The Quantum Threat to Bitcoin, Digital Assets and Modern Cryptography

The most unsettling part of the quantum-security problem is not that a sufficiently powerful quantum computer might eventually break today’s cryptography. It is that defenders have to prepare for an attack whose technological timetable remains uncertain while the information being protected is already moving through hostile networks.

The U.S. National Institute of Standards and Technology (NIST) has been pushing organizations toward post-quantum cryptography, with the broader U.S. government transition goal aimed at mitigating quantum risk by 2035.

NIST’s transition work calls for quantum-vulnerable algorithms to be deprecated and ultimately removed from its standards by 2035, with higher-risk systems moving earlier.

That deadline, however, should not be interpreted as a countdown clock for attackers. NIST itself warns about “harvest now, decrypt later”: adversaries can collect encrypted information today and retain it until technology capable of breaking the underlying cryptography becomes available.

For information whose value lasts for years—government records, intellectual property, financial data, military communications or sensitive corporate research—the attack can begin long before the encryption is actually defeated. This creates an uncomfortable asymmetry.

Defenders think in terms of migration schedules, software upgrades, procurement cycles and compliance deadlines. Attackers think in terms of opportunity.

That distinction matters when considering claims that adversaries are already combining artificial intelligence, quantum annealing and specialized computing hardware to break modern cryptographic keys today.

Such claims should be treated carefully. There is no public evidence establishing that existing AI systems, quantum annealers and post-halving ASIC mining machines can collectively defeat the cryptographic algorithms targeted by NIST’s post-quantum transition.

NIST continues to describe cryptographically relevant quantum computers as a future capability, with experts disagreeing substantially about when such machines could arrive. But dismissing the problem because a universal quantum computer has not arrived would also miss the larger security lesson.

Attackers do not need to reproduce a textbook attack exactly as cryptographers imagined it. They can combine weaknesses across systems. Poor key management, vulnerable implementations, stolen credentials, side-channel information, exposed infrastructure and conventional computing can all reduce the amount of cryptographic work an adversary actually needs to perform.

That is why the post-quantum transition is about more than quantum computers. NIST has already finalized three post-quantum standards—ML-KEM, ML-DSA and SLH-DSA—and explicitly encourages organizations to begin migration now.

The agency’s guidance recognizes that replacing cryptographic infrastructure is a long process involving hardware, software, protocols, vendors and inventories of where vulnerable algorithms are being used. For financial markets and digital assets, the stakes are particularly high. Public-key cryptography sits beneath authentication, secure communications and digital signatures.

A future ability to derive private keys from public information could transform an abstract cryptographic vulnerability into an ownership problem: accounts, certificates, wallets and other cryptographically secured assets could become targets. The critical question, therefore, is not whether someone has secretly built a machine capable of breaking everything today.

There is no verified public evidence for that claim. The more immediate question is whether organizations are migrating quickly enough that tomorrow’s breakthrough—whenever it arrives—does not turn today’s encrypted infrastructure into tomorrow’s exposed attack surface.

In cybersecurity, the deadline is rarely the moment the threat begins. It is usually the moment preparation can no longer be postponed.