Europol has called on cryptocurrency developers and wallet providers to begin preparing for quantum computing threats, following the publication of two security reports on 7 October.
The agency’s announcement identifies the cryptographic keys controlling wallets as a central concern. It says the timing of quantum capabilities powerful enough to threaten those protections remains uncertain, but coordinating security upgrades will take time.
Key Takeaways
- Europol is calling for early preparation and coordinated security upgrades.
- A sufficiently powerful quantum computer could threaten the cryptography used to authorise wallet transactions.
- Keeping private keys offline addresses different risks from upgrading the underlying cryptography.
- The announcement does not report a quantum attack against cryptocurrency holders.
Why Wallet Keys Are the Main Concern
A sufficiently powerful quantum computer could derive a private key from an exposed public key, potentially allowing someone to move funds without the owner’s permission.
Europol distinguishes this risk from the security of blockchain history. It describes the hash functions underpinning important aspects of blockchain integrity as comparatively resistant to quantum attacks.
Its assessment calls for a phased transition to quantum-resistant cryptography, with developers, wallet providers and users coordinating the changes.
The distinction matters because stealing control of funds and rewriting a blockchain are different problems. A network could continue processing transactions while accepting a signature created with a compromised key.
Why an Offline Wallet Is Only Part of the Answer
Different types of cryptocurrency wallets protect private keys in different ways. A hardware wallet can keep keys separate from an internet-connected computer, reducing exposure to some forms of malware and unauthorised access.
However, storing a key offline does not change the mathematical relationship between that key and its public counterpart. Device security and the strength of a signature algorithm therefore need separate consideration.
An offline transaction-signing workflow illustrates the difference. An isolated device signs a transaction, and another device broadcasts it to the network. This protects the signing environment, but the resulting signature still follows the rules supported by the blockchain.
For holders, the practical implication is that “offline” and “quantum-resistant” describe different security properties. One label should not be treated as proof of the other.
What a Security Transition Would Involve
Europol’s cryptocurrency report, Quantum Computing and Cryptocurrencies, examines the technical risks and possible mitigation measures.
Understanding how crypto payments work helps explain the coordination involved. Wallet software prepares and signs transactions, while the network checks whether those transactions satisfy its rules.
A new signing method must therefore work with the system that verifies it. Depending on a network’s design, migration could involve changes to wallet software, verification rules and the way users manage their holdings.
Clear instructions would also be necessary. Users would need to know which assets and addresses an upgrade supports, whether they must take action and how to verify that an update comes from the legitimate provider.
Conclusion
Europol’s call puts quantum preparation on the crypto industry’s security agenda without establishing a deadline for a practical attack. The immediate work is to assess exposure, test compatible protections and plan upgrades carefully. For wallet users, following verified development updates remains more useful than treating every quantum-security headline as an emergency.
