Quantum 'Easy Button' Found: Nobel Physicist Warns Your Bitcoin Keys Are Now Low-Hanging Fruit

A Nobel Prize–winning physicist who helped build Google's quantum computers warned that Bitcoin may be among the earliest real-world targets of the technology. In an interview with CoinDesk, Dr. John M. Martinis said recent Google research showing how a quantum computer could break bitcoin encryption in minutes should be taken seriously. Apparently, your stack isn't the only thing going to zero—your cryptographic assumptions might be next.

"I think it's a very well-written paper. It lays out where we are right now," Martinis said, referring to Google's latest work on quantum threats to cryptography. "It's not something that has zero probability; people have to deal with this." For those keeping score at home, "not zero probability" is physicist-speak for "you might want to keep your cold storage a little colder."

The Google paper outlines how a sufficiently advanced quantum computer could derive a bitcoin private key from its public key, potentially within minutes, dramatically reducing the computational barrier that currently secures the network. Right now, brute-forcing a private key would take longer than waiting for your uncle's crypto advice to be wrong. Quantum computers might change that math considerably.

"It turns out that breaking cryptography is one of the easier applications for quantum computing, because it's very numeric," he said. "These are the smaller, easier algorithms. The low-hanging fruit." So while quantum researchers dream of simulating molecules and optimizing supply chains, apparently they could also just casually harvest your seed phrase as a side hustle.

That places bitcoin, which relies on elliptic curve cryptography, directly in the line of fire, Martinis suggested. Unlike traditional financial systems, which can migrate to quantum-resistant encryption standards, bitcoin faces a more complex challenge. Its decentralized structure and historical design make upgrades slower and more contentious. Good luck getting consensus on a hard fork when some people still can't agree on block size. The irony of an unstoppable currency facing an upgrade problem is not lost on anyone.

"You can go to quantum-resistant codes" in banking and other systems, Martinis said. "Bitcoin is a little bit different, which is why people should be thinking about this right now." Meanwhile, banks can just flip a switch. Bitcoin needs a DAO vote, a Twitter poll, and approximately 47 Medium posts first.

The concern centers on a specific vulnerability window. When a bitcoin transaction is broadcast, its public key becomes visible before it is confirmed onchain. A powerful quantum computer could, in theory, use that window to derive the corresponding private key and redirect funds before final settlement. Imagine front-running, but with physics. It's the ultimate MEV—only instead of jumping your transaction, someone's jumping your entire wallet.

However, Martinis cautioned against assuming the threat is imminent. Building a quantum computer capable of executing such an attack remains one of the hardest engineering challenges in modern science. So if you were planning to panic-sell and buy more socks, maybe hold off on the existential dread for now.

"I think it's going to be harder to build a quantum computer than people are thinking," he said, pointing to major hurdles in scaling, reliability and error correction. Apparently the people who already built one are now the most worried about how much they haven't built. That's either refreshingly honest or deeply concerning, depending on your baseline for quantum optimism.

Estimates for when cryptographically relevant quantum machines