Bitcoin (BTC) Faces Quantum Risk to 7 Million BTC, Tom Lee Says

Bitcoin News

Fundstrat co-founder and Bitmine (BMNR) chairman Tom Lee placed a 2028-to-2029 deadline on Bitcoin (BTC) security, arguing that quantum computers may be able to defeat the network’s current protections within that window. Speaking during a recent live appearance, Lee cited Google research while claiming that modern computing power could make the cryptocurrency’s existing safeguards obsolete. His central concern is not a near-term market shock, but a future technical failure that would leave the community without a coordinated response. He said the crypto ecosystem has not yet produced a unified rescue plan, and he framed the issue as a structural test for the largest digital asset. Lee also drew a distinction between Bitcoin and other major networks, saying he believes Ethereum and Solana are considerably better protected from the same class of risk. That comparison matters because it moves the debate from broad altcoin anxiety to a specific question about Bitcoin’s signature model and upgrade path. The warning arrived as a high-profile opinion call rather than a confirmed technical incident. No quantum machine has demonstrated the ability to spend BTC illegally, and the claim should be treated as a forward-looking risk assessment. Still, Lee’s timeline gives investors a concrete horizon: 2028 to 2029. In COINOTAG’s reading, the market implication is not immediate panic, but a longer-term governance question. If a plausible threat window is only a few years away, developers, miners, wallet providers and exchanges may need to align on migration procedures before users are forced to act. The remarks also underline how Bitcoin’s security assumptions are becoming part of mainstream institutional conversation, especially as the asset is increasingly discussed alongside bear market cycles, liquidity conditions and macro risk rather than only as a speculative instrument. The comment also puts Bitcoin developers under greater scrutiny, because any future response would require broad consensus across node operators, miners and custodians.

Hashcash creator Adam Back pushed back on that framing, saying in a public post that Bitcoin does not rely on encryption when coins are spent. His correction shifts the focus from a vague hacking scenario to the actual mechanics of the network. Coin ownership is secured by digital signatures, specifically ECDSA, while seed phrases are protected by entropy levels that a quantum machine cannot simply brute-force. The more precise issue is Shor’s algorithm, which could theoretically derive a private key from a public key once that public key has been revealed on-chain. According to the technical breakdown, that exposure applies to roughly 30% to 35% of total supply, or about 7 million BTC, sitting in old legacy addresses or reused wallets. Much of that supply is dormant, including lost wallets and the roughly 1 million BTC widely attributed to Satoshi Nakamoto. Because those owners may never migrate to quantum-safe addresses, the network could face a difficult choice: leave the coins exposed or freeze them through the controversial BIP-361 proposal. As of now, cryptographically relevant quantum computers capable of executing such an attack do not exist, so the threat remains theoretical. Bitcoin developers have spent years testing post-quantum signature algorithms and could move the network to new cryptographic rails through a hard fork. This is therefore less a story about an imminent exploit and more a governance stress test. It also differs from ordinary market narratives, such as whether the asset is near an all-time high or entering a corrective phase. That distinction is central, because the risk is not evenly distributed across every wallet. Fresh addresses that have not revealed public keys are not in the same category as legacy coins whose keys are already visible. For investors, the practical takeaway is to distinguish theoretical cryptography risk from active network failure.

COINOTAG’s analysis ties both statements to one theme: Bitcoin’s security is moving from theoretical debate to governance work. Lee’s 2028 warning is an opinion-prediction, while Back’s correction narrows the claim to signature exposure rather than encryption. The primary-source anchor is BIP-361, the proposal that would freeze vulnerable coins if the network chooses containment over exposure. That document shows the contingency exists, but it also underscores the political difficulty of immobilizing roughly one-third of supply. The market is not facing a live exploit. It is facing a deadline for coordination. Wallet providers and exchanges would also need clear migration guidance.