9 Crypto Firms Form Quantum Alliance Over 6M Exposed BTC

Nine crypto companies launched the Quantum Alliance on October 15, 2026, an industry group that will write open technical standards for proving a blockchain is actually resistant to quantum computer attacks. The group says roughly 6 million bitcoin, nearly a third of the cryptocurrency's circulating supply, already sit in wallet addresses with publicly exposed cryptographic keys that a sufficiently powerful quantum computer could one day exploit.

What the Quantum Alliance actually is

CEOs, CTOs and founders from nine blockchain organizations launched the Quantum Alliance, an open standards body that will set the criteria for judging quantum-resistance claims in blockchain and create standards for compatibility between the networks as they migrate. The founding nine are Quantus, American Fortress, Intmax, Keystone, Midnight Foundation, Postquant Labs, Abelian, The Vault, and Hacken. Quantus founder and CEO Christopher Smith is the group's public face.

Its initial work will focus on four areas: blockchain migration, post-quantum zero-knowledge systems, wallet security and cross-chain compatibility. The group argues the industry needs this because, right now, a network can call itself "quantum-resistant" today with no shared understanding of which parts of its system the claim covers or what evidence should support it. As one illustration of the gap it's trying to close, the migration.fail assessment, a scorecard that counts only cryptography already live, gives Ethereum an F. The Alliance has not set a public date for its first technical publication.

Why roughly 6 million bitcoin are called "exposed"

The concern is that future quantum computers could reverse-engineer a wallet's publicly visible key to uncover its secret key, allowing attackers to steal funds. That risk applies only to coins whose public key has already been broadcast on-chain, typically through pay-to-public-key outputs from Bitcoin's earliest years or addresses that have been reused for a second transaction. A coin sitting in a modern address that has only ever received funds has not revealed its public key and is not in this exposed group.

Sources differ on the exact size of that pool. CoinDesk reported the Alliance's own estimate that 6.4 million bitcoin, or 30.2% of the supply, have public keys already exposed. Other outlets covering the same launch, including TFTC, put the figure closer to roughly 6 million BTC, or more than 30% of supply, including an estimated 1.1 million attributed to Satoshi Nakamoto, sitting in addresses with permanently exposed public keys. The two figures round to the same share of supply; the gap between 6.0 million and 6.4 million likely reflects different cutoffs for what counts as "exposed" rather than a factual dispute, and neither the Alliance nor the outlets reporting on it have published a reconciliation.

The industry doesn't agree on the timeline or the fix

Alliance members themselves disagree on when any of this becomes urgent. Richard Carback, chief technology officer of Postquant Labs, said he believes 2028 is a realistic date for a machine capable of breaking today's cryptography. Bryn Bennett, chief revenue officer at The Vault, pushed back on pinning down a date at all, telling CoinDesk: "Nobody knows the date, but the estimates keep falling, and the risk is one we can already plan for." Part of why estimates keep falling: a March 2026 paper from Google Quantum AI, co-authored with researchers from the Ethereum Foundation and Stanford, concluded that Bitcoin's secp256k1 curve could be broken with fewer than 500,000 physical qubits, roughly one-twentieth of prior estimates. No current machine is remotely close to that figure; no machine can do it yet.

The group also splits on what to do about coins that owners can no longer move, including lost or Satoshi-era wallets. Carback told CoinDesk he would rather see vulnerable coins migrated than frozen, while Bennett argued "a custodian protects its clients' assets, not abandoned ones," adding that freezing coins is a governance decision for the Bitcoin network, not for the industry. That disagreement matters for readers because it is unresolved: no Bitcoin-wide decision has been made on whether exposed, abandoned coins would ever be frozen, moved, or left alone.

What's already being tested to close the gap

Separately from the Alliance, a developer effort called the Quantum-Safe Bitcoin Optimization Challenge has been working on making a quantum-resistant way to spend bitcoin cheaper to compute. Researchers have cut the estimated computing cost of a specialized quantum-safe Bitcoin transaction by 82% to $59, as improvements in graphics processing software reduced the projected expense from approximately $320 during StarkWare's first mainnet demonstration in August to $67 in September and $59 as of October 13. That $59 figure is a computing-cost estimate for one experimental transaction type, not a live, miner-adopted standard, and it still depends on miners being willing to process a nonstandard transaction format.

What this means for a bitcoin holder today

For most holders, the practical takeaway is narrow: no quantum computer capable of breaking Bitcoin's cryptography exists today, so there is no action a holder needs to take this week. What matters going forward is address type. A coin held in a modern address that has never sent a transaction has not exposed its public key and sits outside the group the Alliance describes; a coin in a reused or very old address type is part of the exposed pool, whatever its exact size. Combining the Alliance's 6.04-to-6.4-million-BTC range with Fortune's reported bitcoin price of $82,644.65 on October 16, 2026, puts the value of exposed coins at roughly $499 billion to $529 billion — a back-of-envelope figure built from two separate sources, not a number either one published directly.

What remains unknown is just as important as what's been estimated: there is no adopted industry standard yet for what "quantum-resistant" means, no fixed date for when a working quantum computer could threaten Bitcoin, and no agreement on how the network would even handle coins that cannot be moved before that date arrives.