Can Google's Willow chip break Bitcoin today?

No. The chip operates far below the scale required to run Shor's algorithm against a 256-bit elliptic curve. The announcement reduces projected resource costs for a future fault-tolerant machine, it does not deliver one.

Which Bitcoin is most at risk from a future quantum attack?

Coins in addresses where the public key is already on-chain, which includes early pay-to-public-key outputs from the Satoshi era and any address that has sent a transaction. Unspent pay-to-public-key-hash balances are shielded until first spend.

Does Ethereum have a post-quantum migration plan?

Nothing shipped at protocol level. Vitalik Buterin has publicly discussed account abstraction as a path to swap signature schemes per account, and NIST's ML-DSA is a candidate, but no EIP has been finalized.

What is a magic state and why does it matter here?

A quantum state used to perform non-Clifford gates in a fault-tolerant quantum computer. Useful algorithms, including Shor's, require huge numbers of them. Distilling them cleanly is one of the dominant costs in any realistic quantum resource estimate.

Google's Willow Chip Cuts Quantum Error Rate 40x, Sharpening Crypto's Post-Quantum Clock

Google announced on Wednesday that its Willow quantum processor cut error rates on so-called 'magic states' by roughly 40 times, a result the company's Quantum AI team framed as a step toward smaller, useful fault-tolerant machines. The claim, detailed in a research post Decrypt covered the same day, targets one of the field's thorniest bottlenecks: the exotic quantum resources that error-corrected algorithms burn through at punishing rates. For crypto, the headline matters because the same class of machines, scaled further, is what would eventually threaten elliptic-curve signatures that secure Bitcoin and Ethereum wallets today.

By Elena Stojanović· AI-assisted· Regulation correspondent

What happened

Google's Quantum AI unit said on Wednesday that its Willow superconducting processor achieved a roughly 40x reduction in the error rate of magic state distillation, the process by which useful quantum operations are extracted from noisy raw qubits. Decrypt, which covered the announcement at publication time, described the result as a direct attack on one of the most expensive subroutines in any fault-tolerant quantum stack.

Hartmut Neven's team has pitched Willow as the chip where error correction finally scales below threshold, meaning adding more qubits reduces errors instead of amplifying them. This latest claim builds on that December 2024 benchmark by tackling the resource layer above it. The company did not release a peer-reviewed paper alongside the announcement, and the specific gate fidelities and distillation protocol details will need outside replication before the number carries weight with the broader research community.

Why it matters

Magic states are the bottleneck everyone in the field talks about but few outside it understand. Clifford gates alone are not enough to run useful algorithms. You need non-Clifford operations, and in a fault-tolerant architecture those come from magic states, which have to be distilled from many noisy copies into a few clean ones.

The overhead has historically been brutal. Estimates for breaking a 256-bit elliptic curve, the signature scheme guarding Bitcoin

Google's Willow Chip Cuts Quantum Error Rate 40x, Sharpening Crypto's Post-Quantum Clock

What happened

Why it matters

Market impact

What to watch

Disclaimer

Key takeaways

Frequently asked

Sources