In a recent research note, digital asset management firm Grayscale expressed support for expedited efforts to enhance the quantum resistance of public blockchains, positing that although the necessary technical solutions are already available, the more significant obstacle is securing agreement among decentralized communities to implement these solutions. This follows a week of intense industry response to a paper by Google Quantum AI, which determined that compromising bitcoin's elliptic curve cryptography would require fewer than 500,000 physical qubits, a reduction of approximately 20 times from previous estimates, and could be accomplished in about nine minutes once the machine is prepared.
According to CoinDesk's analysis of the paper, such an attack would give an attacker roughly a 41% chance of stealing funds before a bitcoin transaction is confirmed. Grayscale highlighted four key takeaways from Google's research that they found persuasive, including the potential for progress toward a cryptographically relevant quantum computer to occur in discrete jumps rather than linearly, rendering timelines unpredictable. Furthermore, post-quantum cryptography solutions are mature and already securing certain internet traffic and blockchain transactions. The risk posed by quantum computing varies significantly across different blockchains, depending on factors such as their transaction models, consensus mechanisms, and block times.
From a purely engineering perspective, Grayscale argued that bitcoin has a lower quantum risk compared to other chains due to its utilization of a UTXO model, proof-of-work consensus, lack of native smart contracts, and specific address types that are not vulnerable to quantum attacks if not reused after spending. However, the more challenging question revolves around the roughly 6.9 million BTC stored in wallets with publicly exposed keys on the blockchain, including an estimated 1 million believed to belong to bitcoin's pseudonymous creator, Satoshi Nakamoto. Binance co-founder Changpeng Zhao recently raised a similar question, suggesting that if Satoshi's coins are moved during a migration, it would indicate that Satoshi is still active, which is an interesting revelation, and if they are not moved, it might be preferable to lock or effectively burn those addresses. Grayscale presents similar options - burning the coins, taking no action, or deliberately slowing their release by limiting the rate of spending from vulnerable addresses - but notes that the bitcoin community has a history of contentious debates over protocol changes, citing last year's dispute over image data stored in blocks as an example.
The contrast with Ethereum is noteworthy, as CoinDesk reported that Google's paper identified five separate attack vectors against Ethereum, totaling over $100 billion in combined exposure, spanning account keys, admin keys on stablecoins, smart contract code, consensus mechanisms, and data availability. Ethereum Foundation researcher Justin Drake, who co-authored the Google paper, estimated at least a 10% chance of a quantum key recovery by 2032. Although the Ethereum Foundation has been staking aggressively, placing $93 million of ether into validators in a single day last week, it has not publicly addressed quantum migration timelines.