Google Fires the Highest Quantum Alert: Bitcoin Could Fall in Under 10 Minutes
News Summary
On March 30, 2026 (ET), Google Quantum AI published a landmark whitepaper titled "Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities: Resource Estimates and Mitigations," co-authored by Ryan Babbush, Director of Research for Quantum Algorithms, and Hartmut Neven, VP of Engineering at Google Research. The findings sent shockwaves through the cryptocurrency and cybersecurity communities worldwide.
The Core Finding: 20x Fewer Qubits Than Previously Thought
For years, the cybersecurity community believed that cracking Bitcoin's encryption would require a quantum computer operating with roughly 10 million qubits — hardware so far out of reach that many dismissed the threat as a distant, theoretical concern. Google's new research obliterates that assumption. The whitepaper reveals that breaking the 256-bit elliptic curve discrete logarithm problem (ECDLP-256) — the mathematical backbone of most cryptocurrency security — may require fewer than 500,000 physical qubits. That is approximately a 20-fold reduction compared to earlier estimates, representing an order-of-magnitude leap in the perceived proximity of the threat.
A 9-Minute Attack Window on Bitcoin
The implications for real-world Bitcoin transactions are alarming. When a Bitcoin transaction is broadcast to the network, the sender's public key is briefly exposed before the transaction is confirmed — a window of roughly 10 minutes. According to Google's analysis, a sufficiently advanced quantum computer could exploit that window, deriving the private key from the public key and stealing the funds. The paper estimates that such an attack could be completed in approximately nine minutes, with a success probability of nearly 41%. Ethereum and other faster-confirmation cryptocurrencies would actually face a lower risk given their shorter transaction windows.
Millions of Bitcoin Already Vulnerable
Beyond real-time transactions, the paper flags a more immediate danger: an estimated 6.9 million Bitcoin are already exposed to quantum attacks under existing wallet structures. Approximately 1.7 million of these coins date back to the so-called "Satoshi era," when wallet addresses were handled in ways that left public keys permanently visible on-chain. Compounding the problem, Bitcoin's Taproot upgrade — introduced in 2021 and widely celebrated for improving efficiency and privacy — actually exposes public keys by default, inadvertently expanding the pool of vulnerable wallets.
Google Sets a 2029 Migration Deadline
To underscore the seriousness of its findings, Google has formally committed to migrating all of its own systems to post-quantum cryptography (PQC) by 2029 — and is urging the broader technology and financial ecosystem to follow suit. PQC refers to a new generation of cryptographic algorithms specifically designed to resist attacks from quantum computers. In August 2024, the U.S. National Institute of Standards and Technology (NIST) finalized its first set of PQC standards, including ML-KEM for key exchange and ML-DSA for digital signatures.
The 2029 deadline is not arbitrary. Google's earlier work demonstrated that a 2,048-bit RSA key could theoretically be broken by a quantum system with around one million noisy qubits — a far more achievable milestone than the one billion precise qubits once considered necessary. As quantum hardware continues to improve, what once seemed like a futuristic threat is rapidly becoming a near-term engineering challenge.
"Store Now, Decrypt Later" — The Present Danger
Google also raised alarms about a category of attack that does not require quantum computers to exist today. Known as "store now, decrypt later" (SNDL), this strategy involves hostile actors — including nation-states — quietly harvesting and archiving encrypted data right now, with the intention of decrypting it once quantum hardware matures. Financial records, classified government communications, and trade secrets are all being vacuumed up and stored. The threat, in other words, is already operational, even if the decryption capability is still years away.
A Call for Responsible Disclosure and Industry Action
Google frames its publication as an act of responsible disclosure, deliberately choosing to go public with findings that could theoretically serve as a roadmap for malicious actors — precisely because the cryptocurrency community needs time to act. The company recommends several interim measures, including avoiding the reuse of wallet addresses and refraining from unnecessarily exposing public keys on-chain. Longer term, it is calling on blockchain developers and cryptocurrency exchanges to begin the transition to post-quantum cryptography without delay.
Governments are already aligning with this urgency. The United States, United Kingdom, France, Germany, the Netherlands, and other major economies have all published national strategies or guidelines addressing the quantum cryptography transition. CISA (the U.S. Cybersecurity and Infrastructure Security Agency) has issued federal guidance identifying product categories where PQC adoption is immediately available.
What This Means for the Crypto Ecosystem
The cryptocurrency industry — built on the foundational promise of cryptographic security — now faces a pivotal stress test. The decentralized, trustless nature of blockchain technology is only as strong as the encryption that underpins it. If quantum computers advance on the trajectory Google's research suggests, the integrity of Bitcoin, Ethereum, and dozens of other blockchain platforms could be at serious risk within a decade.
Google is not saying that threat is here today. Current quantum computers remain error-prone and nowhere near the scale needed to execute such attacks. But the gap is narrowing faster than the industry had previously assumed. The window for preparation is open — and, according to Google, it will not stay open indefinitely.