Banks, by contrast, run on opaque, multi-layered legacy systems built over decades. Draper describes this infrastructure as "outdated" and "complex," creating a sprawling attack surface that is fundamentally harder to defend than a single-purpose blockchain . The attack surface for a bank includes mainframe systems, SWIFT messaging, Fedwire access, and decades of accumulated technical debt — all secured by the same RSA and ECC algorithms vulnerable to Shor's algorithm.
Draper also sees an upside for early adopters. He believes quantum technology could ultimately strengthen Bitcoin's security rather than destroy it, arguing that the first movers who prepare for the quantum era — developers building post-quantum address formats, miners upgrading their hardware, and users moving funds to quantum-resistant wallets — stand to benefit as the network evolves .
Bitcoin core developer Jameson Lopp has pushed back on Draper's thesis. Lopp argues the centralized nature of banks is actually their advantage in a cryptographic crisis: a bank's CISO can mandate that every system migrates to post-quantum cryptography (PQC) on a fixed schedule, while Bitcoin requires broad community consensus through a Byzantine fault-tolerant governance process that can take years .
Lopp has previously estimated that Bitcoin's transition to quantum-resistant cryptography could take five to ten years — a timeline that collides uncomfortably with consensus estimates of CRQC arrival around 2030-2035 . The Citi Institute notes that while approximately 25% of Bitcoin coins exist in addresses with exposed public keys — making them theoretically vulnerable — newer blockchains face much higher exposure percentages but can upgrade faster through their more centralized governance
.
Government institutions and security researchers have a more urgent warning. The real quantum threat isn't about which system gets cracked first on some future Q-Day — it's about data being stolen right now.
The attack strategy known as "Harvest Now, Decrypt Later" (HNDL) describes a well-documented practice where nation-state adversaries and sophisticated actors systematically intercept and archive encrypted data today, with the intention of decrypting it once quantum computers mature .
The Federal Reserve published a dedicated paper in 2026 analyzing HNDL risks for distributed ledger networks. Its conclusion was stark: while cryptocurrency networks could deploy PQC to protect future transactions, "the privacy of previously recorded transactions remains vulnerable" to retroactive decryption . Every Bitcoin transaction ever signed with ECDSA sits permanently on a public, immutable ledger — available for future quantum decryption.
The World Economic Forum has similarly warned that the quantum threat "migrates from a future risk to a present, active concern" under the HNDL model, specifically for data with "high value and long shelf-life" . In a January 2026 warning cited by LinkedIn researchers, the WEF cautioned that if wealthy nations and large corporations become quantum-safe while the rest of the world lags behind, the resulting asymmetry could create systemic vulnerabilities
.
The Bank for International Settlements (BIS) has gone further, stating that the dangers posed by quantum computers are "more imminent than their development horizon" precisely because HNDL attacks compromise data confidentiality, integrity, and authentication before quantum hardware is actually ready . The BIS paper notes a CRQC may arrive "as soon as in the next decade."
The Cloud Security Alliance and Palo Alto Networks both describe HNDL as a strategy "well-documented by Western intelligence agencies and national cybersecurity authorities" . The CSA specifically applied this analysis to AI infrastructure and distributed ledger networks, noting that encrypted data in transit today faces retroactive exposure at an unknown future date.
The timeline for migration is converging around a critical window:
The Bitcoin network's specific exposure is quantifiable. The Citi Institute estimates about 25% of Bitcoin coins sit in addresses with exposed public keys — wallets that have spent coins and thus revealed their public key on-chain, making them vulnerable to Shor's algorithm when a sufficiently powerful quantum computer arrives . Coins in addresses that have never spent (approximately 75% of all BTC) are protected by the additional hash of a public key through SHA-256 and RIPEMD-160, offering a second layer of defense that quantum attacks would need to overcome.
BIP 360, a Bitcoin Improvement Proposal introducing quantum-resistant address formats, is currently the only formal response from the Bitcoin development community . No activation timeline has been proposed. Jameson Lopp's estimate of a five-to-ten year migration window means work would need to begin soon to stay ahead of quantum milestones
.
On the banking side, Citi's analysis quantifies the stakes differently: a single-day quantum attack on one of the top-five U.S. banks' access to the Fedwire settlement system could indirectly impact 10-17% of U.S. GDP through cascading failures in the payments infrastructure . Centralized systems concentrate risk in ways that permissionless networks distribute it.
Draper's bet is, at its core, a bet on architecture. He's wagering that Bitcoin's transparent, forkable, decentralized design will prove more adaptable than the opaque, interconnected, and permissioned systems that run global banking. Government research suggests both systems face a ticking clock — and the HNDL threat means the clock started the moment an adversary captured their first encrypted packet.
Comments
0 comments