Europol has flagged crypto wallets as the primary exposure to quantum computing attacks in a report published this week, warning that a sufficiently powerful quantum computer could derive private keys from public keys and spend funds without the owner’s consent. The finding lands on a market already down 3.8 percent on Wednesday, with total crypto market cap at $2.925 trillion after roughly $115.5 billion in losses over 24 hours.
The agency’s assessment puts quantum risk ahead of hacks, phishing and insider theft in its threat ranking for digital assets. The logic is straightforward: on the two biggest blockchains, bitcoin and ether, the public key is broadcast to the network with every transaction. An attacker with a quantum computer running Shor’s algorithm could reverse elliptic curve signatures mathematically, then construct a competing transaction that empties the address before the legitimate owner’s spend confirms.
Which balances are actually exposed
The practical risk divides addresses into two camps. Coins that sit at addresses whose public key has never been revealed, which is most of the earliest mined bitcoin including wallets attributed to Satoshi Nakamoto and several long-dormant old-stake estates, cannot be attacked this way until the owner moves them. Balances that have ever broadcast a public key, P2PK outputs from 2010 onward and every modern transaction, are visible targets. Analysts estimate several million bitcoin, a double-digit share of the 19.9 million mined supply, have revealed keys and stay exposed.
Ether carries a larger share of exposed balances. Only after the network’s shift away from repeated key reuse did the foundation begin urging one-time address use, and exchange-held custody accounts retain histories of exposed keys. Market observers note Ethereum co-founder Vitalik Buterin has publicly discussed quantum resistance as a design question since 2024, proposing account abstraction paths that could allow users to migrate to post-quantum signature schemes while preserving their balances.
What the industry is building
Nothing deployed today resists Shor’s algorithm at scale. Work is under way on three fronts. Signature schemes based on hash functions and lattice problems are standardized by NIST, and several are already used in messaging and government systems. Ethereum researchers have published EIP proposals to add post-quantum signature verification at the consensus layer, with the honest assessment that migration of the full validator set would take years. Bitcoin’s development community has discussed a soft fork that would let owners commit funds to quantum-safe outputs, though activation politics for any bitcoin change remain contentious.
The gap between research and deployment is the substance of the warning. A fault-tolerant machine capable of running Shor’s algorithm on secp256k1, the curve bitcoin uses, would need thousands of logical qubits, far beyond current hardware. Estimates for arrival range from a decade to longer. But stolen-now, decrypt-later attacks make the timeline less forgiving for some holders: an adversary who records blockchain traffic today could spend keys discovered years from now, which is why the agency’s warning targets data at rest as well as future theft.
Market reaction and positioning
Wednesday’s sell-off owed more to leverage than to cryptography. Roughly $554.8 million in positions closed in 24 hours, with $487 million of that in longs, and one hour accounted for $403.58 million, 97 percent of the burst total. Reports described the drop as a leverage flush: crowded bets on higher prices were forced out, adding sell orders that pushed prices lower and dragged the next cluster down with them.
Prices reflected the flush. Bitcoin traded near $82,855, down 4.3 percent. Ether lost 5.8 percent to $2,564. XRP fell 6.3 percent to $1.42. Solana dropped 4.9 percent to $115.80. Futures volume rose 16 percent to $182.85 billion while open interest slipped just 1 percent, which analysts read as repositioning rather than exit. Stablecoin trading volume climbed about 27 percent over the same window, consistent with capital moving to the sidelines rather than leaving the asset class entirely.
Against that背影 the quantum report reads as a slow-burn risk, not a catalyst. No wire desk has attributed the day’s selling to Shor’s algorithm, and liquidation data supports a mechanical cause in the derivatives market. The report matters over longer horizons, because it pushes wallet and custody providers to publish migration plans before regulators set deadlines for them.
What holders and exchanges should do now
The practical steps are the boring ones. Use each sending address once and never reuse it, since P2PK-style output reuse is the main tuple of exposed balance. Prefer addresses whose public keys stay hidden until spend time. For exchanges and custodians, inventory which addresses hold reserves with exposed keys and draft a rotation plan now, before the pressure to move is urgent. Policy teams in the EU have debated disclosure duties for platforms on environmental and operational risk; maturity of quantum migration practices is likely to join that list.
Europol’s framing puts wallets, not exchanges, at the top of the risk list, which tracks with the attack surface: individual keys are easy to copy, while exchange-held funds sit behind cold storage and custody procedures that already rotate keys and control network access. For the average retail holder, the message lands as reassurance more than alarm. A thief needs a quantum computer that does not exist yet, and the industry has years to move balances to quantum-safe outputs. The warning’s real function is to keep migration on the roadmap rather than allowing the question to stay theoretical.