Crypto Organizations Form Quantum Alliance Amid Bitcoin Security Concerns

Preface

Quantum computing is not yet capable of breaking the cryptography used by major blockchain networks, but the possibility has prompted growing concern across the digital-asset industry. A central difficulty is that companies and networks do not share a clear definition of what it means to be “quantum-ready,” or a common method for verifying such claims. In response, nine blockchain organizations have launched the Quantum Alliance, an open standards body intended to develop shared criteria, testing approaches and compatibility rules. Its work addresses a risk with significant potential consequences: the Alliance estimates that roughly 6.04 million BTC, or about 30% of Bitcoin’s supply, are exposed because of how their public keys are available. This article explains the Alliance’s goals, the cryptographic threat it is responding to, the forecasts cited by the group and the broader industry’s preparations—while distinguishing projected risks from capabilities that quantum computers do not currently have.

Lazy bag

Nine organizations have established the Quantum Alliance to create public, evidence-based standards for assessing quantum resistance and coordinating blockchain upgrades. Its work is organized into four areas: migration, post-quantum zero-knowledge systems, wallet security and cross-chain compatibility. The group warns that roughly 6.04 million BTC—about 30% of supply—are quantum-exposed at rest, while cited projections include a possible early risk window in March 2028. These are forecasts, not proof that a quantum computer can currently compromise Bitcoin. The Alliance’s central aim is to make security claims more consistent and verifiable before networks face a practical threat.

Main Body

Nine organizations in the blockchain sector have launched the Quantum Alliance, an open standards body focused on preparing networks and related infrastructure for potential advances in quantum computing. The initiative addresses a question that has become increasingly important to developers, wallet providers and security teams: what evidence should be required before a network can reasonably describe itself as “quantum-ready”? According to the Alliance, the industry currently has no agreed definition and no shared testing framework for evaluating quantum-resistance claims.

The founding contributors represent several parts of the digital-asset ecosystem, including base-layer protocols, privacy networks, rollups, hardware wallets and security auditing. Named contributors include Quantus, Postquant Labs, Midnight Foundation, Keystone, Abelian and security firm Hacken. The Alliance says its decisions will be guided by public evidence and working implementations rather than by an organization’s corporate size or token holdings. Its proposals and other outputs are also intended to be published openly, allowing projects outside the founding group to review and use the work.

The group is modeled on the Internet Engineering Task Force, an organization known for developing open technical standards. That model places emphasis on broadly discussed proposals and practical implementation instead of a closed, company-led process. For blockchain networks, this approach could matter because cryptographic changes rarely affect only one software component. A network’s consensus rules, account systems, wallet software, bridges and applications may all rely on related cryptographic assumptions. Shared standards could help teams understand what a migration requires and whether different systems can work together after changes are made.

The Alliance has divided its work into four groups: blockchain migration, post-quantum zero-knowledge systems, wallet security and cross-chain compatibility. Migration work concerns how networks might move from existing cryptographic schemes to alternatives designed to resist quantum attacks. The process could involve protocol changes, user communication and the handling of accounts that are not updated promptly. The group’s stated focus is on building a common framework for such transitions rather than asserting that every network faces an identical technical or operational problem.

Post-quantum zero-knowledge systems form a separate area because privacy-preserving proofs may use cryptographic constructions with different security properties from ordinary digital signatures. A standard for evaluating these systems would need to consider both their intended privacy functions and their resistance to relevant attacks. Wallet security is another distinct concern: users depend on wallets to generate, store and use keys, so even a secure network design can be undermined if wallet implementations do not support a safe transition. Cross-chain compatibility, meanwhile, addresses the challenge of coordinating security changes across networks and services that exchange assets or messages.

At the heart of the concern is elliptic-curve cryptography, which is used by nearly every major blockchain to secure accounts. Public keys can be exposed on a ledger when accounts interact with a network. A sufficiently powerful quantum computer running Shor’s algorithm could theoretically use an exposed public key to derive the corresponding private key. If that became practical, an attacker might be able to take control of funds associated with the compromised key. No quantum computer is currently known to be capable of carrying out this attack against Bitcoin. The risk discussed by the Alliance is prospective, and depends on future machine capabilities and the cryptographic details of a given system.

The potential consequences extend beyond individual cryptocurrency accounts. The same broad class of cryptography can protect privileged keys associated with stablecoin minting, bridges, oracles and governance contracts. If a key with extensive permissions were compromised, an attacker could potentially affect more than one user or application. The resulting harm would depend on how each system is designed, what authority a key holds and what safeguards are in place. This is why the Alliance’s focus includes infrastructure and compatibility, not only the cryptography used to sign ordinary transactions.

The Alliance estimates that roughly 6.04 million BTC, about 30% of Bitcoin’s supply, are quantum-exposed at rest. This figure describes the group’s assessment of exposure, rather than a claim that those coins have been stolen or can be seized today. The distinction matters: exposure identifies a potential vulnerability under a future threat model, while an actual compromise would require a capable quantum computer and a successful attack. The estimate nevertheless gives a sense of why developers and security specialists are considering preparations before such technology exists.

Forecasts cited by the Alliance point toward the late 2020s, but estimates of technological progress remain uncertain. The group references a model co-built by two of its contributors that identifies March 2028 as an early potential window. It also cites a Google Quantum AI study that lowered the estimated number of qubits needed to break Bitcoin’s cryptography to under 500,000. These forecasts concern possible future capabilities; they do not establish that a machine meeting the required conditions exists or that an attack will occur on a specific date. Improvements in quantum hardware and algorithms can change estimates, while practical attacks also depend on engineering challenges beyond a qubit count.

Quantus founder and CEO Christopher Smith described a future in which “post-quantum cryptography” would simply be called “cryptography,” with older methods relegated to a museum. The remark expresses the Alliance’s long-term view that cryptographic systems may evolve as new threats become relevant. It does not mean that current cryptography is already obsolete. The group’s stated purpose is to help the industry develop common standards and credible evidence in advance, so that networks can evaluate claims and plan changes without relying solely on informal assurances.

The Quantum Alliance is part of a wider industry effort to address quantum risk. Coinbase has recently urged Bitcoin developers to begin planning a quantum migration, arguing that preparation could take years. Separately, a consortium backed by BlackRock, Strategy and Coinbase has committed $15 million to the problem. These efforts illustrate that the issue is receiving attention from both technical organizations and major financial-sector participants. They also underscore why coordination may be important: security improvements can require substantial research, implementation work and agreement among developers, service providers and users.

For now, the key challenge is preparation under uncertainty. Moving to new cryptographic systems may involve trade-offs in performance, compatibility and user experience, and any transition must avoid introducing new weaknesses. A credible “quantum-ready” claim therefore needs more than a label: it should explain what threats are considered, what components have been updated, how changes have been tested and how users or dependent services can complete the transition. By establishing open criteria and dividing its work across migration, privacy systems, wallets and cross-chain operations, the Quantum Alliance aims to make those questions easier to assess. The practical value of its work will depend on whether its standards are technically sound, publicly reviewed and adopted across the diverse systems that make up the blockchain ecosystem.

Key Insights Table