Will Quantum Computing Kill Bitcoin and Mining? Is This Alarmist?

On March 31, 2026, Google Quantum AI—a division of Google—released a white paper that quickly drew widespread attention, stating that the quantum computing resources required to break Bitcoin’s cryptography in the future are approximately 20 times lower than previously estimated. Industry discussion rapidly intensified following the publication, and headlines such as “Quantum Computers Can Break Bitcoin in 9 Minutes” began circulating across markets. Frankly speaking, however, such alarmism recurs once or twice every year; this time, it simply sounds especially intimidating because it bears Google’s name.

We systematically reviewed this 57-page paper, along with several other key studies released concurrently, to assess the credibility of related claims, clarify how quantum computing development is currently impacting the cryptocurrency and mining industries, and determine the actual stage and urgency of associated risks.

Reassessing the Technical Risk

Traditionally, Bitcoin’s security rests on a one-way mathematical relationship. When generating a wallet, the system creates a private key, from which a public key is derived. During Bitcoin usage, users must prove ownership of the private key—not by revealing it directly, but by using it to generate a cryptographic signature verifiable by the network. This mechanism remains secure because classical computers would require billions of years to reverse-engineer a private key from its corresponding public key—specifically, breaking the Elliptic Curve Digital Signature Algorithm (ECDSA) lies far beyond current practical feasibility. Thus, blockchains have long been considered cryptographically unbreakable.

Quantum computers, however, disrupt this assumption. Their operational principles differ fundamentally: rather than testing keys sequentially, they explore all possibilities simultaneously and leverage quantum interference effects to identify the correct key. To illustrate, a classical computer resembles a person trying keys one by one in a dark room; a quantum computer resembles multiple master keys that simultaneously match all lock mechanisms, converging more efficiently on the correct answer. Once sufficiently powerful, a quantum computer could rapidly derive your private key from your exposed public key and forge a transaction to transfer your Bitcoin to an attacker’s address. Due to blockchain’s immutability, assets lost in such attacks would be extremely difficult to recover.

On March 31, 2026, Google Quantum AI, in collaboration with Stanford University and the Ethereum Foundation, released a 57-page white paper. Its core objective was to evaluate the concrete threat quantum computing poses to ECDSA. Most blockchains and cryptocurrencies rely on 256-bit elliptic curve cryptography—based on the Elliptic Curve Discrete Logarithm Problem (ECDLP-256)—to protect wallets and transactions. The research team found that the quantum resources required to break ECDLP-256 have decreased significantly.

The team designed a quantum circuit specifically implementing Shor’s algorithm to reverse-engineer private keys from public keys. This circuit requires execution on a specific quantum hardware architecture: superconducting quantum computing—the primary technical pathway pursued by companies including Google and IBM. This approach offers high computational speed but demands ultra-low temperatures to maintain qubit stability. Assuming hardware performance meets Google’s flagship quantum processor specifications, such an attack could be completed in minutes using fewer than 500,000 physical qubits—a reduction of roughly 20× compared to prior estimates.

To assess this threat more concretely, the team conducted a simulation. Substituting the above circuit configuration into Bitcoin’s real-world transaction environment, they found that a theoretical quantum computer could reverse-engineer a private key from a publicly exposed public key in approximately nine minutes, with a success probability of about 41%. Since Bitcoin’s average block time is ten minutes, this implies not only that roughly 32–35% of Bitcoin’s total supply—held in addresses where public keys have already been exposed on-chain—is vulnerable to static attacks, but also that attackers could theoretically intercept transactions mid-flight, broadcasting competing transfers before your original transaction gains confirmation. Although no quantum computer possessing these capabilities yet exists, this finding extends the quantum threat surface from “static asset harvesting” to “real-time transaction interception,” triggering considerable market anxiety.

Google simultaneously announced another critical detail: the company has advanced its internal deadline for migrating to post-quantum cryptography (PQC) to 2029. In simple terms, PQC migration involves replacing today’s RSA- and elliptic-curve-based encryption systems—“locks”—with new cryptographic schemes resistant to quantum attacks. Prior to Google’s white paper, this migration was widely regarded as a long-term engineering project. For instance, the U.S. National Institute of Standards and Technology (NIST) had projected phasing out legacy algorithms by 2030 and fully retiring them by 2035—leaving industry with roughly a decade to prepare. However, based on recent progress in quantum hardware, quantum error correction, and quantum resource estimation for integer factorization, Google now judges the quantum threat to be significantly nearer than previously assumed—and thus moved its internal migration deadline forward to 2029. This objectively compresses the entire industry’s preparation window and signals to the crypto sector that quantum computing advances are outpacing expectations, making security upgrades an urgent priority. Undoubtedly a milestone study, its media coverage nonetheless amplified associated anxieties. So how should we rationally interpret this shock?

Should We Actually Be Worried?

1. Will quantum computing render the entire Bitcoin network inoperable?

There is a threat—but it is confined to signature security. Quantum computing does not directly compromise blockchain’s underlying architecture nor invalidate the mining mechanism. Its true target is the digital signature process. Every Bitcoin transaction requires signing with a private key to prove fund ownership, and the network validates whether the signature is correct. A quantum computer’s potential capability lies in deriving the private key from a publicly exposed public key, thereby enabling signature forgery.

This introduces two practical risks. One occurs during transaction transmission: after initiating a transaction but before it is included in a block, there exists—on theoretical grounds—a window for replacement attacks, known as “on-spend attacks.” The other targets historically exposed public keys, such as those associated with dormant or reused addresses—attacks with greater time flexibility and conceptual simplicity.

