Project Eleven is warning that the crypto industry may be running short on time to prepare for a future in which quantum computers can break today’s widely used public-key cryptography.
The firm’s new 110-page report argues that digital assets secured by elliptic curve digital signatures could face a serious security test within the next several years. The report places more than $3 trillion in crypto value inside that risk category, though that estimate and timeline have not been independently verified.
The concern is not that Bitcoin or other blockchains are exposed today to ordinary hacking in a new way. The concern is that a sufficiently powerful quantum computer could eventually use Shor’s algorithm to derive private keys from public keys, which would let an attacker forge signatures and take control of assets or accounts protected by vulnerable cryptography.
That distinction matters. Quantum risk is not framed in the report as a routine wallet-security problem. It is a migration problem: how quickly large, decentralized and high-value systems can move to post-quantum cryptography before an attacker has the computing power to exploit them.
Why Project Eleven Says the Risk Extends Beyond Bitcoin
Project Eleven focuses on post-quantum security and migration for digital assets. The firm recently announced work with the Solana Foundation on preparing that network for quantum-related threats, and its report uses crypto as the most visible example of a much wider security issue.
The report argues that the same broad class of public-key cryptography used across Bitcoin, ether, stablecoins and other digital assets also supports parts of banking, cloud infrastructure, authentication networks, digital identity systems and military communications. That broader claim should be treated as the report’s risk assessment rather than a confirmed finding across every affected system.
Still, the underlying point is practical: crypto would not be migrating in isolation. If quantum computers become capable of breaking common public-key systems, many institutions would be competing for the same scarce engineering, audit, compliance and coordination resources at roughly the same time.
Project Eleven describes the possible arrival of cryptographically relevant quantum computers as “Q-Day.” The report says that moment could arrive as early as 2030 and perhaps by 2033, but a firm timeline has not been publicly confirmed. Forecasts in this area vary because they depend on hardware progress, error correction, scaling assumptions and the gap between laboratory progress and usable attack capability.
For crypto holders, the useful takeaway is narrower than the headline date. The report is saying that the preparation window may be shorter than the migration window.
The Hard Part Is Coordination, Not Just Code
Moving a major network to post-quantum cryptography is not simply a matter of swapping one algorithm for another. The report argues that large systems can take many years to migrate, and that blockchains may face a slower path because their users, miners or validators, exchanges, custodians and wallet providers all need to move in a coordinated way.
That claim has not been independently verified as a universal timeline, but it fits the obvious operational challenge. A crypto network cannot protect users only by publishing a better cryptographic scheme. Wallets must support it. Exchanges and custodians must integrate it. Users must move funds. Infrastructure providers must avoid breaking existing flows. Auditors must review implementations. Governance communities must agree on what tradeoffs are acceptable.
Trezor Safe 5 Hardware Wallet
A hardware wallet can help keep private keys offline while users monitor future network migration plans. It does not make Bitcoin quantum-resistant on its own, so it should be framed as custody hygiene rather than a quantum fix.
As an Amazon Associate I earn from qualifying purchases.
For Bitcoin, the report points to past upgrades as a warning sign. SegWit, a comparatively modest change next to a full post-quantum migration, took roughly two years from proposal to activation and was part of a period of intense political conflict that ended with a chain split. Taproot was smoother, but it still shows that Bitcoin upgrades move deliberately.
Post-quantum migration would likely be more disruptive because it touches the basic mechanism used to prove ownership. It could involve new address formats, new signature schemes, larger signatures, fee and block-space tradeoffs, wallet redesigns and complicated user education.
What Makes Old Bitcoin Outputs Especially Sensitive
One issue raised by Project Eleven is the status of older or exposed Bitcoin outputs. In simple terms, some Bitcoin holdings may become more attractive targets if their public keys are visible on-chain and the owner has not moved funds to a quantum-resistant structure once one exists.
The report says there may be millions of BTC in vulnerable categories, with Project Eleven CEO Alex Pruden discussing a range of about 5.6 million to 6.9 million BTC. The exact recoverability and risk profile of those coins remains uncertain because some may be lost, some may be held by dormant owners, and some may be controlled by parties that could migrate if given enough time.
Pruden also raised a controversial idea: “recycling” vulnerable BTC back into Bitcoin’s supply curve rather than leaving those coins available for a future quantum attacker to sweep. That idea would cut directly into one of Bitcoin’s deepest philosophical conflicts. Bitcoin’s fixed-supply promise is central to its value proposition, but so is the belief that ownership should not be overridden by outside judgment.
Any such proposal would face fierce debate. It would ask the community to decide whether unmoved coins should remain untouched, even if they later become vulnerable, or whether network-level intervention is justified to prevent a quantum attacker from claiming them.
What Crypto Users Should Watch Next
The report does not mean ordinary users need to panic-move assets today. It does suggest that quantum readiness will become a more serious due-diligence question for investors, custodians, exchanges and wallet providers.
Readers evaluating crypto infrastructure should watch for several practical signs:
- Whether major networks publish credible post-quantum migration plans.
- Whether wallets and custodians explain how they would support new address types or signature schemes.
- Whether exchanges prepare withdrawal and deposit systems for post-quantum formats.
- Whether governance communities can agree on timelines before urgency becomes crisis management.
- Whether exposed public-key coins receive specific treatment or are left to user action alone.
Cryptosteel Capsule Solo
A steel seed backup can make wallet recovery more resilient during ordinary custody changes or future migrations. It should be stored securely, because anyone with the recovery phrase may be able to access the wallet.
As an Amazon Associate I earn from qualifying purchases.
The most important commercial question is not whether quantum computers are dangerous in theory. It is whether high-value systems can finish a careful migration before the risk becomes practical. Project Eleven’s report argues that the industry may be underestimating the time required for that work.
That makes quantum migration less of a distant science story and more of an infrastructure planning problem. Bitcoin’s security model has survived because it is conservative, heavily scrutinized and difficult to change. Those same strengths could become liabilities if the network waits too long to coordinate a cryptographic transition.
YubiKey 5 NFC Security Key
A hardware security key can strengthen login protection for exchanges, email and password managers that support FIDO or WebAuthn. It addresses account takeover risk, not the blockchain cryptography issue discussed in the report.
As an Amazon Associate I earn from qualifying purchases.