The impending impact of quantum computing on
The main risk stems from Bitcoin’s dependence on elliptic curve cryptography (ECC-256), which can be broken with just 1,673 logical qubits using Shor’s algorithm. In contrast, decrypting RSA-2048 and RSA-4096 would require 2,314 and 3,971 logical qubits, respectively. These numbers, based on surface code error correction, assume error rates between 10^-3 and 10^-5—levels that recent progress in quantum error mitigation suggests may be attainable within the predicted timeframe, as detailed in the BeinCrypto analysis.
Charles Edwards, the analyst who brought attention to the countdown, underscored the seriousness: "If quantum isn’t addressed for Bitcoin by then... we’ll be in serious trouble," he cautioned. This timeline matches current trends in qubit development, such as Google’s 53-qubit Sycamore chip in 2019 and forecasts of more than 6,000 qubits by late 2027, as mentioned in the TradingView report. Still, the assumptions behind the project—especially the rapid scaling of hardware and error reduction—have faced criticism. Agencies like the U.S. National Security Agency (NSA) and the UK’s National Cyber Security Centre (NCSC) suggest a more cautious timeline, advising post-quantum transitions by 2035, according to a
The financial implications are significant. With Bitcoin’s market value at $2.5 trillion and the privacy it provides, both could be jeopardized if quantum computers reach the necessary scale. Older Bitcoin wallets that use pay-to-public-key (P2PK) or reused pay-to-public-key-hash (P2PKH) addresses are especially at risk, since these reveal public keys on the blockchain. Meanwhile, the network’s hash-then-reveal mechanism offers a short-term safeguard for standard P2PKH wallets, which only disclose public keys during transactions.
The industry is responding with urgency.
Some critics contend that the Quantum Doomsday Clock’s ambitious schedule is influenced by marketing interests for post-quantum solutions rather than a consensus within the scientific community. A 2021 study by Gidney and Ekerå, often cited by skeptics, calculated that factoring RSA-2048 would demand 20 million physical qubits at a 10^-3 error rate—a scale far beyond what is currently possible. Nevertheless, supporters like Dr. Richard Carback and Colton Dillion, who created the clock’s model, argue that quantum advancements are happening more rapidly than anticipated.
With the deadline approaching, the Bitcoin ecosystem faces a crucial decision: either move swiftly to adopt post-quantum security measures or risk falling behind. Now that NIST’s FIPS-203 and FIPS-204 standards are finalized, the necessary tools for these upgrades are available. Experts point out that the main challenge is economic—balancing the expense of migration against the potential cost of inaction.