Are Crypto Wallets Ready for a Post-Quantum World?

On February 11, 2026, researchers published a new method for reading quantum information stored in topological qubits built from Majorana zero modes. The same week, Stanford scientists unveiled miniature optical cavities capable of simultaneously reading hundreds of atoms, a step toward million-qubit machines. ETH Zurich demonstrated lattice surgery on superconducting qubits, performing computations while correcting errors in real time.

These aren’t footnotes in an academic journal. They are milestones arriving faster than most crypto investors expected. The question for anyone holding digital assets is no longer whether quantum computers will threaten blockchain cryptography. The question is whether the wallets protecting those assets will be upgraded before it matters.

The Clock Started Ticking Before Most People Noticed

Every mainstream crypto wallet today relies on Elliptic Curve Cryptography (ECC), specifically the ECDSA signature scheme. When you send Bitcoin or Ethereum, your wallet signs the transaction with a private key and briefly exposes the corresponding public key on the blockchain. Under classical computing, reversing that public key to find the private key would take longer than the age of the universe. A sufficiently powerful quantum computer running Shor’s algorithm could do it in hours.

The timeline for such a machine keeps shrinking. Microsoft, partnering with Atom Computing, plans to deliver an error-corrected quantum computer to Denmark in 2026. QuEra is shipping error-correction-ready hardware to Japan this year. IBM expects the first cases of verified quantum advantage to be confirmed by year’s end, with a fully fault-tolerant processor projected for 2029.

That’s an uncomfortably short runway for an industry that moves slowly when consensus is required. For a practical iGaming crypto wallets guide, the security of underlying cryptographic standards is usually taken for granted. That assumption has an expiration date.

“Harvest Now, Decrypt Later” Is Already Happening

A September 2025 paper from the U.S. Federal Reserve examined what it calls the “harvest now, decrypt later” (HNDL) threat to distributed ledger networks. The concept is straightforward: adversaries collect encrypted blockchain data today, store it cheaply, and wait until quantum decryption becomes feasible.

For crypto wallets, this creates a problem that most users haven’t considered. Every transaction you’ve ever signed lives permanently on a public ledger. If your wallet exposed a public key at any point (and if you’ve ever sent funds, it did), that key is already harvestable. A future quantum computer doesn’t need access to your device. It just needs the blockchain.

The Federal Reserve paper makes a critical point: even if a blockchain migrates to post-quantum cryptography tomorrow, historical transactions remain vulnerable. No software update fixes that retroactively.

Around 6.36 million BTC, roughly 33% of the total supply, currently have permanently exposed public keys. That’s approximately $400 billion worth of Bitcoin sitting in addresses where the public key is already visible to anyone who downloads a copy of the blockchain.

What NIST Has Done (And What It Hasn’t)

In August 2024, NIST published three post-quantum cryptography standards:

• FIPS 203 (ML-KEM): a lattice-based key encapsulation mechanism for securely exchanging keys
• FIPS 204 (ML-DSA): a lattice-based digital signature algorithm, the primary replacement for ECDSA
• FIPS 205 (SLH-DSA): a hash-based digital signature standard, designed as a backup in case ML-DSA is compromised

A fourth standard, FN-DSA (based on FALCON), is still in development.

These standards give the crypto industry something to build toward. But “something to build toward” and “ready to deploy in production wallets” are very different things.

The practical obstacles are real. Post-quantum signatures are significantly larger than ECDSA signatures. ML-DSA signatures range from 2,420 to 4,627 bytes, depending on the security level, compared to 64 bytes for standard ECDSA. For blockchains with strict block size limits, this creates a capacity problem. BTQ Technologies had to increase Bitcoin’s block size to 64 MB just to accommodate post-quantum signatures.

Factor	Current (ECDSA)	Post-Quantum (ML-DSA)
Signature size	64 bytes	2,420–4,627 bytes
Public key size	33 bytes	1,312–2,592 bytes
Signing speed	~microseconds	~milliseconds
Verification speed	~microseconds	~milliseconds
Block space impact	Minimal	35–70x increase per transaction

That table tells a story the crypto industry hasn’t fully reckoned with. A wallet upgrade isn’t just a firmware patch; it implies fundamental changes to transaction formats, block structures, and network consensus rules.

Who’s Actually Building Quantum-Resistant Wallets?

A handful of projects are ahead of the rest. The Quantum Resistant Ledger (QRL) has been running XMSS-based, hash-function signatures since its launch and is now preparing QRL 2.0, an EVM-compatible version with a testnet launching in Q1 2026. BTQ Technologies demonstrated the first Bitcoin implementation using NIST-standardized ML-DSA, with enterprise pilots planned for Q1 2026 and mainnet launch in Q2 2026. Project 11’s Yellowpages takes a different approach entirely, creating an off-chain registry that links existing Bitcoin addresses to post-quantum keys without requiring a fork.

Algorand has integrated Falcon-based signatures at the protocol level. Hedera is partnering with SEALSQ to embed Dilithium keys directly into FIPS-compliant hardware chips.

But for the average user running MetaMask, Ledger, or a Trezor device? Nothing has changed yet. Hardware wallet manufacturers haven’t shipped quantum-resistant firmware. Major software wallets haven’t added post-quantum signature options. Ethereum’s roadmap mentions quantum resistance under its “Ethereum 3.0” umbrella, but no concrete deployment date has been set. Bitcoin’s development community is still debating proposals for quantum-resistant address formats.

This gap between research-stage projects and consumer-grade wallets is where the actual risk sits.

The Uncomfortable Math of Migration

Here’s what makes the crypto quantum problem uniquely difficult compared to, say, banking infrastructure upgrading its TLS certificates:

1. Decentralization means no central authority can force a migration. Bitcoin’s cryptographic upgrade requires broad community consensus through a soft or hard fork, a process that historically takes years.
2. Immutability means the blockchain can’t be edited. Historical transactions with exposed public keys will remain vulnerable regardless of future upgrades.
3. Interoperability breaks when different wallets support different signature schemes.
4. Key management complexity increases dramatically. Post-quantum keys are larger, seed phrases may need to change, and backup procedures that users have memorized for years become obsolete.

A Frontiers in Computer Science paper published in April 2025 recommended that Bitcoin’s migration to a post-quantum blockchain begin by block height 945,000, expected around April 2026. The authors argued that a four-year grace period for migration, combined with a three-year buffer before potential quantum attacks, was the minimum safe timeline. We’re almost at that block height now. The migration hasn’t started.

My read on this situation: the crypto industry is treating quantum resistance like it treated scaling in 2017, acknowledging the problem exists while hoping someone else solves it first. The difference is that scaling failures caused high fees. A quantum failure causes irreversible theft.

What You Can Do Right Now

No consumer wallet on the market today is quantum-proof. That’s the honest answer. But there are steps that reduce exposure:

• Avoid address reuse. Every time you send a transaction, use a fresh receiving address. Addresses that have never sent funds haven’t exposed their public keys on-chain.
• Move long-term holdings to fresh addresses periodically. If you’re sitting on a large balance in an address you used years ago, transfer to a new one.
• Watch the QRL, BTQ, and Project 11 Yellowpages projects. These are the closest to production-ready quantum-safe tooling.
• Diversify across cryptographic approaches. Hash-based systems face a different, and generally lower, quantum risk than ECC-based ones.
• Pressure your wallet provider. Ledger, Trezor, and MetaMask need to hear from users that post-quantum support matters.

A Prediction Worth Making

The European Commission has told member states to begin transitioning critical infrastructure to post-quantum cryptography by the end of 2026. U.S. federal agencies face mandates to complete migration by 2035. The banking sector is already running hybrid TLS pilots.

Crypto, with its $2+ trillion market cap and its dependence on the exact algorithms quantum computers will break first, has no equivalent mandate. No regulatory body is forcing wallet providers to upgrade. No timeline exists for Bitcoin’s cryptographic transition.

I think that gap will close violently rather than gradually. The first credible demonstration of a quantum computer factoring a cryptographically meaningful number, even far smaller than what’s needed to break Bitcoin, will trigger a market panic. The projects building quantum resistance today aren’t just solving a technical problem. They’re building the infrastructure the rest of the industry will desperately need, probably sooner than anyone with coins in a standard wallet wants to admit.

The post Are Crypto Wallets Ready for a Post-Quantum World? appeared first on The Market Periodical.