I’ve noticed that the biggest threats to crypto rarely come from hackers with laptops — they come from math that hasn’t caught up yet, or in this case, math that’s catching up too fast.
Key Takeaways
- Research cited by FinTech Magazine suggests advancing quantum computers could break Bitcoin’s underlying cryptography by as early as 2029, exposing up to half the network’s public keys.
- None of the top 20 blockchains currently use quantum-resistant signature algorithms, while the Ethereum Foundation has already set 2029 as its own target for full quantum protection.
- The real story isn’t the threat itself — it’s that decentralized networks may be structurally too slow to agree on a fix in time.
What happened
| Bitcoin | Ethereum | |
|---|---|---|
| Quantum-resistant signatures today | None | None |
| Public keys estimated exposed | Up to ~50% of network | Not specified in reporting |
| Target for full quantum protection | No official target cited | 2029 |
A report published by FinTech Magazine on July 10 lays out a scenario that’s been circulating in cryptography circles for a while but is now getting sharper timelines attached to it. Whenever a Bitcoin transaction happens, the sender’s public key becomes visible on-chain.
Ordinary computers can’t reverse-engineer a private key from that public key — but a sufficiently powerful quantum computer theoretically could. Because Bitcoin has existed for 17 years, millions of public keys are sitting exposed in transaction history, and 2025 research estimates roughly half the network could be vulnerable once quantum capability arrives.
The danger isn’t abstract. If someone could forge a digital signature, they could move funds out of a wallet — and because blockchain transactions are irreversible, there’s no bank to call and no chargeback to file. Currently, no blockchain in the top 20 has implemented quantum-resistant signatures.
The Ethereum Foundation has set 2029 as its internal target for full protection, which tells you the industry isn’t ignoring the problem — but it also tells you how far there is to go, and how little consensus exists on the exact fix.
What ‘up to half the network exposed’ actually means
The exposure only happens at the moment of spending, not receiving. An address that has never sent a transaction keeps its public key hidden behind a hash.
That’s part of why researchers describe the risk as partial rather than total — unused addresses aren’t part of the exposed pool the report is warning about.
But Bitcoin has existed for 17 years, and reused addresses are common. Exchanges, old wallets, and long-held coins that have moved even once all leave a public key sitting in transaction history.
That history doesn’t get deleted — it’s permanent by design. This is why the ‘roughly half the network’ estimate isn’t a guess about the future.
It’s a count of keys that are already visible today, sitting exposed and waiting only for computing power to catch up to them.
Wallets that reuse the same address every time they spend are the highest-risk category in this scenario, since each transaction re-exposes the same key rather than rotating to a fresh one.
The two lenses
Lens one: This is a manageable engineering problem, not an existential one. Cryptographers have been aware of the quantum threat to public-key systems for over a decade, and post-quantum cryptographic standards already exist in academic and even some government settings — NIST finalized its own post-quantum algorithms years ago.
Bitcoin and Ethereum developers have the luxury of a known deadline rather than a surprise attack. Wallets that reuse addresses or expose public keys unnecessarily can migrate to fresh addresses; new signature schemes can be layered in through soft forks.
In this view, 2029 isn’t a countdown to disaster, it’s a runway — plenty of time for an ecosystem that has weathered forks, hacks, and regulatory shocks before.
Lens two: Decentralization is precisely the bottleneck. Unlike a corporation that can mandate a security patch overnight, Bitcoin has no CEO who can order an upgrade. Every meaningful protocol change requires broad consensus among miners, node operators, developers, and exchanges — a process that has historically taken years even for far less contentious changes.
Given that developers and investors “remain heavily divided” over which quantum-resistant approach to adopt, as the report notes, there’s a real risk that debate outlasts the timeline. Governance friction, not the mathematics, becomes the actual risk.
What a soft fork actually asks of the network
A soft fork is a backward-compatible upgrade — old nodes can still read the new rules, they just can’t fully enforce them. That’s technically easier than a hard fork, which requires everyone to upgrade or risk splitting the network.
But ‘technically easier’ hasn’t meant ‘fast’ in Bitcoin’s history. Contentious upgrades have taken years to activate even when the code was ready.
That’s because miners and node operators have to signal support before anything ships — there’s no single authority who can just flip a switch.
The report notes developers remain heavily divided on which quantum-resistant approach to adopt. That disagreement, not the cryptography itself, is the step with no fixed deadline attached.
Ethereum’s 2029 target is a self-imposed deadline the Foundation set because it has more centralized coordination than Bitcoin does — not because the underlying threat timeline differs between the two networks.
None of that changes what the cryptography itself requires — it changes how long agreeing on the fix is likely to take, which is the actual variable this piece is tracking.
Why it matters
This matters most to long-term holders with old, address-reused wallets, and to exchanges that will eventually need to coordinate mass migrations of custodial funds. It also matters to the broader “quantum-resistant” industry — I noted earlier this week how new cryptographic governance startups are already raising capital around exactly this kind of infrastructure risk.
What’s worth watching isn’t the quantum computers themselves, which are still years from this capability by most public estimates, but whether Bitcoin’s developer community can reach rough consensus on a specific upgrade path before urgency turns into panic. A slow-moving threat handled badly can still become a fast crisis.
I don’t think this is a reason for alarm today, but it is a reason to watch governance discussions more closely than price charts for a while.
FAQ
Q. Does this mean my Bitcoin is at risk right now?
A. No — quantum computers capable of breaking Bitcoin’s cryptography don’t exist yet by any public estimate; the concern is about a future window, roughly 2029 per some research, not an active vulnerability today.
Q. Can Bitcoin just fix this with a normal software update?
A. Technically yes, through a coordinated upgrade like a soft fork, but because Bitcoin has no central authority, any fix requires broad agreement across developers, miners, and node operators, which historically takes considerable time.
What would change our view
My concern here is coordination speed, not the underlying threat. That would ease if Bitcoin’s developer community converges on a specific quantum-resistant upgrade path well before 2029.
It would also ease if quantum computing progress turns out slower than current public estimates suggest, giving governance more runway to work with.
And it would firm up if that 2029 timeline keeps getting reported with narrower, more confident ranges rather than the wide uncertainty attached to it today.
Sources
- [Google: Quantum Tech to Break Bitcoin’s Cryptography by 2029] — FinTech Magazine
Leave a Reply