CoinDesk
Andrew Gault, a founding partner of 7percent Ventures whose portfolio includes Universal Quantum, is pushing the bitcoin industry to look past the wallet-key debate. His argument: the more urgent quantum exposure is encrypted authentication traffic already moving between institutions, which sophisticated adversaries are stockpiling today for decryption once quantum computers mature. The thesis lines up with Google's own security engineering team, which in March set a 2029 target to complete its post-quantum migration and reprioritized its internal threat model toward authentication services and digital signatures.
Why it matters
The strategy driving the urgency is "harvest now, decrypt later" — adversaries don't need to read encrypted traffic today, only store it cheaply until cryptographically relevant quantum hardware arrives. Citi modeled the bank-system version in February and estimated a quantum-enabled attack on a single top-five US bank's access to Fedwire could cascade into a $2 trillion to $3.3 trillion hit to the US economy, equivalent to a 10% to 17% decline in real GDP. The Global Risk Institute puts the probability of a cryptographically relevant quantum computer arriving by 2034 at between 19% and 34%. For crypto, the wire-level surface is broader than the wallet one: cross-chain bridge proofs, exchange API authentication packets, signed transactions archived in public mempools, and back-channel signing traffic between cold storage and trading desks all sit on the same vulnerability spectrum.
Market impact
CoinShares argued in February that the wallet-key fear is overstated, estimating only about 10,200 BTC are concentrated enough to move markets if stolen — a fraction of the roughly 6.9 million BTC sitting in addresses with exposed public keys that have dominated the discourse. But Gault's worry is the proof layer: the authentication records that determine who owns what, who authorized which transaction, and who bears legal liability. Ethereum has launched a coordinated post-quantum migration; Bitcoin, major exchanges, and custodians have not publicly committed to one.
Frequently asked questions
-
What is the "harvest now, decrypt later" quantum threat to bitcoin?
Adversaries are stockpiling today's encrypted interbank messages, payment authentication records, and digital signatures, then waiting for a cryptographically relevant quantum computer to decrypt them. Gault argues this wire-level surface is more urgent than the wallet-key exposure that has dominated the bitcoin…
-
How large could a quantum attack on financial infrastructure be?
Citi modeled the scenario in February and estimated a quantum-enabled attack on a single top-five US bank's access to Fedwire could trigger a $2 trillion to $3.3 trillion cascade across the US economy, equivalent to a 10% to 17% decline in real GDP.
-
When is a cryptographically relevant quantum computer likely to arrive?
The Global Risk Institute, cited in the Citi report, puts the probability of a cryptographically relevant quantum computer arriving by 2034 at between 19% and 34%. Google security engineering has set a 2029 target for completing its own post-quantum migration.
-
What part of the crypto stack is exposed beyond wallet keys?
The wire-level surface is broader: cross-chain bridge proofs, exchange API authentication packets, signed transactions archived in public mempools, and back-channel signing traffic between cold storage and trading desks. Major crypto exchanges and custodians have not publicly committed to a post-quantum migration.
-
Is bitcoin's quantum exposure actually that large?
Roughly 6.9 million BTC sit in addresses with exposed public keys, but CoinShares argued in February that only about 10,200 BTC are concentrated enough to move markets if stolen. The unresolved exposure is the authentication and proof layer, not just the wallet layer.
CoinTelegraph
WuBlockchain
Crypto Rank News
TheBlock
WatcherGuru