A new coalition called the Quantum Alliance launched on Oct. 15 in Lisbon. It brings together nine blockchain organizations to set common standards for protecting crypto networks, wallets, and infrastructure from future quantum computers.
The group estimates that roughly 6.04 million to 6.4 million BTC may already be exposed. That is about 30% of Bitcoin’s supply. The issue comes from how Bitcoin proves ownership. Some wallets reveal public keys when they make transactions, and those keys stay visible on the blockchain. Today’s computers cannot realistically turn those public keys back into private keys. A powerful enough quantum computer running Shor’s algorithm could, in theory, do that. About 1.1 million BTC tied to Satoshi Nakamoto’s early holdings falls into the wider discussion of possibly vulnerable coins. Nobody can steal those funds now. The risk depends on quantum machines becoming strong and reliable enough to break the cryptography.
Google Research Adds Pressure
Google Quantum AI said Thursday that its Willow processor showed a technique called magic state cultivation. The work reduced errors by a factor of 40, according to the company, and reached 99.99% accuracy in specialized quantum states. That does not mean Bitcoin is under attack. It does add another data point to a debate that keeps moving.
The Quantum Alliance also introduced a Quantum Doom Clock. It points to March 2028 as an early possible window for a machine that could break existing protections. The clock tracks qubit growth and estimates when computers might reach roughly 856,000 physical qubits. That number comes from the group’s model. Other researchers think the danger is more likely in the 2030s. I think the date is less important than the preparation work it forces.
Standards Before a Crisis
The founding contributors include Quantus, American Fortress, Intmax, Keystone, Midnight Foundation, Postquant Labs, Abelian, The Vault, and Hacken. They are not launching another blockchain. The plan is to publish open standards that help judge whether networks are ready for quantum attacks. The work covers four areas: moving existing funds to safer cryptography, evaluating privacy technology, protecting wallets, and making security tools work across different chains.
The group is modeled on the Internet Engineering Task Force, where technical proposals are developed in public rather than handed down by one company. Christopher Smith, founder and CEO of Quantus, said post-quantum cryptography will eventually just be called cryptography, while older methods end up in a museum. The harder problem is simpler: many coins sit in forgotten wallets or addresses whose owners may never move them. Bitcoin cannot order every holder to migrate. Stablecoins, bridges, and other crypto infrastructure face related cryptographic risks.
For now, the quantum nightmare remains theoretical. The open question is whether millions of bitcoin can be protected before that changes.
Migration Is the Hard Part
A network upgrade can introduce stronger signatures. It cannot force every owner to act. Lost keys, dormant addresses, and old wallets may remain exposed even after new cryptography arrives. The alliance says it will publish tests and migration guidelines rather than dictate responses.
