chain · quantum risk
Bitcoin Mining vs Quantum Computers (Grover, Not Shor)
Verdict
Mining is primarily a hash-search problem. Grover offers a quadratic speedup in idealized models; network difficulty and economics dominate. This is not the same as forging ECDSA spends with Shor.
Overview
Bitcoin proof-of-work asks miners to find a nonce such that double SHA-256 of the header meets a target. That is a structured brute-force search against a hash—not a discrete logarithm problem.
Grover’s algorithm is the usual quantum reference for unstructured search. In simplified models it can square-root the search space, which is why people discuss effective security margins for hash-based puzzles. Real-world mining is an economic race with difficulty adjustment; the correct analysis is not “Shor deletes Bitcoin overnight via mining.”
If your question is about stolen coins, read the signature and address pages. If your question is about 51% or hashrate geopolitics under speculative quantum mining hardware, this page is the better entry—still educational, still non-sensational.
What breaks
- Naive assumptions that classical ASIC advantage is permanent without monitoring quantum hash research
- Confusing “quantum miner” headlines with “quantum empties your wallet” scenarios
Mitigations
- Keep public education clear: signatures ≠ PoW
- Protocol and miner communities monitor hash security margins over long horizons
- Holders should still prioritize key hygiene regardless of mining news cycles
FAQ
Could a quantum computer mine all the remaining BTC instantly?
Popular claims usually ignore difficulty adjustment, hardware constraints, and the difference between asymptotic algorithms and engineered CRQC mining farms. Treat instant-mine stories with skepticism.
Should miners ignore quantum entirely?
No long-term system should ignore algorithm research. But conflating mining with wallet theft leads to bad risk prioritization for exchanges and holders.
Key concepts (technical dictionary)
Terms used on this page — open a definition: