Not all Bitcoin wallets face the same level of quantum computing risk, according to a new report from Galaxy Research that pushes back against blanket fears about quantum threats to the network.
The report, titled “Bitcoin Is Rising to the Challenge of Quantum Readiness” and authored by Will Owens, was published on March 19, 2026. Its central argument is straightforward: the quantum threat to Bitcoin is real but uneven, and the determining factor is whether a wallet’s public key has already been exposed onchain.
“In fact, most wallets are not vulnerable today,” Owens wrote. “Funds are at risk only when public keys are exposed on-chain.”
That distinction matters because much of the public conversation around quantum computing and Bitcoin treats the risk as universal. Galaxy’s report challenges that framing directly.
Which Wallets Face More Risk and Why Exposure Is Uneven
Galaxy separates quantum exposure into two attack categories. The first is long-exposure attacks, which target wallets whose public keys are already visible onchain. These keys sit in the open indefinitely, giving a future quantum attacker an unlimited window to work with.
The second category is short-exposure attacks. These target public keys that are only revealed at the moment a transaction is broadcast, meaning an attacker would need to crack the key in the narrow window between broadcast and confirmation.
The practical difference is significant. Wallets that have never exposed a public key, typically those using modern address formats and avoiding address reuse, fall outside the long-exposure category entirely. Wallets tied to older address types or reused addresses carry a meaningfully different risk profile.
Galaxy cites analysis from Project Eleven estimating that roughly 7 million BTC, valued at approximately $470 billion, may be vulnerable under the long-exposure definition. That figure represents coins tied to addresses where public keys are already visible onchain, not the total Bitcoin supply.
Project Eleven’s own research supports the same framework. Exposed public keys are the target in any future cryptographically relevant quantum computing scenario, and reusing a single address does not automatically compromise other addresses in the same HD wallet. The risk is address-specific, not wallet-wide.
The distinction has implications for how holders think about hardware wallet security and key management. Users who follow best practices around address hygiene already reduce their long-exposure risk without any protocol-level changes.
Why the Risk Is Serious but Not a Reason for Panic
Galaxy’s report does not dismiss quantum risk. It frames the threat as genuine in principle while noting that the timeline for a cryptographically relevant quantum computer remains uncertain. Current quantum hardware is far from the estimated threshold of roughly 768 logical qubits needed to threaten Bitcoin’s elliptic curve cryptography.
The report also highlights that Bitcoin developers are already working on defenses. BIP 360 is among the active proposals aimed at introducing post-quantum cryptographic schemes to the protocol. Galaxy notes that proposal activity around quantum resistance has picked up, though the exact pace of acceleration was not independently quantified.
For institutional holders managing large Bitcoin positions, the nuance matters. A blanket “quantum will break Bitcoin” narrative overstates near-term risk and obscures the real variable: whether specific holdings have exposed public keys.
The broader crypto market has shown resilience to quantum fear cycles in the past. Even as major firms navigate periods of market weakness, the technical roadmap for Bitcoin’s quantum preparedness continues to develop independently of price action.
Galaxy’s measured framing aligns with the current state of evidence. The threat is real enough to warrant preparation, which is already underway, but not imminent enough to justify panic selling or dramatic protocol overhauls on an emergency timeline.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
