Europol warns exposed Bitcoin keys face quantum risk
Regulation & Gov ·
The European police agency says quantum computers threaten individual crypto wallets rather than blockchain networks themselves, and calls for immediate post-quantum migration.
Europol has identified crypto wallets as a primary risk vector for future quantum computing attacks, according to Decrypt, which reported the agency's findings. The distinction matters: Europol's warning centers on wallets with exposed public keys rather than the underlying blockchain protocols, which the agency views as structurally separate problems requiring different fixes.
At the center of the warning is a figure of roughly 6.9M BTC held in addresses where the public key has already been revealed on-chain, typically through a prior transaction. Those exposed keys are the specific target of concern, since a sufficiently powerful quantum computer could theoretically use them to derive the corresponding private key and move funds without authorization. Addresses that have never transacted, and so have never exposed their public key, are not described as carrying the same immediate exposure.
Europol's call is for the industry to begin migrating to post-quantum cryptography now, rather than waiting for quantum hardware to reach the scale needed to break current encryption. That urgency echoes a broader pattern already visible across the sector: Cardano has been preparing a shift toward post-quantum cryptography, Tron has outlined a post-quantum upgrade targeting NIST-standard signatures, and Solana developer teams Anza and Firedancer have aligned on Falcon signatures intended to harden the network against future quantum threats. Each effort reflects the same underlying premise Europol is highlighting: cryptographic schemes considered secure today may not remain so once capable quantum machines exist.
The warning also lands alongside continued debate over timing. Estimates for when a cryptographically relevant quantum computer could become operational vary widely across the industry, with some figures tied to this risk putting meaningful odds on such capability emerging within the next decade. That uncertainty is part of why Europol is framing migration as an immediate task rather than a future contingency, since cryptographic transitions across large, decentralized networks take considerable time to design, test and adopt.
What remains unresolved is the practical mechanism for migrating already-exposed Bitcoin addresses without disrupting holders who may be unaware their public key has been revealed, and how quickly, if at all, Bitcoin's own protocol development process will act on Europol's call relative to the post-quantum work already underway at other chains.