Europol puts quantum risk on crypto wallet keys, not blockchains

Europol’s European Cybercrime Centre published a cryptocurrency-focused quantum-computing assessment on October 7, urging protocol developers, wallet providers and policymakers to begin planning for post-quantum security before a capable machine exists.

The report’s central distinction is important: the clearest exposure lies in the public-key cryptography used to authorize transactions, not in an automatic collapse of blockchain records or mining. A sufficiently powerful quantum computer could theoretically derive a private key from a visible public key and authorize an otherwise fraudulent transfer. Hash functions used to link blocks and support proof-of-work systems are comparatively resistant, according to the agency.

That is a warning about migration readiness, not evidence of an active exploit. Europol documents no cryptocurrency theft performed with a quantum computer, does not say a cryptographically relevant machine exists and does not predict a reliable arrival date.

Why wallet keys are the focus

A cryptocurrency transaction generally uses a private key to create a digital signature and a corresponding public key to let the network verify it. The security assumption is that an attacker cannot feasibly reverse that relationship and recover the private key.

Europol says a sufficiently advanced quantum computer using Shor’s algorithm could undermine widely used elliptic-curve signature systems. The immediate target would therefore be spend authority: an attacker who recovered a private key could create a valid-looking signature and move the associated assets.

Exposure is not identical across every address or protocol. It depends partly on whether a public key is already visible and on how a network reveals keys during spending. Some designs conceal a public key behind a hash until a transaction is broadcast, reducing the period in which an attacker could act but not eliminating the underlying migration problem.

The assessment also separates signature security from hashing. Quantum algorithms can weaken the effective security margin of hash functions, but Europol concludes that the computational burden remains far greater than the signature threat under foreseeable conditions. That distinction undercuts claims that quantum computing would simply rewrite every blockchain at once.

Migration is the difficult part

Europol recommends a phased move toward quantum-resistant cryptography, supported by stronger wallet security, flexible key management and advance testing. The operational challenge is coordination: decentralized networks must agree on new transaction rules, software must support them, custodians must update infrastructure and holders may need to move assets.

Larger post-quantum signatures could also compete for limited block space, affecting capacity, fees and confirmation times. Those consequences depend on the algorithm and implementation ultimately chosen; the report does not establish one universal cost or migration design.

Coins controlled by already exposed public keys present a harder problem. A future protocol upgrade cannot privately replace a holder’s key on that holder’s behalf. Migration would generally require the legitimate owner to authorize a move before an attacker can exploit the old signature scheme, raising unresolved questions about dormant and inaccessible holdings.

What the report changes now

The October 7 publication adds an EU law-enforcement assessment to a debate already underway among cryptographers and blockchain developers. Its contribution is not a new deadline or binding rule. It is a risk-prioritization argument: inventory exposed systems, develop upgrade paths and communicate migration requirements while the threat remains prospective.

Coinburn is publishing this explainer on October 10, three days after the report appeared, because the implications extend beyond its release day and concern long-running protocol planning. The remaining uncertainty is substantial. Hardware timelines, attack costs, applicable algorithms and network responses can all change. The evidence supports preparation, not claims that a quantum attack is imminent or that any cryptocurrency is already compromised.