Europol Says Quantum Computers Won't Break Bitcoin. Your Wallet Is Another Story.

Europe's top police agency has weighed in on crypto's favorite doomsday scenario, and its verdict is calmer than the headlines suggest. On October 7, 2026, Europol's European Cybercrime Centre published two reports on how quantum computing could affect cryptocurrencies and encrypted data. The primary report, titled "Quantum Computing and Cryptocurrencies, Bridging Technical Expertise and Decision-Making," delivers its headline finding in plain terms: "Cryptocurrencies will not collapse due to quantum computing." That sentence has been quoted everywhere this week, but the interesting part of the report is what comes after it. Europol does not argue that quantum computers are harmless. It argues that the danger is specific, measurable, and fixable if the industry starts planning now. The threat is not that a quantum machine rewrites Bitcoin's history. It is that someone's coins get spent by someone else.

What the reports actually found

Both reports draw a line that earlier warnings often blurred. A blockchain's integrity rests on hash functions, and Bitcoin's SHA-256 is the signature example. Europol describes these as largely resistant to quantum attacks. The vulnerable layer is different: the public-key cryptography that controls wallets. In Bitcoin's case that is the Elliptic Curve Digital Signature Algorithm, or ECDSA, which proves ownership of coins and authorizes every transfer.

The physics behind the split is worth stating plainly. A quantum computer running Shor's algorithm can efficiently solve the mathematical problems that underpin elliptic-curve and RSA cryptography, which is why a sufficiently powerful machine could derive a private key from an exposed public key. Hash functions face a different, weaker threat: Grover's algorithm provides only a quadratic speedup, effectively halving a hash function's security level rather than breaking it outright. That is why SHA-256, with its 256-bit output, remains largely resistant while ECDSA does not.

None of this is imminent. Europol is explicit that quantum computers capable of carrying out these attacks do not exist yet, and the agency offered no forecast for when they might. The report is a planning document, not a siren.

Why wallets are the weak link

The exposure comes down to where public keys become visible. In Bitcoin's modern address formats, an address is a hash of a public key, not the key itself. The key stays hidden until the address spends funds, at which point the full public key is recorded on the public ledger for anyone to see. In the network's early days, though, a format called pay-to-public-key put the key itself directly on-chain, no hashing involved. Long-dormant holdings from that era, plus any modern addresses whose keys were exposed through spending or address reuse, make up the vulnerable population.

Europol's estimate: roughly 6 to 6.9 million bitcoin sit in addresses with exposed public keys, about 30 percent of the total supply. Many are early and long-dormant holdings from Bitcoin's first years, the so-called Satoshi-era coins, the same population at the center of the long-running debate over whether quantum machines can break Bitcoin.

This is where the report gets uncomfortable. A vulnerable address can only be protected if its owner moves the funds to a quantum-safe wallet before a capable machine exists. Exposed keys cannot be secured retroactively. The protection is proactive migration, which shifts the burden from the protocol to individual holders. And the coins whose owners never act, including an unknown share of long-lost or dormant wallets, are the thorniest part of the problem: nobody has a convincing answer for how every one of those coins gets secured.

The chain is the vault and the wallet is the key. Europol's point is that quantum computers threaten the key, not the vault.

The migration math is the hard part

Even the purely technical part of the problem is daunting. Europol cites a 2024 estimate that converting every Bitcoin unspent transaction output, or UTXO, to a quantum-resistant format would require at least 76 days of cumulative block space. Reserve just 25 percent of each block for the migration, and the same estimate stretches the process to about 300 days. Part of the cost is cryptographic: post-quantum signature schemes can be 10 to 120 times larger than Bitcoin's current ECDSA signatures, so every migrated transaction consumes far more block space than a normal one.

Then there is the coordination problem, which Europol flags as the central challenge. Bitcoin has no IT department that can push a mandatory update and call it a day. The phased shift the agency recommends, wallet upgrades, post-quantum cryptography, and coordinated action among developers, miners, exchanges and users, has to happen across a decentralized network where every participant moves at its own pace. If a full migration could take more than 76 days of block space, waiting until quantum machines are demonstrably ready would leave almost no room for error.

There is at least a rough planning horizon forming. CoinDesk's reporting notes that Bitcoin researchers and institutions increasingly see 2029 as the point by which credible quantum-resistant migration plans need to be in place. Europol itself declined to name a date, so treat 2029 as a target for planning, not a prediction about machines.

In perspective

Strip away the drama and the report is doing something useful: replacing a binary question, will quantum kill crypto, with a systems question, which parts are exposed and how do we fix them. The blockchain survives. The wallets need upgrades. The migration is a multi-year engineering and coordination project, not a weekend patch.

That is also why the agency's closing line matters more than its headline finding. "Proactive adaptation, rather than systemic collapse, is the most likely outcome," the report says. The key word is proactive. Nothing in quantum physics forces a crisis; the risk is entirely about whether the industry does the unglamorous work of upgrading signatures, wallets, and coordination before it has to. In that sense, Europol's report is less a warning about quantum computing than a timetable for everything around it.