By n00ts | Paragraph XYZ | 002

Let me open with something that will make every Bitcoin maximalist uncomfortable.

The math protecting your crypto wallet — the thing standing between your private keys and everyone who wants to steal them — was designed in a world where certain mathematical problems were considered practically unsolvable.

Not theoretically unsolvable. Practically unsolvable.

Meaning: yes, in theory someone could crack it. But it would take a classical computer millions of years to do so. So for all practical purposes? It's safe.

That assumption is aging poorly.

Because quantum computers don't solve problems the way classical computers do. They don't try one answer at a time. They exist in a state where they're essentially trying every possible answer simultaneously — and the math that protects your Bitcoin wallet crumbles under that kind of assault in hours. Maybe minutes.

This isn't a "maybe someday" problem anymore.

Google dropped a chip in late 2024 that made the entire cryptography community sit up very straight in their chairs.

And crypto — the industry that is literally built on cryptography — is mostly hitting snooze.

Let's talk about why that's a problem. And more importantly — what's actually being done about it, and where the alpha is hiding in the chaos.

Okay. I'm going to explain this without a single equation. I promise.

Classical computers — every laptop, every phone, every server farm running your favorite DeFi protocol — speak in bits. A bit is either 0 or 1. On or off. Yes or no.

Every computation a classical computer runs is a sequence of these binary decisions. Incredibly fast — billions per second — but fundamentally sequential. One answer at a time.

A quantum computer speaks in qubits.

And here's where it gets weird.

A qubit — thanks to a quantum mechanical property called superposition — can be 0 AND 1 at the same time. Until you look at it (measure it), it exists in both states simultaneously.

Here's the analogy I like:

Imagine you're looking for a specific book in a massive library. A classical computer checks one shelf at a time — fast, but linear. A quantum computer somehow checks every shelf in the entire library simultaneously — and then tells you exactly where the book is.

That's a brutally oversimplified version, but the direction is right.

For most problems, this doesn't matter that much. Quantum computers aren't universally faster — they're specifically faster at certain types of problems.

And one of those problems?

Is the exact mathematical problem that secures every crypto wallet on earth.

Your Bitcoin wallet. Your Ethereum wallet. Every private key in every hardware wallet locked in every safety deposit box.

They're all protected by something called Elliptic Curve Digital Signature Algorithm — ECDSA. Which is based on a beautiful piece of mathematics called the Elliptic Curve Discrete Logarithm Problem.

Here's the simplified version:

Multiplying two massive numbers together? Easy. Fast. Trivial.

Starting with the result and working backwards to find the original numbers? Computationally brutal. For a classical computer, the time required scales so catastrophically that it becomes effectively impossible.

Your private key is generated from your public key using this one-way mathematical relationship.

Everyone can see your public key. That's fine — because working backwards from public key to private key would take a classical computer longer than the age of the universe.

Now enter Shor's Algorithm.

Peter Shor — a mathematician at MIT — published this algorithm in 1994. And it does something alarming:

It solves the discrete logarithm problem efficiently on a quantum computer.

Not "a bit faster." Exponentially faster.

The same problem that would take a classical computer millions of years?

A sufficiently powerful quantum computer running Shor's Algorithm solves it in hours.

Which means: given your public key (which is visible on the blockchain for every address that has ever made a transaction), a quantum computer could derive your private key.

And then it owns your wallet.

Everything in it. Gone.

In December 2024, Google announced their Willow quantum chip.

The headline number that went viral: Willow solved a specific computation in under five minutes that would take the fastest classical supercomputer 10 septillion years.

10 septillion. That's a 10 with 25 zeros after it.

The crypto community had two reactions:

Reaction A (panic): "OH NO BITCOIN IS DEAD"

Reaction B (dismissal): "Relax, this benchmark is meaningless for crypto. We're fine."

Both reactions were wrong. As usual.

Here's the nuanced truth:

The benchmark Google used — random circuit sampling — is not the same as running Shor's Algorithm. Willow isn't cracking Bitcoin wallets today. Not even close.

To break Bitcoin's 256-bit elliptic curve cryptography with Shor's Algorithm, you'd need approximately 4,000 high-quality, error-corrected logical qubits.

Willow has 105 physical qubits. And physical qubits are noisy, error-prone, and very different from the clean logical qubits needed for Shor's.

