More than $3 trillion in digital assets secured by elliptic curve cryptography could become vulnerable to quantum attacks within four to seven years, according to a 110-page report from Project Eleven, a firm focused on post-quantum security for digital assets whose CEO Alex Pruden appeared at Consensus Miami 2026.
The report, co-authored by Pruden and CTO Conor Deegan, warns that a "Q-Day" — the moment a cryptographically relevant quantum computer can break widely used public-key cryptography — could arrive as early as 2030 and no later than 2033. Project Eleven's analysis concludes Q-Day is "more likely than not by 2033, and potentially even as soon as 2030." The threat extends well beyond crypto: the same elliptic-curve primitives securing Bitcoin, Ethereum and stablecoins also underpin banking systems, cloud infrastructure, authentication networks and military communications.
Why it matters
SuffIciently powerful quantum machines running Shor's algorithm could derive private keys from public keys, letting attackers forge signatures and take over wallets, bank accounts and digital identities. That is the technical floor under the $3 trillion figure.
The harder problem is governance. Project Eleven argues the gap is not technical but coordination, urgency and willingness to bear migration costs. Large systems typically need five to more than 10 years to migrate to post-quantum cryptography, and blockchains face an additional hurdle: every user, exchange, custodian, wallet provider and miner must move in lockstep, or the migration fails.
Market impact
On Bitcoin specifically, the report is blunt. The SegWit upgrade — a modest change by comparison — took over two years from proposal to activation (2015–2017) and triggered a contentious chain split. A post-quantum migration would be more invasive, more politically charged, and is unlikely to land inside the four-to-seven-year Q-Day window.
Frequently asked questions
-
What is Q-Day and when could it happen?
Project Eleven defines Q-Day as the moment a cryptographically relevant quantum computer can break widely used public-key cryptography via Shor's algorithm. The report pegs the window as early as 2030 and no later than 2033, calling it "more likely than not" by 2033.
-
How much value in digital assets is exposed?
The report states that more than $3 trillion in digital assets are secured by elliptic curve cryptography, the same primitive vulnerable to quantum attack. The figure covers Bitcoin, Ethereum, stablecoins and other blockchain-based assets.
-
Why is migration to post-quantum cryptography so hard?
Project Eleven argues the gap is not technical but coordination, urgency and willingness to bear migration costs. Large systems typically need 5–10+ years to migrate, and blockchains additionally need every user, exchange, custodian, wallet provider and miner to move simultaneously.
-
What makes Bitcoin's quantum migration especially difficult?
Bitcoin upgrades historically move slowly and become politically contentious. The report notes SegWit — a modest change by comparison — took over two years from proposal to activation (2015–2017) and triggered a chain split. A PQC migration is more invasive and is unlikely to land inside the four-to-seven-year Q-Day…
-
What does Project Eleven propose for vulnerable legacy BTC?
CEO Alex Pruden personally leans toward "recycling" the roughly 5.6 million to 6.9 million BTC held in quantum-vulnerable legacy addresses — worth up to $500 billion at current prices — back into Bitcoin's supply curve rather than letting a future quantum attacker sweep them. The report flags the tension with…
CoinDesk