The Quantum Threat to Bitcoin: How a Powerful Computer Can Steal Your Cryptocurrency in Under 10 Minutes

This series previously delved into the physics behind quantum computing, but understanding how it works is only half the story. To grasp the potential threat to bitcoin, it's essential to comprehend what a quantum computer is attacking and where the weakness lies. This piece begins with an examination of bitcoin's encryption, specifically the elliptic curve cryptography that underpins its security. Every bitcoin wallet has two keys: a private key, which is a secret 256-digit binary number, and a public key derived from the private key through a mathematical operation on the 'secp256k1' curve. This relationship can be thought of as a one-way map, where starting from a known point (the generator point G), taking a certain number of steps defined by the curve's mathematics leads to a public key. Anyone can verify the public key, but reversing the process to find the private key is virtually impossible for classical computers due to the elliptic curve discrete logarithm problem. However, in 1994, mathematician Peter Shor discovered a quantum algorithm that can efficiently solve this problem, potentially breaking bitcoin's security. The algorithm works by converting the problem into finding the period of a function, which quantum computers can solve using superposition, entanglement, and interference. Although Shor's algorithm has been known for over 30 years, its implementation requires a quantum computer with a sufficient number of stable qubits. Recent research by Google, in collaboration with the Ethereum Foundation and Stanford, has significantly reduced the estimated number of qubits needed, from millions to fewer than 500,000. This reduction, coupled with the design of quantum circuits that can implement Shor's algorithm against bitcoin's specific elliptic curve, brings the threat closer to reality. The research also introduced a practical attack scenario, where parts of the calculation can be precomputed, leaving a quantum computer waiting to finish the calculation once a target public key appears. This could give an attacker a nine-minute window to derive a private key and submit a competing transaction, potentially redirecting funds. The vulnerability is not just theoretical; approximately 6.9 million bitcoin are already exposed and vulnerable to an 'at-rest' attack, which does not require racing against the clock. As quantum computing hardware continues to advance, the gap between the potential threat and reality is closing, posing a significant concern for bitcoin's security.