Europol Issues Alert on Quantum Computing Risks to Cryptocurrency
Europol has issued a significant alert regarding the potential risks to cryptocurrency wallets posed by the rise of quantum computers, emphasizing the urgent need for enhanced security measures within the crypto sector ahead of any practical exploitation of these technologies. On October 7, the agency released two in-depth reports that assess the implications of rapid advancements in quantum computing on both digital currencies and sensitive encrypted data.
Current State of Quantum Technology and Cryptocurrency Security
While Europol refrained from asserting that existing quantum technologies are capable of compromising cryptocurrency security currently, it noted the uncertain timeline for when sufficiently powerful quantum computers might emerge. Such developments could incrementally challenge the integrity of cryptographic systems crucial for decentralized finance, which may necessitate years of substantial upgrades across the board.
Vulnerabilities in Cryptocurrency Wallets
The primary focus of the first report is on the vulnerabilities inherent in cryptocurrency wallets, pinpointing wallet authorization keys as critical exposure points. Public-key cryptography, which serves as the backbone for authorizing transactions in many blockchain platforms, is especially at risk. Should a capable quantum computer gain access to an exposed public key, it may be able to calculate the corresponding private key, enabling unauthorized transactions and asset transfers, Europol explained.
Focus on Cryptographic Hash Functions
In order to scrutinize the potential effects of quantum advances, Europol has differentiated between blockchain hash functions and traditional digital signatures. The agency underscored that the cryptographic hash functions integral to blockchain security are comparatively robust against quantum attacks, making it imperative to concentrate on the integrity of wallet signatures and key management practices.
Transition to Post-Quantum Cryptography
Contrary to fears that cryptocurrencies may face imminent collapse, Europol advocates for a gradual transition toward post-quantum cryptography. This phased migration would necessitate collaboration between blockchain developers, policymakers, wallet providers, and users. For instance, Bitcoin developers are already deliberating over strategies to transition away from legacy ECDSA and Schnorr signatures, as demonstrated by the draft proposal BIP-361, which remains under consideration.
Proactive Measures by Cryptocurrency Custodians
Some cryptocurrency custodians, such as BitGo and Silence Laboratories, have proactively begun experimenting with post-quantum signing methods, testing systems like ML-DSA within custody workflows to evaluate how such innovations might be integrated into current assets. BitGo has already implemented tools to help identify public-key exposure risks and facilitate user transfers from vulnerable addresses, while Coinbase is similarly working to fortify its custody infrastructure against potential quantum threats.
Future Enhancements and Standards
Looking forward, multiple projects are planning enhancements aimed at quantum resilience. The Sui network is exploring the introduction of optional quantum-safe authentication methods, targeting a 2027 rollout that would allow continuity for users while adopting new security measures.
The urgency of these efforts is reinforced by recent actions from the U.S. National Institute of Standards and Technology (NIST), which has established the first major post-quantum cryptography standards, advocating for organizations to shift toward quantum-resistant systems as early as possible to avoid obsolescence in the face of evolving threats.
Addressing the “Harvest Now, Decrypt Later” Threat
Europol’s second report deals with the issue of “harvest now, decrypt later,” an approach where attackers collect encrypted data they cannot currently decrypt, opting to store it until quantum advancements permit future access.
While evidence of such practices on a large scale is currently lacking, Europol acknowledges that high-value information—such as government communications and medical records—remains a potential target. The report advises mitigating risks by phasing out obsolete protocols and enhancing key management strategies.
Challenges in Migration to Post-Quantum Systems
The largest challenge lies not only in the advancement of quantum computing technology but in coordinating a comprehensive migration to post-quantum systems within decentralized networks—a task that requires the collaboration of developers, exchanges, custodians, miners, and individual users. Charles Guillemet, CTO of Ledger, emphasizes that one of the most complex issues facing Bitcoin is ensuring the secure migration of existing wallets and funds in conjunction with the implementation of new signature technologies, especially regarding dormant assets and inactive users.
Investment in Quantum-Resistant Research
In a proactive move, Galaxy Digital has allocated $5 million for research into quantum-resistant signatures and migration tools. Overall, Europol’s recommendations highlight the need for the cryptocurrency sector to identify at-risk assets, enhance key management practices, and ensure transparent communication regarding potential future adaptations.
