New estimates From Google Quantum AI show quantum attack on Bitcoin is closer than thought

Google Quantum AI researchers have determined that breaking the core cryptography of various cryptocurrencies, secured by the secp256k1 curve, may require as few as 1200 logical qubits and 90 million Toffoli gates, a significantly lower threshold than previously understood.

The team’s work elucidates specific vulnerabilities blockchain technologies face with the development of quantum computers and potential mitigation strategies. To ensure responsible disclosure, the researchers validated their findings using a zero-knowledge proof without revealing specific attack vectors. This analysis reveals that emerging “fast-clock” quantum computers could enable attacks on cryptocurrency transactions in the public mempool. Shor’s Algorithm Estimates for secp256k1 Bitcoin Attacks This represents a significant reduction in the estimated resources needed for a successful attack compared to earlier projections, bringing the threat of quantum decryption closer to reality. These architectures, the researchers note, could enable “on-spend” attacks targeting public mempool transactions, potentially allowing malicious actors to seize funds before they are confirmed on the blockchain. A key distinction highlighted in the analysis is the difference between fast-clock and “slow-clock” quantum computers, such as those based on neutral atoms or ion traps. The researchers found that circuits executing Shor’s algorithm on superconducting architectures, with a 10-3 physical error rate and planar connectivity, could complete the calculation in minutes using fewer than half a million physical qubits. This speed is critical because it suggests a viable attack window exists once sufficiently powerful quantum computers become available. The implications extend beyond Bitcoin, encompassing any cryptocurrency reliant on the secp256k1 curve for securing transactions. Technical solutions would benefit from accompanying public policy, and highlight ongoing efforts to transition to Post-Quantum Cryptography as a crucial step toward long-term security. Logical Qubit & Toffoli Gate Requirements for Quantum Attacks Estimating the computational power required to compromise existing cryptographic systems is a central challenge in the emerging field of quantum security, and new analysis from Google Quantum AI narrows the parameters for attacking the underlying cryptography of various cryptocurrencies and modern developments. These figures represent the resources needed to execute Shor’s algorithm, a quantum algorithm known to efficiently solve the Elliptic Curve Discrete Logarithm Problem. The reduced qubit and gate counts have substantial implications for timelines, as they suggest a viable attack window exists once quantum computers reach sufficient scale and stability. The analysis introduces a key distinction between “fast-clock” architectures, like superconducting and photonic systems, and “slow-clock” architectures, such as neutral atom and ion trap designs, with fast-clock systems posing the more immediate threat. This approach acknowledges the delicate balance between informing the community and providing malicious actors with actionable intelligence. The authors state that technical solutions would benefit from accompanying public policy, suggesting frameworks to regulate the recovery or destruction of dormant assets while preventing adversarial seizure. The work underscores the urgency for vulnerable cryptocurrency communities to transition to Post-Quantum Cryptography without delay, as the landscape of digital security undergoes a fundamental shift. Fast-Clock vs. Slow-Clock Quantum Computer Architectures Specifically, the team determined that executing Shor’s algorithm requires either less than or equal to 1200 logical qubits and less than or equal to 90 million Toffoli gates, or alternatively, up to 1450 logical qubits and 70 million Toffoli gates. Fast-clock systems, characterized by rapid gate operation speeds, are projected to be the first to reach the scale necessary for cryptographically relevant attacks. The researchers emphasize that the first fast-clock cryptographically relevant quantum computers (CRQCs) would enable these attacks, creating a time-sensitive vulnerability for some cryptocurrencies. They approached this work with a commitment to responsible disclosure, utilizing a zero-knowledge proof to validate their findings without disclosing attack vectors. On-Spend Attacks Targeting Cryptocurrency Mempools The potential for quantum computers to compromise cryptocurrency security extends beyond simply breaking encryption; emerging analysis reveals vulnerabilities to “on-spend” attacks targeting transactions as they propagate through public mempools. This attack vector centers on the ability to manipulate the order of transactions within the mempool, potentially allowing an attacker to double-spend funds. They note that the analysis reveals systemic risks associated with advanced features in some blockchains such as smart contracts, Proof-of-Stake consensus, and Data Availability Sampling mechanisms, as well as the enduring concern of “abandoned” assets.

