Europol urges crypto industry to start quantum upgrades now, warns migration could take years

Europol warns crypto quantum migration is a multi-year project

Europol, the European Union’s law enforcement agency, published a report on October 7 urging the cryptocurrency industry to begin preparing for quantum computing threats. The agency warned that a coordinated migration to quantum-resistant systems could take years.

The report identifies the cryptographic keys that control access to funds as the main point of exposure. Europol recommends a phased transition to post-quantum cryptography, with blockchain developers, wallet providers and users each taking on different parts of the work.

The agency noted that quantum computers powerful enough to break the relevant cryptography do not yet exist, and their arrival remains uncertain. But early preparation matters because upgrading millions of wallets and nodes across decentralized networks requires both technical changes and broad community agreement.

Wallet keys face highest risk while hashes are more resilient

Europol’s European Cybercrime Centre (EC3) drew a distinction between the cryptography used to control funds and the hash functions that support blockchain integrity.

Wallets use a secret private key to authorize spending and a public key that lets the network verify the authorization. A sufficiently powerful quantum computer could theoretically derive the private key from an exposed public key, allowing an attacker to forge signatures and spend funds without permission. That makes exposed public keys the primary concern.

Hash functions, which help maintain blockchain integrity, were described as comparatively resilient to quantum attacks, though not entirely immune. This distinction explains why the report focuses on protecting ownership and control of assets rather than treating every part of a blockchain as equally vulnerable.

What the report recommends

• Blockchain projects should prioritize integrating post-quantum cryptographic algorithms into their core protocols.
• Wallet providers should begin testing and deploying compatible quantum-resistant wallets and explain the risks to users.
• Users should migrate funds to quantum-resistant wallets as they become available.
• Improvements to address and key management can reduce exposure during the transition, though moving to a fresh address alone does not make underlying signature technology resistant to quantum attacks.

Why the transition could take years

Deploying new cryptographic standards across millions of wallets and nodes is a resource-intensive undertaking, Europol said. Technical adoption must be matched by community consensus, making the organization of the transition itself a security concern.

Practical changes may go beyond a standard software update. Some wallets could need hardware upgrades if existing devices become incompatible with new systems. For holdings recorded as unspent transaction outputs, or UTXOs, migration also requires transactions to be registered on the blockchain.

The agency favors a phased approach that prioritizes holdings facing the highest risk, allowing the ecosystem to work through compatibility, capacity and governance constraints incrementally.

Why this matters for crypto users

The report’s core message is that the industry should start preparing now, even though the threat is not imminent. The timing of a capable quantum computer remains uncertain, but the time needed to make the changes is long. Europol called for clear roadmaps and accessible explanations to help users prepare while reducing the risk of panic around an uncertain technological timetable.

Source

• CryptoSlate

Read also: Over 6 Million Bitcoin Sit Behind Exposed Public Keys as AI Warnings Mount