Source-linked AI summary
Cryptocurrencies in the Quantum Age: Migration Paths to PQC
Aleksei Kodukhov
TL;DR
Quantum computers threaten blockchain systems that rely on elliptic-curve cryptography, exposing assets, accounts, and privileged infrastructure. The paper reviews attack models, platform-specific risks, and migration strategies, concluding that practical post-quantum building blocks exist but require network-specific preparation and coordination.
Problem
Blockchain systems rely on quantum-vulnerable elliptic-curve cryptography, creating risks for user accounts, transactions, governance, stablecoins, and other high-value infrastructure.
Method
The paper reviews quantum attack categories, platform-specific vulnerabilities and economic risks, and practical post-quantum migration strategies for major blockchain ecosystems.
Results
There is no single migration path: Bitcoin, Ethereum, Solana, and related infrastructures require approaches adapted to their performance, governance, and account-model constraints.
Takeaways & Limitations
NIST-standardized signatures, Falcon verification, Algorand accounts, Solana Winternitz vaults, and post-quantum consensus research provide practical building blocks for preparation.
Takeaways & Limitations
Winternitz vaults protect only assets moved into the vault and do not secure Solana’s broader account, validator, consensus, networking, or program model.
Abstract
from arXiv · showhide
Quantum computers pose a fundamental threat to blockchain systems that rely on elliptic-curve cryptography. This work reviews the quantum vulnerabilities and associated economic risks of major blockchain platforms, with a focus on Bitcoin, Ethereum, and Solana. We distinguish between at-rest, on-spend, and on-setup attacks and identify the blockchain components most exposed to quantum adversaries. We further review practical migration strategies toward post-quantum security, including NIST-standardized digital signatures and emerging solutions for Solana, Algorand, and Ethereum.
1 Introduction
Quantum computing threatens blockchain security because Shor’s algorithm can attack ECC, while blockchain platforms differ in their exposure and partial protections. The paper reviews vulnerable components, economic risks, and migration strategies toward post-quantum security.
- 1 Introduction: Shor’s algorithm threatens ECC, the cryptographic foundation of most blockchain networks, because quantum computers can achieve major speedups over classical methods.ECC’s relatively small key sizes make it an attractive target for quantum attacks.
- 1 Introduction: Quantum attackers could derive private keys from public keys, steal funds, compromise governance keys, and manipulate stablecoin administration.Potential stablecoin impacts include unauthorized minting, burning, freezing, or transfers.
- 1 Introduction: Blockchain platforms differ in quantum readiness, with Bitcoin hash-based addresses and Solana Winternitz vaults offering partial protection.These mechanisms do not establish a uniform level of security across ecosystems.
- 1 Introduction: The paper examines quantum-vulnerable blockchain components, economic and market risks, and practical migration strategies toward post-quantum security.The analysis focuses particularly on Bitcoin, Ethereum, and Solana.
2 Quantum Threats to Blockchain Systems
Quantum threats to blockchains arise primarily from Shor’s algorithm against public-key cryptography, with attack feasibility shaped by exposure timing, confirmation latency, and system architecture. The highest-risk targets include exposed accounts, consensus and administrative keys, bridges, and other high-value privileged components.
- 2.1 Relevant quantum algorithms: Shor’s algorithm breaks the mathematical problems underlying RSA, Diffie–Hellman, ECDSA, and EdDSA in polynomial time, threatening widely deployed asymmetric cryptography.Grover’s algorithm instead provides a quadratic speedup for brute-force attacks against hash functions and symmetric primitives.
- At-Rest Attacks: At-rest attacks target long-exposed public keys and are described as the most immediate and realistic quantum threat to blockchain systems.Relatively slow CRQCs could derive private keys offline over hours or days.
- On-Spend Attacks: On-spend attacks require deriving a private key between public-key exposure and transaction finalization, making confirmation latency a central feasibility factor.Bitcoin’s approximately 10-minute confirmation latency makes it the most vulnerable to on-spend attacks.
- Bitcoin: Bitcoin addresses can hide public keys until spending, but fast-clock CRQCs can still steal funds after a transaction broadcasts the key.This protection therefore delays exposure rather than eliminating on-spend risk.
- Ethereum: Ethereum remains exposed through ECDSA user accounts, aggregated BLS validator signatures, and consensus-related infrastructure despite shorter block times.A quantum adversary deriving private keys could compromise users, validators, and consensus mechanisms.
- Solana: Solana externally owned accounts expose Ed25519 public keys at creation, enabling at-rest vulnerability without a prior outgoing transaction.Program Derived Addresses are comparatively resistant because they use hash-based mechanisms, although their controlling keys may remain vulnerable.
