"The biggest risk isn't quantum arriving early. It's crypto starting late." No quantum computer is breaking Bitcoin today. But recent research from Google has made the question harder to ignore. Ledger CTO Charles Guillemet and Head of Brand Development Mo break it down, without the doom.

@P3b7_ @Mo_RELS $QRL @QRLedger The Quantum Resistant Ledger is already ready and preparing for their 2.0 era, currently in audit with @trailofbits and @HalbornSecurity :

@P3b7_ @Mo_RELS It's great Ledger has support for Quantum Resistant Ledger $QRL. Hash based XMSS running since 2018. First movers will have the advantage (I think that qualifies as early).

Migration is the slower half of this. Ethereum's own PQ team is targeting L1 protocol upgrades by 2029, and that's with active tooling and a dedicated team. Google's paper just compressed the qubit estimate to under 500k physical qubits, yet the timeline for a live network to move billions in exposed keys to new signatures remains uncertain. Starting late means the two timelines cross before migration finishes, before quantum arrives

@P3b7_ @Mo_RELS All roads lead to ALGORAND $ALGO. The undisputed LEADER in Post Quantum Cryptography (PQC). 🔐

@P3b7_ @Mo_RELS You understand that the Google research has zero basis in physics, it's only math right? The math is known since ages, the bottleneck is physics. They can improve the math all day, but totally meaningless when it's time to apply to real world physics.

@P3b7_ @Mo_RELS waiting for proof is how you end up rushing

@P3b7_ @Mo_RELS no panic , just prepare early before it’s too late 🤌🏼

@P3b7_ @Mo_RELS The timing matters. Crypto has a long runway to prepare, but waiting until quantum becomes an immediate threat would be a mistake

@P3b7_ @Mo_RELS Who was this key supposed to become, while the current key could still speak for itself? Have you thought about a succession record which can fill that gap? Before old signatures can be forged, the current key publishes a public binding. @Ledger @P3b7_ @Mo_RELS

@P3b7_ @Mo_RELS Algorand >

@P3b7_ @Mo_RELS prepare early, panic never 🔐

@P3b7_ @Mo_RELS i think the real risk is treating quantum resistance as an emergency project instead of a long-term migration problem. crypto infrastructure moves slowly when billions in value and countless wallets are involved, so preparation has to start before the threat is immediate.

@P3b7_ @Mo_RELS Google那篇论文里说量子攻击要百万级比特才算数，现在瓶颈根本不是算力而是纠错，加密迁移真不用慌，但标准制定慢才是真隐患，你觉得呢

@P3b7_ @Mo_RELS Quantum is less a physics problem than a migration problem. Every chain eventually has to rotate its cryptography without freezing user assets or breaking old keys. The chains treating upgradability as a feature, not a compromise, are the ones actually preparing for it.

@P3b7_ @Mo_RELS You don’t want to wait for quantum computers to become a problem before taking them seriously

@P3b7_ @Mo_RELS Theory is useful, but implementation is the real test.

@P3b7_ @Mo_RELS

@P3b7_ @Mo_RELS the discussion on quantum timing is useful, but the real question is how the transition to post-quantum cryptography will be coordinated across the network.

@P3b7_ @Mo_RELS agent auto is more scary

While Google's research compressing the timeline for breaking ECDSA has served as a wake-up call, upgrading decentralized networks like Bitcoin is fundamentally a social and political challenge rather than a purely technical one. Without a central authority to mandate upgrades, the friction of achieving consensus on new post-quantum signature schemes and handling dormant coins means that dragging our feet could trigger a crisis of confidence well ahead of any physical attack.

@P3b7_ @Mo_RELS The biggest risk is third party intermediaries secretly having back door code privately built in to hardware devices should issue a government subpoena them.

@P3b7_ @Mo_RELS I think @QANplatform might be onto something huge regarding quantum resistant chains. It's one of the first to start preparing and its building from ground up to be quantum resistant, worth looking into.

@P3b7_ @Mo_RELS Quantum Resistant

What strikes me here is how much the estimates themselves keep moving. The median expert guess for a cryptographically relevant machine shifted from around 2037 to 2034 in three years alone, and that's before Google's own paper cut the qubit requirement by 20x from 2019 numbers. Every time the math gets revisited it comes back sooner, never later. Anyone building on ECDSA today is essentially betting that trend reverses

@P3b7_ @Mo_RELS Agreed The timeline for a real cryptographically relevant quantum computer is still uncertain, but the coordination cost of upgrading decentralized systems is not

@P3b7_ @Mo_RELS patching secp256k1 before the matrix wakes up is the real sidequest

@P3b7_ @Mo_RELS the hard part isn’t predicting when quantum arrives it’s making sure the ecosystem can migrate before that estimate becomes a deadline

The useful quantum discussion is operational, not apocalyptic: inventory exposed public keys, define migration paths, design signing UX, test coordination and communicate triggers. No current break does not mean no preparation; early planning preserves options without creating panic.

@P3b7_ @Mo_RELS The future is Quantum We should secure our custody from the quantum threats

@P3b7_ @Mo_RELS It’s the same thing and crypto is already late

@P3b7_ @Mo_RELS No need for the panic, but definitely worth preparing early. Quantum security isn’t something you want to wait for.

@P3b7_ @Mo_RELS Hey @Tangem are you working on a quantum protection ?? Im a huge fan of you guys @tangem 🙏🏻💪🏻

@P3b7_ @Mo_RELS starting late on quantum is the real risk

@P3b7_ @Mo_RELS worth understanding before it turns into another crypto panic cycle