Europol warns that quantum risk is concentrated in exposed wallets
Start here
AI-assisted source synthesis · not an independent investigation.
On October 7, 2026, CoinDesk reported that Europol published a report stating that the primary exposure point for future quantum-computing attacks is cryptocurrency wallets, not the blockchain itself; currently, no quantum computer capable of carrying out such attacks exists. The report stated that approximately 6.9 million bitcoins are held in addresses whose public keys have been exposed, including early and long-dormant wallets, and that a sufficiently powerful quantum computer could use this information to derive private keys and transfer the assets. On October 8, Cryptopolitan reported that Europol believes quantum computers cannot break the blockchain, and that wallets with publicly disclosed public keys should migrate their funds before an attack. Earlier reports stated that the public keys of approximately 6.9 million bitcoins had been exposed; subsequent reports stated that the figure was 6.04 million bitcoins as of May, representing 30.2% of the supply, while another estimate put it at 6.9 million bitcoins. Subsequent reports also stated that migrating Bitcoin would require at least 76 days of downtime, and that post-quantum signatures standardized by NIST are 10 to 120 times larger than the ECDSA signatures used by Bitcoin.
AI-written from reports · updated 8 days ago
Timeline
Follow the reporting to see the different sides of the story.
- CryptopolitanEuropol finds cryptocurrency quantum risk concentrated in exposed wallets, while blockchains remain resilient
Europol said quantum computers cannot break blockchains; the main exposure is wallets whose public keys have already been revealed on-chain, requiring holders to move funds before an attack. As of May, an on-chain estimate showed that the public keys of 6.04 million BTC (30.2% of the supply) had been exposed, while another estimate put the figure at 6.9 million BTC. The report cited research saying that Bitcoin would need at least 76 days of downtime to complete a migration, while NIST-standardized post-quantum signatures are 10 to 120 times larger than the ECDSA signatures used by Bitcoin.
- CoinDeskEuropol warns that quantum computers’ main threat is exposed private keys, not the blockchain
Europol published a report stating that the main exposure point for future quantum computing attacks is cryptocurrency wallets, rather than the blockchain itself; quantum computers currently capable of carrying out such attacks do not yet exist. Approximately 6.9 million Bitcoin are held at addresses with exposed public keys, including early and long-dormant wallets. A sufficiently powerful quantum computer could use this information to derive private keys and transfer the assets.