Key Takeaways
- Google’s quantum AI research indicates a high-speed quantum computer could break Bitcoin transaction encryption in approximately nine minutes
- Bitcoin confirmations require about 10 minutes, creating an extremely narrow security window of roughly one minute
- Qubit requirements have decreased from millions to fewer than 500,000 — representing a 20-fold decrease
- Google has accelerated its quantum computing development roadmap to 2029
- Elon Musk commented on a potential benefit: quantum computers might help recover access to wallets with forgotten passwords
Researchers at Google published findings demonstrating that a quantum computer utilizing architecture comparable to their Willow chip could extract a Bitcoin private key from its corresponding public key in approximately nine minutes. Standard Bitcoin transactions require around ten minutes for confirmation. This creates a security margin of approximately one minute.
Within this brief timeframe, an attacker might intercept active transactions directly from the mempool — where unconfirmed transactions await processing — before blockchain confirmation occurs. The research calculated the attack success probability at slightly below 41%.
The study originated from Google Quantum AI and examined breaking the 256-bit Elliptic Curve Discrete Logarithm Problem (ECDLP), the cryptographic foundation Bitcoin relies upon. Earlier threat assessments focused on RSA-2048, a different and older encryption standard, leading to significantly longer projected timelines.
Among the most notable discoveries is the dramatic reduction in computational resources needed. Prior studies indicated breaking Bitcoin’s encryption would demand tens of millions of qubits. The current research establishes that number at under 500,000 — a 20-fold decrease. The process requires just 1,200 logical qubits operating at a 0.1% error rate.
Google has reportedly accelerated its internal quantum computing development schedule to 2029.
Oratomic, an independent research team, published corroborating results. Employing neutral-atom hardware along with an alternative technical methodology, they demonstrated that Shor’s algorithm — the quantum computational method for breaking encryption — functions at cryptographically significant scales using between 10,000 and 22,000 qubits.
Two independent research teams. Two distinct hardware platforms. Both arriving at similar conclusions.
The Challenge of Upgrading Bitcoin’s Infrastructure
Transitioning Bitcoin to post-quantum cryptography presents substantial technical challenges. The process demands a hard fork, requiring widespread community agreement — historically a slow and divisive process within the Bitcoin community.
Post-quantum cryptographic signatures occupy significantly more space than current signatures, increasing bandwidth, storage, and computational requirements throughout the network.
Following consensus achievement, the migration process would span months. Given Bitcoin’s present transaction capacity, transferring all coins to post-quantum addresses — dedicating the entire network to this task — would still require several months.
Security experts caution that delaying action until a cryptographically capable quantum computer becomes publicly available — commonly termed “Q-Day” — would prove insufficient. Digital signatures might already face compromise at that juncture.
Elon Musk’s Perspective
Elon Musk addressed the Google findings on X, where his audience exceeds 237 million followers. He observed a potential benefit to quantum computing breaking Bitcoin: individuals who lost their wallet passwords might eventually regain access.
His remark highlights a legitimate consideration — quantum computing sufficiently advanced to break encryption could potentially unlock wallets rendered inaccessible through lost credentials.
Google’s research paper carries the title “Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities: Resource Estimates and Mitigations.”
