Bitcoin Security Consortium Commits $15 Million to Quantum Defense

Quantum computing creates a long-term cryptographic risk

The consortium characterized quantum computing as a long-term rather than immediate threat. Credible estimates still place machines capable of compromising Bitcoin’s existing cryptography years away, but the group said preparation must begin before such hardware becomes operational because any upgrade would require research, testing, deployment and user migration.

“Q-Day” refers to the hypothetical point when a sufficiently powerful quantum computer can defeat modern public-key cryptography and derive private keys from exposed public keys.

Bitcoin uses elliptic-curve cryptography to authorize transactions. A sufficiently advanced quantum computer running an effective implementation of Shor’s algorithm could theoretically derive a wallet’s private key from its public key, allowing an attacker to create valid signatures and transfer funds without obtaining the owner’s seed phrase through conventional theft.

Such an attack would not allow an adversary to rewrite Bitcoin’s ledger or create arbitrary new coins. The primary threat would be unauthorized spending from addresses whose public keys had already been revealed.

Project Eleven, a company focused on post-quantum security, estimated that about 6.9 million BTC could be exposed under certain conditions, representing roughly one-third of the existing supply. The firm attributed much of that potential exposure to wallet-address reuse, which can leave public keys visible onchain after funds have been spent from an address.

Older outputs and address formats that expose public keys directly may also face greater theoretical risk than funds held behind unrevealed public-key hashes. The estimate represents scenario-based exposure rather than a prediction that all affected coins would be stolen.

Whether particular holdings become vulnerable would depend on their address type, public-key exposure, wallet behavior, migration progress and the capabilities of future quantum hardware.

Project Eleven also estimated that more than $3 trillion in digital assets could eventually become vulnerable within four to seven years unless cryptographic defenses are upgraded. That estimate covers digital assets broadly rather than Bitcoin alone.

Project Eleven said the potential arrival date could shift several years in either direction because the pace of hardware development, error correction, qubit quality and practical scalability remains uncertain. The firm warned during 2026 that Bitcoin could already be running short of implementation time once the duration of a network-wide cryptographic migration is considered.

We’ve launched the all-new COIN360 Perp DEX, built for traders who move fast!

Trade 130+ assets with up to 100× leverage, enjoy instant order placement and low-slippage swaps, and earn USDC passive yield while climbing the leaderboard. Your trades deserve more than speed — they deserve mastery.

Quantum experiments remain far below Bitcoin’s security level

Project Eleven organized a Q-Day Prize during 2026 to test the capabilities of publicly available quantum hardware. The competition awarded one full bitcoin to a researcher who used such hardware to crack a 15-bit elliptic-curve key.

The test used the same general family of elliptic-curve cryptography on which Bitcoin relies, and Project Eleven characterized it as the largest publicly demonstrated quantum attack of its kind at the time.

The experiment did not demonstrate an ability to break Bitcoin’s production keys. Bitcoin uses 256-bit keys, creating an enormous security gap between the test and the cryptographic strength protecting ordinary transactions.

Current publicly accessible quantum machines therefore remain unable to steal funds from normal Bitcoin keys through this method. The experiment nevertheless demonstrated that attacks previously limited to theory could be executed against highly reduced security parameters.

Google’s unveiling of its Willow quantum chip in December 2024 added urgency to the debate. Google said Willow could complete in minutes a benchmark calculation that would take conventional supercomputers an almost unimaginably long period.

The benchmark was not an attack on Bitcoin or public-key cryptography. Raw quantum-computing performance is also not equivalent to the fault-tolerant, cryptographically relevant capability required to derive Bitcoin private keys.

Microsoft later introduced its own quantum chip, adding to evidence that major technology companies were accelerating hardware development.

By May 2025, BlackRock had added quantum computing to the official risk factors disclosed for its spot Bitcoin exchange-traded fund. The disclosure said advances in the technology could potentially undermine the cryptographic mechanisms securing Bitcoin.

BlackRock did not state that Bitcoin was already vulnerable. The filing treated quantum computing as a possible future development that could affect network security and investment exposure.

Galaxy and the U.S. government advance separate preparations

Galaxy launched the Bitcoin Quantum Readiness Initiative earlier during the week of the consortium’s announcement. The company committed up to $5 million in developer grants for post-quantum cryptographic tools.

Galaxy’s program also includes a dedicated research effort and an advisory council focused on quantum-computing risks to Bitcoin. Galaxy is participating in both its own initiative and the broader consortium.

The separate commitments reference as much as $20 million in potential support when considered together, although the available information does not establish whether Galaxy’s individual program overlaps with its consortium allocation.

President Donald Trump signed two executive orders in June 2026 intended to accelerate U.S. quantum-computing capabilities. The measures set a target for migrating federal high-value assets to post-quantum cryptography.

The orders did not directly reference Bitcoin. Project Eleven CEO Alex Pruden said they could accelerate post-quantum cryptography development across the federal contractor base, with research, standards and implementation experience potentially benefiting the cryptocurrency sector.

A Bitcoin migration would require broad coordination

Preparing Bitcoin for quantum-resistant cryptography involves more than selecting a replacement signature algorithm. The ecosystem would need to determine how new cryptography is introduced, how wallets support it, how users migrate funds and how vulnerable unmoved coins are treated.

Any proposed upgrade would have to balance cryptographic security with decentralization, backward compatibility, network efficiency and voluntary consensus. Post-quantum signatures can be larger or more computationally demanding than Bitcoin’s existing signatures, creating potential trade-offs involving block space, bandwidth, verification costs and wallet design.

Implementation would require coordination among Bitcoin Core developers, miners, node operators, exchanges, custodians, hardware-wallet manufacturers, institutional holders and individual users.

Inactive holders and funds protected by lost private keys would create a particularly difficult migration issue because their owners might be unable or unwilling to move the coins before any transition deadline.

The consortium’s members could play an operational role because they hold, manage or service substantial institutional Bitcoin exposure. Coinbase, Fidelity Digital Assets and Anchorage Digital bring custody and exchange experience, while BlackRock and ARK Invest manage regulated Bitcoin investment products.

Strategy contributes direct corporate treasury exposure. Block brings payments and Bitcoin-development experience, Blockstream provides infrastructure and protocol expertise, and Galaxy operates across digital-asset investment, trading, infrastructure and research.

The group’s funding structure separates financial support from protocol authority. Members can fund work intended to protect their holdings and clients, but Bitcoin’s open-source developer community will retain control over technical proposals and consensus decisions.