Why Europol Urges Immediate Post-Quantum Wallet Upgrades
Europol's warning reflects a stark reality: quantum computers running Shor's algorithm could one day break the elliptic-curve cryptography protecting Bitcoin and Ethereum wallets, exposing any public key ever broadcast on-chain. Because adversaries can record ciphertext today and decrypt it later—the "harvest now, decrypt later" threat—waiting for fault-tolerant machines to appear would be too late. The agency stresses that large-scale migration takes years of coordinated work, so preparation must begin now while both networks still enjoy a wide security buffer.
Also worth reading: Which Quantum-Resistant Bitcoin Wallets Can Protect Your Coins From Future Quantum Attacks? · How Can Investors Measure Bitcoin’s Quantum Readiness in 2026? · Is Bitcoin Ready for Quantum Computing in 2026?
Migration will reshape security on multiple layers. Both chains will likely adopt hybrid signature schemes—pairing classical ECDSA with post-quantum algorithms like lattice-based Dilithium or hash-based SPHINCS+—before fully retiring vulnerable primitives. Ethereum's account abstraction roadmap lets smart contract wallets upgrade signing logic without touching protocol rules, while Bitcoin requires a consensus hard fork, making coordination and replay protection harder. Users will need to move funds from exposed addresses to quantum-resistant ones, and dormant wallets may never migrate, creating permanent risk. Standards bodies, exchanges, and early movers like TRON's post-quantum testnet will shape the timeline for the entire industry.
Proof-of-Work Wallets Face the Greatest Quantum Risk
Bitcoin and Ethereum face a migration problem that goes far beyond swapping algorithms. Post-quantum signatures like ML-DSA are dramatically larger than ECDSA, which means heavier transactions, higher fees, and real strain on Bitcoin's block space. A wallet migration also exposes a structural weakness: coins sitting at exposed public keys, including many early Bitcoin UTXOs, cannot be quietly upgraded. They must be moved by their owners, and if those owners are gone, those funds become permanent quantum-harvest targets. Ethereum has more flexibility through account abstraction and its roadmap, but its much larger state could bloat further under larger keys.
The practical path forward looks phased, as Europol has urged: dual-signature support, early migration incentives, and hard deadlines for vulnerable address types. Wallet providers and libraries that add protections now, such as password-hardened mnemonics, buy users time but not immunity. The networks that coordinate migration earliest will preserve both security and confidence; those that wait risk a chaotic scramble when cryptographically relevant quantum computers move from theory to timeline.
TRON Testnet and Quantum-Resistant Wallet Proposals
The migration to post-quantum cryptography will fundamentally reshape how Bitcoin and Ethereum secure value. Both networks depend on ECDSA signatures, which Shor's algorithm could break once fault-tolerant quantum machines arrive, exposing reused addresses and any public key revealed on-chain. Europol has urged a phased shift toward post-quantum security, warning the upgrade could take years and that work must begin now while exposed wallets still hold funds. TRON's post-quantum testnet and proposals for quantum-resistant wallets, such as AmericanFortress's, show early preparations already underway.
For everyday users, migration means new key-generation schemes, heavier transactions, and likely revised address formats, forcing wallet software to evolve. Ethereum's account abstraction and smart contract architecture could allow smoother protocol upgrades, while Bitcoin's UTXO model demands broader coordination to avoid stranding coins in vulnerable outputs. Hardware wallets and mnemonic standards would also need redesign, since existing seed phrases cannot inherently resist quantum attacks. The endgame: larger wallets and higher fees, but signatures durable enough to protect assets against tomorrow's quantum adversaries.
Coinbase Migration Strategy for Abandoned Coins
Post-quantum wallet migration will fundamentally reshape how Bitcoin and Ethereum handle security, and the hardest problem isn't the cryptography itself—it's the coins nobody can move. Europol's recent warnings highlight that a phased shift to post-quantum security could take years, largely because migrating exposed crypto wallets requires every holder to actively participate. Bitcoin's UTXO model makes this especially thorny: millions of coins sit in addresses with exposed public keys, vulnerable to future quantum attacks, yet their owners may be dead, lost their keys, or simply unaware. Ethereum faces similar issues with dormant accounts, though its account model and active developer community may enable smoother protocol-level transitions, as TRON's post-quantum testnet deployment already demonstrates.
The fate of abandoned coins will force difficult governance decisions. Exchanges like Coinbase may need explicit policies on whether quantum-vulnerable dormant balances can ever be reclaimed, frozen, or burned. Projects like AmericanFortress, which proposes quantum-resistant wallets, and low-level tools adding password protection to mnemonics show the ecosystem is building defenses now. But without coordinated standards, migration could fragment chains or strand value permanently. Starting early, as Europol urges, is the only realistic path.
Low-Level Libraries Adding Passwords to Mnemonics
Post-quantum crypto wallet migration will fundamentally reshape Bitcoin and Ethereum security by forcing a transition from elliptic curve cryptography to lattice-based or hash-based schemes, a shift Europol warns could take years and must begin now. For Bitcoin, legacy addresses secured by ECDSA become vulnerable once quantum computers break discrete logarithms, pushing users toward new address formats and migration paths that risk splitting liquidity between old and new UTXO sets. Ethereum faces a similar challenge, but its account model and smart contract ecosystem complicate migration, since every externally owned account and contract relying on secp256k1 signatures must adopt quantum-resistant alternatives without breaking composability.
Low-level libraries that add passwords to wallet mnemonics offer a bridge during this transition, letting users derive quantum-safe keys from existing seed phrases while preserving backward compatibility. Europol’s phased approach and TRON’s testnet deployment signal that the industry is moving from theory to implementation, but the real security gain depends on wallet developers, exchanges, and users coordinating migration before quantum threats materialize.
Quantum Threat Timeline by Blockchain
| Blockchain / wallet layer | Estimated migration window | Security reshape |
|---|---|---|
| Bitcoin legacy wallets | 2028–2035 | P2PK, P2PKH, and reused addresses face ECDSA exposure; migration to PQ or hybrid signatures hardens old coins but leaves frozen or unmigrated addresses at risk. |
| Bitcoin Taproot wallets | 2030–2040 | Taproot’s key-path and script-path flexibility can support PQ or hybrid spends, but wallet UX and fee-market coordination determine real security gains. |
| Ethereum EOAs | 2028–2035 | Externally owned accounts rely on ECDSA; migration to PQ smart accounts or AA wallets replaces direct key control with recovery, session keys, and social guardians. |
| Ethereum smart accounts | 2030–2040 | Account abstraction and validator-level PQ upgrades can isolate quantum risk, but contract upgrades, L2 bridges, and delegate permissions become new attack surfaces. |