Quantum Computing Qubit Counts: 2026 Status Report
A simple guide to understanding where quantum computers are today and when they might break cryptocurrency encryption
🔴 Executive Summary - What You Need to Know Right Now
Quantum computers that can steal Bitcoin are no longer a theoretical future problem. They are an engineering problem on a measurable timeline - and the cryptocurrency ecosystem has not started protecting itself.
The five facts every crypto holder needs:
| # | Fact | Source |
|---|---|---|
| 1 | ~6.9 million BTC (25-30% of total supply) sits in addresses where the public key is already exposed and quantum-stealable | Google Quantum AI / Project Eleven, 2026 |
| 2 | Google officially warned Q-Day could arrive as early as 2029 and published a whitepaper showing Bitcoin can be attacked in ~9 minutes with fewer than 500,000 physical qubits - a ~20x reduction from prior estimates | Google Quantum AI, March 30, 2026 |
| 3 | Caltech/Oratomic showed Shor's algorithm can run at cryptographic scale with as few as 10,000 physical qubits using high-rate qLDPC codes on a neutral-atom architecture - 100x below prior estimates for this platform | Cain et al., arXiv:2603.28627, March 31, 2026 |
| 4 | Four independent research teams on three continents have proven quantum error correction works. Scaling is now an engineering problem, not a physics problem | Nature, February 2026 |
| 5 | Bitcoin migration is only at testnet stage. BIP-360 was merged into Bitcoin's official BIP repository (Feb 11) and BTQ launched a working testnet (Mar 19), but mainnet activation has no timeline. Ethereum's quantum upgrades are in weekly testnet testing but not deployed | BIP-360.org, BTQ, 2026 |
What "Harvest Now, Decrypt Later" means for you today:
Adversaries are recording blockchain transactions right now and storing them on cheap hard drives, waiting for a quantum computer powerful enough to crack them. The Federal Reserve confirmed this is happening. Data harvested today cannot be "un-harvested" after a future protocol upgrade. For addresses that have already exposed their public keys - P2PK, reused addresses, Taproot - no future migration can fully protect historical transactions.
Already protected: Quantum Resistant Ledger (QRL) has been quantum-safe since 2018 using XMSS signatures - the protection Bitcoin and Ethereum are still planning. See QRL 2.0 (Zond) and QRL FAQs.
The Key Numbers
$2.5 trillion in crypto rests on cryptographic foundations with a known quantum vulnerability. $54 billion in cumulative global government quantum investment is accelerating the timeline. Q-Day - when a quantum computer can break public-key cryptography - is now a question of engineering schedule, not physics.
Logical Qubits Required for Cryptographic Attacks
| Algorithm | Logical Qubits | Physical Qubits (est.) | Threat Level |
|---|---|---|---|
| ECDSA-256 (Bitcoin/Ethereum) | 1,098 min (qubit-constrained) - 1,200-1,450 (Google 2026) | <500,000 (superconducting) / ~26,000 (neutral atom) | 🔴 Approaching fast |
| RSA-2048 | 4,000-6,190 | <100,000 (QLDPC) to 8M (surface) | 🟡 Timeline compressed |
| SHA-256 (Mining via Grover's) | >8,000 | Tens of millions | 🟡 Lower priority |
Company Roadmaps to Fault Tolerance
Multiple companies are targeting utility-scale fault-tolerant systems between 2028 and 2033. The ~1,200 logical qubit attack threshold (per Google's whitepaper) falls within these roadmap windows.
