Quantum Threat to Bitcoin Now a Retirement Savings Problem

Get the Finance newsletter
Daily finance — markets, central banks, M&A, the prints that move money. Free.
- Google and the Ethereum Foundation published a 57-page paper estimating that 500,000 qubits would be needed to break the elliptic curve encryption protecting bitcoin and most cryptocurrencies, while quantum startup Oratomic put the threshold far lower at 10,000 qubits — close to the 6,100-qubit arrays that already exist.
- Google's researchers also identified an "on-spend" attack that could steal bitcoin during the roughly 10-minute window a transaction takes to clear, and Google has urged the world to move to post-quantum cryptography by 2029.
- Cryptographer JP Aumasson pegged the more realistic PQC deadline at 2036 and warned that even a rumor of bitcoin's vulnerability could trigger market panic, with no actual attack needed.
- Bitcoin's decentralized governance has stalled the fix, with StarkWare's Eli Ben-Sasson saying the community is "afraid of even talking about it" and Aumasson calling the response on post-quantum transition slow.
- Strategy, the public company that holds more bitcoin than any other, sits inside index funds run by Fidelity, Vanguard, BlackRock, and Morgan Stanley — meaning retirement savers and state funds in California, North Carolina, Texas, and Louisiana carry indirect exposure, even without buying crypto themselves.
- StarkWare's Avihu Levy developed a quantum-safe workaround for bitcoin that would not require a software update, but the source notes it would increase the cost of each transaction more than 200-fold.
Why it matters: If quantum computers reach the 10,000-qubit threshold identified in the new research, bitcoin's encryption fails — and ordinary retirement savers carry exposure through index funds holding Strategy, bitcoin's largest public holder, with no software fix in place. Aumasson, a cryptographer cited in the piece, warned that even a rumor of vulnerability would trigger market panic.



