EU Warns Quantum Computers Threaten Crypto Security

More than 10 client development teams are working inside a post-quantum security hub the Ethereum Foundation launched on March 25, 2026, according to CoinDesk, months before European Union regulators publicly flagged quantum computing as a threat to blockchain systems in a warning CoinTelegraph reported on September 23, 2026. The two developments sit on either side of the same problem: a future, more powerful class of computer that could eventually break the cryptography protecting bitcoin and ether.

What the EU warning actually says

CoinTelegraph reported that EU regulators warned quantum computing poses a security threat to blockchain and cryptocurrency systems. A separate dispatch carried by KuCoin's news desk described the same message in similar terms, that EU financial regulators warned quantum computing could threaten blockchain cryptography, indicating the warning was picked up by more than one outlet rather than being a single publication's framing.

Separately, the European Securities and Markets Authority, the EU's markets regulator, published a formal document titled "TRV Risk Analysis: Quantum Computing in Financial Markets" on May 13, 2026, four months before the September coverage. That document shows ESMA had already been studying quantum risk to financial markets in a dedicated report before the story picked up by CoinTelegraph and KuCoin. It was not possible to confirm from the available reporting whether the September warning restates that May analysis or reflects a separate, more recent statement, so readers should treat the two as related but not confirmed to be the same document.

Why old crypto signatures are the weak point

Bitcoin and Ethereum both secure transactions with elliptic-curve digital signatures. Each wallet has a private key that never leaves the owner's device and a public key, derived from it, that is visible on the blockchain whenever a transaction is signed. A sufficiently powerful quantum computer running an algorithm designed for this kind of math could, in theory, work backward from an exposed public key to the private key behind it, letting someone forge a valid signature and move funds without ever obtaining a password or seed phrase. This is a property of the underlying mathematics, not a flaw specific to either network, which is why both communities are discussing the same class of fix.

How developers are responding

On the Ethereum side, CoinDesk reported that the Ethereum Foundation's new post-quantum security hub brought in more than 10 client teams to work on the problem. Ethereum's own public roadmap includes a page dedicated to "quantum resistance" under its security section, last updated August 12, 2026, laying out the project's plans for moving to post-quantum cryptography.

On the Bitcoin side, developers posted a document titled "A Post Quantum Migration Proposal" to the bitcoin-dev mailing list, the forum where Bitcoin's protocol changes are historically debated before any code is written. Bitcoin Magazine reported on April 15, 2026, that the plan under discussion would freeze bitcoin held in legacy address formats that remain vulnerable to a quantum attack unless their owners move the coins to quantum-resistant addresses. As of the reporting reviewed for this article, the proposal is a mailing-list discussion document, not an adopted protocol change with a scheduled activation date.

Key figures

What this means for people holding bitcoin or ether

None of the reporting reviewed here describes an operational quantum computer today capable of breaking the elliptic-curve cryptography that Bitcoin and Ethereum use. Every action described above, the EU's risk analysis, Ethereum's hub, and Bitcoin's mailing-list proposal, targets a future risk that developers and regulators are trying to get ahead of, not a present one. That distinction matters for a reader deciding how urgently to act: there is currently no reported exploit draining wallets through quantum decryption, and the work underway is standards development and protocol design rather than an emergency patch.

What remains unverified from the sources found for this article is any specific timeline for when a quantum computer might realistically threaten these networks, any dollar figure ESMA attaches to the systemic risk, and whether the Bitcoin freeze proposal has enough developer support to advance toward an actual software release. Readers should treat the regulatory warning as a signal that quantum risk has moved onto official agendas, not as evidence of an imminent attack.