Bitcoin’s biggest quantum risk may not be wallet keys. An early investor fears something bigger

§ 01 Executive Snapshot

• What: Security experts warn that the most urgent quantum threat to Bitcoin is not wallet keys but the encrypted authentication data moving between institutions.
• Who: Andrew Gault, CEO of ZeroTier, and major institutions like Google and Citi.
• Why it matters: The potential for adversaries to harvest encrypted data now for future decryption poses significant risks to Bitcoin’s security and the broader financial system.

§ 02 Key Developments

• Security experts indicate that adversaries are pursuing a "harvest now, decrypt later" strategy, stockpiling encrypted interbank messages and payment records.
• Google has set 2029 as its target for completing a post-quantum cryptography migration, reflecting urgency in addressing these threats.
• Citi estimates that a quantum-enabled attack on a top-five U.S. bank could cause economic damage between $2 trillion and $3.3 trillion, equating to a 10% to 17% decline in GDP.

§ 03 Strategic Context

• The focus on wallet keys as the primary risk overlooks the broader vulnerability of encrypted data in transit, which is currently being harvested by adversaries.
• Major crypto exchanges and custodians have yet to publicly commit to post-quantum protections, unlike Ethereum, which has initiated a coordinated migration.

§ 04 Strategic Implications

• Immediate consequences may include heightened security measures and potential shifts in how financial institutions manage authentication data.
• Long-term implications could involve significant changes in the cryptocurrency landscape, particularly for Bitcoin, if proactive measures are not taken.

§ 05 Risks & Constraints

• One potential risk is the slow adoption of post-quantum encryption measures among Bitcoin and crypto exchanges, which may leave them vulnerable.
• Another risk is the growing sophistication of adversaries who are accumulating sensitive encrypted data with the intent to decrypt it in the future.

§ 06 Watchlist / Forward Signals

• Future developments to watch include the completion timelines for Google's post-quantum migration and any announcements from Bitcoin exchanges regarding their security strategies.
• The arrival of a cryptographically relevant quantum computer by 2034, as estimated by the Global Risk Institute, will be a critical signal for the urgency of these security concerns.