European financial regulators are sounding an alarm that sounds more like science fiction than banking policy: the machines that could one day crack the encryption protecting bitcoin and other blockchains might arrive before anyone finds a profitable, everyday use for them. That warning, issued by the Joint Committee of the European Supervisory Authorities, has reignited a debate about what a real quantum computing blockchain threat would actually look like — and how much of the crypto economy sits exposed to it right now.
Key takeaways
- European regulators, through the Joint Committee of the ESAs, warn that advanced quantum computers could undermine blockchain cryptography before quantum technology becomes commercially useful.
- Roughly 6.9 million bitcoin, worth about $586 billion, sit in legacy or reused wallets considered vulnerable to a future quantum attack, according to Cryptoquant.
- The risk stems from public keys already visible on the blockchain in older addresses, which a powerful enough quantum computer could theoretically use to reconstruct private keys.
- Bitcoin cannot patch this problem the way a bank updates its systems; fixing it requires network-wide consensus and holders actually moving their coins.
- The European Commission wants member states to start transitioning to post-quantum cryptography by the end of 2026, with high-risk systems protected by 2030.
European Financial Regulators Warn of Quantum Threat to Blockchain
The clearest signal yet came from the Joint Committee of the European Supervisory Authorities — a body that brings together the European Banking Authority, the European Securities and Markets Authority and the European Insurance and Occupational Pensions Authority. In their Autumn 2026 Risk and Vulnerabilities report, released in September, the authorities stated plainly that “threats could materialize earlier than any viable commercial application.” An advanced quantum computer, the report said, “could undermine some cryptography systems widely used to secure communications, transactions, databases and blockchains.”
That framing matters because it separates two timelines that often get conflated: when quantum computing becomes useful for business, and when it becomes dangerous for security. A recent IBM report projects commercial quantum applications arriving within four years or less, but the EU’s warning suggests the cryptographic risk window could open even sooner. Notably, the regulators stopped short of claiming that a machine capable of breaking bitcoin’s cryptography already exists.
Vulnerability of Bitcoin Legacy Wallets to Quantum Attacks
The scale of what’s theoretically at stake is significant. Cryptoquant estimates that roughly 6.9 million bitcoin, worth about $586 billion, sits in wallets vulnerable to a future quantum attack — a figure that has circulated widely since CryptoQuant founder Ki Young Ju first floated the estimate, which includes coins tied to visible public keys and dormant holdings attributed to early bitcoin users.
The mechanism behind that exposure is specific. Bitcoin held in older, Satoshi-era addresses or in addresses that have been reused often has its public key already sitting in plain sight on the blockchain. A sufficiently powerful quantum computer could, in theory, use that visible key to derive the corresponding private key and seize control of the coins. Not every dormant wallet carries the same risk, though. Many unspent bitcoin outputs still shield their public key behind a cryptographic hash, which keeps them comparatively safer for now — a distinction that separates modern wallet formats from the older pay-to-public-key outputs and reused addresses where the key is already exposed onchain.
Challenges and Limitations in Bitcoin’s Quantum-Resistant Upgrade
This is where the story becomes less about physics and more about governance. Bitcoin cannot simply push a security patch the way a bank updates its systems overnight. Shifting to quantum-resistant signatures would require network-wide consensus among developers, miners and users — a process that has historically taken years even for far less contentious changes. On top of that, holders of exposed coins would actually need to move them into safer wallet formats before an attack becomes feasible, something that depends entirely on individual action rather than a centralized fix.
This is arguably the more pressing part of the EU financial regulators quantum warning: even if a workable quantum-resistant standard existed today, bitcoin’s decentralized structure means adoption would be slow, uneven, and dependent on millions of individual decisions rather than a single institutional switch. That gap between technical possibility and practical rollout is precisely why regulators are flagging the issue years ahead of any confirmed capability.
Regulatory Roadmap and Future Outlook on Quantum Cryptography
Brussels isn’t waiting for certainty before acting. The European Commission’s post-quantum cryptography roadmap calls on member states to begin transitioning their systems by the end of 2026, with high-risk use cases fully protected by 2030. That timeline reflects a broader concern the European watchdogs raised directly: so-called “harvest now, decrypt later” attacks, in which encrypted information collected today could be cracked open once quantum computing matures enough to do it.
For blockchain specifically, that risk cuts both ways. It’s not just about future transactions — it’s about data and keys that are already public today, sitting exposed on an immutable ledger, waiting for the technology to catch up. Whether the fix arrives through gradual wallet migration, a coordinated protocol upgrade, or regulatory pressure trickling down from Europe’s 2026 and 2030 deadlines, the clock the EU’s report describes is now part of the conversation bitcoin holders can’t fully ignore.
FAQ
What is the main quantum threat to blockchain according to European regulators?
Advanced quantum computers could eventually break cryptography protecting blockchains before quantum technology is commercially viable, according to the Joint Committee of the European Supervisory Authorities.
Why are bitcoin legacy wallets vulnerable to quantum attacks?
Because their public keys are already visible on the blockchain, a sufficiently powerful quantum computer could derive the private keys and take control of those bitcoins.
Can bitcoin easily upgrade to quantum-resistant signatures to prevent these attacks?
No. Upgrading requires network-wide consensus, and coin holders would need to move exposed coins before such an attack becomes possible.
What does ‘harvest now, decrypt later’ mean in the context of quantum computing threats?
It refers to attackers collecting encrypted information now with the intention of decrypting it later, once quantum computing matures enough to break current cryptographic protections.
Article produced with the assistance of artificial intelligence and reviewed by the editorial team.
Powered by WPeMatico