- 2.3 Vulnerable blockchain components: Privileged keys controlling stablecoins, smart-contract upgrades, bridges, governance, and treasuries are likely to be priority quantum targets.The paper identifies these components as high-risk because they combine cryptographic exposure with high economic value.
3 Economic and Market Risk Analysis
Quantum exposure spans major blockchain assets and privileged infrastructure, creating risks ranging from irreversible theft to systemic financial instability. Bitcoin, Ethereum, and Solana differ in exposure mechanisms, while migration remains constrained by governance coordination and inactive assets.
- Blockchain transactions are generally irreversible and pseudonymous, so forged signatures can enable irreversible theft without institutional recovery mechanisms.
- Bitcoin Exposure: Approximately 1.7 million BTC, nearly 9% of all Bitcoin, are protected by P2PK scripts with continuously exposed public keys.
- Bitcoin Exposure: 6.9 million BTC, nearly 500 billion USD, are estimated to be quantum-vulnerable, including exposed funds and dormant or lost coins.
- Ethereum Exposure: Ethereum’s quantum-vulnerable exposure includes approximately 21.4 million ETH in revealed externally owned accounts, 41 million ETH securing proof-of-stake, over 200 billion USD in stablecoins and tokenized assets, and at least 15 million ETH across vulnerable Layer-2 protocols and bridges.
- Solana Exposure: All Solana accounts become immediately vulnerable to a sufficiently powerful CRQC because addresses directly correspond to Ed25519 public keys, although approximately 400-millisecond blocks complicate on-spend attacks.
- Systemic Market Effects: Bridges and stablecoin infrastructures are attractive targets because small numbers of privileged keys can secure billions of dollars, while quantum compromise could destabilize broader digital-asset systems.
- Migration and Infrastructure: Post-quantum migration is a financial-stability and infrastructure-resilience initiative, but blockchain upgrades require coordination among validators, developers, custodians, exchanges, users, and governance systems.
- Migration and Infrastructure: Blockchain systems can integrate PQC signatures into protocols, smart contracts, and wallet software without replacing billions of physical devices, enabling faster deployment once consensus is achieved.
4 Post-Quantum Migration Strategies
Post-quantum migration requires replacing or complementing elliptic-curve signatures while balancing security, signature size, key size, verification cost, and compatibility with blockchain transaction limits. The paper reviews standardized signatures and ecosystem-specific approaches, including Solana vaults, Algorand accounts, and Ethereum verification proposals.
- Migration requirements: Digital signatures authorize transactions, validator messages, governance actions, and smart-contract administration, making their post-quantum replacement central to blockchain migration.
- Post-quantum signatures: ML-DSA and SLH-DSA are finalized NIST standards, while FN-DSA/Falcon remains in standardization; blockchain integration also depends on size, verification cost, and transaction limits.
- Post-quantum signatures: FN-DSA offers compact signatures and fast verification for bandwidth-constrained blockchains, whereas ML-DSA has larger keys and signatures and SLH-DSA has large signatures.
- Winternitz Vaults on Solana: Winternitz vaults provide application-level protection for selected Solana assets without changing the base protocol by securing deposits with fresh hash-based one-time keypairs.
- Winternitz Vaults on Solana: Winternitz vaults do not protect Solana validators, consensus votes, fee-payer accounts, networking signatures, or arbitrary programs that retain elliptic-curve cryptography.
- Algorand approach: Algorand uses Falcon-1024 for state proofs and has demonstrated Falcon-secured LogicSig transactions, but consensus signatures still rely on classical cryptography.
- Algorand approach: Algorand plans native post-quantum accounts while retaining 32-byte addresses, followed by hybrid accounts, mixed-scheme multisignature, and broader cryptographic agility.
- Ethereum approach: Ethereum’s EIP-8052 proposes EVM precompiles for Falcon-512 verification, including SHAKE256 and Keccak-based variants.
5 Conclusion
Quantum computing threatens blockchain security by enabling private-key derivation from public keys and concentrating risk in exposed accounts and privileged infrastructure. The paper argues that migration should begin before quantum attacks become practical, treating post-quantum readiness as a financial-stability and infrastructure-resilience priority.
- Shor’s algorithm threatens ECC-based blockchain security by enabling private-key derivation from public keys, especially endangering exposed accounts, validator keys, administrators, and custodial wallets.
- Reducing quantum attack-resource requirements and uncertainty about future capabilities support beginning migration before attacks become visible on-chain.
- Bitcoin benefits from hash-protected addresses, but dormant and previously exposed public keys create a long-term governance problem; Ethereum faces broader exposure across accounts and privileged infrastructure.
- Algorand demonstrates technically feasible Falcon-based transaction authorization, while full consensus-layer migration remains a separate challenge.
- Post-quantum migration should be treated as a financial-stability and infrastructure-resilience priority, supported by existing signature, account, vault, and verification building blocks.