Executive Summary
On April 24 2026, independent researcher Giancarlo Lelli received a 1 BTC Q‑Day Prize from Project Eleven after demonstrating the first publicly verified break of a 15‑bit elliptic‑curve cryptography (ECC) key on an IBM‑hosted quantum computer. IBM hailed the experiment as the largest public quantum cryptanalysis effort to date. Bitcoin developers immediately questioned the practical relevance, suggesting the result could be a statistical fluke rather than a meaningful vulnerability.
What Happened
Lelli accessed a publicly available IBM quantum processor and ran a targeted algorithm designed to recover a 15‑bit ECC private key. The effort succeeded, producing a key that matched the expected output. In recognition of the achievement, Project Eleven awarded Lelli a 1 BTC Q‑Day Prize on the same day.
The broken key represents the most extensive quantum‑based cryptanalysis of an ECC key that has been demonstrated in an open environment. IBM’s statement emphasized that the experiment set a new benchmark for public quantum attacks on cryptographic primitives.
Background / Context
Elliptic‑curve cryptography underpins many modern blockchain protocols, including Bitcoin’s signature scheme. While ECC keys used in production are typically 256 bits or larger, researchers have long used reduced‑size keys to explore the limits of quantum attacks. A 15‑bit key is trivially small for classical computers, but it provides a controlled test case for quantum algorithms that could scale to larger sizes.
Project Eleven, a community‑driven initiative that rewards breakthroughs in quantum‑resistant cryptography, offers the Q‑Day Prize to incentivize open‑source research. The prize is paid in Bitcoin, reflecting the organization’s focus on the intersection of quantum computing and cryptocurrency security.
Reactions
Bitcoin core developers responded with cautious skepticism. In public forums, they noted that a random sequence of bits could, by chance, align with the expected ECC output, especially when the key space is limited to 2¹⁵ possibilities. Their comments highlighted the need for statistical rigor before drawing conclusions about the security of Bitcoin’s cryptography.
IBM, while proud of the technical milestone, refrained from speculating on the broader implications for blockchain security. The company’s press release framed the experiment as a proof‑of‑concept that advances the understanding of quantum capabilities, rather than an immediate threat.
What It Means
The demonstration underscores two key points for the cryptocurrency ecosystem. First, it confirms that quantum processors available to the public can perform non‑trivial cryptanalytic tasks, even if the target is a deliberately tiny key. Second, it reinforces the urgency for the Bitcoin community to continue researching quantum‑resistant signature schemes, such as lattice‑based or hash‑based alternatives.
However, the developers’ caution reminds readers that the practical risk to Bitcoin remains low. Real‑world Bitcoin transactions rely on 256‑bit ECC keys, a space that is astronomically larger than 15 bits. Current quantum hardware would need to scale dramatically—both in qubit count and error correction—to threaten those keys.
What Happens Next
Project Eleven has indicated that future Q‑Day challenges will target larger key sizes and more realistic cryptographic primitives. Observers expect subsequent contests to push the limits of quantum attacks toward the thresholds relevant for production blockchains.
IBM plans to expand access to its quantum devices, potentially allowing more researchers to replicate and extend Lelli’s experiment. The Bitcoin development community, meanwhile, is likely to monitor these developments closely, evaluating whether emerging quantum capabilities warrant a shift in the network’s cryptographic foundations.