In a recent development that could reshape the conversation around the vulnerability of major blockchain networks to quantum computers, a group of cryptographic researchers has announced a significant reduction in the estimated time required to launch a quantum attack on Bitcoin and Ethereum. The team’s findings, which were shared in a paper circulated to CoinDesk, suggest that the computational effort needed to break the elliptic‑curve signatures that protect these networks may be roughly half of what earlier models predicted.
The breakthrough centers on a core sub‑routine of Shor’s algorithm, the quantum method widely regarded as the most efficient way to solve the discrete logarithm problem that underpins the security of Bitcoin’s secp256k1 curve and Ethereum’s similar elliptic‑curve scheme. Historically, the bottleneck for a practical quantum attack has been the ability to perform a large‑scale quantum Fourier transform (QFT) with sufficient precision and low error rates.
In March, Google reported a milestone in this area, demonstrating a QFT on a modest number of qubits that set a benchmark for the field. What the new research shows is that both human‑engineered optimizations and AI‑driven search techniques have managed to surpass Google’s March result on the same calculation. By applying sophisticated circuit‑reduction strategies, the researchers trimmed the number of required quantum gates and depth of the circuit, while AI algorithms identified novel gate‑sequencing patterns that further minimized error propagation. The combined effect is a roughly 50 % reduction in the quantum resources—measured in logical qubits and gate operations—needed to execute the portion of Shor’s algorithm that extracts private keys from public addresses.
The implications are profound. Prior estimates, based on the assumption that a quantum computer would need to maintain coherence across millions of qubits for extended periods, placed the realistic threat horizon for Bitcoin and Ethereum somewhere beyond the next two to three decades. With the new efficiency gains, the same level of attack capability could be achieved with far fewer qubits, potentially bringing the timeline forward by a decade or more, depending on the pace of hardware development.
To understand why this matters, it helps to review how Bitcoin and Ethereum secure transactions today. Both platforms rely on the difficulty of solving the elliptic‑curve discrete logarithm problem (ECDLP).
When a user creates a wallet, a private key is generated randomly, and a corresponding public key is derived through elliptic‑curve multiplication—a one‑way function that is easy to compute in one direction but infeasible to reverse with classical computers. The public key, once hashed, becomes the address that others use to send funds. If an adversary could compute the private key from the public key, they could instantly hijack any funds associated with that address.
Shor’s algorithm, introduced in 1994, theoretically enables a quantum computer to solve the ECDLP in polynomial time, effectively breaking the cryptographic foundation of these blockchains. The algorithm consists of three main stages: (1) preparation of a superposition of states, (2) application of the quantum Fourier transform to extract periodicity, and (3) classical post‑processing to derive the discrete logarithm.
The QFT step is the most resource‑intensive, requiring a large, error‑corrected quantum system. By halving the resource requirement for this step, the new research reduces the overall size and error‑correction overhead needed for a full attack. The researchers arrived at their conclusions through a blend of manual circuit design and machine‑learning‑guided optimization. They first mapped the standard QFT circuit onto a set of logical qubits, then employed reinforcement‑learning agents to explore alternative gate arrangements that preserved the mathematical integrity of the transform while reducing depth.
In parallel, domain experts introduced custom gate‑fusion techniques that merged adjacent operations, eliminating redundant steps. The resulting circuit not only required fewer qubits but also demonstrated greater resilience to typical noise models encountered in current quantum hardware.
While the paper acknowledges that practical quantum computers capable of executing the full attack are still years away, the authors caution that the security community should not become complacent. They argue that the rapid pace of algorithmic improvement, combined with steady advances in superconducting qubits, trapped‑ion systems, and error‑correction codes, could accelerate the arrival of a truly threatening quantum device. In response to the findings, several prominent blockchain projects have reiterated their commitment to post‑quantum migration strategies. The Bitcoin community, for instance, has long discussed the possibility of transitioning to quantum‑resistant signature schemes such as Lamport signatures or lattice‑based constructions.
Ethereum’s roadmap similarly includes research into alternative cryptographic primitives that could be deployed via hard forks if the need arises. Meanwhile, the broader cryptographic research field sees this as a reminder of the dual‑use nature of quantum advancements. Techniques that improve the efficiency of quantum algorithms for legitimate scientific purposes—such as simulating complex molecules or optimizing large‑scale logistics—can also be repurposed for malicious ends.
As a result, many experts advocate for a coordinated approach that includes both defensive measures (e.g., developing and standardizing quantum‑safe protocols) and proactive monitoring of quantum hardware progress. In conclusion, the paper shared with CoinDesk adds a critical new variable to the ongoing debate about the quantum timeline for cryptocurrencies. By demonstrating that both human ingenuity and AI can substantially lower the computational barriers to a Shor‑based attack, the researchers have effectively cut the estimated quantum threat window for Bitcoin and Ethereum by about half. Stakeholders across the blockchain ecosystem—developers, investors, regulators, and users—should take note and accelerate efforts to transition to quantum‑resistant cryptography before the theoretical possibility becomes a practical reality.