The U.S. Department of Energy announced the Quantum Genesis Q Competition on Thursday, allocating up to $215 million to accelerate development of fault-tolerant quantum computers. The competition asks private companies to demonstrate machines with at least 100 logical qubits capable of hundreds of millions of reliable operations, with wider deployment targeted by 2028.
Fault-tolerant quantum computers use error correction to maintain reliable calculations at scale—a critical milestone that today's quantum systems have not yet achieved. Current machines struggle with errors that quickly compromise long computations.
The Cryptographic Risk
Bitcoin's security relies on elliptic-curve cryptography to verify ownership and authorize transactions. Researchers have identified a theoretical vulnerability: a sufficiently powerful quantum computer running Shor's algorithm could reverse-engineer a private key from a public key.
Google researchers estimated this year that breaking Bitcoin's 256-bit elliptic-curve system would require roughly 1,200 to 1,450 logical qubits. The DOE competition targets a minimum of 100 logical qubits—still far short of that threshold, but a significant engineering milestone.
Current Exposure
According to analysis by Glassnode in May, approximately 6.04 million BTC—representing 30.2% of the total issued supply—exists in outputs where the public key is visible on-chain. These coins would present the clearest targets if quantum key-breaking became practical.
The Migration Challenge
Bitcoin developers are already examining defenses. Draft proposals BIP 360 and BIP 361 outline strategies to reduce public-key exposure and eventually transition away from current vulnerable signature schemes. Such a migration would require coordination across wallets, exchanges, custodians, and individual users—a process that could span years.
While current hardware and research estimates suggest Bitcoin maintains a window of time before quantum computers pose an imminent threat, the advancing timeline has intensified discussion about the need for cryptographic upgrades.