- IonQ: 256 qubits at 99.99% fidelity (2026), 1,600 logical qubits (2028), 2M physical qubits (2030)
- Infleqtion: 30 logical qubits (2026), 1,000 (2030); already ran Shor's algorithm on logical qubits (Sep 2025)
- IBM: 200 logical qubits by 2029 (Starling), 2,000 by 2033 (Blue Jay)
- Google: "Useful" error-corrected machine by 2029; now dual-modality (superconducting + neutral atom)
- Quantinuum: Skinny Logic (Mar 2026) - 48 error-corrected logical qubits at 2:1 ratio; $20B+ IPO filed
- Oratomic (Caltech spin-out): Targeting cryptographically relevant neutral-atom system before end of decade
Expert Timeline Estimates
| Expert / Organisation | Estimate | Date |
|---|---|---|
| Q-Day possible by 2029 | March 2026 | |
| Nature (feature) | Usable QC within a decade ("vibe shift") | Feb 2026 |
| Dorit Aharonov (Hebrew U.) | "Timeline is much shorter than people thought" | Feb 2026 |
| Fred Chong (U Chicago) | "No longer a physics problem - it's engineering" | 2026 |
| Scott Aaronson (UT Austin) | Urgency like Frisch-Peierls memo of 1940 | 2025 |
| Charles Edwards (Capriole) | "Quantum Event Horizon" 2-9 years away | 2025 |
| Alice & Bob CEO | Bitcoin crackable "a few years after 2030" | 2025 |
| Chainalysis | 5-15 years to break current standards | 2025 |
| Chao-Yang Lu (USTC) | Fault-tolerant QC by 2035 | Feb 2026 |
| Adam Back (Blockstream) | Meaningful threat 20-40 years away | 2025 |
Vulnerable Bitcoin - The Numbers at Stake
- ~6.9 million BTC (25-30% of total supply) in quantum-vulnerable addresses, including Satoshi's estimated ~1 million BTC in P2PK addresses permanently exposed since 2009
- ~1.7 million BTC specifically in P2PK locking scripts - confirmed by Google's whitepaper
- ~$470 billion at current prices sitting in address types where the public key is already on-chain with no way to un-expose it - regardless of any future protocol upgrade
- Even the most careful holders are exposed during the ~10-minute mempool window each time they send a transaction. Google's whitepaper estimates ~41% theft probability for a Bitcoin on-spend attack
A quantum attacker could steal and dump millions of dormant coins simultaneously - crashing the market independently of any protocol upgrade or migration debate. Google's whitepaper raises the possibility of governments needing to create "digital salvage" legal frameworks to prevent this wealth from falling to criminals or adversarial state actors.
Crypto Defence Status
- Bitcoin - BIP-360 merged into official BIP repository (Feb 11, 2026); BTQ testnet live with first working P2MR implementation (Mar 19, 2026); mainnet activation not scheduled 🟡 Early stage
- Ethereum - Glamsterdam/Hegota upgrades discussed, weekly testnets running; five distinct attack vectors identified by Google whitepaper ❌ Not deployed to mainnet
Five papers now define the attack landscape. The Google Quantum AI whitepaper (March 30, 2026) achieves 1,200-1,450 logical qubits in ~18-23 minutes on a superconducting machine with under 500,000 physical qubits - validated by a zero-knowledge proof. The Oratomic paper (March 31, 2026) demonstrates this can run on ~10,000 physical neutral-atom qubits in roughly 10 days. Both estimates represent dramatic reductions from prior work and fall within current and near-term hardware capabilities.
What Are Qubits?
Think of qubits as the "bits" of quantum computers, but much more powerful and fragile:
Physical Qubits (Noisy Qubits)
The actual hardware qubits. They make errors frequently - like typing on a keyboard where 1 in 100 keys presses the wrong letter.
Logical Qubits (Error-Corrected Qubits)
Groups of physical qubits working together to create one reliable qubit. It takes hundreds or thousands of physical qubits to make one logical qubit that actually works reliably.
The Goal: To break Bitcoin or Ethereum encryption with a practical runtime (~2 hours), you need about 6,500 logical qubits, which translates to roughly 8 million physical qubits using traditional surface codes. However, new QLDPC-based architectures (Iceberg Quantum, February 2026) have shown that RSA-2048 can be broken with under 100,000 physical qubits - a 10x reduction. If similar techniques apply to ECDSA, the Bitcoin threshold could be much lower than previously assumed. The often-cited "~2,330 logical qubits" figure is the theoretical minimum-width design with an impractically long runtime.
Important caveat on "logical qubit" claims
Some announcements use distance-2 codes that can only detect errors, not correct them. Fault-tolerant logical qubits for cryptanalysis require higher-distance codes (distance 5+) with hundreds to thousands of physical qubits each. When a company claims "48 logical qubits," check whether those are error-detecting or error-correcting.
