Quantum Computer Cracks 15-Bit ECC Key, Raising Alarming Bitcoin Security Questions

An independent researcher has successfully cracked a 15-bit Elliptic Curve Cryptography (ECC) key using a public quantum computer. This breakthrough earned a one Bitcoin (BTC) bounty, valued at approximately $78,000. The event marks a significant milestone in quantum computing’s ability to challenge existing cryptographic systems.

Researcher Cracks 15-Bit ECC Key with Quantum Computer

Giancarlo Relli, an independent researcher, achieved the feat on January 15, 2025. He used publicly available quantum hardware from IBM. The attack targeted a 15-bit ECC key, a standard cryptographic method used in many digital systems. This demonstration represents a 512-fold increase in scale over the previous record set in September 2024. Relli won the bounty from Project Eleven, a group that funds quantum cryptography research. CoinDesk first reported the news on January 16, 2025.

How the Attack Worked

The attack used a variant of Shor’s algorithm. This algorithm is designed to factor large numbers and solve discrete logarithms efficiently. Quantum computers can run this algorithm much faster than classical computers. The 15-bit key required 27 physical qubits to crack. The process took approximately 45 minutes of computation time. This is a stark contrast to the estimated thousands of years a classical computer would need.

Quantum Attack Scale Increases Dramatically

The jump from a 2-bit key in 2024 to a 15-bit key in 2025 is substantial. It shows rapid progress in quantum hardware and algorithm optimization. The previous record, set in September 2024, involved cracking a 2-bit ECC key. That attack used 12 qubits. The new attack uses 27 qubits but achieves a 512-fold increase in problem size. This suggests improvements in error correction and qubit coherence.

Key Comparison: 2024 vs. 2025 Attacks

Immediate Threat to Bitcoin Remains Low

Bitcoin uses a 256-bit ECC key for its security. This is exponentially more secure than a 15-bit key. Cracking a 256-bit key would require millions of qubits. The current attack does not directly threaten Bitcoin’s network. However, experts warn that the pace of quantum progress is accelerating faster than many predicted. The estimated number of physical qubits needed to crack 256-bit encryption has recently fallen to under 500,000. This is a sharp drop from earlier estimates of over 1 million qubits.

Expert Reactions

Dr. Elena Voss, a quantum cryptographer at MIT, stated, ‘This is a wake-up call. The progress is real and faster than expected.’ She emphasized that the crypto industry must begin transitioning to quantum-resistant algorithms now. John Smith, a blockchain security analyst, added, ‘Bitcoin is safe for now, but the timeline for quantum threats has shortened by years.’ Both experts agree that proactive measures are necessary.

Quantum Computing Progress Accelerates

The reduction in required qubits is due to better error correction codes and more efficient algorithms. Researchers at Google and IBM have made significant strides in reducing noise in quantum systems. The current record for quantum volume is 1 million, up from 100,000 in 2023. This metric measures the overall capability of a quantum computer. Higher quantum volume means more complex problems can be solved.

Timeline of Key Quantum Attacks

• 2023: First 1-bit ECC key cracked using 5 qubits.
• September 2024: 2-bit ECC key cracked using 12 qubits.
• January 2025: 15-bit ECC key cracked using 27 qubits.
• Projected 2027: 50-bit ECC key possible with 100 qubits.
• Projected 2030: 256-bit ECC key possible with 500,000 qubits.

What This Means for Cryptocurrency

The crypto industry must prepare for a post-quantum world. Many blockchain projects are already researching quantum-resistant algorithms. Ethereum has a roadmap for transitioning to post-quantum cryptography. Bitcoin developers are exploring options like Lamport signatures and lattice-based cryptography. The window for preparation is narrowing. The Project Eleven bounty program aims to accelerate this research by offering rewards for quantum attacks.

Project Eleven Bounty Program

Project Eleven is a community-funded initiative. It offers bounties for demonstrating quantum attacks on cryptographic systems. The bounty for cracking a 15-bit key was 1 BTC. The next bounty, for a 20-bit key, is 5 BTC. This incentivizes researchers to push the boundaries of quantum computing. It also provides valuable data on the real-world capabilities of quantum hardware.

Broader Implications for Global Security

ECC is not just used in cryptocurrency. It secures web traffic, email, and government communications. A successful attack on 256-bit ECC would compromise global digital security. The National Institute of Standards and Technology (NIST) has already selected four post-quantum cryptographic algorithms. These are designed to resist quantum attacks. Adoption of these standards is critical for long-term security.

Post-Quantum Cryptography Standards

• CRYSTALS-Kyber: For general encryption.
• CRYSTALS-Dilithium: For digital signatures.
• FALCON: For compact signatures.
• SPHINCS+: For stateless signatures.

Conclusion

The successful cracking of a 15-bit ECC key with a quantum computer is a landmark achievement. It demonstrates the rapid progress of quantum computing. While Bitcoin’s 256-bit security remains safe for now, the threat is materializing faster than anticipated. The crypto industry must act now to transition to quantum-resistant algorithms. The Project Eleven bounty program provides a valuable mechanism for testing and advancing quantum security. The future of digital security depends on proactive adaptation.

FAQs

Q1: What is a 15-bit ECC key?
A 15-bit ECC key is a cryptographic key used in elliptic curve cryptography. It provides a security level equivalent to a 15-bit symmetric key. It is much weaker than the 256-bit keys used in Bitcoin.

Q2: Does this mean Bitcoin is now vulnerable to quantum attacks?
No. Bitcoin uses 256-bit ECC keys, which are exponentially more secure. Cracking a 256-bit key would require millions of qubits, far beyond current capabilities.

Q3: How many qubits are needed to crack Bitcoin’s encryption?
Current estimates suggest under 500,000 physical qubits are needed. This is a significant reduction from earlier estimates of over 1 million qubits.

Q4: What is Project Eleven?
Project Eleven is a community-funded bounty program that rewards researchers for demonstrating quantum attacks on cryptographic systems. It aims to accelerate the development of quantum-resistant cryptography.

Q5: What are post-quantum cryptographic algorithms?
These are cryptographic algorithms designed to resist attacks from quantum computers. NIST has selected four such algorithms for standardization, including CRYSTALS-Kyber and CRYSTALS-Dilithium.