Europol has published two reports warning that future quantum computers could one day crack the cryptography protecting cryptocurrency wallets, and it is telling the industry to start preparing now rather than wait for the threat to become real.
By Raj Patel | October 7, 2026
The Hook: Why Regulators Are Talking About Quantum Computers Today
On October 7, Europe’s policing agency Europol released a pair of reports examining how advances in quantum computing could affect digital assets and sensitive information. The first report focuses on cryptocurrency wallets. The second looks at a sneaky attack pattern called harvest now, decrypt later, where criminals store encrypted data today hoping to unlock it years from now once quantum machines improve.
Before anyone panics: Europol explicitly did not say current quantum machines can break cryptocurrency security. The agency also said there is no clear evidence that harvest-now-decrypt-later attacks are being systematically used at scale. Think of this as a fire drill, not a fire. Regulators want the industry to rehearse the evacuation route while the building is still safe.
For regular investors, the practical takeaway is simple. Nothing is broken today. But the companies holding your coins, and the developers building the networks you invest in, are being pushed to upgrade their locks before anyone invents a crowbar strong enough to break them.
On-Chain Evidence: Where the Actual Risk Sits
Europol’s cryptocurrency report identifies wallet authorization keys as the main potential point of exposure. Here is the plain-English version of why that matters. Most blockchains use public-key cryptography, which is like a mailbox slot: anyone can drop a letter in (send money to your address), but only your private key can open the door and take letters out (spend the funds).
A sufficiently capable quantum computer could, in theory, use an exposed public key to calculate the matching private key. An attacker could then sign transactions and move your assets without permission. Europol drew an important distinction, though: the hash functions used for other important parts of blockchain security are comparatively resistant to quantum attacks. The report therefore focuses heavily on wallet signatures, public-key exposure, and key management, not on some inevitable collapse of cryptocurrencies.
- What is at risk — wallet signatures where public keys are already exposed
- What is safer — blockchain hash functions, which quantum computers struggle with
- What is not proven — any working large-scale quantum attack on crypto today
- Why act now — Europol says upgrading cryptographic systems across decentralized networks could take years
One widely shared tip from on-chain commentators: do not reuse addresses. Fresh addresses keep public keys unexposed until you spend, which shrinks the theoretical attack surface.
The Core Conflict: Slow Upgrades Versus an Uncertain Clock
The uncomfortable truth in Europol’s warning is timing. Nobody knows when a quantum computer powerful enough to matter will exist. But upgrading a decentralized network is not like pushing a software update on your phone. There is no central IT department. Changes require coordination among developers, wallet providers, policymakers, and millions of users who would each need to migrate their funds.
That is why Europol recommends a phased migration to post-quantum cryptography starting now. The U.S. National Institute of Standards and Technology (NIST) has already finalized three post-quantum standards and is urging organizations to begin migrating as soon as possible.
Bitcoin developers are debating the same problem. A draft proposal called BIP-361 outlines a planned migration away from legacy ECDSA and Schnorr signatures once a post-quantum Bitcoin output type becomes available. It remains a draft and has not been activated on Bitcoin. Related proposals have sparked genuine debate over how users could move vulnerable coins, and what should happen to dormant funds, such as old wallets, that never migrate.
Market Implications: Custodians Are Already Moving
While regulators talk, companies that hold institutional money are already testing defenses. BitGo and Silence Laboratories tested post-quantum multiparty computation signing earlier this year, using the ML-DSA standard inside an institutional custody workflow. BitGo later introduced four new controls for supported institutional Bitcoin wallets, including tools for measuring public-key exposure, consolidating outputs, and helping users move funds away from addresses considered more exposed.
Coinbase is working on similar infrastructure. In September, the company was reported to be designing systems that can support different post-quantum signature schemes, since Bitcoin developers have not yet selected a final replacement standard. Other networks, including Sui, are pursuing account-level changes with optional quantum-safe authentication.
For everyday investors, this is mostly good news. The institutions holding large pools of customer assets are stress-testing their locks years before any credible threat exists. If you self-custody, the practical checklist is short: use fresh addresses, keep software updated, and pay attention when your wallet provider announces post-quantum migration options.
