In a recent research note, digital asset management firm Grayscale expressed support for accelerated efforts to render public blockchains resistant to quantum computing, positing that although technical solutions are readily available, the more significant hurdle is securing agreement among decentralized communities to implement these solutions. This assertion follows a week of intense industry response to a paper by Google Quantum AI, which determined that compromising Bitcoin's elliptic curve cryptography would necessitate fewer than 500,000 physical qubits, a reduction of approximately 20 times from prior estimates, and could be accomplished in roughly nine minutes once the necessary machinery is primed. CoinDesk's analysis of the paper revealed that such an attack would afford the perpetrator a roughly 41% chance of pilfering funds prior to the confirmation of a Bitcoin transaction.
Grayscale's note highlighted four key takeaways from Google's research, including the potential for progress toward a cryptographically relevant quantum computer to occur in discrete jumps rather than linearly, rendering timelines unpredictable. The technical solutions, specifically post-quantum cryptography, are mature and already securing internet traffic and certain blockchain transactions. Furthermore, quantum risk varies significantly across blockchains depending on their transaction model, consensus mechanism, and block time.
From a purely engineering standpoint, it was argued that Bitcoin possesses lower quantum risk than other chains due to its utilization of a UTXO model, proof-of-work consensus, absence of native smart contracts, and certain address types that are not quantum-vulnerable if not reused after spending. However, the more challenging question pertains to the roughly 6.9 million BTC residing in wallets with publicly exposed keys on the blockchain, including an estimated 1 million believed to belong to pseudonymous creator Satoshi Nakamoto. This conundrum was also raised by Binance co-founder Changpeng Zhao, who suggested that if Satoshi's coins are moved during a migration, it would indicate his continued presence, and if they remain unmoved, it might be preferable to lock or effectively burn those addresses. Grayscale presented similar options – burning the coins, taking no action, or deliberately slowing their release by limiting the rate of spending from vulnerable addresses – but noted that the Bitcoin community has a history of contentious debates over protocol changes, citing last year's dispute surrounding image data stored in blocks.
In contrast, Ethereum faces distinct challenges, with Google's paper identifying five separate attack vectors against Ethereum worth over $100 billion in combined exposure. Ethereum Foundation researcher Justin Drake estimated at least a 10% chance of a quantum key recovery by 2032, and while the foundation has been staking aggressively, it has not publicly addressed quantum migration timelines.