Quantum's First Crypto Victims May Not Know They've Been Hit

The first sign that a quantum computer has broken crypto's security may be a run of wallet thefts with no visible breach. Christopher Smith, CEO of Quantus Network, said the market would learn of a compromise only when funds start moving out of wallets that were supposed to be secure.

A quantum machine could derive a private key from a public key already on-chain, then divert funds without touching an exchange or a user's device, Smith said. "When someone cracks your key, you don't get a memo saying how they did it," he said. In a well-secured organization, "the only forensic evidence would be that there was no breach."

Quantus puts the exposure at 99.96% of the crypto market, about $2.3 trillion in digital assets, per its State of Quantum Report from May 2026. Migration.fail shows major networks including Bitcoin, Ethereum, Solana and other large chains still use signatures vulnerable to quantum attacks. Reuters reported in July that none of the 20 biggest blockchains have adopted a post-quantum signature algorithm. The risk is market-wide rather than project-specific, the Quantus report argues, because the same signature scheme protects nearly every major chain.

Satoshi Nakamoto's dormant Bitcoin, worth an estimated $63 billion, may not be the first target. Sean Cheetham, a security researcher at Blockchain Capital, expects an attacker to start quietly. Exchange hot wallets could draw the first hit, he said, because unexpected transactions from them may not immediately trigger alarms.

Smith sees a larger risk in Tether's minting keys. An attacker who controlled them could generate USDt from an administrative wallet and dump the tokens before Tether could respond, he said, setting off a stablecoin liquidity crisis. Tether has called key security paramount, since those private keys govern USDt issuance.

The stablecoin exposure is system-wide. DeFiLlama puts the total stablecoin market at about $300.7 billion, with USDt at roughly $183.1 billion, or 60.9% of the total. The Bank for International Settlements said dollar-backed stablecoins held more than $270 billion in assets in December 2025 and bought about $33 billion of U.S. Treasuries during 2025. A compromise of issuer keys would shake that structure, and the stablecoins' ties to the Treasury market would spread the damage beyond crypto, Smith said.

The bigger hazard, Smith said, is not the day a quantum computer visibly defeats Bitcoin or Ethereum. It is the day unexplained transfers appear from major wallets or exchanges, and the market realizes the cryptography protecting billions of dollars may already be broken.

No quantum device can carry out these attacks today. The June "Quantum Horizon" report puts the odds of a cryptographically useful machine at about one in six by 2035 and 60% by 2050, cautioning that the figures are forecasts, not predictions. Smith estimates a "50-50" chance by 2028. Cheetham calls the early 2030s almost certain.

Migration will be slow. Blockchains are decentralized and public, which makes updates difficult, and post-quantum signatures are far larger than current ones. Classical ECDSA signatures take about 64 bytes. Dilithium-5 signatures run to roughly 4,595 bytes, inflating storage and transmission costs across the network, migration.fail shows.

Google said it plans to complete its own switch to post-quantum cryptography in 2029. Its researchers estimated in March that breaking the 256-bit elliptic-curve cryptography used across crypto could be achieved with fewer than 500,000 physical qubits, about 20 times fewer than earlier projections, and advised blockchains to begin the transition.