(a16z analysis, Dec 2025)Current Quantum Computing Status by Company
| Company | Technology | Physical Qubits (2025-26) | Logical Qubits (Current / Target) | Target Year | Key Achievement | Reference |
|---|---|---|---|---|---|---|
| IBM | Superconducting | 156 (Heron R2) | 1-2 / 200 | 2029 | 50x faster operations. Starling system: 200 logical qubits, 100M error-corrected operations. Blue Jay: 2,000 logical qubits by 2033. System Two deployed. | Roadmap |
| Superconducting | 105 (Willow) | Below-threshold demo / 100+ | 2028-29 | First to prove error correction scales (Dec 2024). Exponential error reduction from distance-3 to distance-7. RL-powered self-calibration (3.5x error rate improvement). | Willow Chip | |
| IonQ | Trapped Ion | 36 (Forte), 256 planned 2026 | 0 / 1,600 (2028), 2M physical (2030) | 2028-30 | 99.99% two-qubit gate fidelity (world record, Oct 2025). EQC technology (electronics, not lasers) from Oxford Ionics acquisition. Works above Doppler limit. Beam Search decoder: 17x error reduction, <1ms on CPU. 256-qubit system at 99.99% fidelity planned 2026. Acquired Skyloom (space networking). Physical-to-logical ratio as low as 13:1 at this fidelity. | Roadmap |
| Quantinuum | Trapped Ion | 98 (Helios) | 48 (distance-2, detection only) / Hundreds | 2030 (Apollo) | Highest quality deployed system. 99.921% two-qubit fidelity (industry best for deployed systems). QV >2 million. 48 logical qubits via Iceberg code at 2:1 ratio (error detection, not correction). $20B+ IPO filed Jan 2026. | Website |
| USTC (China) | Superconducting | 107 (Zuchongzhi 3.2) | Below-threshold demo / Scaling | Matching Google | Fourth team worldwide to achieve below-threshold QEC (Dec 2025). First outside the US. Error suppression factor 1.40, distance-7 surface code. All-microwave leakage suppression (72x reduction). | PRL |
| Infleqtion | Neutral Atom | 1,600 (Sqale) | 12 (error detection + loss correction) / 30 (2026), 1,000 (2030) | 2026-30 | 99.5% two-qubit gate fidelity. 1,600 atoms (commercial neutral atom record). First execution of Shor's algorithm on logical qubits (Sep 2025). 12 logical qubits demonstrated. Going public NYSE:INFQ. NVIDIA NVQLink integration. $50M Illinois quantum center partnership. | Website |
| Atom Computing | Neutral Atom | 1,180 (Gen 1) | Developing / 100+ | 2027-28 | 99.6% two-qubit gate fidelity. Room-temperature operation. Microsoft partnership for fault-tolerant quantum computing. Scaling to 100,000 atoms in coming years. | Website |
| QuEra | Neutral Atom | 260 (Gemini), 448 (demo) | R&D / 10-100 | 2027-28 | 99.5% two-qubit gate fidelity. Harvard/MIT collaboration. 448-atom fault-tolerant architecture with 2.14x below-threshold QEC (Nov 2025, Nature). Delivered error-correction-ready machine to AIST Japan. | Website |
| Pasqal | Neutral Atom | 1,000 to 10,000 (2026) | In dev / Scalable | 2026-28 | Aggressive scaling: 10,000 physical qubits by 2026. European quantum leader. Focus on optimization and simulation. | Website |
| Rigetti | Superconducting | 84 (Ankaa-3) | In dev / 100+ | 2028-30 | 99.5% two-qubit fidelity. Modular architecture. Plans: 1,000+ physical by 2026, 100,000 logical by 2030. | Website |
| PsiQuantum | Photonic | Development phase | 0 / 100+ | 2027-28 | Most ambitious: 1M+ physical photonic qubits by 2027-28. Room temp. Uses semiconductor fabs (GlobalFoundries). $1B+ Series E. AMD/Xilinx veteran Victor Peng appointed CEO (Feb 2026) for deployment phase. Sites in Australia and Chicago. | Website |
| Microsoft | Topological | Majorana 1 prototype | R&D phase / TBD | Years not decades | First Majorana qubit readout demonstrated (QuTech, Feb 2026, Nature): single-shot parity measurement via quantum capacitance with >1ms coherence. First topological materials demo (Feb 2025). Could need fewer physical qubits if proven. Hedging with IonQ, Quantinuum, Atom Computing partnerships. | Azure Quantum |
