The Quantum Alliance is a new open standards body, launched by nine blockchain organizations on October 16, that will define what “post-quantum readiness” means for crypto networks, wallets, and infrastructure, and publish a common way to test whether a quantum-resistance claim is real. The group said its definitions, benchmarks, and migration guidance will all be released openly, according to its launch announcement.
The problem it targets is specific. Nearly every major blockchain secures accounts with elliptic-curve signatures, and once an account signs a transaction its public key sits permanently on a public ledger. A sufficiently capable quantum computer running Shor’s algorithm could work backward from that public key to the private key and take control of the funds. The same signatures protect stablecoin minting keys, governance contracts, bridges, and oracle feeds, so a single compromised key could spread across many platforms at once.
By the Alliance’s count, 6.04 million BTC — 30.2% of total supply — is quantum-exposed at rest, and almost all of the roughly $2.9 trillion crypto market still relies on classical signatures. At Bitcoin’s October 17 price near $81,500, that exposed supply is worth about $492 billion. No existing quantum computer can perform the attack today, but the group argues the industry still has no agreed definition of “quantum-ready” to prepare against it.
What the Alliance Will Define and Publish
The Alliance’s first deliverable is a public definition of quantum readiness covering transaction signatures, key management, consensus, zero-knowledge proof systems, and peer-to-peer connections. It will also publish open test criteria and benchmarks that any team can run against its own implementation, plus reference designs for migration that address exposed keys, dormant accounts, and the larger transactions post-quantum signatures produce.
The work is split across four groups: blockchain migration, post-quantum zero-knowledge systems, wallet security, and cross-chain compatibility. Modeled on the Internet Engineering Task Force, the Alliance will let proposals advance on public evidence, rough consensus, and working implementations, with no voting weight for corporate size or token holdings. Anyone can join a working group or submit a proposal.
Why the Timeline Keeps Tightening
The Alliance points to a string of recent forecasts that have moved the threat window forward. In March, Google Quantum AI, working with researchers from the Ethereum Foundation and Stanford, found that cracking the elliptic-curve cryptography behind Bitcoin, Ether, and most major coins could take fewer than 500,000 physical qubits — roughly a twentieth of earlier estimates. A model called the Quantum Doom Clock, built by two Alliance contributors, has pointed to March 2028 as an early window since early 2025, and in September IonQ estimated that a fault-tolerant trapped-ion computer with about 20,000 physical qubits could solve Bitcoin’s secp256k1 problem in roughly 26 days per attempt.
The U.S. National Institute of Standards and Technology finalized its first post-quantum cryptography standards in August 2024, but no single party can order a live blockchain to adopt them. A network can call itself “quantum-resistant” today with no shared understanding of which parts of its system the claim covers. How a quantum attack on Bitcoin would actually work is a question most networks have answered with marketing rather than a testable standard.
The Nine Founding Contributors
The Alliance spans every layer a migration has to pass through. The founding contributors are Christopher Smith, founder and CEO of Quantus, a proof-of-work blockchain that uses NIST’s ML-DSA signature standard from its first block; Michal “Mehow” Pospieszalski, CEO of American Fortress, which builds the Send-to-Name payment address system; Leona Hioki of Intmax, a stateless zero-knowledge rollup on Ethereum; Aaron Chen, CTO of the hardware wallet maker Keystone; Sebastien Guillemot, CTO of Midnight Foundation, which supports the Cardano-linked Midnight privacy chain; Colton Dillion and Dr. Richard T. Carback III of Postquant Labs, the developers of Quip Network; Richard Lee, chief business officer of the privacy-focused, lattice-based Abelian blockchain; Bryn Bennett, chief revenue officer at The Vault; and Katina Messinis, head of business development at security firm Hacken.
“In the future, ‘post-quantum cryptography’ will just be called ‘cryptography’ and everything else will be in a museum,” said Smith in the announcement. Guillemot added that zero-knowledge systems “carry some of the most sensitive data on any chain,” and that agreeing now on how to evaluate post-quantum proofs “saves every team from solving it alone later.”
What the Standards Cannot Do
The Alliance is a standards body, not a regulator or an upgrade authority. It cannot order a live network to migrate, and its criteria cannot protect addresses whose public keys are already exposed, including coins whose owners have lost access. A single working demonstration, such as StarkWare’s quantum-safe Bitcoin transaction mined in August, protects only coins moved into a special output and does not make Bitcoin quantum-safe on its own.
What happens next is the first public definition of readiness and the open benchmarks that follow it. Until a cryptographically relevant quantum computer actually exists, the test of the Alliance will be whether exchanges, custodians, and developers adopt one shared yardstick instead of each grading its own migration.
Frequently Asked Questions
Is Bitcoin safe from quantum computers?
No machine capable of breaking Bitcoin’s cryptography exists today. The Quantum Alliance estimates 6.04 million BTC has public keys already exposed on-chain, which is why the group wants a shared readiness standard before a practical attack, currently forecast around 2028–2029.
What is post-quantum cryptography?
Post-quantum cryptography refers to signature and encryption schemes designed to resist attack by quantum computers. NIST finalized its first standards, including ML-DSA and ML-KEM, in August 2024, but live blockchains still need a defined migration path to adopt them.
When could a quantum computer break crypto?
Forecasts differ. Google Quantum AI cut its estimate to under 500,000 physical qubits in March 2026, and other projections point to a practical window around 2028–2029. No existing machine has reached that scale, so the timing remains an estimate, not a confirmed date.
