A research note released this week by Citi warns that recent advances in quantum computing have reduced the timeline for practical attacks for digital asset cryptography to 2030-2032, with Bitcoin identified as significantly more exposed than Ethereum, not due to technical design alone, but due to a governance gap that would make rapid crypto migration extremely difficult on the Bitcoin network.
The report highlights Ethereum’s protocol upgrade history—what Citi analysts refer to as “hard fork culture”—as a structural security advantage when assessing long-term resilience against quantum attacks.
Citi says $BTC faces an outsized quantum threat as computing breakthroughs accelerate. Predictable FUD. It will still take years for Quantum to make an impact on existing crypto security. The market has bigger and more immediate concerns. It’s just noise.
-Kris Sato (@kris_nakamoto) May 19, 2026
Citi’s note comes as Google’s quantum hardware roadmap continues to tighten its own deadlines: Google researchers have estimated that a 500,000-qubit machine could break current elliptic curve encryption in minutes, with a target for Q-Day of 2032, although some independent researchers put that threshold as early as 2030.
Neither machine exists today, but the trajectory is no longer the subject of theoretical debate.
EXPLORE: Top Crypto Signals Group Just Added Online Poker Channel
Shor’s algorithm and ECDSA: what the quantum threat really represents for blockchain security
The mechanism works as follows: Bitcoin and Ethereum secure user funds using ECDSA (Elliptic Curve Digital Signature Algorithm), a cryptographic system whose security relies on the computational difficulty of deriving a private key from a publicly visible public key.
Classical computers cannot solve this problem in a practical time frame; the mathematics involved would require more operations than current hardware could perform over the lifetime of the universe. However, a sufficiently powerful quantum computer running Shor’s algorithm reduces this problem to polynomial time, meaning that deriving a private key from a public key becomes computationally feasible.
Exposure is not uniform across all portfolio types. Public keys are only revealed when a transaction is broadcast, but this window between broadcast and confirmation is itself a vulnerability: a quantum attacker operating in this window could theoretically derive a private key and redirect funds before the initial transaction is finalized. Specifically, wallets that have already transacted already have their public keys permanently visible on-chain.
BSC post-quantum upgrade passes test, but TPS drops 40%
BNB Chain released its BSC Post-Quantum Crypto Migration Report, stating that BSC tested a post-quantum upgrade using ML-DSA-44 for transaction signatures and pqSTARK for consensus vote aggregation. The design remains… pic.twitter.com/WKDKIwBanX
-Wu Blockchain (@WuBlockchain) May 19, 2026
According to Citi’s analysis, approximately 6.7-7 million BTC is in wallets where public keys are already exposed, representing a concentrated and static target. Of these, approximately 1 million BTC allegedly mined by the pseudonymous Satoshi Nakamoto remain in particularly vulnerable early address formats, representing holdings worth approximately $82 billion at current prices. The binding cryptographic assumption at risk is the hardness of the discrete logarithm on elliptic curves.
Once a cryptographically relevant quantum computer (CRQC) crosses the qubit and error-correction threshold sufficient to run Shor’s algorithm on 256-bit curves, this assumption fails completely.
Ethereum News: ETH Hard Fork Culture, the advantage of structural governance compared to Bitcoin
What distinguishes Ethereum’s position in Citi’s analysis is not its current cryptographic design; Ethereum uses ECDSA and is technically exposed to the same Shor Algorithm attack vector as Bitcoin. The distinction lies in the speed of governance: Ethereum’s developer community and stakeholder base have demonstrated a repeated ability to coordinate and execute disruptive protocol changes within relatively tight timelines.
The September 2022 merger moved the entire network from proof-of-work to proof-of-stake – a change comparable in scale to any proposed post-quantum cryptography (PQC) migration, without a chain split. EIP-1559, the Dencun upgrade, and the upcoming Pectra hard fork each represent coordinated, multi-client protocol changes executed through the same governance mechanism that would be required for a quantum-resistant migration.
🧵 prediction: Ethereum will rush in with a hastily designed and implemented “quantum resistant” hard fork because they desperately need a new narrative that will stop the bleeding against Bitcoin.
this will be highlighted by Coinbase.eth and every VC bag holder, along with a…
-Bit Paine ⚡️ (@BitPaine) January 25, 2026
Vitalik Buterin addressed the issue of quantum readiness directly, writing that if quantum computers approach the ECDSA breakout threshold, Ethereum will likely have years of advance warning and be able to “embark on new signature schemes” during this window.
Ethereum Foundation researchers discussed PQC migration paths that leverage account abstraction, specifically ERC-4337-compatible smart contract wallets, to enable hybrid key systems in which users maintain both ECDSA and quantum-resistant keys and transition to PQC signatures through a contract wallet without requiring users to manually manage key migration.
NIST’s selection of CRYSTALS-Dilithium as a network-based signature standard provides a concrete candidate algorithm for such a migration. This is not a speculative roadmap. This is an engineering journey with identified components, governance precedent, and institutional validation now arriving from Citi Research.
Bitcoin’s position is structurally different. Bitcoin’s conservative consensus model presents significant obstacles to the rapid protocol changes that quantum readiness would require.
Citi analysts have flagged BIP-360 and BIP-361 as proposed upgrades to watch, but neither have reached the consensus stage. Michael Shaulov, CEO of Fireblocks, speaking at the Financial Times Digital Asset Summit, called Bitcoin’s quantum challenge “primarily a coordination problem, recognizing that the algorithms exist but that social and governance coordination remains the binding constraint.” This framing, although intended to be reassuring, is precisely Citi’s concern.
DISCOVER: Best Meme Coins to Buy in 2026
following
Disclaimer: Coinspeaker is committed to providing unbiased and transparent reporting. This article is intended to provide accurate and current information, but should not be considered financial or investment advice. Because market conditions can change quickly, we encourage you to verify the information for yourself and consult a professional before making any decisions based on this content.
Neil is a professional cryptocurrency content writer with years of experience. He has written for various cryptocurrency websites to report on the latest news and has been hired by all kinds of cryptocurrency projects, to create content that would increase their visibility and attract more potential investors.
Neil Mathew on LinkedIn
