptic curve cryptography protecting blockchain wallets, transaction approvals, and digital asset storage could be vulnerable to sufficiently advanced quantum computers.

Most major blockchains, including Bitcoin and Ethereum, rely on this class of cryptography, creating a systemic vulnerability if quantum hardware advances faster than expected. The finding has split industry opinion sharply: some participants, including MicroStrategy founder Michael Saylor, have dismissed the concern as overblown, while others view it as requiring immediate preparation.

Ripple’s assessment differs. In its announcement, the company stated that “the threat has moved from theoretical to credible, and preparation timelines now matter.” The company also flagged a less-discussed vector called “harvest now, decrypt later,” in which bad actors collect encrypted blockchain data today and store it for decryption once quantum computers become powerful enough.

This attack surface means institutions cannot simply wait until quantum computers are demonstrably powerful before beginning upgrades; the window for protecting historical data closes today.

The threat has moved from theoretical to credible, and preparation timelines now matter.

Ripple, in company announcement

Other networks are beginning similar work. Tron founder Justin Sun indicated his blockchain is evaluating post-quantum technical defenses, and various research teams are exploring quantum-resistant alternatives based on lattice cryptography and other methods designed to withstand quantum attacks.

Ripple’s Four-Phase Roadmap Allocates Five Years for XRP Ledger Quantum Upgrade

Phase One, starting immediately, focuses on emergency preparedness. Ripple is building tools enabling users to migrate assets to post-quantum encryption schemes, including zero-knowledge proof methods that would function even if current cryptography is compromised. This phase treats quantum risk as imminent enough to warrant defensive infrastructure now, before Phase Two begins formal testing.

Phase Two launches in early 2026 and runs through year-end, involving formal research into quantum risks and testing of new security tools in collaboration with Project Eleven, an external research initiative. By the end of 2026, Ripple will test advanced post-quantum security methods and explore new privacy-preserving techniques.

Phase Three, spanning 2027, encompasses the formal transition work preparing the entire XRP Ledger for cryptographic upgrade. The fourth and final phase, completing by 2028, deploys native post-quantum cryptography across the entire ledger via formal network amendment, making the protocol resistant to quantum attacks.

The five-year timeline reflects the complexity of upgrading a decentralized network. Unlike centralized systems, blockchain changes require consensus among validators and developers, testing on testnets to prevent unintended breaks, and coordination across custody providers, exchanges, and wallet operators who must support the new cryptographic standards.

XRP’s Current Quantum Exposure Is Lower Than Bitcoin’s Due to Account Age Distribution

An important detail distinguishes XRP Ledger’s quantum vulnerability from Bitcoin’s. Quantum computers pose the greatest risk to wallets where the public key has already been published on-chain, which typically occurs after a wallet’s first transaction.

An April 2026 audit by XRPL validator “Vet” found that approximately 300,000 XRP accounts, collectively holding 2.4 billion XRP, have never executed a transaction and therefore have no publicly exposed cryptographic keys. These accounts remain immune to quantum attacks under current threat models because their public keys remain hidden.

Bitcoin’s holder base skews older, with a far larger proportion of accounts that executed transactions years or decades ago, exposing their public keys to quantum decryption risk.

The same audit noted that only two major dormant XRP accounts with combined holdings exceeding 21 million XRP have remained inactive for more than five years, suggesting most XRP holders either trade regularly or hold on exchanges, where private key management differs from self-custody scenarios.

This distinction matters for institutional custody and risk models. If a significant portion of an institution’s XRP holdings are in newly funded accounts that have never transacted on-chain, quantum risk from those specific holdings is currently lower than for similarly sized Bitcoin positions.

Institutional Investors Face Timing Risk as Quantum Threat Accelerates Timeline

The shift from theoretical to credible quantum threat compresses institutional decision-making timelines. Five years is a short window for upgrading a protocol relied upon by exchanges, custodians, and asset managers managing billions in value. Institutions must now decide whether to treat quantum-resistant upgrades as core infrastructure priorities or allocate resources assuming longer timelines.

Ripple’s public roadmap gives market participants specific milestones to monitor: Phase Two testing in 2026 will reveal whether post-quantum methods can be deployed without breaking wallet interoperability or exchange settlement processes.

The Google research also raises competitive questions among layer-one protocols. Networks that complete quantum-resistant upgrades first may attract institutional capital seeking maximum cryptographic assurance, while networks remaining on classical cryptography face increasing regulatory and operational scrutiny.

Some institutions may require quantum-resistant custody or settlement before adding to positions in networks still running unencrypted key material.

Ripple will publish Phase Two results by end of 2026, providing the first real-world test data on whether post-quantum cryptography can scale on a live decentralized network. Institutions should monitor that testing window closely to assess whether Ripple’s timeline is achievable and whether other networks, particularly Bitcoin and Ethereum, announce comparable roadmaps before the 2028 target. The absence of formal quantum upgrade plans from larger networks by mid-2026 would signal either technical confidence in longer timelines or institutional risk that upgrades may prove more difficult to coordinate than Ripple’s sequential phases assume.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe