On June 22, 2026, President Donald Trump signed two executive orders: Executive Order 14411, which launched the Quantum Computer for Application Development and Discovery Science (QC-ADDS) Effort.
It aims to deliver an advanced quantum computer to a Department of Energy facility by 2028 and issue a cybersecurity order directing a nationwide transition to post-quantum cryptography for federal digital signatures by December 31, 2031.
This creates tension for , as Coinbase’s quantum advisory council estimates that about 7 million BTC, valued at approximately $440Bn, are held in quantum-vulnerable addresses.
Project Eleven, a post-quantum security firm, predicts that Q-Day, when a fault-tolerant quantum computer can break Bitcoin’s ECDSA signatures, could arrive by 2030, coinciding with the government’s migration deadline, which emphasizes the urgency of updating cryptographic standards.
Executive Order 14411 and the PQC Mandate: How a Federal Quantum Computer Program Creates Direct Pressure on Bitcoin’s Signature Scheme
The connection between EO 14411 and Bitcoin’s security model highlights the hardware credibility issue, allowing the crypto industry to postpone addressing quantum migration.
The DOE must set technical specs for quantum systems within 90 days, while the Secretary of Commerce is to establish market commitments for quantum computing firms, supported by a $2Bn investment in nine companies, including IBM. OSTP Director Michael Kratsios indicated that a capable quantum computer could be ready by 2028.
The second order accelerates the federal post-quantum cryptography (PQC) timeline by about four years, requiring agencies to adopt NIST-approved standards by December 31, 2030.
They must migrate digital signatures for high-value assets, similar to Bitcoin’s ECDSA, by December 31, 2031, and the Department of Commerce must complete a PQC pilot by December 31, 2027.
While Bitcoin operates outside federal jurisdiction, these orders validate and expedite the quantum timeline, creating compliance pressure for regulated exchanges and custodians managing BTC for clients under federal oversight.
The 7 Million BTC Exposure: What ECDSA Vulnerability Means in On-Chain Terms
Coinbase’s quantum advisory council estimates that around 7 million BTC are held in vulnerable addresses, with risks varying by address type and spending history.
The most vulnerable are Satoshi-era Pay-to-Public-Key (P2PK) outputs, which can be easily exploited by a quantum computer running Shor’s algorithm to derive private keys directly from public keys on-chain.
While Pay-to-Public-Key-Hash (P2PKH) and SegWit addresses are safer until a transaction is made, they expose public keys during spending, increasing the risk of a quantum adversary acting quickly.
Reused addresses increase this risk since public keys are already on-chain from previous transactions. Analytics firms like Whale Alert are flagging quantum vulnerabilities in UTXO sets.
The 7 million BTC figure includes P2PK outputs, reused addresses, and other formats with irrevocably exposed public keys, representing about $440Bn in assets that a capable quantum computer could drain without traditional private key compromise.
The Q-Day Timeline Problem: Where Government Migration Deadlines and Independent Threat Estimates Actually Converge
The federal government’s 2030–2031 PQC migration window overlaps with early estimates for Q-Day. Project Eleven anticipates Q-Day in 2030.
This is based on estimates of thousands of logical qubits by the mid-to-late 2020s, which are crucial for breaking Bitcoin’s secp256k1 ECDSA.
Google aims to adopt post-quantum cryptography by 2029, suggesting that viable quantum hardware could emerge soon.
Recent advances from Microsoft, including the Majorana 2 topological qubit, have reduced error rates and may lead to feasible quantum attacks sooner than previously thought.
The shift of the federal timeline from 2035 to 2030–2031 follows warnings from the NSA and CISA about harvest-now, decrypt-later strategies, in which adversaries store encrypted data to decrypt it later using quantum technology.
For Bitcoin, this risk is heightened since the UTXO set is publicly accessible, allowing future attackers to target it retroactively.
***
Looking to start your trading day ahead of the curve?
Get up to speed before the bell with Bull Whisper—a sharp, daily premarket newsletter packed with key news, market-moving updates, and actionable insights for traders.
Start your day with an edge. Subscribe to Bull Whisper using this link.