Project Eleven published a report on Wednesday proposing that the inflection point of quantum computers breaking modern encryption, known as "Q-Day," could come as early as 2030, according to the startup focused on post-quantum security. The company estimates a breakthrough is "more likely than not" by 2033, with estimates ranging a few years in either direction. Project Eleven predicts that quantum advancements will happen in sudden leaps rather than a slow and linear progression, describing progress in hardware and algorithms as compounding and leading to a major jump in capabilities characterized as "nothing, and then all at once."
Recent Quantum Demonstrations
Recent developments partially support Project Eleven's theory. Last month, a researcher derived a 15-bit elliptic curve key using quantum hardware. While notable, this remains a significant distance from the 256-bit encryption used in cryptocurrencies like Bitcoin.
Project Eleven estimates that about 6.9 million bitcoins, now worth more than $560 billion, could be exposed to quantum risk under certain conditions.
Race to Upgrade
Even if Q-Day is years away as researchers predict, mass migration to quantum-resistant wallets and addresses could take just as long. The report points to Mosca's inequality, a theory which essentially states that if a system takes longer to upgrade than the threat takes to arrive, it is already behind.
This framework is already driving early responses across the crypto industry. Paradigm researcher Dan Robinson proposed a solution that would let bitcoin holders prove ownership of wallets today via timestamps, which could be used to reclaim funds on some later quantum-safe version of Bitcoin without revealing onchain activity.
Other approaches, such as BIP-361 from Jameson Lopp and others, would involve a multi-year migration window for users to move funds to quantum-resistant addresses.
The quantum threat extends beyond the crypto sector. Tech giants like Google are accelerating their timelines, targeting a 2029 migration to quantum-resistant cryptography.