Ethereum Foundation researcher Justin Drake warned that crypto’s quantum-risk timeline is tightening, pointing to fresh work on Shor’s algorithm, a new public optimization challenge and earlier Google Quantum AI research focused on the elliptic-curve cryptography used by Bitcoin, Ethereum and other major blockchains.
The issue is not an active wallet exploit. Current quantum computers are still far from breaking Bitcoin or Ethereum signatures. The concern is that algorithmic and hardware-resource estimates keep moving in the wrong direction for legacy cryptography.
Google’s March cryptocurrency whitepaper estimated that future quantum computers could attack the 256-bit elliptic curve discrete logarithm problem with fewer logical qubits and gates than previously expected. Google also used a zero-knowledge disclosure model to verify the existence of the improved circuits without publishing the full attack path.
That disclosure model is now part of the story. Drake, a coauthor of the Google paper, said the hidden optimization has been rediscovered, while a collaborative challenge is already pushing incremental improvements.
French Paper Rebuilds The Hidden Circuit Path
The fresh news centers on a June 1 paper from French quantum researcher André Schrottenloher titled “Optimized Point Addition Circuits for Elliptic Curve Discrete Logarithms”. The paper states that Google’s earlier result relied on optimized point-addition circuits for elliptic curves over prime fields, but did not reveal the logical circuits because it used a zero-knowledge proof.
Schrottenloher’s work details a similar circuit architecture for secp256k1, the curve used by Bitcoin and Ethereum signatures, with a slightly higher qubit count but a smaller Toffoli gate count than Google’s disclosed benchmark. That makes the paper more than an academic follow-up. It shows that at least part of the withheld optimization can be reconstructed independently.
Drake also pointed to a Shor-at-home style challenge, framed around ecdsa.fail, where participants are searching for additional circuit optimizations. His thread said submissions have already improved on Google’s circuit by 8.4% using the product of logical qubit count and Toffoli gate count as the measure.
Neutral Atoms Add A Hardware Pressure Point
The second part of the debate comes from neutral-atom quantum computing. An earlier Oratomic and Caltech paper argued that Shor’s algorithm could run at cryptographically relevant scale with as few as 10,000 reconfigurable atomic qubits under its architecture assumptions. The same paper said a 26,000-physical-qubit system could run discrete logarithms on P-256 in a few days, while also stressing that major engineering challenges remain.
That distinction matters. These papers do not mean Q-Day has arrived. They do mean crypto communities have less room to treat post-quantum migration as a distant research topic.
The Ethereum ecosystem is already moving in that direction. Ethereum’s own post-quantum cryptography roadmap identifies vulnerable areas including ECDSA account signatures, BLS consensus signatures, KZG commitments and some ZK-proof systems. CryptoAdventure’s earlier coverage of Google’s 2029 post-quantum target showed how major technology firms are already setting migration deadlines.
Bitcoin faces a different coordination problem because exposed public keys, dormant coins and legacy address types create uneven risk. The debate around Bitcoin’s quantum fix and exposed BTC has already shown how hard the politics could become if migration requires restricting old signature types or dealing with abandoned coins.
Zcash has also turned quantum resistance into a live roadmap issue, with recent Zcash post-quantum planning focused on recoverability, privacy and long-term protocol soundness.
Drake’s warning is strong because it connects all three layers: better Shor circuits, more aggressive neutral-atom hardware estimates and crypto networks that still rely heavily on quantum-vulnerable signatures. The market does not need to panic, but developers no longer have the luxury of treating post-quantum migration as an abstract future upgrade. The technical pressure is becoming clearer, and the networks that move early will have a cleaner path than those forced to coordinate after the threat feels immediate.
