The crypto industry has long treated quantum computing as a tomorrow problem. Tomorrow just got a lot closer.

On June 22, 2026, President Trump signed Executive Order 14412, mandating that US federal systems migrate to post-quantum cryptography (PQC) by the end of 2030 for key establishment and by the end of 2031 for digital signatures. The order uses NIST-approved PQC algorithms as the benchmark, and while it technically only applies to federal agencies, it’s sending shockwaves through every corner of crypto that relies on the same cryptographic foundations now deemed insufficient for the quantum era.

Here’s the thing: the encryption securing most blockchains today, elliptic curve cryptography (ECC), is built on math problems that classical computers find impossibly hard. Quantum computers don’t find them nearly as difficult. And the industry is now racing to swap out its locks before someone builds the right key.

The scale of what’s at risk

The numbers are sobering. Approximately 6.7 million BTC could be vulnerable to quantum attacks, a figure that includes addresses linked to Satoshi Nakamoto. At current prices, that represents a staggering portion of Bitcoin’s total market cap sitting in wallets that use older cryptographic formats particularly susceptible to quantum decryption.

The total digital asset exposure has been cited in the trillions. That’s not a typo.

Making matters worse is a strategy known as “harvest now, decrypt later” (HNDL). In English: adversaries can intercept and store encrypted blockchain data today, then decrypt it years from now once sufficiently powerful quantum computers exist. Coinbase’s quantum advisory council has specifically urged blockchain entities to prepare for this risk, warning that billions in digital assets could be compromised before anyone realizes the vault door was left open.

Who’s actually doing something about it

The Ethereum Foundation launched a dedicated Post-Quantum team back in January 2026, equipped with a $2 million budget. Their stated goal is ambitious and specific: ensure zero fund loss during the migration process.

The Algorand Foundation published its own detailed roadmap on June 18, 2026, targeting full quantum resilience by the end of 2027. The plan isn’t vaporware either. Initial upgrades, including post-quantum accounts and multisignature capabilities, are slated to begin rolling out in Q3 2026.

Google, meanwhile, has set a 2029 target for its own internal PQC migration. The search giant’s researchers have co-authored work that reduces the resource requirements needed to execute attacks on elliptic curve cryptography.

The regulatory pressure cooker

EO 14412 creates a cascading compliance timeline that extends well beyond federal agencies. Any crypto firm doing business with or adjacent to US government systems, think custodians, exchanges with banking relationships, stablecoin issuers, will face pressure to adopt compatible PQC standards. The executive order essentially sets NIST algorithms as the de facto industry benchmark whether private companies like it or not.

The migration won’t be cheap or simple. Post-quantum algorithms generally produce larger key sizes and signatures, which means higher storage costs, increased bandwidth requirements, and potential performance trade-offs. For blockchains already wrestling with scalability, adding bulkier cryptographic operations introduces engineering headaches that teams will need to solve without breaking existing functionality.

What this means for investors

The HNDL risk means the clock started ticking long before quantum machines arrive. Data intercepted today could become exploitable data tomorrow.

The 6.7 million BTC exposure figure deserves particular attention. Much of that vulnerability stems from early Bitcoin addresses that used less secure key formats. Bitcoin’s own upgrade path for quantum resistance remains less defined than Ethereum’s or Algorand’s, which could become a differentiator in how institutional capital evaluates relative chain security over the coming years.

Migration costs will weigh on protocol treasuries, and botched upgrades could introduce new attack surfaces. Investors should watch for how transparently teams communicate their PQC timelines, budgets, and trade-offs, because the difference between “quantum-ready” and “quantum-washed” will matter enormously when trillions of dollars are on the line.