G7 warns crypto sector to accelerate post-quantum migration timeline
The G7 Cyber Expert Group warns the crypto sector needs immediate action on post-quantum cryptography migration due to the risk quantum computers pose to current encryption. Their joint advisory, “Preparing for the Post-Quantum Era: A Call to Action,” released on September 3, 2026, highlights the profound risk quantum computers pose to current encryption standards. The G7 warns crypto sector participants to prioritize this transition.
This urgent directive stresses that quantum computing presents both security and economic threats, demanding readiness before cryptographically viable machines emerge. The move underscores growing international concern over the potential for advanced quantum technology to undermine the very foundations of digital security, including the public-key cryptography underpinning blockchain transactions.
G7 warns crypto sector on immediate quantum readiness
The G7’s recent report, while not explicitly naming “crypto,” sends a clear message to the blockchain industry, which heavily relies on public-key cryptography for managing transactions and securing funds. The concern isn’t merely about future attacks; it also addresses the “harvest now, decrypt later” threat, where adversaries collect encrypted data today for decryption once quantum capabilities advance.
This strategy targets sensitive information, including blockchain transaction histories and public keys, which remain permanently visible and could be vulnerable to future quantum attacks. The G7 emphasized that organizations must prepare for an inevitable cryptographic shift. Key agencies from member nations, including the U.S.
Cybersecurity and Infrastructure Security Agency (CISA) and France’s Agence Nationale de la Sécurité des Systèmes d’Information (ANSSI), were involved in crafting this coordinated approach. This call to action mirrors broader international efforts to bolster digital security, including initiatives addressing crypto scam centers and fraud.
The G7 recommends several immediate steps, including raising awareness, developing national policies, fostering research, collaborating between public and private sectors, and integrating post-quantum requirements into procurement processes. These actions aim to establish a shared framework and timeline for transitioning to encryption that can withstand the power of future quantum computers.
The G7 Cyber Expert Group had previously released an initial statement in September 2024, highlighting quantum computing’s benefits and risks. They followed this with a coordinated roadmap for the financial sector’s transition to post-quantum cryptography in January 2026.
Key Post-Quantum Cryptography Milestones
Europe Sets Concrete PQC Deadlines
Europe has already moved beyond recommendations, implementing explicit deadlines for the transition to post-quantum cryptography (PQC). The European Union unveiled its “Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography” in June 2025.
This comprehensive PQC policy from the European Commission mandates that all member states initiate their transition by the close of 2026. Furthermore, high-risk systems are required to migrate immediately, with a hard deadline set before 2030.
The implications extend beyond technical upgrades, impacting regulatory compliance and competitive standing. Companies failing to adopt appropriate migration strategies may find themselves at a disadvantage as PQC technology becomes embedded in procurement standards and cybersecurity legislation.
This proactive stance by the EU signals a broader shift where quantum readiness is no longer an optional upgrade but a fundamental requirement for operating securely. Such measures provide a glimpse into the future global regulatory landscape for digital assets and data protection, setting a precedent for other regions.
Major Cryptocurrencies Chart Migration Paths
While the G7 issues broad calls, major cryptocurrencies like Bitcoin and Ethereum are already exploring distinct approaches to quantum resistance. Their efforts highlight the complexity and varied strategies required to safeguard digital assets.
This exploration by leading blockchain networks underscores the urgent need for proactive measures, even as the exact timeline for cryptographically relevant quantum computers remains uncertain. Their differing strategies reflect the diverse architectural designs and governance models within the crypto ecosystem, each presenting unique challenges for implementing quantum-resistant solutions.
The technical hurdles are substantial, involving not just algorithmic upgrades but also consensus mechanism changes, protocol modifications, and significant network coordination. These migrations demand careful consideration of backward compatibility, transaction efficiency, and potential hard forks, which can introduce their own set of risks and complexities for users and developers alike.
