Charles Hoskinson said this week there’s a greater than 50% chance quantum computing becomes a real threat to crypto before 2033. The Cardano founder’s warning comes as the network accelerates its shift to lattice-based cryptography — specifically Learning With Errors — to shore up defenses before Shor’s algorithm can break today’s elliptic-curve signatures.
The quantum time horizon
Hoskinson’s 2033 window isn’t pulled from thin air. Advances in neutral-atom hardware and DARPA’s Quantum Benchmarking Initiative have compressed timelines. Haseeb Qureshi, managing partner at Dragonfly, gives a median estimate of roughly 10 years before modern public-key crypto is definitively broken. That puts the industry on a collision course with physics.
Hardware progress, error correction and fault tolerance remain unsolved hurdles. But the direction is clear: the clock is ticking.
Harvest now, decrypt later
Attackers don’t need a quantum computer today to exploit tomorrow’s. The 'harvest now, decrypt later' strategy targets encrypted data right now — store it, wait for a machine that can crack it, then cash in. Bitcoin alone holds billions in exposed coins sitting in addresses with revealed public keys. That’s a sitting target.
Most major blockchains still rely on elliptic-curve signatures. Shor’s algorithm, given enough qubits, can derive private keys and forge signatures. The math is unforgiving.
Cardano’s post-quantum roadmap
Cardano isn’t waiting. The network plans to fold U.S. NIST FIPS 203 through 206 standards — ML-KEM, ML-DSA, SLH-DSA and Falcon-style signatures — into its roadmap. The governance layer is already voting on a broader quantum resistance strategy. Hard-fork cadence gives Cardano a coordination edge over chains where upgrading the signature scheme requires months of debate.
The shift to lattice-based schemes, specifically Learning With Errors, is the technical foundation. It’s not a research project; it’s a production migration underway.
The broader industry response
Cardano isn’t alone. The Solana Foundation deployed post-quantum signatures on a testnet as a first step. But most chains remain on elliptic curves. The coordination problem is real: upgrading a live blockchain’s signature scheme touches every wallet, every dApp, every node.
Hoskinson’s 50%+ probability is a bet few can afford to ignore. The next concrete checkpoints are the community votes on Cardano’s strategy — already active — and the uncertain race between hardware error correction and code deployment.