Current estimates to reach "cryptographically relevant" quantum computing — meaning a machine that can actually threaten real cryptographic systems — range from 2030 to 2035. Some serious researchers say 2027 in worst-case scenarios. Some say 2040.

The uncertainty itself is the problem.

Because here's the uncomfortable reality of cryptographic upgrades:

They don't happen fast.

Let me paint you a picture.

It's 2030. A well-funded nation-state (let's not name names, but you can probably guess a few candidates) quietly achieves cryptographically relevant quantum computing.

They don't announce it. Why would they?

They start quietly collecting encrypted data that's been sitting on blockchains — public keys, transaction histories, wallet addresses that have ever made an outbound transaction (and thus revealed their public key).

They work backwards. They derive private keys. They drain wallets.

Not all at once. Quietly. Strategically.

By the time the broader crypto community confirms the threat is real — by the time the emergency proposals get written, debated, and voted on — by the time the actual upgrade ships, gets tested, and gets adopted —

How much time has passed?

This is not hypothetical doom-mongering. This is exactly how cryptographic transitions work historically. The internet's transition to stronger encryption standards after vulnerabilities were discovered took years of painful, incomplete migration.

And the internet is centrally coordinated compared to Bitcoin.

Bitcoin changes at the speed of rough consensus among thousands of nodes run by people who fundamentally distrust each other and any proposed changes.

That's beautiful in normal times. It's terrifying in an emergency.

Here's some genuinely good news.

The National Institute of Standards and Technology — NIST, the US government body that essentially sets global cryptographic standards — spent eight years running a competition to find post-quantum cryptographic algorithms.

Algorithms that quantum computers cannot break efficiently. Even with Shor's. Even with every trick in the quantum playbook.

In August 2024, NIST finalized three primary post-quantum cryptographic standards:

• CRYSTALS-Kyber (now called ML-KEM) — for key encapsulation

• CRYSTALS-Dilithium (now called ML-DSA) — for digital signatures

• SPHINCS+ (now called SLH-DSA) — for digital signatures (hash-based)

These are not experimental. These are official, vetted, ready-to-implement standards.

The blueprint exists. The math is sound. The tools are available.

Now the question is: who in crypto is actually building the house?

Let's go through the landscape honestly.

The most serious pure-play post-quantum blockchain

QRL has been building post-quantum resistant blockchain infrastructure since 2016 — before most people were taking the quantum threat seriously.

Their entire cryptographic foundation uses XMSS (eXtended Merkle Signature Scheme) — a hash-based signature scheme that is quantum resistant. It's actually one of the signature types that influenced NIST's evaluation process.

This isn't a project that slapped "quantum resistant" on a whitepaper for marketing. These are actual cryptographers doing actual work on an actual live network.

The QRL project also has a proof-of-stake upgrade (Zond) in development that brings smart contract capability — meaning quantum-resistant DeFi becomes possible.

The honest take: QRL is a serious, legitimate, technically rigorous project that has been chronically ignored because building real quantum resistance is slow, boring, and doesn't generate the same hype as a new L2 or a memecoin supercycle.

That's exactly why it's interesting from an asymmetric bet perspective.

Vitalik and the Ethereum research team are not sleeping on this.

Ethereum's long-term roadmap — specifically the part called "The Splurge" — explicitly includes post-quantum cryptographic upgrades. Vitalik has written about transitioning Ethereum accounts to use Winternitz signatures and other quantum-resistant schemes.

There's even a proposal (EIP-7585) exploring post-quantum address formats.

The good news: Ethereum is aware, researching, and has a pathway.

The realistic concern: Ethereum's upgrade process is complex. Coordinating the transition of hundreds of millions of wallets and thousands of deployed smart contracts to new cryptographic standards is an enormous engineering and coordination challenge.

The even more realistic concern: most existing ETH addresses have made transactions — meaning their public keys are already on-chain. Migration to quantum-resistant addresses requires user action. And if crypto history has taught us anything, getting users to proactively do anything for security is like herding cats.

Let's be honest. Bitcoin's quantum resistance situation is the most concerning — not because the developers don't understand the threat, but because Bitcoin's governance makes rapid response nearly impossible by design.