Bitcoin’s BIP-360 Proposal
Bitcoin is investigating BIP-360, known as Pay-to-Merkle-Root, as a proposed soft-fork to mitigate quantum computer vulnerabilities. This proposal specifically targets the abolition of the Taproot key-path spend, which is considered susceptible to quantum processing.
However, creators of BIP-360 acknowledge that faster attacks on mempool transactions would still necessitate the implementation of post-quantum digital signatures. As of now, BIP-360 lacks an official activation date, indicating the ongoing deliberation within the Bitcoin community.
Ethereum’s Broader Security Framework
Ethereum, on the other hand, is developing a more comprehensive post-quantum security framework, as detailed in Vitalik Buterin’s February 2026 roadmap. This ambitious plan outlines upgrades across four critical components: BLS signatures for validators, KZG commitments, ECDSA account signatures, and the application layer’s zero-knowledge proofs.
Ethereum aims to establish its core post-quantum infrastructure by 2029, though the full migration process for existing systems could extend beyond that timeframe. Such extensive changes underscore the significant architectural shifts needed for true quantum resistance.
The cost and practical implications of these upgrades are substantial. For instance, a compact secp256k1 ECDSA signature measures about 64 bytes. In contrast, the older Dilithium-5 parameter set required approximately 4,595 bytes, while the ML-DSA-87 standard finalized by NIST uses about 4,627 bytes.
This significant increase in signature size could dramatically elevate storage, bandwidth, and transaction costs for blockchain networks. You can read more about Bitcoin price surges and market dynamics.
The Broader Risks Beyond a Quantum Break
The immediate threat to the crypto market isn’t just a quantum computer breaking Bitcoin; it extends to broader systemic vulnerabilities that could arise even before a direct quantum attack. This includes the potential for social engineering exploiting fear, market instability due to uncertainty, and the weaponization of pre-quantum data harvesting.
Beyond the direct cryptographic threat, the mere anticipation of quantum capabilities can create significant market disruption. Investors might lose confidence in digital assets if there’s a perception that their underlying security is compromised, leading to volatility and potential capital flight. The G7’s warnings aim to pre-empt such scenarios by fostering orderly transitions.
The need for industry-wide coordination and investment also affects the crypto political spending landscape.
Furthermore, the lack of standardized, globally accepted post-quantum solutions could fragment the digital asset landscape, hindering interoperability and cross-border transactions. This regulatory and technical divergence could create new vectors for exploitation, as bad actors might target less prepared networks or jurisdictions, impacting the entire financial ecosystem beyond just cryptocurrencies.
Frequently Asked Questions
- Q: What is the main concern raised by the G7 regarding quantum computing?
- A: The G7 is concerned that quantum computers will soon be powerful enough to break current public-key encryption standards, which are fundamental to digital security, including blockchain transactions. This could lead to widespread security and economic threats.
- Q: What is the “harvest now, decrypt later” threat?
- A: This threat refers to adversaries collecting currently encrypted data (like blockchain transaction histories and public keys) today, with the intention of decrypting it later once quantum computing capabilities advance sufficiently to break the encryption.
- Q: How are major cryptocurrencies like Bitcoin and Ethereum addressing this threat?
- A: Bitcoin is exploring a soft-fork proposal called BIP-360 (Pay-to-Merkle-Root) to mitigate certain vulnerabilities. Ethereum is developing a more comprehensive post-quantum security framework, planning upgrades across multiple components with a target for core infrastructure by 2029.
- Q: What are the challenges associated with migrating to post-quantum cryptography for cryptocurrencies?
- A: Challenges include significant increases in signature sizes (impacting storage, bandwidth, and transaction costs), the complexity of upgrading core protocols, ensuring backward compatibility, achieving network consensus for changes, and managing potential hard forks.
- Q: What actions is the European Union taking regarding post-quantum cryptography?
- A: The EU has implemented explicit deadlines, mandating all member states to begin their transition by the end of 2026, with high-risk systems required to migrate immediately and a hard deadline before 2030.