| D-Wave | Hybrid (Annealing + Gate-Model) | 5,000+ (annealing) | N/A (annealing), Gate-model in dev | 2026 gate-model | Acquired Quantum Circuits Inc. for $550M (Jan 2026). Industry-first on-chip cryogenic control. Dual-rail gate-model system planned for 2026. Annealing systems cannot break encryption. | Website |
| Oxford Ionics | Trapped Ion | R&D prototypes | N/A (acquired by IonQ) | Merged 2025 | Previous 99.99% world record holder. Electronic qubit control tech now part of IonQ stack. | Website |
| blueqat | Silicon (Semiconductor) | Desktop prototype | Early stage | 2030: 100 qubits | Desktop-scale silicon quantum computer at $670K. Leverages existing semiconductor fabs (Moore's Law economics). Displayed at CES-adjacent event Jan 2026. | EE Times |
| Equal1 | Silicon (CMOS) | Bell-1 (shipping) | Early stage | Scaling | $60M raised Jan 2026. Rack-mounted, datacenter-ready. No dilution refrigerator required. Already shipping to ESA Space HPC Centre. Standard semiconductor manufacturing. | TQI |
| SQC | Silicon (Atom) | 11 | R&D / Scaling | 2030+ | 99.99% single-qubit and 99.90% two-qubit gate fidelity in silicon (Dec 2025, Nature). 660ms coherence times. Leverages semiconductor fabrication. | Nature |
IBM
RoadmapTechnology: Superconducting
Physical Qubits: 156 (Heron R2)
Logical Qubits: 1-2 / 200
Target Year: 2029
Achievement: 50x faster operations. Starling system: 200 logical qubits, 100M error-corrected operations. Blue Jay: 2,000 logical qubits by 2033. System Two deployed.
Technology: Superconducting
Physical Qubits: 105 (Willow)
Logical Qubits: Below-threshold demo / 100+
Target Year: 2028-29
Achievement: First to prove error correction scales (Dec 2024). Exponential error reduction from distance-3 to distance-7. RL-powered self-calibration (3.5x error rate improvement).
IonQ
RoadmapTechnology: Trapped Ion
Physical Qubits: 36 (Forte), 256 planned 2026
Logical Qubits: 0 / 1,600 (2028), 2M physical (2030)
Target Year: 2028-30
Achievement: 99.99% two-qubit gate fidelity (world record, Oct 2025). EQC technology (electronics, not lasers) from Oxford Ionics acquisition. Works above Doppler limit. Beam Search decoder: 17x error reduction, <1ms on CPU. 256-qubit system at 99.99% fidelity planned 2026. Acquired Skyloom (space networking). Physical-to-logical ratio as low as 13:1 at this fidelity.
Quantinuum
WebsiteTechnology: Trapped Ion
Physical Qubits: 98 (Helios)
Logical Qubits: 48 (distance-2, detection only) / Hundreds
Target Year: 2030 (Apollo)
Achievement: Highest quality deployed system. 99.921% two-qubit fidelity (industry best for deployed systems). QV >2 million. 48 logical qubits via Iceberg code at 2:1 ratio (error detection, not correction). $20B+ IPO filed Jan 2026.
USTC (China)
PRLTechnology: Superconducting
Physical Qubits: 107 (Zuchongzhi 3.2)
Logical Qubits: Below-threshold demo / Scaling
Target Year: Matching Google
Achievement: Fourth team worldwide to achieve below-threshold QEC (Dec 2025). First outside the US. Error suppression factor 1.40, distance-7 surface code. All-microwave leakage suppression (72x reduction).
Infleqtion
WebsiteTechnology: Neutral Atom
Physical Qubits: 1,600 (Sqale)
Logical Qubits: 12 (error detection + loss correction) / 30 (2026), 1,000 (2030)
Target Year: 2026-30
Achievement: 99.5% two-qubit gate fidelity. 1,600 atoms (commercial neutral atom record). First execution of Shor's algorithm on logical qubits (Sep 2025). 12 logical qubits demonstrated. Going public NYSE:INFQ. NVIDIA NVQLink integration. $50M Illinois quantum center partnership.
