What happened
IBM and Qedma, a Tel Aviv-based quantum error-mitigation firm, published results claiming quantum advantage on a physics-simulation workload, according to a CryptoBriefing report Thursday. Quantum advantage, in the narrow technical sense used here, means the quantum system completed a specific task faster or more accurately than the best-known classical method. It is not the same as fault-tolerant quantum computing, and it is not Shor's algorithm running at scale.
The workload described is a physics-modeling problem, not the integer factorization or discrete-logarithm math that would directly threaten ECDSA and secp256k1. What the demonstration does show is that error-mitigated quantum hardware is moving from lab curiosity to something that outperforms classical simulation on real problems. Qedma's contribution is the error layer.
IBM's is the qubit count and gate fidelity. The pairing matters because the bottleneck to cryptographically relevant quantum computing has never been raw qubits alone. It has been coherent qubits doing useful work without collapsing under noise.
Why it matters
Every Bitcoin and Ethereum wallet in circulation is secured by elliptic-curve digital signatures. Those signatures are provably broken by a sufficiently large fault-tolerant quantum computer running Shor's algorithm. That machine does not exist today.
The question the industry has been kicking down the road is when it will, and today's announcement moves the goalposts closer. The acute exposure isn't uniform. Deloitte's 2024 analysis, still the most cited estimate, put roughly 25% of circulating BTC in address types where the public key is already visible on-chain, meaning a future quantum attacker wouldn't need to intercept a transaction to derive the private key.