Citi's latest analysis highlights a critical vulnerability in Bitcoin's security model compared to Ethereum. While both networks face quantum computing threats, Bitcoin's decentralized governance structure leaves it more exposed to exploitation than Ethereum's coordinated development approach.
The quantum threat stems from the ability of sufficiently advanced quantum computers to break elliptic curve cryptography, the mathematical foundation securing both networks. Bitcoin uses ECDSA (Elliptic Curve Digital Signature Algorithm) to validate transactions and prove ownership of coins. A quantum computer with enough qubits could theoretically derive private keys from public addresses, enabling attackers to drain wallets without authorization.
Ethereum faces similar exposure through its ECDSA implementation. However, Citi argues that Ethereum's governance structure and development coordination mechanisms position it better for a transition to post-quantum cryptography. The Ethereum Foundation and its core developer community can execute protocol upgrades more decisively, allowing faster migration to quantum-resistant algorithms.
Bitcoin's decentralized consensus model creates friction during major security upgrades. Any protocol change requires broad miner agreement and community consensus, a process that historically takes months or years. Bitcoin's last major upgrade, the 2017 Segwit activation, faced contentious debate that nearly fractured the network. A quantum-driven cryptographic overhaul would dwarf Segwit's complexity, potentially sparking disagreement over implementation timelines and methods.
The timeline for quantum threat materialization remains uncertain. Industry estimates suggest cryptographically relevant quantum computers (CRQCs) are still years away, likely a decade or more. This provides a window for protocol upgrades. However, the "harvest now, decrypt later" threat is real. Attackers are already collecting encrypted blockchain data to decrypt once quantum capabilities arrive.
Citi recommends both networks begin planning post-quantum migration strategies immediately. Bitcoin developers have explored quantum-resistant solutions, including hash-based signatures and lattice cryptography. Implementing these changes before quantum computers arrive is essential. The longer Bitcoin delays, the more its decentralized governance becomes a liability rather than a strength.