Atom Computing
WebsiteTechnology: Neutral Atom
Physical Qubits: 1,180 (Gen 1)
Logical Qubits: Developing / 100+
Target Year: 2027-28
Achievement: 99.6% two-qubit gate fidelity. Room-temperature operation. Microsoft partnership for fault-tolerant quantum computing. Scaling to 100,000 atoms in coming years.
QuEra
WebsiteTechnology: Neutral Atom
Physical Qubits: 260 (Gemini), 448 (demo)
Logical Qubits: R&D / 10-100
Target Year: 2027-28
Achievement: 99.5% two-qubit gate fidelity. Harvard/MIT collaboration. 448-atom fault-tolerant architecture with 2.14x below-threshold QEC (Nov 2025, Nature). Delivered error-correction-ready machine to AIST Japan.
Pasqal
WebsiteTechnology: Neutral Atom
Physical Qubits: 1,000 to 10,000 (2026)
Logical Qubits: In dev / Scalable
Target Year: 2026-28
Achievement: Aggressive scaling: 10,000 physical qubits by 2026. European quantum leader. Focus on optimization and simulation.
Rigetti
WebsiteTechnology: Superconducting
Physical Qubits: 84 (Ankaa-3)
Logical Qubits: In dev / 100+
Target Year: 2028-30
Achievement: 99.5% two-qubit fidelity. Modular architecture. Plans: 1,000+ physical by 2026, 100,000 logical by 2030.
PsiQuantum
WebsiteTechnology: Photonic
Physical Qubits: Development phase
Logical Qubits: 0 / 100+
Target Year: 2027-28
Achievement: Most ambitious: 1M+ physical photonic qubits by 2027-28. Room temp. Uses semiconductor fabs (GlobalFoundries). $1B+ Series E. AMD/Xilinx veteran Victor Peng appointed CEO (Feb 2026) for deployment phase. Sites in Australia and Chicago.
Microsoft
Azure QuantumTechnology: Topological
Physical Qubits: Majorana 1 prototype
Logical Qubits: R&D phase / TBD
Target Year: Years not decades
Achievement: First Majorana qubit readout demonstrated (QuTech, Feb 2026, Nature): single-shot parity measurement via quantum capacitance with >1ms coherence. First topological materials demo (Feb 2025). Could need fewer physical qubits if proven. Hedging with IonQ, Quantinuum, Atom Computing partnerships.
D-Wave
WebsiteTechnology: Hybrid (Annealing + Gate-Model)
Physical Qubits: 5,000+ (annealing)
Logical Qubits: N/A (annealing), Gate-model in dev
Target Year: 2026 gate-model
Achievement: Acquired Quantum Circuits Inc. for $550M (Jan 2026). Industry-first on-chip cryogenic control. Dual-rail gate-model system planned for 2026. Annealing systems cannot break encryption.
Oxford Ionics
WebsiteTechnology: Trapped Ion
Physical Qubits: R&D prototypes
Logical Qubits: N/A (acquired by IonQ)
Target Year: Merged 2025
Achievement: Previous 99.99% world record holder. Electronic qubit control tech now part of IonQ stack.
blueqat
EE TimesTechnology: Silicon (Semiconductor)
Physical Qubits: Desktop prototype
Logical Qubits: Early stage
Target Year: 2030: 100 qubits
Achievement: Desktop-scale silicon quantum computer at $670K. Leverages existing semiconductor fabs (Moore's Law economics). Displayed at CES-adjacent event Jan 2026.
Equal1
TQITechnology: Silicon (CMOS)
Physical Qubits: Bell-1 (shipping)
Logical Qubits: Early stage
Target Year: Scaling
Achievement: $60M raised Jan 2026. Rack-mounted, datacenter-ready. No dilution refrigerator required. Already shipping to ESA Space HPC Centre. Standard semiconductor manufacturing.
SQC
NatureTechnology: Silicon (Atom)
Physical Qubits: 11
Logical Qubits: R&D / Scaling
Target Year: 2030+
Achievement: 99.99% single-qubit and 99.90% two-qubit gate fidelity in silicon (Dec 2025, Nature). 660ms coherence times. Leverages semiconductor fabrication.
