Bitcoin 'Q-Day' Draws Nearer as Quantum Researcher Breaks Simplified Key

“The news here is that there is progress being made,” Pruden said. “It’s not the case that nothing has happened in quantum, and this is proof of that.”

The winning attack used a machine with about 70 qubits—quantum bits that can exist in multiple states at once, unlike the binary bits used in traditional computers—and ran in minutes once developed, according to Pruden. He said the submission was reviewed by a panel of quantum researchers from academia and industry, including researchers from the University of Wisconsin–Madison and quantum software company qBraid.

The announcement comes as major quantum firms and research institutions publish increasingly aggressive hardware roadmaps and nearer estimates for breaking modern cryptography.

In March, Google publicly set a 2029 deadline to transition its systems to post-quantum cryptography, citing advances in quantum hardware, error correction, and shrinking estimates for breaking current encryption. Google itself is one of the major firms building quantum computers and pushing the technology.

Around the same time, a Google research paper estimated that breaking Bitcoin could require fewer than 500,000 physical qubits, while a separate paper from Caltech and Oratomic estimated that number at 10,000 to 20,000 qubits using a neutral-atom architecture.

“Our own prediction for Q-Day is 2029 in the worst case,” Pruden said. “I think that’s because you really can’t know with certainty how clever people are and how quickly these technological breakthroughs happen.”

When that breakthrough happens, Project Eleven said roughly 6.9 million Bitcoin are sitting in wallets with public keys visible on-chain that could become vulnerable if large-scale quantum computers emerge.

However, not everyone agrees that the threat is imminent. Some researchers and investors say the risk is real but still years away and should be treated as a long-term engineering challenge rather than an existential crisis.

Bitcoin developers are currently weighing multiple proposals to address the threat. BIP-360 would introduce a quantum-resistant transaction format, while BIP-361 would phase out older signature schemes and eventually freeze coins that fail to migrate. Meanwhile, the Ethereum Foundation has formed a post-quantum security team, and co-founder Vitalik Buterin has outlined a roadmap to replace vulnerable parts of Ethereum’s cryptography.

In addition to advances in quantum computing, Pruden also pointed to advances in artificial intelligence, saying that the technology could push that Q-Day timeline closer by improving quantum error correction or helping attackers identify weaker cryptographic targets.

“A key part of quantum computing at scale is error correction,” Pruden said. “AI can help make that process way more efficient.”