RESEARCH · APRIL 2026

When will your Bitcoin wallet
be hackable?

A pessimistic, source-cited forecast of the cost and timeline of quantum attacks on Bitcoin's secp256k1 elliptic curve.

2028
First public hack expected
2031
Mass exploitation begins

1. Executive summary

Quantum hardware progress against elliptic-curve cryptography accelerated dramatically in 2026. In April, Project Eleven awarded a 1 BTC bounty to Giancarlo Lelli for breaking a 15-bit ECC key on real quantum hardware — a 512× increase over the previous record (6 bits, set in September 2025). Combined with Google's March 2026 whitepaper showing a 20× resource reduction for breaking RSA-2048, and Caltech/Oratomic's neutral-atom architecture estimate of ~10,000 qubits to break secp256k1, the timeline for a first-of-its-kind Bitcoin wallet hack has compressed materially.

Our model places the first public Bitcoin wallet hack in 2028, mass exploitation by 2031, and trivial-cost attacks (under $100) by 2034.

2. Methodology

We model the cost to hack a single Bitcoin wallet as:

Cost(year) = Q(year) × $/qubit-hour(year) × T(year)

Q(year)
Qubits required
Physical qubits to break secp256k1. Starts at ~500K (Google 2026). Halves every ~18 months.
$/qh(year)
Cost per qubit-hour
Wright's Law for compute (~50% YoY). $20/qh today → fractions of a cent by 2035.
T(year)
Time per wallet
Wall-clock hours. 24h today → minutes by 2035 as gate fidelity improves.

3. Cost-to-hack timeline

Year Qubits $/qh Hours Total cost Status / likely attacker
2026500K$20.0024$240MTheoretical · Nation-state
2027280K$9.0018$45MTier-1 intelligence agency
2028150K$4.0012$7.2MFirst public hack expected
202980K$1.808$1.15MQ-Day per Google · Organised crime
203040K$0.805$160KMid-tier criminal groups
203120K$0.353$21KMass exploitation begins
203210K$0.151.5$2.3KCrypto migration crisis
20336K$0.060.75$270Hobbyists
20344K$0.0250.4$40Anyone with internet
20352.5K$0.010.2<$5Bitcoin legacy chains broken
Why this is pessimistic, not alarmist: Each input is taken from publicly published research and corroborated against IBM, Google, and IonQ roadmaps. The model assumes continued progress at the current rate — not breakthroughs, not stagnation. The April 2026 acceleration suggests these timelines may even be conservative.

4. Real-world milestones (Sep 2025 – Apr 2026)

5. Bitcoin's structural exposure

Bitcoin's vulnerability comes from public-key reuse. Any address that has ever sent a transaction has its public key permanently visible on-chain. Approximately 6.9 million BTC currently sit in such addresses — roughly 33% of all circulating supply. These are directly attackable on Q-Day.

6. The QuanChain solution

QuanChain's TADEQS (Transcendent Adapting Dynamic Efficients Quantum Secure) architecture eliminates this exposure entirely:

7. Sources

QuanChain Research · April 2026
quanchain.ai/resources/wallet-q-hacking
Forecasts are not financial or security advice. Actual timelines depend on hardware breakthroughs, algorithmic discoveries, and economic incentives that cannot be predicted with certainty.