Lorenzo Valente of ARK Invest is more optimistic than most that Bitcoin will come out ahead of Q Day — the hypothetical moment when a quantum computer finally cracks the elliptic-curve cryptography that secures wallets today. His view, as the firm has framed it, is that the network's resilience and the crypto community's proactive stance on evolving security challenges give it a real shot at beating the clock.
Why Q Day keeps coming up
The phrase gets thrown around loosely, but it points at a concrete problem. Bitcoin's security model rests on the assumption that deriving a private key from a public key is impractical. A sufficiently powerful quantum machine using Shor's algorithm would break that assumption. Every wallet with an exposed public key — including all the early P2PK outputs, and any address that's been spent from — becomes a target. The coins sitting in Satoshi-era wallets are the obvious prize, and they aren't moving.
What Valente's optimism hinges on isn't the hardware timeline. It's the humans. Crypto has a history of contentious, slow, and then suddenly decisive upgrades. The Taproot rollout, SegWit, even the block size wars — messy, but they got done. A post-quantum migration would be uglier because it touches every wallet's key material, not just script logic. Still, the argument goes, if the threat is real and visible, the ecosystem tends to move.
The case for crypto's head start
Researchers have been publishing post-quantum signature schemes for years, and NIST already standardized a batch of them back in 2024. Those standards aren't Bitcoin-specific, but they give developers something concrete to build against. The Bitcoin developer community has discussed quantum-resistant address types, and there's a live debate about whether a soft fork could phase them in without breaking existing coins.
That last part is the hard bit. You can't force users to move funds. Any migration path has to convince millions of holders to sweep old addresses into new ones, and a lot of those holders are either dead, lost their keys, or simply won't bother. The coins that never move are the ones most exposed. Valente's position seems to be that this is a coordination problem, not a cryptography dead end — and coordination problems are what open-source networks are built to grind through, however slowly.
What he isn't claiming
Valente isn't saying quantum computers are close to cracking Bitcoin tomorrow. No credible researcher is. The machines that exist today can't factor the numbers that would matter, and the error-correction overhead needed to run Shor's algorithm at Bitcoin's key size is staggering. The optimistic case isn't that the threat is overblown. It's that the industry has time, and is using it.
The bear case writes itself: a quantum breakthrough arrives faster than expected, the community can't agree on a migration, and the oldest coins get drained. That's not a scenario anyone can fully rule out. But Valente's bet is on the same thing that's kept Bitcoin alive through every previous existential scare — the fact that when the roof actually starts leaking, the people who care tend to fix it before the storm gets worse.
