Nine crypto companies have formed a new industry group — the Quantum Alliance — to prepare bitcoin, Ethereum and other blockchains for a threat that does not exist yet but that experts warn is getting closer: a quantum computer powerful enough to break the cryptography protecting crypto wallets. The alliance estimates that 6.4 million bitcoin, roughly 30 percent of the entire supply, already have their public keys exposed and could be vulnerable if such a machine is ever built.
By Amir Hassan | October 17, 2026
The Hook: A Fire Drill Before the Fire
According to CoinDesk, which broke the story on October 16, the Quantum Alliance was unveiled by nine crypto companies, including the security auditor Hacken, Charles Hoskinson’s Midnight Foundation, the quantum-resistant blockchain firm Quantus, and Postquant Labs. Their mission: publish common security tests and guidance to help existing networks migrate to quantum-resistant systems — before anyone actually builds a machine that can crack today’s encryption.
The important word in that sentence is before. No quantum computer today can break bitcoin’s cryptography, and the alliance itself is clear about that. This is not a response to an attack. It is an industry fire drill — an attempt to fix the locks on the vault while it is still safe to do so.
On-Chain Evidence: What Is Actually at Risk
Here is the technical problem in plain English. Every crypto wallet has two keys: a public one, which works like your account number, and a secret one, which works like your password. In normal use, the secret key never has to be revealed. But in Bitcoin’s earliest days, an older transaction format exposed public keys more widely, and once a public key is visible, a sufficiently powerful quantum computer could theoretically work backwards to the secret key — like studying the lock closely enough to cut a copy of the key.
- 6.4 million bitcoin — the alliance’s estimate of coins whose public keys are already exposed
- 30.2 percent of supply — the share of all bitcoin that figure represents
- 1.1 million bitcoin — coins attributed to pseudonymous creator Satoshi Nakamoto, part of the exposed total
- Zero — the number of quantum computers today capable of breaking the cryptography
At current prices, that exposed stash is worth hundreds of billions of dollars, which is why the debate over what to do about it keeps getting louder. The most provocative warning came from Christopher Smith, CEO of Quantus, who told CoinDesk that whoever builds the first cryptographically relevant quantum computer could simply take those coins, “probably with the blessing of whichever national government.”
The Core Conflict: Nobody Agrees on the Date — or the Cure
Ask experts when quantum computers will actually threaten bitcoin and you get very different answers. Richard Carback, chief technology officer of Postquant Labs, believes 2028 is a realistic date for a machine capable of breaking today’s cryptography. Bryn Bennett of The Vault counters that “nobody knows the date, but the estimates keep falling,” and that the real question for custodians is “whether you can migrate in time if it arrives early.”
The deeper fight is over what to do with the vulnerable coins themselves. One camp, including Binance founder Changpeng Zhao, has suggested freezing Satoshi’s untouched coins if the quantum threat grows. Bitcoin developer Jameson Lopp has proposed restricting vulnerable coins to prevent theft. Critics say freezing someone’s bitcoin betrays the core promise that no one can confiscate your money. Bennett frames it as a governance problem: “Freezing coins is a governance decision for the Bitcoin network, not for the industry,” and any freeze “would trade quantum risk for a precedent on property rights and neutrality.” Carback prefers moving vulnerable coins rather than freezing them, and has proposed placing them in a trust that owners could reclaim by proving ownership.
Market Implications: Why Regular Holders Should Care
For everyday investors, the practical risks are smaller than the headlines suggest — but not zero. If you use a modern wallet and follow current best practice, your public key typically stays hidden until you spend, and the industry’s migration push is aimed at protecting you before the danger becomes real. The bigger near-term effects are structural:
- Migration costs — upgrading bitcoin’s signatures requires coordination among developers, miners, wallet providers, exchanges and users; Bennett notes “nobody has a credible single number” for the cost
- Higher fees possible — quantum-resistant signatures could take up more block space, potentially raising transaction fees, though researchers are working on fixes
- Network confidence — a credible, coordinated defense protects bitcoin’s store-of-value story; a chaotic one threatens it
The Verdict: An Insurance Policy Worth Reading
The Quantum Alliance will not make headlines by stopping an attack — there has not been one. Its value is in making sure that when the threat estimate keeps falling, as Bennett says it has, the industry is not improvising. Publishing shared security tests and migration guidance is the blockchain equivalent of scheduling the fire drill before smelling smoke.
The honest bottom line for holders: nothing needs to change in your wallet today, and the exposed coins cannot be stolen by any existing machine. But the fact that roughly a third of bitcoin’s supply sits in theoretically vulnerable addresses is exactly the kind of slow-burn structural risk worth monitoring. The alliance’s first publications — and whether the freeze-or-not debate stays civil — will tell you a lot about how seriously the industry is taking its own fire drill.
The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.
6.4M coins exposed includes every reused address since 2010, the satoshi stack is just the famous part. migration ordering is thornier than anyone in the alliance admits
6.4 million coins with exposed keys, 30.2 percent of supply. no wonder Hacken and Quantus are racing to publish common test standards before someone demos a working attack
every quantum FUD wave eventually arrives at freezing coins that belong to someone else. the Carback trust where you prove ownership to reclaim is less confiscatory than a blanket freeze, still not thrilled
agreed. the line about trading quantum risk for a property rights precedent is the part that should actually worry holders
the trust model where you prove ownership to reclaim sounds fine until the proof itself maps your key history. quantum hygiene and privacy pull in opposite directions
exactly, prove ownership to reclaim means doxxing your utxo set to whatever trustee runs the process. privacy people are gonna love that trade
6.4 million BTC with exposed public keys, including Satoshi’s 1.1 million, is the number that should anchor this whole debate. Carback says 2028, Bennett says nobody knows, but either way migrating signatures while estimates keep falling is just cheap insurance.
Cheap for whom though? Quantum resistant signatures eat more block space, so fees rise for everyone to protect coins that mostly have not moved in a decade. Lopp’s restrict rather than freeze approach is roughly where I land.
cheap insurance until you price the block space. quantum resistant signatures eat fees for every user to protect coins that havent moved in a decade
so if my keys stay hidden until I spend from a modern wallet, is there anything to actually do right now besides wait for the migration guidance? genuinely asking
The Smith quote is doing a lot of heavy lifting here. Whoever builds the first relevant quantum machine just taking the coins with the blessing of a national government is a nation state theft scenario dressed up as a technical risk assessment.
It is also a governance trap. Freezing Satoshi’s coins trades a hypothetical quantum risk for a very real precedent that bitcoin balances can be voted away. Bennett is right that this is a network decision, not an industry alliance decision.
carback saying 2028 and bennett saying nobody knows is the whole problem with this alliance. guidance built on two incompatible timelines is a press release with extra steps
2028 vs nobody knows is a ten year spread and they published guidance anyway. at least the shared test standards part is timeline agnostic