Europol warns that upgrading crypto wallets and protocols for quantum resistance could take years and calls for immediate industry action to protect user funds before quantum computers become a real threat
Developers and wallet providers face a race against time. Europol has put the crypto industry on notice: quantum computers may not be here yet, but the scramble to defend digital assets must start now. The agency wants blockchain engineers, wallet makers, and users to brace for a drawn-out overhaul of the cryptography that shields wallets and transactions. Waiting for quantum machines to arrive, Europol says, could leave millions of wallets wide open.
Europol's European Cybercrime Centre (EC3) singles out cryptographic keys as the main weak spot. Private keys unlock funds, while public keys let others verify transactions. If quantum computers reach enough power, attackers could reverse-engineer private keys from public ones. That would let them forge signatures and empty wallets without owners' approval. Hash functions, which help keep blockchains intact, hold up better against quantum attacks but still carry some risk. Europol draws a line between the threat to asset control and the broader blockchain backbone.
On August 13, 2024, NIST approved the first three federal post-quantum cryptography standards, urging organizations to begin migration now.
The agency's report sketches out a phased migration. Blockchain projects need to weave post-quantum algorithms into their protocols. Wallet providers should start testing and rolling out compatible wallets. Users will eventually have to move funds to new wallets as they come online. Europol warns that shifting coins to a new address does nothing if the signature scheme itself can't withstand quantum attacks. Some wallets may need hardware upgrades. For assets stored as unspent transaction outputs (UTXOs), migration means on-chain transactions, which adds another layer of difficulty.
Coordinating upgrades across millions of wallets and nodes is a logistical headache. Europol urges clear messaging about risks, timelines, and migration steps to keep confusion and panic at bay. The agency wants better address and key management during the switch. Developers, providers, and users will need to reach consensus, since the process could drag on for years and must prioritize the most exposed holdings first.
Quantum computers that can break today's cryptography are still on the horizon. Europol admits no one knows when they'll arrive. But the agency insists the scale of the coming migration-millions of wallets and nodes-means the groundwork must start now. The immediate job: test quantum-resistant upgrades, coordinate rollouts, and brief users on what's coming. A slow or piecemeal response could leave big chunks of the ecosystem exposed if quantum machines become reality. This risk mirrors scenarios like those described in recent regulatory reports, where technical and governance delays have locked up or endangered user assets.
NIST's transition roadmap proposes phasing out quantum-vulnerable algorithms like RSA and elliptic curve cryptography after 2030, with a full ban after 2035. For crypto, this means wallet and protocol upgrades must be planned years in advance to avoid disruption.
Europol's report skips predictions about when quantum computers will pose a real threat. But the agency makes one thing clear: the window for proactive defense is shrinking, limited by the time it takes to coordinate and upgrade systems worldwide. The message lands hard-crypto cannot afford to wait for a crisis before moving.
Networks and wallets rely on cryptographic algorithms that still hold up against classical computers. Bitcoin and Ethereum use ECDSA, which quantum computers could, in theory, crack much faster than current hardware. Post-quantum cryptography aims to swap these out for alternatives that can stand up to quantum attacks. These new algorithms often need bigger signatures and more computing power, which can slow networks and complicate wallet compatibility. The shift to quantum-resistant systems will demand technical upgrades and broad buy-in across decentralized communities. Early planning and open communication are the only way to keep the migration on track.
