Google Willow quantum breakthrough sharpens bitcoin's key debate

The latest Google Willow quantum breakthrough does not break bitcoin, but it removes one of the engineering excuses for treating the threat as distant. Google Quantum AI said this week that a technique called magic state cultivation worked on its Willow processor, cutting errors about 40-fold compared with uncultivated states. The result, published in Science, landed the same day nine crypto firms formed a group to prepare blockchains for quantum attacks.

What happened

Magic states are special quantum states needed for "universal" quantum computing, and each one is consumed when used. In its research blog, Google said some estimates had up to 95% of a quantum computer's capacity going into producing them. Its team reported T-states with a record logical fidelity of 99.99% and showed states could be moved from a color code into a surface code.

CoinDesk added important caveats. Only about 8% of preparation attempts passed the checks, and the 99.99% figure applies only to those survivors. The result also does not make an attack 40 times cheaper, because Google's March estimate of a sub-500,000-qubit machine able to break bitcoin and Ethereum signatures already assumed efficient magic-state production.

On Thursday, nine companies including Hacken, the Midnight Foundation, Quantus and Postquant Labs launched the Quantum Alliance to publish shared security tests and migration guidance. The alliance estimates that 6.4 million bitcoin, or 30.2% of supply, already have exposed public keys, including about 1.1 million attributed to Satoshi Nakamoto.

Why it matters

Exposed keys are the crux. A large enough quantum computer running Shor's algorithm could work back from a public key to the secret key and sign transactions as the owner. Coins whose keys have been visible since they were mined, or whose owners lost access, cannot be moved to safer formats without action by the holder.

Experts still disagree on timing. Richard Carback of Postquant Labs called 2028 realistic for a machine able to break today's cryptography, while Bryn Bennett of The Vault said nobody knows the date and the real question is whether custodians can migrate in time. One modeled attack in Google's March paper needed roughly 500,000 reliable magic states every second.

This follows Coinbase's post-quantum readiness work and Starknet's quantum-resistant layer-1 plan. The Google Willow quantum breakthrough adds hardware evidence to what had been a largely theoretical debate.

What's next

Google said it still needs to demonstrate cultivation at a larger scale and that many technical challenges remain. Bitcoin's harder problem is governance: replacing signature schemes needs agreement among developers, miners, wallets, exchanges and users, and proposals to freeze or move vulnerable coins have drawn objections on property-rights grounds.

Watch for the alliance's first test suite, any new bitcoin improvement proposals on post-quantum signatures, and movements of long-dormant coins, such as the 100.02 BTC untouched since July 2010 that moved on Oct. 7. Each of those would show whether the Google Willow quantum breakthrough speeds up a migration plan or simply sharpens the argument.