Google research suggests encryption technique used by Bitcoin will be cracked by quantum computers around 2029 — search giant says quantum attacks need to be prepared for now

Wednesday, April 01, 2026

It's long been hypothesized, and now broadly accepted, that should practical quantum computers arrive, they could eventually break the conventional cryptography methods that underpin today's digital world. Crucially, they might crack elliptic-curve cryptography (ECC), a principle in use today across many fields. The timeframe for the quantum cryptocalypse was previously believed to lie past 2030, but new research from Google pulls this schedule forward to 2029.

The paper predicts profound effects across blockchain infrastructure and cryptocurrencies, among other applications. The list of blockchains expected to be under fire from the quantum ECC attack is essentially "all of them," as demonstrated by a recent Cambridge study.

Although the potential for quantum attacks on ECC is wide-ranging, it's particularly troublesome for blockchain applic ations, as the participants' public keys and transaction data are by definition published worldwide and can therefore be stored for later cryptanalysis and attack. The fact that historical data is readily available is why blockchains (and cryptocurrencies by extension) are particularly vulnerable to quantum attacks.

Article continues below You may like

At a technical level, the attack on ECC is called Shor's algorithm, published in 1994, when quantum computers were nothing but a fever dream. The recent development that led Google's researchers to sound the klaxons is the fact that they demonstrated that Shor's attack can be performed with systems comprising 1200 logical qubits and 90 million Toffoli gates, or under 1450 qubits and 70 million gates.

Should the blockchain networks not quickly adapt to what Google describes as an increasingly imminent threat, the resulting chaos from a quantum attacker is predicted to be swift and brutal: among other consequences, wallet funds could be stolen, identities could be impersonated (thus tilting the scale on transaction verifications), and ledgers' intrinsic integrity could no longer be trusted. The DeFi ecosystem and all its smart contracts will also be at risk, plus intrusions into that network will be harder to trace as all transactions will appear legitimate. With a cryptographically relevant quantum computer (CRQC) in play, the chain of trust is not just broken but smashed to pieces.

Google asserts that moving from ECC to Post-Quantum Encryption (PQC) while there is still time to do so is the most appropriate countermeasure, but the fact that blockchains are by definition distributed and don't have a central authority becomes the main implementation problem. Experts have long warned that these attacks aren't mer ely theoretical, and generally speaking, blockchains take their sweet time in adapting to changing conditions, arguably by design.

Blockchains aren't the only applications at risk, either. Applications like website key exchange, SSH, messaging applications are transitioning away from ECC to PQC, plus any attack still requires capturing the encrypted data to begin with. X.509 certificates, used for server authentication, are a tough nut to crack, since moving to PQC requires coordination from certificate issuers, root certification authorities, and browsers. Code signing is another pain point, with the technology available but not truly implemented at scale yet.

Google Preferred Source