Crucially, these risks do not universally apply to all Bitcoin or all users. They materialize only within the narrow window when you initiate a transaction—or if your address has previously exposed its public key. This is not an immediate, wholesale disruption of the system.

2. Will this threat arrive so soon?

The “9-minute break” scenario assumes the existence of a fault-tolerant quantum computer equipped with 500,000 physical qubits. Yet Google’s most advanced Willow chip currently contains only 105 physical qubits; IBM’s Condor processor holds about 1,121—still hundreds of times short of the 500,000 threshold. Ethereum Foundation researcher Justin Drake estimates the probability of a “Quantum Day” (Q-Day)—i.e., the emergence of practically exploitable quantum computers—at only 10% by 2032. Thus, while not an imminent crisis, it remains a non-negligible tail risk.

3. What is quantum computing’s greatest threat?

Bitcoin is not the most vulnerable system—it is merely the highest-profile and most publicly visible one. The quantum challenge is far broader and systemic: all internet infrastructure relying on public-key cryptography—including banking systems, government communications, secure email, software signing, and identity authentication—faces identical threats. This is precisely why institutions such as Google, the U.S. National Security Agency (NSA), and NIST have spent the past decade actively promoting PQC migration. Once quantum computers capable of real-world attacks emerge, the impact will extend far beyond cryptocurrencies—to the foundational trust architecture of the entire digital world. Therefore, this is not a Bitcoin-specific risk but a systemic upgrade imperative for global information infrastructure.

The Fantasy and Feasibility of Quantum Mining

On the same day Google published its white paper, BTQ Technologies released a study titled “Kardashev Scale Quantum Computing for Bitcoin Mining,” quantifying the physical and economic feasibility of quantum mining. Author Pierre-Luc Dallaire-Demers modeled every technical layer—from underlying hardware to upper-level algorithms—to estimate the practical cost of quantum mining.

The study concluded that even under the most favorable assumptions, quantum mining would require approximately 10⁸ physical qubits and 10⁴ megawatts of power—roughly equivalent to the total output of a large national power grid. Under Bitcoin’s mainnet difficulty as of January 2025, required resources balloon to ~10²³ physical qubits and 10²⁵ watts—approaching the energy output of an entire star. By comparison, Bitcoin’s current global power consumption stands at roughly 13–25 gigawatts—orders of magnitude below quantum mining’s energy requirements.

The study further notes that Grover’s algorithm’s theoretical speedup advantage is effectively negated by various engineering overheads, rendering it incapable of delivering real mining profitability. Quantum mining is thus physically and economically infeasible.

Google is not alone in addressing this issue. Entities including Coinbase, the Ethereum Foundation, and the Stanford Blockchain Research Center are already advancing related research. Ethereum Foundation researcher Justin Drake commented: “By 2032, quantum computers will have at least a 10% chance of recovering secp256k1 ECDSA private keys from exposed public keys. While cryptographically relevant quantum computers still seem unlikely before 2030, now is unquestionably the time to begin preparing.”

Hence, quantum computing poses no imminent existential threat to mining—its resource requirements vastly exceed any rational economic calculation. No one would expend such colossal energy to claim a single block reward of 3.125 BTC.

Cryptocurrencies Won’t Disappear—They’ll Evolve

If quantum computing poses a question, the industry has long held the answer: “Post-Quantum Cryptography” (PQC)—cryptographic algorithms resistant even to quantum computers. Concrete implementation pathways include adopting quantum-resistant signature schemes, optimizing address structures to minimize public key exposure, and gradually migrating via protocol upgrades. NIST has already completed standardization of PQC, with ML-DSA (a module-lattice-based digital signature algorithm, FIPS 204) and SLH-DSA (a hash-based stateless signature algorithm, FIPS 205) emerging as the two leading post-quantum signature standards.

At the Bitcoin network level, BIP 360 (“Pay-to-Merkle-Root,” or P2MR) was formally added to the Bitcoin Improvement Proposals repository in early 2026. It targets a transaction pattern introduced by Taproot—a 2021 network upgrade intended to enhance privacy and efficiency. However, Taproot’s “key-path spending” feature exposes public keys during transactions, potentially creating future quantum attack surfaces. BIP 360’s core idea is to eliminate this public-key-exposing path entirely, restructuring transactions so fund transfers no longer require public key disclosure—thus reducing quantum risk exposure at its source.

For the cryptocurrency industry, blockchain upgrades involve complex interdependencies: on-chain compatibility, wallet infrastructure, address systems, user migration costs, and community coordination. Successful migration requires coordinated participation across protocol layers, clients, wallets, exchanges, custodians, and end users—effectively updating the entire ecosystem’s cryptographic “locks.” Fortunately, consensus on this necessity already exists across the industry; what remains is execution and timeline management.

Headlines Are Alarmist—Reality Is Less Urgent

A detailed breakdown of these latest developments reveals that the situation is far less sensational than headlines suggest. While humanity’s quantum computing research is indeed accelerating toward practical realization, we retain ample time to respond. Today’s Bitcoin is not a static system but a network continuously evolving over more than a decade—from script upgrades to Taproot, from privacy enhancements to scalability solutions—persistently balancing security and efficiency.

The quantum computing challenge may simply serve as the next catalyst for such evolution. The quantum clock is ticking—but good news is, we can hear it clearly, and we still have time to react. In this era of ever-accelerating computational power, our task is to ensure that cryptography’s trust mechanisms consistently stay ahead of emerging technological threats.