On April 24, 2026, a quantum computer successfully broke an elliptic curve cryptography key. This was not a simulation or projection. Researcher Giancarlo Lelli used Shor's algorithm on publicly available quantum hardware to derive a private key from its public counterpart. The compromised key was 15 bits long.
Eight days earlier, on April 16, Project Eleven announced a competition offering 1 Bitcoin to anyone who could break the longest elliptic-curve key using quantum computing. Lelli won within eight days.
This was not the first public demonstration. In September 2025, Steve Tippeconnic broke a 6-bit key. Lelli's 15-bit result marks a 512-fold increase in seven months. This progression shows that quantum attacks on the cryptography securing Bitcoin, Ethereum, and most blockchains are now practical threats, not just theoretical.
Mathematical barriers are no longer the primary constraint
Before Lelli's demonstration, experts estimated that breaking a 256-bit elliptic-curve key would require about 2,000 logical (error-corrected) qubits. This seemed distant, as IBM's latest chip has 156 qubits and Google's Willow processor has 105. Reaching that scale was expected to take up to a decade. Recent results are changing that timeline. Google's April 2026 whitepaper estimates that a full 256-bit attack would require fewer than 500,000 physical qubits. A follow-up from Caltech and Oratomic reduced this estimate to as low as 10,000 qubits using a neutral-atom architecture. Cryptographers now see the gap from 15 bits to 256 bits as an engineering challenge, not a fundamental physics barrier.
Primary vulnerabilities in blockchain networks
Bitcoin has about 6.9 million coins in wallets with public keys visible on-chain. Project Eleven puts total exposure across Bitcoin, Ethereum, and the broader ECC-secured digital asset ecosystem at over $2.5 trillion. This exposure is not due to a bug or carelessness, but because these addresses have been used before and the blockchain records their public keys. As quantum computers scale, these coins become directly vulnerable.
All blockchains using elliptic curve cryptography face the same risk, including Ethereum, Solana, and most of the digital asset ecosystem.
Challenges of cryptographic migration
If the threat escalates as expected, the network will need new signature schemes. What happens to the millions already holding coins at old addresses?
Address commitment: When you create a wallet address, it encodes your signature scheme. Switching to post-quantum signatures locks your existing address to classical cryptography. You cannot simply switch. Every holder needs a new address, every exchange must support the new format, and every wallet must manage the transition.
Network coordination: A blockchain cannot migrate alone. Every validator, wallet, and exchange must update their code. Some upgrade immediately, others wait, and some may not upgrade at all. The longer this split persists, the greater the risk of a hard fork, which is costly, fragmentary, and undermines confidence.
Coordination failure: No participant wants to move first. Holders of Bitcoin in classical addresses have no immediate incentive to migrate to post-quantum signatures. Exchanges wait for user demand. This mutual hesitation leads to slow progress until the risk becomes urgent.
For Bitcoin, the stakes are higher. Changing its core cryptography requires near-unanimous agreement among validators and node operators. That consensus does not yet exist and likely will not until quantum threats force the issue. By then, the window for a smooth migration will be limited.
Why most networks stay exposed
Ethereum and Solana are, by design, limited to classical cryptography. Adding post-quantum support is not a simple software update; it is an architectural challenge.
Account-based systems store wallet state directly on-chain. Switching signature schemes requires reissuing every account under the new scheme. This involves re-registering millions of accounts, coordinating validators, and managing a transition where both schemes coexist, greatly increasing complexity.
UTXO-based systems offer more flexibility. Since addresses are hashes of scripts rather than signatures, the cryptographic algorithm is abstracted, allowing support for multiple schemes in parallel. Most UTXO systems haven't used that flexibility yet, though. Bitcoin and Litecoin still rely only on elliptic curves.
By the time migration becomes urgent, the opportunity for a smooth upgrade will have passed. eCurrency took a different approach: post-quantum signing is already live, not waiting on a future upgrade.
eCurrency's approach: designed for an accelerating timeline
eCurrency is a quantum-protected blockchain built for the quantum computing era. The original chain launched in 2018 as a Litecoin fork running classical elliptic-curve (ECDSA) signatures, the same category of cryptography Lelli's demonstration is chipping away at. The 2025 upgrade to proof-of-stake added support for Falcon, which NIST selected for post-quantum standardization, as the network's post-quantum signature scheme. Holders can move to a post-quantum address today. Classical addresses continue to work, so no one is forced to migrate before they're ready.
Falcon was selected for practical deployment: it produces compact signatures suitable for high-throughput blockchains, enables efficient verification for validators, and follows NIST's post-quantum standardization process. The cryptography is peer-reviewed and the threat model is public.
For institutions managing long-term holdings, having post-quantum signing available today, rather than waiting on some future network upgrade, means the option to move is already there when they want to take it.
Blockchain is long-term infrastructure. The quantum threat has always been recognized, but the timeline was uncertain. Lelli's demonstration provided data, and the escalation now gives a clear trajectory.