Systemic Blockchain Risks: Smart Contracts & Proof-of-Stake The team validated these results using a zero-knowledge proof without disclosing attack vectors. Beyond the raw qubit count, the architecture of a quantum computer plays a crucial role in its ability to execute these attacks. The implications extend beyond Bitcoin to encompass broader systemic risks within the blockchain ecosystem. The whitepaper surveys vulnerabilities in advanced features like smart contracts and Proof-of-Stake consensus mechanisms, highlighting how these could be exploited by quantum computers. The document addresses the enduring issue of “abandoned” assets, proposing frameworks to regulate their recovery or destruction, preventing adversarial seizure. The researchers argue that technical solutions would benefit from accompanying public policy and discuss various frameworks of “digital salvage” to regulate the recovery or destruction of dormant assets while preventing adversarial seizure.

Quantum Vulnerabilities Beyond Bitcoin & Stablecoins Google Quantum AI researchers, alongside collaborators from the Ethereum Foundation and Stanford University, detailed these findings in a whitepaper examining the evolving threat posed by cryptographically relevant quantum computers (CRQCs) to blockchain technologies. This reduced qubit count dramatically alters the timeline for potential attacks. Prior analyses often assumed substantially higher requirements, creating a sense of distance from the actual threat. This speed is particularly concerning for “on-spend” attacks targeting transactions in the public mempool before confirmation. Fast-clock systems, the researchers explain, are the most likely candidates to deliver the first CRQCs capable of mounting these attacks.

The team acknowledges a delicate balance between transparency and security, noting the potential for misuse of detailed attack information. They advocate for continued publication of resource estimates to signal the proximity of quantum threats, while deliberately withholding specific quantum circuits. This approach, they believe, is essential to motivate timely defenses without immediately enabling exploitation.

Digital Salvage Frameworks for Dormant Cryptocurrency Assets These frameworks, they note, must balance the need for transparency with the risk of malicious actors exploiting any revealed vulnerabilities. A key consideration is the potential for a “fast-clock” quantum computer to enable attacks on public mempool transactions, creating a window of opportunity for exploitation before funds are fully confirmed. This urgency underscores the need for proactive measures, even before quantum computers reach full maturity. They believe that a measured approach, sharing estimates of computational requirements, such as the ≤ 1200 logical qubits needed to break the cryptography underpinning many cryptocurrencies, is essential to drive timely mitigation without immediately enabling exploitation.

The team validated their results using a zero-knowledge proof without disclosing attack vectors, demonstrating a commitment to responsible disclosure. Ultimately, the researchers urge vulnerable cryptocurrency communities to prioritize migration to Post-Quantum Cryptography, but recognize that this transition will not resolve the issue of already-abandoned assets. The document suggests that a coordinated effort involving technical innovation and public policy is crucial to establish a sustainable path forward for managing these dormant funds and safeguarding the integrity of the broader blockchain ecosystem. This reduction in required resources accelerates the timeline for potential quantum attacks on cryptocurrencies and necessitates a swift transition to post-quantum cryptographic solutions. The researchers acknowledge the delicate balance between signaling the proximity of quantum threats and providing detailed information that could be exploited. Responsible Disclosure of Quantum Cryptanalysis Results To ensure responsible disclosure of these findings, the team employed a zero-knowledge proof, validating their results without disclosing attack vectors. This proactive approach is crucial, given that the value of cryptocurrency assets relies heavily on both digital security and public confidence. This call to action reflects a growing awareness within the quantum computing community of the real-world implications of their work and a commitment to responsible disclosure in the face of rapidly advancing technology. 👉 More information🗞 Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities: Resource Estimates and Mitigations✍️ Ryan Babbush et al.🧠 DOI: http://link.aps.org/doi/10.1103/j3xf-bw18 Stay currentSee today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals. Tags: