IonQ Estimates 20,000-Qubit Machine Could Break Bitcoin’s secp256k1 in 26 Days

Insider BriefPRESS RELEASE — IonQ (NYSE: IONQ), the world’s leading full-stack quantum platform and foundry, today published the first complete, end-to-end fault-tolerant resource estimate for running Shor’s algorithm. The historic paper by IonQ’s research team uses the recently published Walking Cat architecture to demonstrate how a specific application can be optimized for a trapped-ion quantum computer. This work concludes that a 20,000-physical-qubit IonQ quantum computer is expected to break secp256k1, the 256-bit elliptic curve used by blockchain technology such as Bitcoin, in just under 26 days. IonQ chose to run Shor’s algorithm for secp256k1 because it is one of the most scrutinized cryptography standards in production today.The result demonstrates IonQ’s powerful full-stack capabilities. IonQ’s quantum platform researchers reduced the resource requirements to break secp256k1 by optimizing in tandem the algorithm, compiler, hardware architecture, and error-correction layer. These optimizations map to high value scientific and commercial applications, bringing IonQ’s near-term machines firmly into the domain of utility-scale quantum computing.“In 2025, I flagged that the Q-Day time horizon was shifting materially earlier – from the 2030s to the 2020s. Major enterprises and the U.S. government now concur, and the White House issued its executive order on quantum security earlier this summer,” said Niccolo de Masi, Chairman & CEO of IonQ.De Masi continued, “As our historic paper today demonstrates in full detail, IonQ’s superior full-stack approach provides powerful capabilities. We are on track to produce our fully fault tolerant 10,000 physical qubit system in 2027, with significant further advances in our labs, manufacturing and deployments in 2028. Our quantum platform spans software, post-quantum cryptography (PQC), and quantum key distribution hardware (QKD). We are confident IonQ is uniquely positioned to help secure our nation and allies against the cyber risks our adversaries will pose in the quantum era.”— Niccolo de Masi, Chairman & CEO, IonQ“This is the first time anyone has taken a utility-scale quantum algorithm and estimated its cost without approximating away the parts that usually dominate a real machine’s runtime. We compiled every operation down to the actual error-correction primitives our architecture runs. Today’s paper proved — rather than assumed — a lower bound on the probability that the full computation succeeds. It should be noted that no deployed digital asset nor crypto platform was affected during IonQ’s research.”— Chris Ballance, President of Quantum Computing, IonQ“This level of completeness is what turns a resource estimate into an engineering blueprint. The hardware resource count for this computation is at the same scale as the systems we are already building toward. IonQ has demonstrated today that fault-tolerant quantum computing is a challenging engineering problem with a clear, accountable path, rather than a distant abstraction.”— John Gamble, VP Architecture, IonQ“What’s changed is not one breakthrough but relentless and compounding progress at every layer of the stack. A computation that once demanded millions of physical qubits now fits on a 20,000-qubit IonQ machine on our roadmap. Our full-stack implementation of Shor’s algorithm underpins every other application on our roadmap that customers are bringing to IonQ: chemistry, financial services, materials science, optimization, defense, and intelligence.”— Martin Roetteler, VP Quantum Applications R&D, IonQThe paper builds on IonQ‘s Walking Cat architecture, published in April 2026 as the world’s first full-stack blueprint for a fault-tolerant quantum computer. It introduces an optimized version of the Walking Cat architecture for the elliptic curve discrete logarithm problem (ECDLP), based on trapped ions and quantum LDPC codes. IonQ says the result is best understood as a capability milestone first and a security finding second: a three-decade-old problem, re-architected end-to-end in one multi-layered study. That same full-stack methodology, not tied to any one algorithm, is what IonQ is applying across its broad roadmap of quantum applications beyond cryptography.“Our findings clearly define the risk to elliptic-curve-secured systems. The algorithms meant to replace them require the same kind of rigorous stress-testing we just applied here, and that is work IonQ intends to keep doing. Today’s result is best understood as a capability milestone first and a security finding second: a three-decade-old problem, re-architected end-to-end in one multi-layered study. That same full-stack methodology, not tied to any one algorithm, is what IonQ is applying across its broad roadmap of quantum applications beyond cryptography,” said Jordan Shapiro, President of Quantum Platform, IonQ.This work is an architectural and resource-estimation study consistent with IonQ‘s publicly stated roadmap, which targets systems with the relevant capabilities in the 2028 timeframe. The full paper titled, Computing 256-bit elliptic curve discrete logarithms in 26 days on a fault-tolerant trapped-ion quantum computer with 20,000 qubits is available HERE.Throughout this research, IonQ followed responsible disclosure practices prior to publication. The company shared advance copies of this work with U.S. government and industry partners, and hosted discussions on its implications.The cryptographic exposure this work describes relates to authentication and integrity rather than to confidentiality. Elliptic-curve signatures underpin code signing, certificate hierarchies, device identity, and long-lived roots of trust. Unlike an attack on encrypted data, a signature compromise is exploitable going forward rather than retroactively against traffic recorded today.The estimate follows recent published work rather than announcing a new attack. IonQ‘s logical-layer figures advance on similar research regarding optimized point-addition circuits and resource estimates for elliptic-curve cryptocurrencies. What is new here is the architecture-specific accounting: what the same algorithm costs on a high-rate error-corrected trapped-ion machine rather than on a surface code. Consistent with comparable recent work, IonQ is publishing resource estimates while withholding the specific circuits.The mitigation is standardized and available today.

Both Stateless Hash-Based Digital Signature Algorithm (SLH-DSA) and ML-DSA are both unaffected by this class of result. Signatures have generally been sequenced last in post-quantum migration planning precisely because roots of trust are the hardest element to replace, which is what makes an early and precise estimate useful. The same category of risk will recur across other curves and key sizes as the underlying mathematics continues to improve. As such, the finding shows why a defense in depth strategy and cryptographic agility have to be ongoing investments. IonQ‘s full-stack security roadmap is designed to help organizations prepare for and adapt to impending quantum threats.For readers looking to go deeper on post-quantum cryptography and Bitcoin security, TQI’s coverage of the growing quantum security challenge facing Bitcoin and digital assets and how quantum computing affects modern cryptography covers the technical exposure and migration paths in detail.TopicsShare Get the latest research, company news, and market intelligence every week. MENTIONED IN THE ARTICLEIonQ is a developer in trapped ion quantum computing founded in 2015 that actively applies its technology to the aerospace and defense sectors. The company empowers satellite-based quantum networks and quantum enabled drones to improve positioning, navigation, and timing resilience in GPS denied environments, and collaborates with industry leaders like Airbus to optimize aircraft loading.More in Research