Bitcoin faces quantum risks by 2030 – Can developers secure BTC in time?
BIP-360 and SHRINCS are promising proposals that advance the engineering, but the network needs to come to a consensus on which route to go.
Conventional asymmetric (public-key) cryptography may become unsafe as early as 2030 due to advances in quantum computing, according to estimates from research and advisory firm Gartner. This was just one among half a dozen other concerns the firm outlined early in 2026.
The list of threats included agentic AI creating new attack surfaces and introducing challenges for traditional identity and access management (IAM).
It also highlighted regulatory volatility, which is making cybersecurity an increasingly critical business risk, among other concerns.
The clock is ticking for crypto
Most of 2026 is behind us, and the 2030 target might seem quite far away, but in reality it is not. It is not just crypto that faces a post-quantum threat. Individual entities as well as entire sectors, such as banking, need to start thinking about ways to efficiently replace the cryptography embedded in modern technology.
Recently, AMBCrypto reported on the challenges that a quantum-resistant Bitcoin could face. Right now, BIP-360, the network’s quantum-resistant proposal that introduces the new Pay-to-Merkle-Root address type, is only a proposal and isn’t quantum-proof.
The proposal removes the Taproot key-path spending option that exposes the public key on-chain. It solves a particular kind of long-exposure risk, but is not a full solution to quantum risks, nor does BIP-360 migrate existing coins automatically.
The proposal does not offer protection during the window when a transaction is broadcast, exposing the public key before confirmation, the window where the transaction sits in the mempool.
SHRINCS as part of ongoing Bitcoin quantum resistance upgrades
Cryptographic digital schemes that Bitcoin employs right now, ECDSA and Schnorr, have signatures that are very compact. The National Institute of Standards and Technology recommends post-quantum secure hash and lattice-based signature schemes that are 38 to 123 times bigger.
If employed, it would slow the Bitcoin network to a crawl and drop the transactions per second (TPS) to under 1.
A potentially viable alternate signature scheme called SHRINCS was proposed, with a minimum size of 548 bytes that can grow as large as 4,619 bytes.
Unveiled in December 2025, the proposal is a promising research field, but it is not yet cryptographically mature. It has some advantages and trade-offs, for example, the compact signatures, while also introducing a cryptographic state-management problem into every wallet.
A single update is not enough to achieve quantum resistance. Sustained research, engineering efforts, and steady adoption will be needed to strengthen the network.
These long-term improvements are essential to transform it into a more resilient system capable of withstanding future advances in quantum computing.
Final Summary
- The Bitcoin quantum resistance debate has many questions. The most damaging of them might be the one around whether we have a lot of time to act, or not enough.
- BIP-360 and SHRINCS are promising proposals that advance the engineering, but the network needs to come to a consensus on which route to go, sooner rather than later.
