Notifications
Clear all
Topic starter
11/07/2026 8:43 pm
TL;DR: Quantum computing progress is accelerating even though practical systems are still estimated to be five to 15 years from breaking current crypto security, according to Chainalysis analysis of Google’s recent breakthrough. The strategic issue is not panic but cryptographic readiness, because harvest-now, break-later risk and post-quantum migration planning are already governance problems, not future ones.
NHIMG editorial — based on content published by Chainalysis: quantum computing and blockchain security readiness
By the numbers:
- Approximately $718 billion worth of bitcoin is currently held in addresses that would be vulnerable to quantum attacks.
Questions worth separating out
Q: How should organisations prepare for quantum risk before cryptography actually breaks?
A: Start with a full cryptographic inventory, then rank where public-key exposure, key reuse, and long-lived signatures create the most future risk.
Q: Why does quantum computing matter for key and certificate governance?
A: Quantum computing matters because it can eventually undermine the trust material that certificates, signatures, and identity systems rely on.
Q: How should security teams start a post-quantum migration program?
A: Start by inventorying where cryptography is actually used, then measure external exposure first.
Practitioner guidance
- Inventory cryptographic dependencies Catalogue where ECDSA, SHA-256, Keccak-256, RSA, certificates, and signing keys are used across wallets, services, and infrastructure.
- Build a phased PQC migration plan Map systems that can adopt post-quantum cryptography immediately, systems that need hybrid compatibility, and systems that require protocol changes before migration.
- Reduce long-lived public-key exposure Eliminate address reuse where possible and minimise scenarios where public keys remain exposed indefinitely.
What's in the full article
Chainalysis' full analysis covers the operational detail this post intentionally leaves for the source:
- How Bitcoin and Ethereum cryptographic primitives map to public-key exposure and migration risk
- The quantitative basis for the five to 15 year quantum timeline and where that estimate comes from
- How quantum-resistant signature schemes and hybrid migration approaches affect blockchain compatibility
- The article’s discussion of ecosystem coordination across developers, analytics providers, and standards bodies
👉 Read Chainalysis’ analysis of quantum computing risk for cryptocurrency security →
Quantum threat to blockchain security: what should practitioners do now?
Explore further
11/07/2026 9:09 pm
Quantum readiness is becoming a cryptographic governance issue, not just a research topic. The important shift is that organisations cannot wait for a publicly demonstrated break before planning migration. Once keys, signatures, and addresses are widely deployed, the cost of change rises sharply. Practitioners should treat algorithm agility as a core control because cryptography that cannot be replaced quickly becomes a lifecycle risk.
A question worth separating out:
Q: Which controls help reduce harvest-now, break-later exposure?
A: Controls that shorten exposure duration are the most effective, including key rotation, eliminating reuse, reducing public visibility of sensitive cryptographic material, and maintaining a complete dependency map. Where possible, combine that with hybrid support for newer algorithms so future migration is less disruptive. In practice, this is lifecycle management for trust material.
👉 Read our full editorial: Quantum computing and blockchain security are converging fast