Technology Type Explanations
Superconducting
Ultra-cold circuits (colder than space). Fast gate operations (20-100 nanoseconds) but need extreme cooling in dilution refrigerators. Dominant architecture: IBM, Google, USTC.
Trapped Ion
Individual atoms held by electromagnetic fields and controlled with lasers. Very accurate (best gate fidelities) but slower operations (1-100 microseconds). Leaders: IonQ, Quantinuum.
Neutral Atom
Arrays of atoms in optical tweezers (focused laser beams). Highly scalable (6,100-qubit record set by Caltech, Sep 2025). Can operate at higher temperatures than superconducting. Leaders: Atom Computing, QuEra, Pasqal.
Photonic
Uses particles of light (photons). Room temperature potential, compatible with standard chip fabrication. Enables networking between quantum computers. Leaders: PsiQuantum, Xanadu.
Topological
Theoretical approach where qubits are inherently protected from errors by their physical structure. Potentially needs far fewer physical qubits per logical qubit. Microsoft is the main proponent; still early-stage.
Silicon / Semiconductor
Qubits built on standard silicon chips using existing semiconductor manufacturing. Potential for Moore's Law-style scaling and cost reduction. Leaders: blueqat, Equal1, SQC, Intel.
Quantum Annealing
Specialized for optimization problems only. Not universal quantum computing. Cannot run Shor's algorithm, so cannot break encryption. D-Wave is transitioning to also include gate-model computing.
Recent Milestones That Matter for Crypto
These are the breakthroughs from late 2025 and early 2026 that most directly affect the timeline to a cryptographically relevant quantum computer (CRQC).
Error Correction: The Barriers Are Falling
- QLDPC codes reduce hardware threshold by 10x (Iceberg Quantum "Pinnacle Architecture," February 2026). Using generalized bicycle codes instead of surface codes, RSA-2048 can be broken with under 100,000 physical qubits - down from ~1 million with surface codes. Iceberg is partnering with PsiQuantum, Diraq, and IonQ, all projecting systems of this scale within 3-5 years. These are simulation-based results, not experimental, but they fundamentally reset the hardware target.
- Below-threshold QEC now confirmed by four independent teams (Google, Quantinuum, Harvard/QuEra, USTC). This means the fundamental physics of quantum error correction works: adding more qubits makes the system more reliable, not less. This was the single biggest open question in quantum computing, and it has been answered.
- ETH Zurich demonstrated lattice surgery on superconducting qubits (February 2026, Nature Physics). Lattice surgery is the fundamental operation for fault-tolerant computing - all other logical operations can be built from it. This was the first demonstration on the superconducting architecture used by IBM, Google, and USTC.
- Reed-Muller codes enable full Clifford group without ancilla qubits (Osaka/Oxford/Tokyo, February 2026). Another pathway to reducing fault-tolerance overhead - fewer physical qubits needed per logical operation.
- Alice & Bob's "Elevator Codes" achieve 10,000x lower error rates for only 3x more qubits (January 2026). Their cat qubits are naturally protected against bit-flips; the elevator codes multiply that protection at minimal cost.
- IonQ's Beam Search decoder runs in <1ms on a standard CPU (January 2026). Real-time decoding was identified by the QEC Report 2025 as the critical remaining bottleneck. IonQ estimates three 32-core CPUs could correct 1,000 logical qubits.
- IonQ achieves 99.99% two-qubit gate fidelity - world record "four nines" (October 2025). Using EQC technology on mass-manufacturable semiconductor chips. Error rate of 8.4×10⁻⁵ per gate. At this fidelity, physical-to-logical ratio drops to as low as 13:1 (vs 500:1-1000:1 for typical superconducting systems).
- Infleqtion demonstrates first Shor's algorithm on logical qubits (September 2025). 12 logical qubits with error detection and loss correction on 1,600 physical qubits. Roadmap accelerated to 30 logical qubits in 2026, 1,000 by 2030.
Scaling: The Path to Millions of Qubits
- QuTech QARPET chip benchmarks 1,058 spin qubits at 2 million qubits/mm² (February 2026, Nature Electronics). Crossbar-tiled architecture requires only 53 control lines for 23×23 tiles. Compatible with existing CMOS fabrication. This brings semiconductor qubit testing in line with traditional chip industry practices.
