Quantum computing experts are raising alarms that the first successful attack on major cryptocurrency systems may not look like a typical hack. According to Christopher Smith, co-founder of Quantus Network, a sufficiently advanced quantum computer could derive private keys from public blockchain data, enabling silent, untraceable theft of funds without any breach or alarm.
Smith’s warning highlights the vulnerability of current cryptographic systems that secure Bitcoin and other cryptocurrencies. These systems rely on complex mathematical problems that classical computers cannot efficiently solve. However, quantum computers, using qubits, could potentially solve these exponentially faster, allowing an attacker to reverse-engineer a private key from the public key visible on the blockchain. “When someone cracks your key, you don’t get a memo saying how they did it,” Smith said, noting that the only forensic evidence would be the absence of any breach.
While speculation often centers on Satoshi Nakamoto’s dormant wallets, Smith suggests exchange hot wallets and stablecoin issuance keys present more immediate and lucrative targets. Compromising Tether’s minting keys, for example, could lead to unauthorized creation of USDT, triggering a stablecoin and liquidity crisis across the $300 billion stablecoin market. Tether accounts for roughly 60% of that market, and its deep ties to traditional finance—including holdings of U.S. Treasury bills—could amplify any disruption.
The timeline for such a threat is compressing. Smith estimates a 50% probability of a quantum attack on crypto by 2028, based on current progress in error correction and qubit stability. Google’s research in March suggested that breaking 256-bit elliptic-curve cryptography might be achievable with fewer than 500,000 physical qubits—twenty times less than earlier estimates—and advised blockchains to begin transitioning to post-quantum cryptography. A July Reuters report confirmed that none of the 20 largest blockchains have adopted post-quantum signature algorithms, leaving about 99.96% of the $2.3 trillion crypto market vulnerable.
Post-quantum migration is particularly challenging for decentralized networks due to the size of new signature schemes. For instance, while a classical ECDSA signature occupies about 64 bytes, a Dilithium-5 post-quantum signature takes around 4,595 bytes, significantly increasing storage and transaction costs. Despite these hurdles, Smith and other experts, including Google and security researcher Sean Cheetham of Blockchain Capital, urge immediate action. The industry must coordinate a transition to quantum-resistant algorithms before the clock runs out, lest the first sign of success be unexplained transfers from supposedly secure wallets.
