Charles Edwards, founder and CEO of Capriole Investments, has issued his starkest warning yet on quantum computing, arguing that Bitcoin must migrate to post-quantum signatures on an accelerated timeline or face existential risk later this decade. \u201cWe need to upgrade Bitcoin to be Quantum proof next year. 2026. Otherwise we are fucked,\u201d Edwards wrote on X early Monday, escalating a series of posts in which he contends \u201cQ-Day is this decade.\u201d<\/p>\n
Edwards\u2019 thesis<\/a> hinges on the rapid compression of resource estimates required to run Shor\u2019s algorithm against Bitcoin\u2019s elliptic-curve digital signatures (ECDSA\/Schnorr on secp256k1). Pushing back at skeptics who \u201chandwave Quantum as being 20+ years away,\u201d he argued that only \u201c~2,000 logical qubits\u201d may be sufficient to break ECC-256 within a practical time window, placing a credible attack in \u201c2\u20136 years.\u201d In a separate exchange he framed the stakes bluntly: \u201cDo you want $1M Bitcoin in 5 years, or $0?\u201d<\/p>\n Edwards\u2019 timeline closely tracks a fresh line of research and industry messaging from Pierre-Luc Dallaire-D\u00e9mers, founder of Pauli Group, a startup focused on quantum-resistant money. In an August research preprint and public thread, Dallaire-D\u00e9mers and co-authors introduced graded ECDLP challenges on Bitcoin\u2019s curve and, after translating logical circuits to physical costs across several error-corrected architectures, placed \u201ccryptanalytically relevant\u201d ECC-256 attacks in a \u201croughly 2027\u20132033\u201d window\u2014emphasizing wide error bars and sensitivity to hardware assumptions.<\/p>\n Pauli Group summarized the upshot plainly: \u201cThe first attack on 256-bit ECC will plausibly happen between 2027\u20132033.\u201d The firm also provocatively stated via X: \u201cPQC BTC will go to $1M+ by 2030. ECC BTC won\u2019t.\u201d<\/p>\n The core risk vector is well-established: once a Bitcoin address reveals its public key on-chain\u2014by spending from it or by using legacy formats that expose the key outright\u2014a sufficiently powerful quantum computer running Shor\u2019s algorithm could, in principle, derive the private key quickly enough to steal funds.<\/p>\n Security researchers and industry teams note that coins in already-exposed keys are the first in line, while coins still sitting behind hashed (unrevealed) public keys are safer until they move. Several analyses estimate that a non-trivial share of outstanding BTC resides in exposed-key outputs, including early \u201cpay-to-pubkey\u201d era coins often associated with Satoshi<\/a>. Edwards leaned into that tail risk, claiming \u201cSatoshi\u2019s coins will be market dumped\u201d absent a migration.<\/p>\n Not everyone agrees<\/a> on the clock speed. Some conservative estimates still point to millions of error-corrected qubits for practical, fast ECDSA breaks, and standards bodies have published transition guidance that implicitly assumes a longer runway.<\/p>\n In late 2024, material circulated in the NIST\/PQ ecosystem sketched migrations away from vulnerable algorithms by roughly 2035\u2014a horizon many security engineers view as realistic for broad IT systems, even if niche breakthroughs arrive sooner. The spread between the \u201cthousands\u201d versus \u201cmillions\u201d of logical qubits camps reflects fast-evolving algorithmic optimizations, differing error-correction models, and varied assumptions about gate speeds and code distances.<\/p>\n Notably, Edwards is taking the message to TOKEN2049 this week, where he is slated to present \u201cDOUBLE THREAT: Quantum & the Treasury Bubble\u201d on Wednesday, October 1 at 10:45 a.m. local time\u2014positioning quantum compromise and a growing \u201cBitcoin Treasury Bubble<\/a>\u201d as the two dominant downside risks for BTC over the next cycle.<\/p>\n At press time, BTC traded at $112,150.<\/p>","protected":false},"excerpt":{"rendered":" Charles Edwards, founder and CEO of Capriole Investments, has issued his starkest warning yet on quantum computing, arguing that Bitcoin must migrate to post-quantum signatures on an accelerated timeline or face existential risk later this decade. \u201cWe need to upgrade Bitcoin to be Quantum proof next year. 2026. Otherwise we are fucked,\u201d Edwards wrote on […]<\/p>\n","protected":false},"author":0,"featured_media":100581,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-100580","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/100580"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=100580"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/100580\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/media\/100581"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=100580"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=100580"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=100580"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}