- First-ever readout of Majorana qubits (QuTech, February 2026, Nature). Single-shot parity measurement via quantum capacitance with >1ms coherence. Solves a decade-old experimental challenge for Microsoft's topological qubit approach.
- Stanford's cavity-array microscope enables parallel qubit readout (February 2026, Nature). Demonstrated a 40-cavity array with a 500+ cavity prototype and a clear path to tens of thousands. This solves one of the biggest barriers to million-qubit systems: reading out qubit states fast enough.
- PsiQuantum appoints AMD/Xilinx veteran as CEO (February 2026). Signals shift from R&D to deployment. Sites under construction in Australia and Chicago. $1B+ Series E funding.
- Tsinghua demonstrated 78,400 optical tweezers using a single metasurface (December 2025). Optical tweezers are used to trap atoms in neutral-atom quantum computers. This is nearly 10x the current limit and shows the path to 100,000+ qubit systems.
- QuantWare announced the VIO-40K: 10,000 physical qubits via 3D chiplet architecture with NVIDIA integration, shipping 2028 at ~EUR50 million per chip (December 2025).
Attack Algorithms: Getting More Efficient
- Kim et al. (ePrint 2026/106) revised ECDSA attack estimates (February 2026). Optimized quantum circuits for Shor's algorithm on elliptic curves achieve 40% improvement in the qubit-count x depth product over all previous work. A practical attack on Bitcoin's secp256k1 requires ~6,500 logical qubits completing in ~2 hours.
- Shor's algorithm reliability reached 99.999% across over one million test cases (December 2025). One execution now suffices where thousands were previously needed.
- Tsinghua factored N=35 on real quantum hardware using optimized Regev's algorithm with space complexity at the theoretical minimum (November 2025). Small numbers, but a direct demonstration of quantum factoring on actual hardware.
What Does This Mean for Crypto?
This section puts the qubit counts in context for cryptocurrency holders and developers.
The Gap Is Large but Closing Fast
The largest commercial quantum computers today have 1,600 physical qubits (Infleqtion Sqale) with the highest fidelity at 99.99% (IonQ, lab). Breaking Bitcoin's ECDSA requires roughly 8 million physical qubits using traditional surface codes - but the Pinnacle Architecture (Iceberg Quantum, February 2026) demonstrated that QLDPC codes can reduce the physical qubit requirement for RSA-2048 by 10x, to under 100,000. If similar techniques apply to ECDSA (plausible but not yet demonstrated), the gap narrows dramatically.
1. The gap is shrinking on multiple fronts simultaneously. It is not just qubit counts increasing - error rates are falling (IonQ's 99.99% reduces physical-to-logical ratios to as low as 13:1), algorithms are getting more efficient (Kim et al. 40% improvement), error correction codes are getting better (QLDPC 10x overhead reduction, Reed-Muller ancilla-free Clifford gates), networking allows combining multiple machines, and manufacturing is scaling up. Each of these independently compresses the timeline.
2. Company roadmaps project rapid scaling. IonQ targets 256 qubits at 99.99% fidelity in 2026 and 1,600 logical qubits by 2028. Infleqtion targets 30 logical qubits in 2026 and 1,000 by 2030. IBM targets 2,000 logical qubits by 2033. Google aims for a useful error-corrected machine by 2029. If any of these roadmaps come close to delivery, the CRQC threshold could be reached within a decade.
Why "Decades Away" Is No Longer a Safe Assumption
Nature (February 2026) reported a "vibe shift" among quantum researchers: the consensus is moving from "decades" to "within a decade" for useful quantum computers. Four independent teams have proven the physics of error correction works. The remaining challenge is engineering and manufacturing - a challenge backed by over $54 billion in government commitments and billions more in private investment.
Conservative estimates (Adam Back: 20-40 years) are increasingly outliers. The expert range now clusters around 2030-2035 for the first cryptographically relevant systems, with some projections as early as 2028.
What Should You Do?
- Never reuse Bitcoin addresses. Each spend reveals your public key. Once revealed, it is permanently vulnerable to future quantum attack.
- Monitor migration proposals like BIP-360 (Bitcoin) and the Glamsterdam/Hegota upgrades (Ethereum). These are the mechanisms that will eventually protect the ecosystems.