A soft-fork or hard-fork to implement post-quantum signatures requires:

• Rough consensus among core developers

• Node operator adoption

• Miner coordination

• User wallet migration

And Bitcoin's community is famously, philosophically resistant to changes that aren't absolutely necessary.

There are proposals on the table. P2QRH (Pay to Quantum Resistant Hash) is a serious proposal being discussed in Bitcoin developer circles that would introduce quantum-resistant address types.

But "being discussed" is very different from "implemented and widely adopted."

The clock is ticking. The discussion is moving slowly. That gap is the risk.

Beyond QRL, there are several newer blockchain projects building with post-quantum cryptography from the ground up:

Algorand — already using quantum-resistant signature schemes in research implementations. Algorand's academic foundation (it was created by Turing Award winner Silvio Micali) means post-quantum thinking is baked in at the research level.

IOTA — has been exploring post-quantum signatures for years, particularly relevant because IOTA targets IoT and machine-to-machine transactions (connecting back to our Week 01 AI agent economy thesis, interestingly).

Cellframe Network — an almost completely unknown project building a post-quantum resistant blockchain and VPN infrastructure. Tiny market cap. Very early. Very high risk. Genuinely interesting technology.

Here's the part of this conversation that usually gets left out.

The quantum threat to crypto isn't primarily about criminal hackers building quantum computers in their basements.

The real threat vector is nation-states.

The US, China, EU, Russia, and several other governments have invested billions of dollars into quantum computing research. Not billions as a figure of speech. Billions with a B, with receipts and budget line items.

China's quantum research budget alone is estimated at $15+ billion through various national programs. The US National Quantum Initiative has committed billions across DARPA, NSF, and DOE funding.

These governments are not building quantum computers to help you with your optimization problems.

They're building them for:

• Breaking encryption used by adversaries

• Protecting their own communications with quantum-resistant cryptography

• Economic and military strategic advantage

In this context, the crypto question becomes even more uncomfortable:

What happens to "censorship-resistant, seizure-resistant" Bitcoin if a sufficiently advanced government can derive private keys?

The entire value proposition of self-sovereign digital assets starts to wobble.

This is not a reason to panic out of crypto. It's a reason to take the post-quantum upgrade timeline very seriously as an existential priority — not a technical footnote.

Okay. Let's get practical.

QRL is the clearest post-quantum narrative play that actually has:

• Real technology (not marketing)

• Running mainnet (not a whitepaper)

• Years of development track record

• A small but genuine technical community

From a pure portfolio theory perspective — if you believe the quantum threat is real and the timeline is uncertain — a small position in the most technically serious post-quantum blockchain is a legitimate asymmetric hedge.

It doesn't need to be large. The thesis is: if quantum threat becomes mainstream narrative, QRL re-rates significantly from its current obscure position.

Risk: Small community, low liquidity, slow development pace, might get overshadowed by Ethereum's own post-quantum implementation.

Honest sizing suggestion: This is a small, speculative, long-term position. Treat it like insurance. Not a core holding.

The quantum computing race isn't just happening in crypto. It's happening in public equity markets — and some of these plays are more liquid, more regulated, and more accessible for people who want quantum exposure without pure crypto risk.

IonQ (IONQ) — Pure-play quantum computing company. Has actual quantum hardware. Revenue is real but small. Extremely volatile. Long-term thesis requires quantum computing becoming commercially useful faster than critics expect.

D-Wave Quantum (QBTS) — Different approach (quantum annealing vs gate-based quantum). Already has commercial customers. More near-term revenue potential. Different risk profile.

IBM Quantum — You can't buy IBM purely for quantum, but their quantum roadmap (they've committed to specific qubit milestones through 2033) is the most detailed and publicly accountable in the industry.

Quantinuum — Private (majority owned by Honeywell). Widely considered to have the highest quality qubits in the industry. Watch for IPO signals.

The ETF option: QTUM ETF — tracks quantum computing and machine learning companies. Broadest exposure, least concentrated risk, most boring presentation of the thesis. Sometimes boring is right.

Here's a concept most crypto users have never heard of: HNDL — Harvest Now, Decrypt Later.

This is an actual documented strategy where sophisticated adversaries collect encrypted data today — even though they can't decrypt it — with the intention of decrypting it when quantum computers become powerful enough.

For most encrypted communications, this matters but isn't catastrophic. Old emails, old messages — who cares eventually.

