Expert Panel Warns: Quantum Computing Threat Looms, Crypto Must Prepare
A newly released report commissioned by Coinbase serves as a warning to the crypto industry: although quantum computing does not currently pose an immediate threat to cryptocurrency, the sector cannot afford to delay in preparing for this eventuality. The report, authored by a panel of esteemed cryptographers and academics, including Dan Boneh, Justin Drake, and Sreeram Kannan, emphasizes that while today's blockchains are secure, the prospect of a fault-tolerant quantum computer that can break widely used encryption is becoming increasingly plausible, and the industry must start preparing now. Recent months have seen growing concerns about quantum risk, with Google researchers suggesting that a sufficiently advanced quantum computer could potentially break Bitcoin's cryptography. In response, major crypto ecosystems have begun developing strategies to mitigate this risk, such as the Ethereum Foundation's proposal for new digital signatures that are safe against quantum computers, and Solana's experimentation with quantum-resistant wallet designs. The report underscores that current quantum machines are not yet powerful enough to compromise the cryptography underpinning Bitcoin, Ethereum, and other networks, as breaking standard encryption would require significant computational overhead, a milestone that is still a major engineering challenge. However, the authors caution against complacency, stating that the development of a large-scale, fault-tolerant quantum computer is inevitable, although the timeline is uncertain and could range from a few years to a decade or more. This uncertainty is a significant concern, as estimates vary widely, and there is no reliable way to predict breakthroughs. The report's guidance is in line with recommendations from the U.S. National Institute of Standards and Technology (NIST), which advises migrating to quantum-resistant cryptography by 2035, a timeline that may prove overly optimistic. The report emphasizes that waiting until the threat becomes urgent is not a viable strategy, as transitions across blockchains, wallets, and exchanges could take years to execute safely. Certain assets may be more vulnerable than others, such as Bitcoin wallets that have already revealed their public keys, while those still protected behind hash functions may be safer in the short term. Fortunately, quantum-resistant cryptography (PQC) already exists and is being standardized by NIST. However, the transition to PQC will not be straightforward, as post-quantum digital signatures can be significantly larger than current ones, potentially increasing blockchain data costs and reducing throughput. The report estimates that replacing current signatures with quantum-proof alternatives could expand block sizes by up to 38 times. Furthermore, there are usability challenges associated with migrating millions of wallets and deciding how to handle 'lost' or inactive funds that never upgrade. Rather than advocating for a single solution, the report outlines multiple transition strategies, including hybrid systems that combine existing cryptography with post-quantum updates or allow for a gradual switch when needed. The authors recommend adopting flexible approaches that avoid sacrificing current security or performance while enabling a rapid upgrade later. Ultimately, the report concludes that the time to begin preparing for the quantum computing threat is now.