The Quantum Threat to Bitcoin: Why a Government Decree Is Not a Panacea
On June 22, U.S. President Donald Trump signed an executive order mandating an accelerated transition to post-quantum cryptography for federal systems. The initiative is certainly timely, but for Bitcoin and other decentralized networks, it has no direct effect. It is impossible to govern such a network by government decree, and this creates unique risks.
Stefan Leichenauer, Vice President of Engineering at SandboxAQ, notes that the exact date of the emergence of a cryptographically relevant quantum computer remains uncertain, but a realistic range is three to ten years. He warns that migration to post-quantum standards will take years, and many organizations are already behind schedule.
Alex Pruden, CEO of Project Eleven, calls the White House's revision of timelines belated. According to his company's estimates, the probability of a quantum computer capable of breaking existing cryptography emerging by 2030 is 10%, and by 2033, it is already 50%. These figures are thought-provoking.
Paul Stimers, Executive Director of the Quantum Industry Coalition, adds that industry roadmaps converge on the 2028–2030 period. However, he warns that public estimates may be understated due to classified quantum programs in the U.S. and other countries.
What This Means for Bitcoin
Trump's executive orders could accelerate investments in quantum security, which will indirectly affect the blockchain industry. But the key risk for Bitcoin is not mining, but signatures. If a public key is revealed, a quantum computer could potentially recover it and sign a transaction on behalf of the owner. This is a threat to all UTXOs with already exposed keys.
In March, BTQ Technologies launched the Bitcoin Quantum v0.3.0 testnet with an implementation of BIP-360. This proposal introduces a Pay-to-Merkle-Root output type, which is intended to eliminate the vulnerable key-path spend in the style of Taproot. However, BIP-360 is only in the Bitcoin Improvement Proposals repository, which does not imply community consensus. It is a formal step, not an approved update.
An even more controversial proposal is BIP-361, which describes a hard migration scenario: if owners refuse to transition to quantum-resistant addresses, coins on vulnerable addresses could be locked. This has sparked heated debate: some see it as a necessary protective measure, others as a violation of the principle of sovereign control.
Why Migration Is Difficult
According to Project Eleven's report "The Quantum Threat to Blockchains 2026," the baseline Q-Day scenario occurs in 2033. The optimistic scenario is 2030, and the pessimistic one is 2042. But for Bitcoin, the problem is not only technical. The transition will require coordination among developers, miners, exchanges, custodians, wallets, and large holders. Given that major network changes historically proceed slowly and cause political disputes, this is a separate risk. The migration will affect signature sizes, consensus rules, infrastructure, and user practices. Even with working prototypes, the path from proposal to activation could take years.
Other Networks Are Moving Faster
Unlike Bitcoin, some ecosystems are already publishing more centralized plans. The Stellar Development Foundation has presented its document, the Algorand Foundation has published a roadmap, and the Coinbase council has described quantum migration scenarios. The Ethereum Foundation has proposed the SPHINCS- concept for protecting accounts without a hard fork, and the EF itself has declared post-quantum security a strategic priority.
My conclusion: Bitcoin is in a uniquely vulnerable position. Its decentralized nature and conservative change adoption process make it less flexible in the face of the quantum threat. While other networks can adapt quickly, Bitcoin will have to go through complex political and technical debates. Investors and holders should start thinking about strategies to protect their assets now, without waiting for Q-Day.