For blockchain data? It's different.

Every transaction ever made. Every public key ever used. Every wallet that has ever sent a transaction (revealing its public key) is sitting permanently on the blockchain, immutable, waiting.

The public key data needed to run Shor's Algorithm against Bitcoin wallets already exists. It's been collected. It's public. It's not going anywhere.

What this means practically:

Any wallet address that has never made an outbound transaction has not revealed its public key on-chain. Only the hash of the public key is visible. This is meaningfully more quantum resistant — because Shor's Algorithm needs the actual public key as input.

This means: new wallets, used only for receiving, with keys generated from hardware wallets using proper randomness, that have never sent transactions are materially safer in a quantum threat scenario.

Most people don't think about this.

Most people reuse addresses, post public keys everywhere, and have complete transaction histories that quantum adversaries could use.

The zero-cost alpha: Understand your own on-chain footprint. Consider how you manage wallet hygiene if the quantum timeline accelerates unexpectedly.

2025 → Post-quantum narrative heats up in crypto
       More mainstream coverage of quantum milestones
       QRL and similar projects get discovered
       by a wider audience

2026 → Ethereum publishes concrete post-quantum
       upgrade roadmap
       Bitcoin post-quantum proposals get more
       serious developer attention
       First major institution announces
       post-quantum crypto audit

2027-2028 → Possible "quantum scare" event —
            a milestone announcement that triggers
            mainstream panic regardless of actual
            threat timeline
            This is when post-quantum tokens 
            likely see explosive price action

2029-2031 → Real cryptographically relevant
            quantum computing becomes plausible
            Emergency upgrade pressure on major
            chains intensifies
            The prepared benefit enormously
            The unprepared scramble

The 2027-2028 "quantum scare" window is the most interesting near-term narrative play — independent of whether quantum computers are actually threatening crypto yet. Markets move on narrative. Narrative moves on headlines. And quantum headlines are getting louder every quarter.

I've given you the thesis. I've given you the alpha. Now let me give you the honest worry.

The thing that concerns me most isn't quantum computers breaking Bitcoin.

It's the gap between when experts know it's urgent and when the market acts like it's urgent.

Cryptographers already know post-quantum migration needs to start now. NIST already published the standards. The technical community is already working on proposals.

But the average crypto user? The average protocol? The average exchange?

They're thinking about the next altcoin season.

History is absolutely littered with examples of known, documented, well-understood risks that were ignored until the emergency was acute — and then managed with expensive, chaotic, incomplete patches.

Y2K was handled (barely, expensively, at the last minute). The internet's SSL vulnerabilities took years to patch after Heartbleed. Log4Shell existed for years before anyone noticed.

Crypto, for all its technical sophistication, has the same human problem: urgency is perceived based on how close the danger feels, not how real it is.

The danger is real.

And right now, it doesn't feel close enough.

That gap — between "real" and "feels close" — is where both the risk and the opportunity live.

Your crypto wallet's security rests on math that quantum computers will eventually break.

The timeline is uncertain — somewhere between 5 and 15 years. Maybe faster in a world where AI accelerates quantum research (and yes, that's a real consideration we'll come back to in Week 05).

The standards to fix this already exist. NIST published them in 2024.

Some projects are building seriously toward post-quantum resistance. Most are not moving fast enough.

The people who understand this — who position themselves in the projects doing the real work, who manage their own wallet security intelligently, who watch the quantum milestone timeline carefully — have a meaningful information advantage over the market.

This isn't doom. It's an upgrade story.

Every major cryptographic transition in internet history has been disruptive, messy, and ultimately necessary. The internet survived. It got stronger.

Crypto will too. But not automatically. And not without serious work.

The clock is running.

Now you know what time it is.

Next week — Week 03 — we go into the quiet giant that almost nobody is talking about at the volume it deserves:

"DePIN is The Quiet Giant. And Most People Slept on It."

How decentralized physical infrastructure is turning real world assets into yield machines — and why AI makes the thesis dramatically stronger.

Follow n00ts on Paragraph. You don't want to miss this one.

n00ts 🤙

Not financial advice. Not doom-mongering. Just research that most people haven't done yet — served honestly.

n00ts is an independent writer and researcher covering the collision of Crypto, AI, and Quantum Computing. Follow on Paragraph XYZ for weekly deep dives.