The quantum assault Bitcoin has spent years treating as tomorrow’s drawback simply bought rather less theoretical.
Quantum safety startup Mission Eleven mentioned it awarded its 1 bitcoin Q-Day Prize to impartial researcher Giancarlo Lelli on Friday after he broke a 15-bit elliptic curve key on publicly accessible quantum {hardware}, deriving a personal encryption key from its public counterpart.
The bounty is value roughly $78,000 at present costs. It’s mentioned to be the biggest public demonstration of the assault class that would someday threaten bitcoin, ether (ETH) and most main blockchains.
Mission Eleven Awards 1 BTC Q-Day Prize for Largest Quantum Assault on Elliptic Curve Cryptography to Date
Researcher breaks 15-bit ECC key on publicly accessible quantum {hardware} in a 512x leap from the earlier public demonstration.
Mission Eleven as we speak awarded the Q-Day…
— Mission Eleven (@projecteleven) April 24, 2026
Elliptic curve cryptography is the mathematics that lets a crypto pockets show it controls funds with out revealing its non-public key. A public key may be seen to everybody, however deriving the corresponding non-public key’s presupposed to be inconceivable in sensible phrases.
Quantum computer systems operating Shor’s algorithm, a quantum approach first proposed in 1994, problem that assumption by attacking the underlying logic that secures these signatures.
Lelli’s outcome doesn’t imply bitcoin is near being cracked. Bitcoin makes use of 256-bit elliptic curve safety. A 15-bit key has a search house of 32,767 potentialities, tiny by comparability. The prize was designed to measure whether or not quantum assaults on actual cryptography-based merchandise are transferring from white papers into public {hardware} experiments.
The earlier public break was a 6-bit demonstration by Steve Tippeconnic in September 2025 utilizing IBM’s 133-qubit quantum pc. Lelli’s 15-bit outcome expanded that by an element of 512 in seven months.
A bit is the smallest unit of knowledge in a daily pc, a qubit is the quantum computing equal.
Learn extra: A easy explainer on what quantum computing really is, and why it’s terrifying for bitcoin
Theoretical useful resource estimates have dropped even sooner. A Google Analysis paper final month put the price of a full 256-bit assault beneath 500,000 bodily qubits, down from earlier estimates within the tens of millions.
“The useful resource necessities for such a assault hold dropping, and the barrier to operating it in observe is dropping with them,” Mission Eleven CEO Alex Pruden mentioned.
Pruden famous the successful submission got here from an impartial researcher engaged on cloud-accessible {hardware}, not a nationwide laboratory or a personal quantum chip.
The priority is sharpest for wallets whose public keys are already seen on-chain. Mission Eleven estimates roughly 6.9 million bitcoin sit in such addresses, about one-third of whole provide, together with Satoshi Nakamoto’s estimated 1 million bitcoin untouched for the reason that community’s earliest years. Any quantum pc able to breaking 256-bit ECC may work by way of these wallets at leisure.
Bitcoin builders have proposed migration paths together with BIP-360, a Bitcoin Enchancment Proposal that may add quantum-safe handle sorts. Ethereum, Tron, StarkWare, and Ripple have every printed post-quantum transition plans.
Fifteen bits will not be 256 bits, however is the newest in a quickly heating up focal point for bitcoin builders and the broader group.