Bitcoin's Quantum Migration: A Flow of Risk and Cost

The core threat timeline has compressed, but the risk remains a long-term flow. Google's March 2026 research shows a quantum computer could break Bitcoin's ECDSA in under nine minutes, but requires fewer than 500,000 physical qubits. This represents a 20x reduction from earlier estimates, yet the threat is now set for a 2029 deadline. For active transactions, the model shows a 41% success rate for real-time hijacking, exploiting Bitcoin's 10-minute confirmation window.

The immediate on-chain exposure is quantifiable. Approximately 6.9 million BTC (~32% of supply) resides in wallets with exposed public keys, including early Satoshi holdings. This creates a persistent, low-impact flow of risk that justifies a cautious, phased migration strategy rather than panic.

The bottom line is a recalibrated timeline. The threat is real and accelerating, but the hardware gap ensures it remains decades away. The focus should be on monitoring the quantum hardware race and preparing for the eventual, inevitable transition.

The Migration Path: A Flow of Costs and Liquidity

The consensus is building for a phased rollout, starting with cold storage and moving to complex wallets. This approach, championed by key figures like Blockstream's Adam Back, aims to reduce risk and avoid sudden disruption. The core argument is that longer migration windows remove constant fear and increase the chances of full participation, especially from large, slow-moving custodians.

The cost flow will be prolonged and multifaceted. It includes the key management complexity of transitioning millions of addresses and the very real risk of fund loss from rushed, poorly tested upgrades. Back warns against this, pointing to the NIST post-quantum competition where most candidate designs failed. A rushed rollout could introduce vulnerabilities that expose Bitcoin to attacks from classical computers, creating a new, immediate threat.

The primary technical trade-off is signature size. Post-quantum signatures like SPHINCS+ are massive, at 8KB+ compared to Bitcoin's current 64 bytes. This creates a direct flow of on-chain costs and congestion as every transaction grows significantly. The migration will be a decade-long flow of capital and effort, not a single event.

Catalysts and Risks: The Flow of Capital and Confidence

The next major catalyst is external and concrete: Google's own 2029 deadline to migrate its infrastructure to post-quantum cryptography. This sets a clear, high-profile benchmark for the industry. When Google hits that date, it will force a real-world test of readiness across the tech sector and likely accelerate scrutiny of crypto's unique vulnerabilities.

The most significant risk is a 'harvest now, decrypt later' attack. State actors could begin collecting and storing Bitcoin transaction data today, with the intent to decrypt it once quantum computers become powerful enough. The scale of capital exposed is massive: approximately 6.9 million BTC (~32% of supply) resides in wallets with exposed public keys, representing hundreds of billions in value. This creates a persistent, low-impact flow of risk that could undermine long-term confidence.

The real-world test will be the flow of capital into and out of Bitcoin as exchanges and custodians begin the migration process. Any significant outflow or liquidity freeze during this period would signal a breakdown in market confidence. The phased approach advocated by figures like Adam Back aims to mitigate this by reducing fear and allowing time for a safe, coordinated move.