Galaxy: Quantum Risk Varies Across Crypto Wallets

Bitcoin investors face a real, long-term risk from quantum computing, but the danger is not equally distributed across all wallets. Will Owens, a research analyst at Galaxy Digital, outlined in a recent briefing that a sufficiently powerful quantum computer could derive a private key from a public key, enabling an attacker to impersonate the wallet owner, forge a signature, and steal coins. Yet he stressed that the current landscape is not uniformly vulnerable: most wallets remain safe today, with risk primarily arising when public keys are visible on-chain.

Owens described two primary exposure paths. The first concerns wallets whose public keys are already exposed on the blockchain, making them potential targets if a quantum attack becomes feasible. The second occurs when a wallet’s public key is revealed at the moment of spending. This distinction has practical implications for how wallets are designed, upgraded, and secured as the crypto ecosystem moves toward post-quantum resilience.

Key takeaways

• Public-key exposure matters: funds are at greater risk if a wallet’s public key is visible on-chain or revealed during a transaction.
• Today’s wallets are largely shielded from quantum risk, but the threat is recognized and being studied by developers and researchers.
• The Bitcoin community has accelerated quantum-related proposals since late 2025, though governance remains non-centralized by design.
• Near-term guardrails have been discussed, including practical approaches from prominent voices advocating safer storage methods until post-quantum solutions are ready.
• Investors should monitor post-quantum developments and the timing of proposed mitigations, as the threat is real even if not imminent for most users.

Quantum risk landscape for Bitcoin wallets

The core concern is the possibility that a quantum computer could reverse-engineer a private key from a corresponding public key, enabling an attacker to impersonate the wallet owner and authorize transactions. This would undermine the cryptographic foundations that underwrite Bitcoin’s security. However, Owens cautioned that the vulnerability is not uniform across all wallets today. “Most wallets are not vulnerable today. Funds are at risk only when public keys are exposed on-chain,” he explained.

The two exposure routes identified by Owens—on-chain public keys already visible, and keys revealed at spending—are important for both users and developers. If a wallet’s public key remains hidden until it is used, the risk profile differs from wallets whose keys have already been disclosed on-chain. This nuance shapes how wallets are designed to mitigate potential quantum threats, including the timing of key disclosure and migration to post-quantum-secure mechanisms.

Quantum computing’s potential to disrupt conventional cryptography has circulated in crypto discourse for years, with some observers arguing the threat is distant. Yet the consensus forming in academic and industry circles is that the question is not if, but when—and how quickly the ecosystem can adapt. Owens noted that the debate extends beyond the technical layer and into governance, as coordinated action will be required to implement robust, long-term protections.

The right people are on top of the issue

Despite some critics who argue the quantum threat is overstated or decades away, Owens contends that development activity in this area has intensified. He said there is substantial developer work addressing quantum vulnerabilities and mitigations, and that the ecosystem now has a concrete, maturing set of proposals spanning the full problem surface. “The proposals are not theoretical. They are being actively developed, reviewed, and debated by some of the most experienced contributors in the Bitcoin ecosystem,” he affirmed.

In parallel, other voices in the space have proposed practical approaches to reduce exposure in the near term. Crypto veteran Willy Woo suggested last November that holding Bitcoin in SegWit wallets could reduce risk while a more permanent solution is devised. The idea reflects a broader appetite for interim safeguards as the community weighs longer-term protocol changes such as post-quantum cryptographic schemes.

The broader push toward post-quantum readiness has historically been framed as a balance between innovation and conservative risk management. While some markets may still debate the immediacy of the risk, the Bitcoin ecosystem appears to be aligning incentives around security and resilience. Owens emphasized that a non-centralized governance model—where Bitcoin has no CEO, no board, and no single authority to mandate updates—does not preclude effective action. Instead, the universal and external nature of the risk—affecting participants across the network—can catalyze broad, voluntary alignment around practical mitigations and gradual upgrades.

“For investors, the key takeaway is straightforward: the risk is real but recognized, and the people best positioned to address it are working on it.”

As the conversation evolves, the community continues to explore concrete, actionable paths forward. In addition to BIP-based discussions and potential soft-fork mitigations, researchers and developers are evaluating post-quantum-ready signatures, key-management innovations, and more robust on-chain privacy and security architectures. The goal is not merely to react to a theoretical threat but to engineer a resilient system that preserves user sovereignty without compromising the Bitcoin network’s open, trust-minimized ethos.

Looking ahead, observers will want to watch how quickly post-quantum techniques mature and how they can be integrated without creating new vectors for risk or fragmenting the ecosystem. The next few years are likely to bring a combination of protocol-level experiments, community-led governance decisions, and gradual deployment of protective measures that could gradually harden Bitcoin against quantum threats while maintaining its decentralized ethos.

As quantum resilience work progresses, readers should stay attuned to updates from core developers, security researchers, and stakeholder communities. The exact timeline for wide-scale post-quantum adoption remains uncertain, but the direction is clear: the industry is treating quantum risk as a real, evolving concern and mobilizing to address it with practical, collaborative solutions.