- Consider quantum-resistant alternatives. QRL / QRL 2.0 (Zond) has been operating with post-quantum cryptography since 2018. QRL 2.0 (Zond) adds EVM-compatible smart contracts with quantum-safe signatures.
- Take HNDL seriously. Your transactions today are being recorded by adversaries for future decryption. The Federal Reserve has confirmed these attacks are happening now.
- Stay informed. The Quantum News page tracks every major development as it happens. Quantum News
Definitions and Terminology
| Term | Simple Explanation |
|---|---|
| Physical Qubits | The actual hardware qubits. Error-prone (like a keyboard where 1 in 100 keys fail). |
| Logical Qubits | Error-corrected qubits made from hundreds to thousands of physical qubits working together. The kind needed to run Shor's algorithm. |
| Below Threshold | Critical milestone where adding MORE qubits REDUCES errors. Google Willow achieved this in Dec 2024. Three more teams have since confirmed it (Quantinuum, Harvard/QuEra, USTC). |
| FTQC (Fault-Tolerant Quantum Computing) | Quantum computers that can run indefinitely without errors accumulating. The end goal for cryptanalysis. |
| Gate Fidelity | Accuracy of quantum operations. 99.9%+ ("three nines" or better) is the threshold for practical error correction. Current best: 99.99% (IonQ EQC, lab prototype). Best deployed: 99.921% (Quantinuum Helios). |
| CRQC | Cryptographically Relevant Quantum Computer - powerful enough to run Shor's algorithm and break ECDSA/RSA encryption. None exist yet. |
| Surface Code | The most common error correction technique. Arranges physical qubits in a 2D grid. Each patch of qubits forms one logical qubit. Higher "distance" (larger patches) means lower error rates. |
| QLDPC Codes | Quantum Low-Density Parity-Check codes. A newer class of error correction that encodes many logical qubits per code block with far less overhead than surface codes (e.g., 14 logical qubits in ~860 physical qubits vs. 1 logical qubit in ~511 for surface code at distance 16). Requires non-local connectivity but reduces total physical qubit requirements by ~10x. |
| Lattice Surgery | The fundamental operation for computation on surface codes. Splits, merges, and manipulates logical qubits. First demonstrated on superconducting qubits by ETH Zurich in Feb 2026. |
| Quantum Volume (QV) | A holistic performance measure that combines qubit count, quality, connectivity, and error rates into a single number. Quantinuum Helios currently holds the record at QV >2 million. |
| ECDSA / secp256k1 | The digital signature algorithm and specific curve used by Bitcoin and Ethereum. Vulnerable to Shor's algorithm on a sufficiently powerful quantum computer. |
| Shor's Algorithm | A quantum algorithm that breaks RSA and ECDSA by solving factoring and discrete logarithm problems exponentially faster than any classical computer. |
| HNDL | Harvest Now, Decrypt Later. Adversaries store encrypted data today for future quantum decryption. The Federal Reserve has confirmed this is actively happening to blockchain data. |
| PQC | Post-Quantum Cryptography. New algorithms designed to resist both classical and quantum attacks. NIST standardized three in August 2024: ML-KEM, ML-DSA, SLH-DSA. |
Data Sources
- Company roadmaps and official announcements (IBM, Google, IonQ, Quantinuum, Infleqtion, D-Wave, PsiQuantum, etc.)
- Nature journal publications (Google Willow, Harvard/MIT/QuEra, USTC Zuchongzhi 3.2, SQC silicon qubits, Stanford cavity arrays, QuTech Majorana readout)
- Nature Electronics publications (QuTech QARPET crossbar chip)
- Nature Physics publications (ETH Zurich lattice surgery, Tokyo constant-overhead QEC)
- ePrint / arXiv preprints (Kim et al. 2026/106, Iceberg Quantum Pinnacle Architecture 2602.11457, IonQ Beam Search decoder, Shor's reliability enhancement)
- The Quantum Insider industry analysis
- Riverlane QEC Report 2025 (120 papers, 25 experts including Nobel laureate John Martinis)
- NIST post-quantum cryptography standards (FIPS 203-205)
- a16z crypto quantum computing analysis (December 2025)
- Federal Reserve HNDL study (October 2025)
Last Updated: February 16, 2026