A cybersecurity expert, having transitioned from hacking to defense, is raising alarms about quantum computing, characterizing it as a major, underestimated risk to the cryptocurrency world.

David Carvalho, leading the post-quantum infrastructure firm Naoris Protocol as CEO, recounts his early hacking days starting at age 13. He used techniques like crafting spam emails, initially to explore job opportunities and attract the attention of potential employers.

This early curiosity evolved into a career in cybersecurity, where he applied his skills to safeguarding systems rather than compromising them. Now, his focus is on creating quantum-resistant infrastructure for decentralized networks. Carvalho suggests that the underlying cryptography of prominent blockchains, including Bitcoin and Ethereum, is critically vulnerable.

“The cryptographic security of most blockchains mirrors the general weaknesses found globally,” Carvalho stated. “The emergence of quantum computing poses a significant danger to all systems, similar to the catastrophic impact of meteors on dinosaurs.”

While some Bitcoin and blockchain developers believe there’s ample time for adaptation, Carvalho believes the opportunity is rapidly diminishing. Attempts to implement quantum-resistant digital signatures are in motion, but he emphasizes that these efforts lack the urgency and broad implementation necessary to counter the impending threat.

Recent advancements show that quantum computing remains a long-term risk to Bitcoin security. Source: Kevin Rose

The Immediate Risk: Data Harvesting Targeting Bitcoin

The potential for quantum computers to compromise Bitcoin has been considered a futuristic threat for several years. However, recent progress indicates that this threat is evolving from a theoretical concern into a present-day reality.

Governments and major technology companies are actively preparing for the “harvest now, decrypt later” strategy. U.S. federal bodies like the National Institute of Standards and Technology have stressed the importance of adopting quantum-resistant encryption since 2022. A White House directive has prompted the NSA to recommend that government contractors shift to post-quantum cryptography by 2035.

Related: Potential Decision on Controversial Bitcoin Upgrade BIP-119 Expected by Year’s End

Presently, quantum technology cannot break Bitcoin’s SHA-256 hashing algorithm or the Elliptic Curve Digital Signature Algorithm (ECDSA) that protects crypto keys. However, researchers, like Carvalho, warn that exponential technological advancements—especially when combined with AI—could emerge unexpectedly. Nation-state actors and cybercriminals are currently gathering encrypted blockchain data in anticipation of decrypting it once quantum computing capabilities advance.

“Attackers collecting encrypted blockchain data today are not waiting for immediate opportunities,” Carvalho explained. “They are compiling vast datasets for future exploitation. Once the technology matures, they will have the power to uncover years’ worth of sensitive data within minutes.”

Despite these warnings, the majority of the Bitcoin community does not perceive quantum computing as an imminent threat, leading to a lack of widespread concern.

Cryptocurrencies, Security, Bitcoin Price, Quantum Computing, Bitcoin Adoption, Analysis
Blockstream CEO Adam Back estimates that quantum-related risks to Bitcoin are unlikely within the coming decade. Source: Adam Back

Bitcoin’s existing cryptographic methods are currently deemed secure against present quantum computers, and developers have initiated exploring defensive measures such as BIP-360, which suggests quantum-resistant address formats. Initiatives like Carvalho’s Naoris Protocol are actively assisting blockchains in transitioning to cryptographic standards robust against quantum threats.

The True Threat: Quantum Computing Paired with AI

While many discussions around quantum threats center on brute-force assaults on cryptographic keys, Carvalho contends that the fusion of quantum computing and artificial intelligence represents the most severe hazard. He warns that their combined capabilities could enable subtle, uneven attacks capable of dismantling crypto systems with precision rather than overwhelming them with raw computing power.

“People are anticipating a clear warning, but it won’t happen. There won’t be a notification that a decade-old Bitcoin wallet has been compromised. Instead, funds will simply disappear, and the method and perpetrator will remain unknown,” he cautioned.

Related: Bitcoin Miners’ Investments in AI Proved Profitable Last Year

AI is already integrated into cybersecurity for purposes like intrusion detection, smart contract verification, and anomaly identification. However, the same tools could be turned against the system if they fell into malicious hands. An AI attacker could automatically check open-source wallets for rare bugs, simulate validator responses, and adapt to network activities in real-time. Paired with a quantum computer capable of breaking elliptic-curve private keys, the result wouldn’t be a noticeable breach but a “silent collapse,” as Carvalho terms it.

“It’s not solely about stealing digital currency,” he clarified. “It’s about gradually undermining trust. Entire blockchains could be compromised, governance systems spoofed, with no one knowing how it happened or who’s responsible.”

Cryptocurrencies, Security, Bitcoin Price, Quantum Computing, Bitcoin Adoption, Analysis
Approximately 25% of Bitcoin is secured within older address formats, increasing its susceptibility to quantum attacks.

AI-driven tests have identified vulnerabilities in cryptographic libraries that traditional tools overlook. Combined with attackers amassing encrypted data using the “harvest now, decrypt later” approach, the foundation for a widespread breach may already be in place.

Carvalho argues that this represents Bitcoin’s true downfall if ignored — not a live-streamed cracking of SHA-256, but a gradual, imperceptible weakening of the trust that underpins the entire system.

Bitcoin’s Vulnerability to Weak Links

Despite claims of Bitcoin’s decentralization, its actual infrastructure is highly centralized. Cloud platforms, mining pools, and validator networks offer vulnerable points that quantum-equipped adversaries could exploit. If a single cloud provider hosting numerous full nodes is compromised, the effects could spread throughout the entire network, regardless of the protocol’s purported decentralization.

“Decentralization looks promising on paper, but if everyone relies on the same core infrastructures or trusts a small number of third-party APIs, the battle is already lost.”

The quantum threat could exploit systemic blind spots: reliance on centralized infrastructure, outdated technology, and implicit trust.

Solutions are under development. Carvalho’s Naoris, for example, utilizes national security frameworks to construct decentralized systems designed to withstand quantum threats. Others are developing quantum-resistant rollups, new key formats, and protocol upgrades through Bitcoin Improvement Proposals (BIPs) or utilizing inherently secure technologies like StarkWare’s STARKs.

The threat is increasing, but so is the defensive response. The question is whether the cryptocurrency community will act before it’s too late.

Magazine: Bitcoin Pioneer Willy Woo Explains His Decision to Sell Most of His Bitcoin