Quantum researcher breaks 15-bit elliptic curve key, wins 1 BTC bounty
The 512x jump from the prior public demonstration and falling qubit estimates are accelerating post-quantum migration planning across major blockchains.
Briefing
- •Independent researcher Giancarlo Lelli broke a 15-bit elliptic curve key on publicly accessible cloud quantum hardware using a variant of Shor's algorithm, winning Project Eleven's 1 BTC Q-Day Prize.
- •The result is 512 times larger than the previous public demonstration, a 6-bit break by Steve Tippeconnic on IBM's 133-qubit machine in September 2025, achieved in seven months.
- •Bitcoin operates at 256-bit elliptic curve security; a 15-bit key has a search space of 32,767, but Project Eleven and Google frame the remaining gap as an engineering problem rather than a physics barrier.
- •Google's April 2026 whitepaper put the qubit requirement for a full 256-bit attack below 500,000 physical qubits; a subsequent Caltech and Oratomic paper reduced that estimate to as few as 10,000 qubits using a neutral-atom architecture.
- •Approximately 6.9 million BTC, roughly one-third of total supply including Satoshi Nakamoto's estimated 1 million coins, sit in wallets with exposed public keys that a sufficiently powerful quantum computer could attack directly.
- •Bitcoin's proposed BIP-360 would introduce quantum-safe address types; Ethereum, Tron, StarkWare, and Ripple have each published separate post-quantum transition plans.
Analysis
- →The jump from 6-bit to 15-bit in seven months on commercial cloud hardware is the operative signal, not the absolute gap to 256-bit. If the scaling rate holds even roughly, the timeline to cryptographically relevant quantum attacks on Bitcoin compresses from decades to years. The 6.9 million BTC in exposed-public-key wallets, including Satoshi's estimated holdings, represents a latent overhang: any credible acceleration in qubit scaling will reprice that supply risk into spot BTC immediately.
- →BIP-360's quantum-safe address migration path requires broad wallet and exchange coordination. Ethereum, Tron, StarkWare, and Ripple each having separate post-quantum plans creates protocol-level divergence: chains that implement migration fastest will absorb institutional flows from those perceived as lagging. Tron's exposure is compounded by Tether's dominance on that chain; a credible quantum threat to Tron's address security would pressure Tether to accelerate its own migration, adding operational risk to the largest stablecoin.
Historical Context
- Sept 2025
Steve Tippeconnic broke a 6-bit elliptic curve key on IBM's 133-qubit machine, establishing the prior public benchmark. Lelli's 15-bit result arrived seven months later, demonstrating that scaling is occurring on commercially accessible hardware rather than only in national lab settings.
- 2022–2024
NIST finalized its first post-quantum cryptography standards in 2024 after a multi-year process. Financial institutions have been slow to migrate legacy public-key infrastructure, creating a large installed base of RSA and elliptic curve systems that share the same vulnerability class as Bitcoin's secp256k1 keys.
- 2013
The earliest Bitcoin addresses, including those linked to Satoshi Nakamoto, used pay-to-public-key outputs that permanently expose the public key on-chain, unlike modern pay-to-public-key-hash addresses. This structural choice made early BTC holdings permanently vulnerable to any future key-recovery attack, a known but previously theoretical risk.
Connected Events
Tether freezes $344M USDT on Tron at OFAC and US law enforcement request
Tether's $344 million USDT freeze on Tron at OFAC's request establishes that Tron-based assets are already subject to centralized intervention. A credible quantum threat to Tron's address security would add a second, uncontrollable vulnerability vector to the same chain, compounding institutional risk assessment for Tether's dominant settlement layer.
