量子何時會打破加密貨幣？為什麼你的錢包已經被洩露

Frequently asked questions

量子何時能打破加密貨幣？

Quantum computers will break crypto the moment a fault-tolerant machine runs Shor's algorithm against the elliptic curve cryptography used by every major blockchain. Google Quantum AI, with the Ethereum Foundation and Stanford, showed in March 2026 that this takes only 1,200 to 1,450 logical qubits inside fewer than 500,000 physical qubits, and that it completes in minutes. Published IBM and Google roadmaps, read against NSA CNSA 2.0 migration deadlines, place that capability in the 2029 to 2033 window. However, the more accurate answer to when will quantum break crypto is that the compromise has already begun. Harvest now decrypt later attacks mean your ECDSA signatures are being recorded today for future quantum decryption. Your wallet is compromised in slow motion.

量子電腦什麼時候能突破加密貨幣？

Quantum computers will break cryptocurrency that relies on ECDSA secp256k1 (Bitcoin, Ethereum), Ed25519 (Solana, Cardano), or pairing-based schemes (Zcash) as soon as a cryptographically relevant quantum computer exists. Nobody knows; hardware roadmaps reach the needed scale between 2028 (IonQ, on paper) and 2033 (IBM Blue Jay), alongside NSA CNSA 2.0 migration deadlines of 2030 to 2035. Cryptocurrency that uses post-quantum algorithms like Kyber-768 and SPHINCS+ has no known quantum attack against its keys.

Is my crypto wallet already compromised by quantum threats?

If your wallet uses ECDSA for transaction signing, then yes, your wallet is already compromised in principle. Every transaction you have ever signed exposed your public key on a permanent, public blockchain. Adversaries practicing harvest now decrypt later are recording these signatures. When quantum computers arrive, they will derive your private key from your public key using Shor's algorithm. The compromise is not future tense. The data collection is happening now. Only the decryption phase awaits.

What is the quantum threat to crypto?

The quantum threat to crypto is that Shor's algorithm, running on a quantum computer, can solve the mathematical problems that protect every major cryptocurrency. Specifically, it breaks the elliptic curve discrete logarithm problem underlying ECDSA secp256k1 and Ed25519. This allows an attacker to derive private keys from public keys, forge transaction signatures, and steal funds from any address whose public key has been exposed through a prior transaction.

How does quantum computing crypto risk affect Ethereum?

Ethereum faces severe quantum computing crypto risk because it uses ECDSA on secp256k1 for all transaction signing. Every smart contract interaction, token transfer, and DeFi transaction exposes the sender's public key. Ethereum users interact with the chain more frequently than Bitcoin holders, exposing their keys more often. The Ethereum Foundation has discussed post-quantum migration but has not deployed any quantum-resistant cryptography on mainnet as of March 2026.

Can I migrate my bitcoin to a quantum safe wallet?

You can move bitcoin to a fresh address whose public key has never been exposed, which provides temporary protection. However, this does not change Bitcoin's fundamental vulnerability. The protocol still uses ECDSA secp256k1 for transaction signing. The moment you spend from that new address, your public key is exposed again. True quantum safety requires a blockchain built on post-quantum cryptography like Kyber-768 and SPHINCS+ from the protocol level, not address rotation on a vulnerable chain.

What makes SPHINCS+ transaction signing quantum resistant?

SPHINCS+ transaction signing is quantum resistant because it uses a hash-based signature scheme whose security depends only on the collision resistance and preimage resistance of cryptographic hash functions. There is no algebraic structure for Shor's algorithm to exploit. SPHINCS+ also uses cryptographic salt in its hash tree construction, which prevents precomputation attacks and adds randomization that classical signature schemes lack. NIST standardized SPHINCS+ as FIPS 205 after years of international cryptanalysis.