Do Quantum Computers Threaten Blockchain Security?

A PhD in quantum cryptography says the answer is yes — eventually. But "eventually" is doing a lot of work, and the details matter more than the headline. Dr. Shai Wyborski, whose doctoral research at the Hebrew University of Jerusalem was roughly 60 percent focused on migrating Bitcoin to a post-quantum world, recently sat down on the XXIM podcast to lay out what the threat actually looks like, how far away it is, and which blockchain architectures might adapt more gracefully than others.

The conversation, reported by KASmedia, is worth a close read for anyone holding KAS, mining blocks, or managing their own keys. Not because the sky is falling today — it is not — but because the difference between a chain that *can* migrate and one that cannot is a long-term self-custody question.

The Threat in Plain Terms

Quantum computers do not solve every problem faster than classical machines. Dr. Wyborski frames it clearly: they "can't increase the type of problems that such a computer can do, but we do believe that it increases the set of problems that such a machine can solve quickly." That distinction matters. A quantum computer is not a magic faster CPU. It is a fundamentally different kind of machine — one that uses qubits existing in superposition, meaning each qubit can represent 0 and 1 at the same time — which lets it explore many computational paths in parallel.

The breakthrough that worries cryptographers is Shor's Algorithm. Shor's can find the prime factors of a large integer efficiently, something no classical machine can do at scale. Why does factoring matter? Because the public-key signature schemes that secure nearly every blockchain — the math that lets you prove you own an address and authorize a transaction — rely on the hardness of factoring and discrete logarithm problems. If those problems become easy, anyone could forge your signature. Ownership proofs collapse.

For Bitcoin, Kaspa, and most current chains, that signature is ECDSA or Schnorr. Both are classical public-key schemes. Neither is quantum-resistant.

How Far Away Is This?

The timeline is uncertain, and the source text is honest about that. Some forecasts place scalable, fault-tolerant quantum computers in the 2030s. Dr. Wyborski's own estimate, discussed in the interview, is that an attack on Bitcoin's signature scheme would require thousands of logical qubits — and after accounting for noise and error correction, potentially millions of physical qubits. Progress toward that number is steady but slow.

That gives the ecosystem a window. Not an infinite one, but a real one. "If we woke up twenty years from now and scalable quantum computers were in every garage," Dr. Wyborski says, "all pre-quantum Bitcoin would be vulnerable." The phrasing is deliberate: the danger is not that quantum computers exist today, but that unmigrated coins and addresses would be exposed whenever they do arrive.

This is especially relevant for coins that have been sitting in the same address for years — the so-called "lost" Bitcoin, early mining rewards, any UTXO whose public key has been exposed on-chain through a prior spend. In Kaspa's case, the UTXO model means every transaction reveals the public key of the inputs being spent. If quantum computers can derive private keys from public keys, then every previously exposed key becomes a target.

Post-Quantum Signatures: The Known Solution

The straightforward fix is to replace classical signature schemes with post-quantum alternatives — cryptographic methods specifically designed to resist quantum attacks. Several families exist: lattice-based, hash-based, code-based. They are an active area of standardization (NIST finalized its first post-quantum standards in 2024).

But there is a cost. Post-quantum signatures are almost universally larger and computationally heavier than ECDSA or Schnorr. A hash-based signature like SPHINCS+ might produce signatures several kilobytes in size, compared to the 64 bytes of a Schnorr signature. Lattice-based schemes are more compact but still larger than what current chains were optimized for.

This is where the architecture of the chain itself becomes a practical constraint. On a linear blockchain with a fixed block size and long confirmation times, bolting on larger signatures means fewer transactions per block, longer propagation delays, and higher fees. The migration path is narrow.

Dr. Wyborski has also explored more radical approaches. His own research includes a protocol that achieves a 90 percent accurate blockchain without signatures at all, pointing toward potential architectural fixes that go beyond simply swapping one signature scheme for another.

Why Kaspa's BlockDAG Architecture Matters

This is the core of Wyborski's analysis as reported by KASmedia: Kaspa's high-throughput BlockDAG — the directed acyclic graph structure that allows multiple blocks to be produced and confirmed in parallel rather than competing for inclusion in a single chain — may offer more room for integrating larger or more complex post-quantum signature schemes than slower, linear systems.

The argument is structural, not speculative hype. A linear chain with a 10-minute block time and a tight block size budget is already at capacity under normal load. Adding kilobytes of post-quantum signature data to every transaction squeezes throughput further. A BlockDAG, by contrast, is designed to scale throughput horizontally: more blocks, more parallelism, more aggregate data capacity. That extra headroom is precisely the kind of slack a migration to heavier cryptography would require.

KASmedia frames this as "a research argument rather than a deployed capability," and that framing is important. Kaspa does not have post-quantum signatures today. No production blockchain does. But the question for long-term holders and miners is not just what a chain does now — it is what the architecture *allows* it to do when the migration window opens.

Dr. Wyborski is now working on Tectonic.xyz, a project focused on building post-quantum blockchain solutions, which underscores that this is not a thought experiment. Active engineering work is underway.

What This Means for KAS Holders and Miners

There are no immediate action items. The quantum threat is real but not imminent, and no one needs to move their KAS today. But the conversation shapes how we think about long-term value:

• Self-custody is not just a present-tense decision. If you are holding KAS in a wallet whose public key has been exposed on-chain (i.e., you have previously sent a transaction from that address), you are relying on the hardness of ECDSA/Schnorr for the lifetime of those coins. A chain that migrates gracefully protects you. A chain that cannot does not.

• Architecture is destiny when it comes to migration. A chain optimized for a single cryptographic regime may struggle to absorb a fundamentally different one. Throughput, block structure, and confirmation speed are not just performance metrics — they are the degrees of freedom available when the cryptographic layer needs to change.

• Mining economics and protocol upgrades are intertwined. Miners secure the chain. If a chain cannot upgrade its signature scheme, the security model it offers miners degrades over time. Kaspa's BlockDAG is not just faster; it is structurally more adaptable, which is a long-term argument for the viability of mining KAS.

• The market is not thinking about this yet. That is fine. The best time to understand a problem is before it becomes a headline. Dr. Wyborski's work, and projects like Tectonic.xyz, are building the intellectual infrastructure for the migration. The chains that listen early will be the chains that survive.

The Honest Bottom Line

Quantum computing is not science fiction, but it is also not a pressing operational risk for the average KAS holder today. The real takeaway from Wyborski's analysis is structural: not all blockchains will be equally easy to migrate. High-throughput architectures with inherent parallelism — Kaspa's BlockDAG is the example cited — have more room to absorb the overhead of post-quantum cryptography without sacrificing the properties that make the chain useful.

For anyone managing their own keys, the discipline is the same now as it will be later: understand the security model, protect your keys, and pay attention to the protocol-level decisions that determine whether your chain can adapt. The quantum era is coming. The question is not whether, but whether your chain will be ready.

---

*Source: Do Quantum Computers Threaten Blockchain Security? — KASmedia*