Q-Day is the term for the moment a quantum computer becomes powerful enough to break the elliptic curve cryptography (ECDLP-256) that secures every cryptocurrency wallet in existence — Bitcoin, Ethereum, Solana, all of them. On Q-Day, any public key that has ever appeared on-chain can be reversed into its private key. Every wallet that has ever sent a transaction becomes exposed.
This isn't science fiction. On March 31, 2026, Google Research published a paper showing that breaking ECDLP-256 now requires only 500,000 physical qubits — a 20× reduction from previous estimates. They can do it in minutes. Google has set a 2029 migration deadlinefor transitioning to post-quantum cryptography. They're working with Coinbase, the Ethereum Foundation, and Stanford to prepare.
The clock is ticking. The question isn't if — it's when.
TIME REMAINING UNTIL GOOGLE'S 2029 MIGRATION DEADLINE
NEW — MARCH 31, 2026Google Research publishes updated quantum resource estimates. ECDLP-256 breakable with 500,000 physical qubits. 20× fewer than previous estimates.
THE LORE
30 Years in the Making
In 1994, mathematician Peter Shor published an algorithm that could theoretically break the cryptography protecting every digital system on Earth — if a powerful enough quantum computer existed. For 30 years it remained theoretical. A curiosity. A "what if."
Then quantum hardware started catching up. Google's quantum team has been preparing since 2016, running post-quantum cryptography experiments in Chrome while most of crypto was still arguing about block sizes. In August 2024, NIST finalized the first post-quantum cryptographic standards — the official replacements for the math that secures your wallet. In December 2024, Google unveiled Willow, a 105-qubit processor that solved a problem in 5 minutes that would take classical computers 10 septillion years.
And then today — March 31, 2026 — Google published the paper that changed the math. 500,000 physical qubits to break ECDLP-256. 20× fewer than anyone estimated. Minutes, not years. They named Coinbase, the Ethereum Foundation, and Stanford as collaborators. They engaged the US government before publishing. They set a 2029 deadline.
Q-Day went from "someday" to "soon." The people who built the quantum computers are telling you to prepare. $QDAY is the signal.
1. "We show that future quantum computers may break the elliptic curve cryptography that protects cryptocurrency and other systems with fewer qubits and gates than previously realized."
2. "We have compiled two quantum circuits that implement Shor's algorithm for ECDLP-256: one that uses less than 1,200 logical qubits and 90 million Toffoli gates and one that uses less than 1,450 logical qubits and 70 million Toffoli gates."
3. "We estimate that these circuits can be executed on a superconducting qubit CRQC with fewer than 500,000 physical qubits in a few minutes."
4. "This is an approximately 20-fold reduction in the number of physical qubits required to solve ECDLP-256."
5. "While viable solutions like PQC exist, they will take time to implement, bringing increasing urgency to act."
PHYSICAL QUBITS
500K
LOGICAL QUBITS
1,200
REDUCTION
20×
TIME TO CRACK
Minutes
Authors: Ryan Babbush (Director of Research, Quantum Algorithms) and Hartmut Neven(VP of Engineering, Google Quantum AI). Google has led post-quantum cryptography research since 2016. They're working with Coinbase, Stanford Institute for Blockchain Research, and the Ethereum Foundation on migration.
ECDLP-256 (Elliptic Curve Discrete Logarithm Problem over a 256-bit field) is the cryptographic foundation of virtually every blockchain. It's what turns your private key into your public key. Break ECDLP-256, and you can derive any private key from its public key. Every wallet that has ever transacted — its public key is on-chain, visible, waiting.
CHAIN
SIGNATURE SCHEME
STATUS
Bitcoin
secp256k1 (ECDSA)
AT RISK
Ethereum
secp256k1 (ECDSA)
AT RISK
Solana
Ed25519 (EdDSA)
AT RISK
Cardano
Ed25519
AT RISK
Polygon
secp256k1 (ECDSA)
AT RISK
Avalanche
secp256k1 (ECDSA)
AT RISK
Cosmos
secp256k1 / Ed25519
AT RISK
Near
Ed25519
AT RISK
Key insight: Both ECDSA (Bitcoin, Ethereum) and EdDSA (Solana) are based on elliptic curve cryptography. Shor's algorithm breaks both. The specific curve doesn't matter — secp256k1, Ed25519, P-256 — they all fall to a sufficiently powerful quantum computer. There are no safe chains.
CHRONOLOGY
The Timeline
1994
Peter Shor publishes quantum factoring algorithm
Theoretical framework for breaking RSA and ECC with quantum computers. The math exists.
Shor's algorithm efficiently solves the discrete logarithm problem on elliptic curves. Given a public key (a point on the curve), it can find the private key (the scalar) in polynomial time. Classical computers can't do this — it would take longer than the age of the universe. A quantum computer does it in minutes.
Public Key → Shor's Algorithm → Private Key Time: O(n³) vs classical O(2^(n/2))
WHAT SURVIVES QUANTUM
Hash functions (SHA-256, Keccak) are quantum-resistant. Grover's algorithm only gives a square-root speedup — SHA-256 still has 128-bit security against quantum. Bitcoin's proof-of-work is safe. Your wallet keys are not.
Google's new numbers:Two quantum circuits for ECDLP-256 — (1) 1,200 logical qubits + 90M Toffoli gates, (2) 1,450 logical qubits + 70M Toffoli gates. Executable on ~500K physical qubits in minutes. For reference, Google's Willow chip has 105 qubits. The gap is closing exponentially. Qubit counts have been doubling roughly every 1-2 years.