The Verdict
Europol’s warning is best read as a planning document, not a doomsday forecast. The agency said the timing of a capable quantum computer remains uncertain, and it found no evidence of systematic attacks today. What it did flag is that the fix could take years, and waiting for certainty is the expensive option.
The crypto industry has survived migration challenges before, and the early work from NIST, BitGo, Coinbase, and Bitcoin’s developer community suggests the sector is treating this seriously ahead of schedule. Watch for the activation of post-quantum standards on major networks as the real milestone. Until then, the safest move is boring: good key hygiene and no address reuse.
The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.
The address reuse point gets ignored way too much. Every spend exposes your public key, and fresh addresses keep that surface closed. Costs nothing to do.
^ exactly. people freak out about the quantum part and skip the one hygiene step that actually matters today
the part people miss about harvest now, decrypt later is that it rewards data that stays valuable for years. wallet keys are exactly that. decent explainer, though I would have liked a line on which chains already have PQC migration on a testnet
Two Europol reports and the actionable line is still just: move long term coins to fresh addresses. The q-day timeline debate is noise, re-keying is nearly free.
europol says prepare now, chain teams have been saying the same since 2019. the actual scary part of these reports is harvest now decrypt later, not some quantum machine showing up tomorrow
two whole reports to say the clock is unknown. been hearing q-day is 10 years away since 2015, still 10 years away
fair, but the ten-years-away joke cuts both ways. NIST already finalized the post-quantum standards, so the migration clock starts whenever teams begin, not when the machine shows up. if a network upgrade plus full user key rotation takes years anyway, the q-day date almost does not matter — starting early is the whole hedge
ml-dsa is finalized but wallet support is basically zero. starting early means pestering your hardware vendor, not moving coins.
signed firmware updates are the bottleneck nobody mentions. your cold wallet re-keys fine, verifying the supply chain behind that update is another story
one re-key transaction per wallet, sure. now get a hardware wallet vendor to confirm which of their models can even hold a fresh seed and the old one during migration
ledger and trezor will ship ml-dsa right after a competitor does. the migration runs on marketing calendars, not NIST ones
this. pestering ledger and trezor about ml-dsa firmware feels silly right up until your 2032 self thanks you
the q-day is 10 years away line has been running since 2015, that alone justifies the drills. better to re-key early and look silly than explain a harvested cold wallet in 2032
agree on the hygiene part but the real bottleneck is firmware. ml-dsa is finalized and hardware vendors have shipped basically nothing to sign with it
two europol reports landing the same season as NIST migration guidance is not a coincidence. regulators are pre-covering for the day the timeline shortens
Slow upgrades versus an uncertain clock is exactly the tension. Exchanges holding pooled custody have the hardest migration path here, self custody at least lets you move when standards settle.
agreed on pooled custody being the hard part. exchanges re-keying millions of user wallets is a support nightmare, and you just know the migration window will be when things eventually go wrong
europol published two reports and still says no clear evidence of harvest now decrypt later at scale. honest read is they found chatter, not campaigns. moving long term coins to fresh addresses costs nothing anyway
moving coins to fresh addresses is cheap until you manage a dozen cold wallets for a fund. the re-keying logistics are the real story, most treasuries have zero runbook for it
a dozen wallets is nothing, try 40 under a 2-of-3 policy. the runbook exists at our fund because an intern wrote one in a panic last quarter
an intern writing the re-key runbook in a panic is the most realistic disaster prep in this whole thread lol
an intern writing the re-key runbook in a panic is the most enterprise crypto thing ive read all week. most funds dont even have that
chatter or campaigns, re-keying a cold wallet costs one transaction. cheapest insurance in the whole industry tbh
harvest now decrypt later is the actual threat model and the thread argues about q-day timelines instead. spend hygiene today beats migration debates.
europol saying no clear evidence of harvest now decrypt later at scale is lowkey scarier than numbers would be. means nobody is actually looking