Breaking Bitcoin with quantum may be easier than thought, with Taproot partly to blame, Google says

Markets Share Share this article Copy link X icon X (Twitter) LinkedIn Facebook Email Breaking Bitcoin with quantum may be easier than thought, with Taproot partly to blame, Google says The findings suggest attackers could one day steal bitcoin mid-transaction, challenging assumptions that the threat is decades away. By Sam Reynolds | Edited by Omkar Godbole Mar 31, 2026, 4:57 a.m. Make preferred on What to know : Google researchers say breaking Bitcoin and Ethereum’s cryptography may require fewer than 500,000 physical qubits and roughly 1,200–1,450 high-quality qubits for practical attacks, far below earlier estimates in the millions. The paper warns that real-time quantum attacks could hijack in-flight Bitcoin transactions in about nine minutes, potentially beating confirmation about 41% of the time and putting some 6.9 million already-exposed bitcoin at risk. Bitcoin’s Taproot upgrade, which makes public keys visible by default, may widen the pool of vulnerable wallets, prompting Google to urge earlier post-quantum migration even as it stresses that quantum attacks are not yet imminent. Breaking Bitcoin's blockchain with quantum computers may not be as difficult as once thought, and Bitcoin’s Taproot technology, which enables more efficient, private transactions, may be partly to blame, Google's Quantum AI team said Monday in a blog post and newly published whitepaper . The team said the computing power required to break Bitcoin’s security may be far lower than previously assumed, raising fresh questions about how soon quantum threats could become a reality. In a new whitepaper, researchers found that cracking the cryptography used by Bitcoin and Ethereum could require fewer than 500,000 physical quantum bits, or qubits, well below the “millions” often cited in recent years. Google has previously pointed to 2029 as a potential milestone for useful quantum systems, saying migration needs to come before that , making the paper’s finding that attacks may require less computing power more significant. Quantum computers use qubits instead of traditional bits and can solve certain problems much faster than today’s machines. One of those problems is breaking the type of encryption that protects crypto wallets. Google said it designed two potential attack methods, each requiring roughly 1,200 to 1,450 high-quality qubits. That is a fraction of earlier estimates and suggests the gap between current technology and a viable attack may be smaller than investors think. The research also outlines how such an attack could work in practice. Rather than targeting old wallets, a quantum attacker could go after transactions in real time. When someone sends bitcoin, a piece of data called a public key is briefly revealed. A fast enough quantum computer could use that information to calculate the private key and redirect the funds. Under Google’s model, a quantum system could prepare part of the calculation in advance, then complete the attack in about nine minutes once a transaction appears. Bitcoin transactions typically take around 10 minutes to confirm, giving an attacker roughly a 41% chance of beating the original transfer. Other cryptocurrencies like Ethereum may be less exposed to this specific risk because they confirm transactions faster, leaving less time for an attack. The paper also estimates that about 6.9 million bitcoin, roughly one-third of the total supply, already sit in wallets where the public key has been exposed in some way. That includes around 1.7 million bitcoin from the network’s early years, as well as funds affected by address reuse. That figure is far higher than recent estimates from CoinShares , which argued that only about 10,200 bitcoin are concentrated enough to significantly move markets if stolen. The Taproot problem The findings also cast a new light on Taproot, Bitcoin’s 2021 upgrade. While Taproot improved privacy and efficiency, it also made public keys visible on the blockchain by default, removing a layer of protection used in older address formats. Google’s researchers say that design choice could expand the number of wallets vulnerable to future quantum attacks. Google is also changing how it shares sensitive security research. Rather than releasing the step-by-step details of how to break crypto systems, the team used a technique called a zero-knowledge proof to prove its findings are accurate without exposing the method itself. That allows others to verify the results while limiting the risk the research could be misused. The takeaway for investors is not that quantum computers are about to break crypto, but that the timeline may be shorter, and the risks broader, than previously thought. Bitcoin News More For You The Definitive Stablecoin Landscape Series: North America By CoinDesk Research Mar 26, 2026 Commissioned by Ripple As stablecoins evolve into core financial infrastructure, North America leads. This report maps the regulation, market shifts, and players driving adoption. Why it matters : Stablecoins are entering their third phase of evolution - the institutionalization era - becoming increasingly embedded into core financial infrastructure. As institutions prioritize transparency and compliance, regulated issuers like USDC, RLUSD, and PYUSD are steadily gaining share with RLUSD surpassing $1B in market cap within its first year. North America, leading in regulatory frameworks and institutional distribution, is at the center of it all. View Full Report More For You Fed's Powell's comments sooth bond market, but oil continues rise, hitting crypto and stocks By Helene Braun | Edited by Stephen Alpher 8 hours ago WTI crude oil closed above $100 per barrel for the first time since 2002. What to know : Stocks and crypto prices each gave up early gains even as Federal Reserve Chairman Jerome Powell eased any concerns about imminent rate hikes. Powell said the Fed is inclined to look past the Iran-related energy shock for now and hold rates steady. Bond yields fell, but oil continued its rise,... Read full story Latest Crypto News U.S. rule change may open trillions in 401(k) funds to crypto 6 hours ago Democrats urge warnings to federal officials against insider bets on prediction markets 7 hours ago Why Consensus is crypto’s new ground zero 7 hours ago Fed's Powell's comments sooth bond market, but oil continues rise, hitting crypto and stocks 8 hours ago Jack Dorsey’s Square auto-enables bitcoin payments for millions of U.S. businesses 10 hours ago Trump-backed American Bitcoin hits 7,000 BTC as holdings expand rapidly 11 hours ago Top Stories Bitmine makes biggest ether purchase in 2026 while other digital asset treasuries pull back 14 hours ago Bitcoin hashrate posts first-quarter drop for first time in 6 years as miners pivot to AI 13 hours ago Ethereum Foundation stakes additional $42 million of ether 18 hours ago Rate hike bets are building for the Fed – and now the Bank of Japan too 16 hours ago Bitcoin bullish bets hit a 28-month high on Bitfinex, and that's music to bears' ears Mar 29, 2026 Yield-hungry bitcoin holders may be keeping BTC stuck in a sideways grind 22 hours ago