Bitcoin & Quantum Risk
Will Quantum Computers Break Bitcoin?
Conservative explainer on what quantum computers could threaten, what they cannot do today, and how Bitcoin exposure depends on public keys.
8 min readJun 22, 2026
NIST PQC · ML-KEM · ML-DSA · SLH-DSA
The quantum transition is a timeline problem, not a panic problem.
QuantumCryptoRisk helps investors, builders, and businesses understand post-quantum exposure with conservative research, transparent scoring, and rules-based tools — no fear-mongering, no marketing claims dressed as security.
- NIST PQC standards tracked
- 3
- Core risk tools
- 4
- Educational research
- 100%
Latest scan
bc1q…f4a · Low exposure · 22/100
Verified rule
Tools
Four lenses on quantum risk.
Every tool is rules-based, transparent, and explicit about its limits. No live blockchain forensics, no ownership claims, no security guarantees.
Wallet Quantum Safety Scanner
Rules-based educational scan for public-key exposure, address reuse, and chain-specific quantum caveats.
Open
Business Quantum Readiness
Score long-life data, vendor exposure, and cryptography migration priorities with a practical roadmap.
Open
Quantum Crypto Rankings
Compare research scores for transparency, adoption, development, decentralization, and usability.
Open
Quantum Risk Calculator
Estimate risk by asset class, time sensitivity, public key exposure, value at risk, and migration difficulty.
Open
Q-Day countdown
2,338 daysto the Global Risk Institute's 2033 median (~6.4 years) — the year a 1-in-7 expert consensus places a cryptographically relevant quantum computer.
Sourced from public expert surveys and vendor roadmaps. Conservative planning signal — not a prediction.
- 2029IBM Starling — fault-tolerant target
IBM's published roadmap targets a large-scale, error-corrected quantum system by 2029 — a prerequisite, not a CRQC.
IBM Quantum roadmap (2024) - 2030NSA CNSA 2.0 transition window
U.S. national-security systems must begin moving to ML-KEM and ML-DSA, with full transition by 2035.
NSA CNSA 2.0 (2022) - 2033Mosca's 1-in-7 risk threshold
Survey of 32 experts puts a ~14% median probability of a cryptographically relevant quantum computer by 2033.
Global Risk Institute Quantum Threat Timeline (2024) - 2035NIST classical-algorithm deprecation
NIST proposes deprecating RSA-2048 and ECDSA-P256 by 2030 and disallowing them by 2035.
NIST IR 8547 (2024)
Methodology
Conservative scoring, transparent weights.
Every ranking and risk score in QuantumCryptoRisk comes from the same six pillars. Weights are public — and editable when better evidence shows up.
- 20%TransparencyPublic design docs, open-source code, third-party audits, disclosed roadmaps.
- 35%SecurityCryptographic design soundness, audit status, and operational hygiene.
- 15%AdoptionReal-world usage, integrations, and wallet/exchange support.
- 15%Developer ActivityCommit cadence, contributor diversity, and release discipline.
- 10%DecentralizationValidator distribution, governance, and dependency surface.
- 5%UsabilityWallet UX, key management, and migration ergonomics.
How it works
From a single wallet to a full migration roadmap.
01
Inputs you can verify
Address, chain, public-key visibility, spending history. No login, no opaque APIs.
02
Rules you can read
Open scoring weights for exposure, transparency, adoption, and dev activity.
03
Actions you can take
Concrete next steps — vendor questions, inventory tasks, wallet hygiene.
Who QuantumCryptoRisk is for
Crypto holders
Check exposure before moving funds. Avoid panic, avoid scams, follow protocol-level guidance.
Get started
Businesses
Score readiness across cloud, vendors, long-life data, and migration timelines.
Get started
Builders & researchers
Compare projects against transparent weights, audit notes, and evidence gaps.
Get started
Research
Plain-English explainers.
Post-Quantum Security
What Is Post-Quantum Cryptography?
Plain-English guide to algorithms designed to resist both classical and cryptographically relevant quantum attacks.
7 min readJun 22, 2026
Quantum Crypto
Best Quantum-Resistant Cryptocurrencies
How to evaluate quantum-resistant claims without confusing marketing language for verified security.
9 min readJun 22, 2026
Standards
ML-KEM, ML-DSA & SLH-DSA Explained
NIST finalized these post-quantum standards so organizations can begin concrete migration planning.
6 min readJun 22, 2026
Business Readiness
How Businesses Should Prepare for Quantum Security
Cryptography inventories, long-life data review, vendor questions, and migration roadmaps — a practical starting point.
10 min readJun 22, 2026
Data Risk
Harvest Now, Decrypt Later
Why long-life sensitive data needs migration planning even before cryptographically relevant quantum computers arrive.
5 min readJun 22, 2026
Start free
Check your quantum exposure in under a minute.
No signup required. The scanner runs entirely on conservative public rules — and tells you exactly what it does and doesn't know.
Educational research only. QuantumCryptoRisk does not claim quantum computers can break Bitcoin or banking encryption today, and nothing here is financial, investment, cybersecurity, or legal advice.
FAQ
Frequently asked questions
What is quantum crypto risk?
Quantum crypto risk is the exposure of today's cryptographic systems — including Bitcoin, Ethereum, TLS, and enterprise PKI — to a sufficiently large fault-tolerant quantum computer running Shor's algorithm against elliptic-curve and RSA keys. It is a timeline and inventory problem, not an immediate threat: no public quantum computer can break secp256k1 or RSA-2048 today, but long-lived data captured now (harvest-now-decrypt-later) may be readable when such machines exist.
When will quantum computers break Bitcoin or RSA?
Public estimates from NIST, NSA, and academic cryptographers cluster around 2030–2040 for a machine capable of breaking 256-bit elliptic-curve keys, with wide uncertainty. QuantumCryptoRisk tracks this as a probability distribution, not a fixed date, and recommends conservative planning horizons rather than panic.
Which post-quantum algorithms does NIST recommend?
NIST finalized three post-quantum standards in 2024: ML-KEM (FIPS 203, key encapsulation, based on Kyber), ML-DSA (FIPS 204, digital signatures, based on Dilithium), and SLH-DSA (FIPS 205, hash-based signatures, based on SPHINCS+). A fourth signature standard, FN-DSA (based on Falcon), is in progress.
Is QuantumCryptoRisk a security audit?
No. QuantumCryptoRisk provides educational, rules-based research and scoring. The wallet scanner and business readiness checker are starting points for conversation — not substitutes for a formal cryptography inventory, penetration test, or auditor engagement.
Do you store my wallet address or private keys?
No private keys are ever entered or transmitted. Wallet addresses you scan are only used to fetch public on-chain data (mempool.space, Blockscout, Solana RPC) and to compute your local risk score. Signed-in Pro users can opt in to saving scan results to their own account for later review.