Quantum Vulnerabilities in Cryptocurrencies: Resource Estimates and Mitigations

ArticleRyan Babbush, Adam Zalcman, Craig Gidney, Michael Broughton, Tanuj Khattar, Hartmut Neven, Thiago Bergamaschi, Justin Drake, Dan BonehResearch

A research team including Ryan Babbush, Justin Drake, and Dan Boneh presents updated resource estimates for breaking 256-bit elliptic curve cryptography on quantum hardware. Shor's algorithm can solve the 256-bit Elliptic Curve Discrete Logarithm Problem using <1200 logical qubits and <90 million Toffoli gates, or <1450 logical qubits and <70 million Toffoli gates. On superconducting architectures, this could execute in minutes using fewer than 500,000 physical qubits.

Key points

  1. Shor's algorithm can break 256-bit elliptic curves with <1200 logical qubits (<90M Toffoli gates) or <1450 logical qubits (<70M Toffoli gates).
  2. Results were verified using zero-knowledge proofs to comply with responsible disclosure principles without exposing attack details.
  3. On superconducting platforms with 1e-3 physical error rates and planar connectivity, execution could take mere minutes with under 500,000 physical qubits.
  4. A distinction is drawn between fast-clock systems (superconducting, photonic) and slow-clock systems (neutral atoms, trapped ions); fast-clock systems threaten live public mempool transactions via on-spend attacks.
  5. Vulnerabilities extend across smart contracts, Proof-of-Stake consensus mechanisms, Data Availability Sampling, and dormant or abandoned assets.
  6. The authors call for rapid adoption of Post-Quantum Cryptography (PQC) and policy frameworks such as 'digital salvage' to handle abandoned funds securely.

Why it matters

Elliptic curve cryptography underpins most contemporary blockchain networks. These revised lower resource requirements indicate that cryptanalytically relevant quantum computers could disrupt active network transactions much faster than previously assumed, making post-quantum migration urgent.

Analysis

By categorising quantum hardware by clock speed, the study highlights distinct threat profiles: slow-clock machines threaten dormant assets, whereas fast-clock systems enable real-time mempool exploitation. The authors argue that cryptographic migration to PQC must be paired with clear policy mechanisms, such as digital salvage frameworks, to prevent adversarial exploitation of legacy or abandoned funds.

Mentioned links

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • Link:CBC News

    Over $100M US in Bitcoin Stolen in Coldcard Hack

    According to a CBC News report citing blockchain intelligence firm Galaxy Research, hackers have drained over $100 million US worth of bitcoin from Coldcard hardware wallets.

    Security· News

  • Article:Coinkite

    Coldcard Security Advisory: Firmware Bug Causes Weakened Seed Generation

    A firmware bug affecting Coinkite Coldcard devices (Mk2, Mk3, Mk4, Mk5, and Q) caused weakened seed generation, enabling attackers to reconstruct private keys offline and steal funds. Coinkite has released fixed firmware builds and advised users of affected seeds to migrate funds immediately.

    Security· Announcement

  • X post:Codez

    Exploring the Evolution of Decentralized Identity and Web3 Security

    This article examines the current state of decentralized identity solutions and their critical role in enhancing security within the Web3 ecosystem. It highlights how emerging protocols aim to solve traditional authentication challenges while providing users with greater control over their digital footprint.

    15.3kbookmarks7.5mviews

    Security

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.