Quantum Hobbits Could Nab The Crypto Ring Before It Even Knows It's Missing 🧅

The European Union's three financial supervisors added quantum computing to their official systemic-risk map on September 23, 2026, warning that a machine capable of breaking the cryptography protecting blockchains and other financial infrastructure could arrive before quantum hardware finds any profitable commercial use. The European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority issued the assessment in their Autumn 2026 Joint Committee Risk Update, listing quantum alongside AI-driven cyber risk and private credit as emerging threats to the bloc's financial system.

The regulators flagged the so-called "harvest now, decrypt later" tactic, in which encrypted data is collected today and held for decryption once quantum capability matures. They cautioned that the technology could "transform the financial sector" over the medium term, with applications in optimisation, fraud and compliance, pricing and simulation. For blockchains the exposure is already measurable. Glassnode found in May that 6.04 million $BTC — 30.2% of the issued supply and worth more than $469 billion at the time — had public keys visible on-chain and would be targetable without any transaction being required. Estimates for Q-Day, the point at which a machine can break the cryptography underpinning $BTC and $ETH, run from 2030 to 2032 and later.

The warning follows a more detailed technical assessment from Google Quantum AI. In March, its researchers estimated that breaking the cryptography used by many cryptocurrencies could require about 20 times fewer physical qubits than earlier estimates. A qubit is the basic unit of a quantum computer, and no computer capable of carrying out such an attack exists today. For cryptocurrency holders, the concern is that a future quantum computer could derive a private key from an exposed public key and use it to authorize transactions. The Digital Operational Resilience Act requires financial entities to adopt state-of-the-art cryptography against emerging threats, while the EU's NIS Cooperation Group has separately recommended that member states adopt a post-quantum cryptography migration strategy by the end of 2026.

Developers are already sketching responses. $BTC developer Jameson Lopp and five co-developers in February proposed phasing out the network's current signatures and restricting how unmigrated funds could be spent five years after the proposal's activation, a plan that has not been adopted. The Ethereum Foundation has set a target of making $ETH resistant to quantum attacks across its execution, consensus and data layers by December 2029. A sweeping report from Project Eleven, a quantum security firm, concluded that a "cryptographically relevant quantum computer" — one powerful enough to crack the elliptic curve digital signatures protecting major blockchains — could emerge within four to seven years, and recommended that authorities and financial institutions keep planning for risks from the rapid development of AI and quantum computing.