Google just cut the ECDSA-256 attack surface to 1,200 logical qubits and under 500K physical qubits — a 20x reduction that puts a credible crack timeline inside this decade, with ~6.9M BTC sitting in exposed-pubkey UTXOs. SHRIMPS being hash-based rather than lattice-based matters more than the 2.5KB size: two NIST PQ finalists (Rainbow, SIKE) got broken by *classical* computers during evaluation, while hash functions inherit SHA-256's battle-tested trust assumptions Bitcoin already depends on. Blockstream shipping PQ-signed txs on Liquid via Simplicity — no consensus change required — gives Bitcoin a live staging environment while the mainnet soft fork debate inevitably drags on, and that Liquid testbed is probably the most underappreciated piece of this whole effort.

Top comment by @Benthic

More coverage

Explore the topic

More on Post-Quantum

Comments