Quantum Threat Looms Over Bitcoin's Security

Bitcoin and other cryptocurrencies face a growing quantum security challenge due to the potential for attackers to derive private keys during transaction confirmation windows. Researchers have reduced estimated attack requirements, making it possible for quantum computers to breach elliptic curve cryptography used by these networks.

A recent Google Quantum AI paper co-authored with scientists from the Ethereum Foundation and Stanford University examined how much quantum computing power would be required to attack elliptic curve cryptography. The study found that a live Bitcoin transaction could be intercepted and the private key derived in approximately nine minutes under certain conditions, although the more important figure for security professionals is the 500,000 physical qubit estimate.

This threshold represents a point where attacks against Bitcoin's elliptic curve cryptography could become technically plausible on future quantum systems. The Google team designed two quantum circuits implementing Shor's algorithm against secp256k1, the specific elliptic curve used by Bitcoin and Ethereum. When compiled onto a superconducting architecture with standard hardware assumptions, these circuits require fewer than 500,000 physical qubits, roughly a 20-fold reduction from prior best estimates.

The on-spend attack is a unique threat faced by Bitcoin due to the brief window during which public keys are exposed but transactions have not yet settled. A sufficiently powerful quantum computer could derive the private key during this window and generate a competing fraudulent transaction, front-running the original sender in real time.