Quantum Threat Looms Larger for Bitcoin Than Ethereum
Google and Citi warn Bitcoin's quantum vulnerability far exceeds Ethereum's. A 500k-qubit machine could crack a BTC key in minutes, while Ethereum's NIST-based upgrades are already underway. Slow Bitcoin governance leaves 6.9M BTC at risk.
Quick Take
Quantum computers could break BTC keys 20x faster than feared.
6.9 million vulnerable BTC may be exposed by 2028.
Ethereum's Pectra upgrade already implements quantum-resistant measures.
Bitcoin's slow upgrade cycles make migration extremely difficult.
Market Impact Analysis
BearishThe report highlights fundamental security risks for Bitcoin relative to Ethereum, potentially driving institutional reallocation away from BTC and toward ETH over the long term.
Speculation Analysis
Key Takeaways
- Quantum computers could crack Bitcoin’s elliptic curve cryptography 20x faster than previously feared.
- 6.9 million BTC—including legacy and Taproot outputs—may be exposed to quantum attack by 2028.
- Ethereum’s Pectra upgrade already implements NIST-backed quantum-resistant measures, while Bitcoin’s governance delays upgrades.
- Institutional holders face an urgent need to reassess Bitcoin’s long-term security.
What Happened
A Google Quantum AI paper and a Citi research note have issued a stark warning: Bitcoin’s quantum computing risk dwarfs that of Ethereum. The Google study, co-authored with Stanford and the Ethereum Foundation, found that breaking Bitcoin’s foundational elliptic curve cryptography requires roughly 20 times fewer resources than previously estimated. A quantum computer with fewer than 500,000 physical qubits could extract a private key from a public key in about nine minutes. Citi’s May 18 research note echoed these findings, emphasizing that the risk gap stems not only from technology but from governance. While Ethereum is already executing a quantum-resistant roadmap, Bitcoin’s slow upgrade process leaves it dangerously exposed. For institutional holders, the timeline to migrate or hedge is shrinking faster than anticipated.
The Numbers
Approximately 6.9 million BTC could be vulnerable to quantum attack, including coins in legacy wallets and Taproot outputs—which already accounted for over 21% of Bitcoin transactions in 2025. Nic Carter, co-founder of Coin Metrics, estimates a quantum computer capable of breaking elliptic curve cryptography may appear as early as 2028. The Google paper lowered the resource bar dramatically, requiring 20x fewer qubits than previous models. With a 500,000-physical-qubit machine, a Bitcoin private key could be cracked in just ~9 minutes. These data points move quantum risk from theoretical to a measurable threat with a narrowing window for action.
Why It Happened
Bitcoin’s security model relies on elliptic curve digital signatures. During a transaction, the public key is exposed on-chain, making it susceptible to Shor’s algorithm on a sufficiently large quantum computer. The Google paper quantified this attack vector with unsettling precision. Ethereum, by contrast, is transitioning to NIST-approved quantum-resistant algorithms through its Pectra upgrade, a process already in motion. Bitcoin’s governance—conservative and consensus-based—makes even critical upgrades agonizingly slow. SegWit took over eight years from proposal to adoption. This asymmetry leaves Bitcoin structurally more vulnerable, as Ethereum can adapt while Bitcoin’s upgrade cycle lags.
Broader Impact
The findings may accelerate institutional reallocation from Bitcoin to Ethereum and other assets with clear quantum migration paths. Regulatory bodies could scrutinize quantum-vulnerable digital assets, imposing security standards. For Bitcoin, the cost of inaction could be catastrophic—not just in potential theft but in loss of confidence. The 6.9 million vulnerable BTC represent a systemic risk. If quantum computing advances on schedule, the entire Bitcoin network could face an existential crisis that governance alone cannot solve quickly enough.
What to Watch Next
- Progress on Ethereum’s quantum-resistant Pectra upgrade—every milestone reduces Ethereum’s exposure.
- Any formal Bitcoin Improvement Proposals (BIPs) addressing quantum resistance—developer sentiment and timeline debates will be critical.
- Quantum computing hardware breakthroughs—if a 500k-qubit machine arrives sooner than 2028, expect rapid market repricing of BTC vs. ETH.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
