According to Google's Quantum AI team, a future quantum computer could potentially derive a bitcoin private key from a public key in approximately nine minutes. This revelation has sent shockwaves through the crypto community, but it's essential to understand the actual implications.
To start with, let's examine how bitcoin transactions work. When a user sends bitcoin, their wallet uses a private key to sign the transaction, which is then broadcast to the network and verified by miners. The private and public keys are connected through a complex math problem called the elliptic curve discrete logarithm problem, which classical computers cannot solve efficiently. However, a sufficiently powerful quantum computer could potentially crack this problem using an algorithm called Shor's.
The nine-minute timeframe comes into play when a quantum computer is 'primed' in advance by pre-computing parts of the attack that don't depend on any specific public key. Once a public key appears in the mempool, the machine only needs about nine minutes to derive the private key, giving the attacker a roughly 41% chance of redirecting funds before the original transaction is confirmed. This type of attack is known as a mempool attack, and although it's alarming, it requires a quantum computer that doesn't yet exist. A more pressing concern is the estimated 6.9 million bitcoin that are already vulnerable due to exposed public keys.
These coins are at risk of being cracked by a sufficiently powerful quantum computer without any time pressure. The bitcoin network's 2021 Taproot upgrade inadvertently expanded the pool of vulnerable wallets. If private keys can be derived from public keys, the ownership guarantees that make bitcoin valuable will break down, and institutional trust in the network's security model will collapse. The solution lies in post-quantum cryptography, which replaces vulnerable math with algorithms that quantum computers can't crack.
While Ethereum has been working towards this migration for eight years, bitcoin has yet to start.