Community Trust ScoreVerified
European regulators didn’t mince words. The European Supervisory Authorities came out swinging on quantum computing risks, warning that the threat to existing cryptographic systems could arrive well before quantum machines ever hit the commercial market.
The ESAs flagged something called “harvest now, decrypt later” — basically, attackers intercept encrypted data today and sit on it, waiting for quantum hardware powerful enough to crack it open. That’s not a hypothetical. It’s already happening at some level, and regulators think financial entities and blockchain networks are dangerously underprepared. The EU responded with the Digital Operational Resilience Act, or DORA, which requires financial firms to adopt advanced cryptography now, not later. On top of that, the EU NIS Cooperation Group pushed member states to get a post-quantum cryptography strategy locked in by end of 2026. That’s a tight window for an industry that moves slowly on foundational security changes.
Not a distant problem.
Leo Fan, founder of Cysic, didn’t sugarcoat it. He said deploying quantum-resistant secure schemes across blockchain networks takes a long time — we’re talking a complex, multi-year process. Signature upgrades are necessary, he stressed, and migrating entire networks is basically re-engineering the foundation while the building is still occupied. Bitcoin, Ethereum, and Solana are the names regulators and developers keep coming back to. All three rely on exposed public keys, and all three face what Fan called “challenging upgrade paths.” That’s probably an understatement. Getting consensus across thousands of node operators, developers, and stakeholders to overhaul core cryptographic primitives isn’t fast. It’s not even close to fast.
AI Makes the Problem Worse
Quantum computing gets the headlines, but the ESAs also flagged artificial intelligence as a compounding threat. AI can help cybercriminals find and exploit system vulnerabilities faster than any human team can respond. Way faster. Fan’s take was that Web3 systems can’t just rely on traditional incident response dashboards anymore — those are basically off-chain alert systems that tell you something bad happened after the fact. By then, funds can be drained in a single transaction.
His fix? Go onchain with the defenses. Fan recommended automated transaction limits and circuit breakers built directly into protocols. Set cumulative spending caps. Set protocol-wide outflow limits. Make the system reject transactions automatically when those limits get hit. It’s a different philosophy — instead of monitoring and reacting, you’re building constraints into the protocol itself so there’s nothing to react to after the damage is done.
He also pushed for hardware-backed keys and independent multi-signature signers to cut off unauthorized transactions before they clear. The logic is pretty straightforward: if you’re depending on an off-chain alert to catch an exploit, you’re already too late.
Tim Draper Weighs In
Venture capitalist Tim Draper offered a different angle. He compared Bitcoin’s security to Fort Knox, arguing that Bitcoin might actually face less risk from quantum computing than traditional banks do. His point was essentially that decentralized systems have a kind of structural resilience that centralized banking infrastructure doesn’t. It’s an interesting argument, and Draper’s not wrong that legacy banking systems carry their own enormous cryptographic debt. But it doesn’t really let blockchain networks off the hook — exposed public keys are exposed public keys, regardless of how decentralized the network is.
The debate around quantum timelines is genuinely unsettled. Experts can’t agree on exactly when quantum computers will be powerful enough to crack standard blockchain encryption. Some say decades. Some say sooner. The ESAs’ position seems to be: don’t wait to find out.
What Needs to Happen Now
The regulatory pressure is building fast. DORA is already law. The NIS Cooperation Group’s 2026 deadline for member states isn’t a suggestion. Financial entities operating in Europe need to be upgrading key exchange mechanisms and key wrapping processes using vetted post-quantum schemes — not planning to, actually doing it. Long-term data security is the specific concern here. Sensitive information captured today could be decrypted tomorrow if quantum hardware catches up faster than anyone expects.
For blockchain networks, the challenge is harder. It’s not just about updating software. It’s about coordinating across massive, decentralized stakeholder bases where no single party controls the upgrade path. Bitcoin’s governance is notoriously slow. Ethereum’s is faster but still complex. Solana moves quicker, but quantum-resistant cryptography isn’t a routine protocol upgrade — it touches everything.
Fan’s multi-year estimate is probably optimistic for the biggest networks. Realistically, getting Bitcoin to a post-quantum signature scheme requires years of research, proposal, debate, testing, and eventual activation. And that’s assuming the community agrees, which is never guaranteed.
The ESAs want financial entities proactive, not reactive. That means starting now on cryptographic framework upgrades, building onchain defenses against AI-driven exploits, and not waiting for a quantum breakthrough to force the issue. The clock on “harvest now, decrypt later” attacks is already running — the data being intercepted today won’t stay encrypted forever.
Fan’s recommended circuit breakers and spending caps are already technically feasible on most major chains.
Hub: Bitcoin price, news, and analysis
Frequently Asked Questions
What is the “harvest now, decrypt later” threat the ESAs warned about?
It’s a practice where attackers intercept and store encrypted data today, planning to decrypt it later once quantum computers become powerful enough to break current cryptographic protections.
Which blockchain networks did regulators and experts flag as most vulnerable?
Bitcoin, Ethereum, and Solana were specifically named as particularly vulnerable due to their reliance on exposed public keys and challenging upgrade paths, per Leo Fan of Cysic.
Why It Matters
The warning from European regulators underscores the urgency for blockchain networks like Bitcoin, Ethereum, and Solana to enhance their cryptographic defenses in light of advancing quantum computing technologies. As the potential for quantum attacks looms, the ability to ensure long-term security for digital assets becomes crucial, impacting investor confidence and the broader adoption of cryptocurrencies. This situation may accelerate the timeline for necessary upgrades and innovations in cryptographic protocols across the crypto space.
