Quantum threat looms, $2 trillion in assets face crypto vulnerability

Elliptic-curve cryptography has been known to possess quantum vulnerabilities for over thirty years, yet the crypto industry lacks a universal method to compel a shift away from it. Fortune assessed this exposure at $2 trillion within digital assets secured by this cryptography, against a total crypto market valued at $2.8 trillion.

While developers can introduce novel signature types, the actual movement of assets hinges on custodians acting for their clients and self-custodied holders managing their own affairs. This optional participation allows delay to seem rational until the risk changes suddenly.

Recently, the hardware needs for the memory-efficient version of Shor’s algorithm have diminished; three days ago, it required 672 qubits and 823m T gates, but now the requirement stands at 660 qubits and 490m T gates.

Though NIST has already standardized replacement signature schemes, meaning post-quantum solutions exist today, replacing ECDSA with ML-DSA necessitates reworking systems because the new keys and signatures are considerably larger.

The incentive to postpone action remains strong; early adopters absorb redesign costs, custody changes, and new operational procedures while the threat feels distant.

Pressure is expected to manifest unevenly, with large exchanges and custodians moving first due to concentrating visible, high-value targets. Smaller providers and individual holders will follow at a slower pace.

A designated cutoff point could force a governance decision regarding assets whose owners failed or could not complete the necessary migration. Ultimately, the industry must establish a dated requirement, whether through protocol rules or regulated standards, before an attack or regulatory body sets the timeline.

Why it matters

The industry faces a growing risk as quantum computing advances, threatening a vast amount of digital wealth. The voluntary nature of migration means that delay is currently rational, but this inaction increases collective exposure to future attacks.