Binance's chief security officer, Jimmy Su, said quantum computing isn't an immediate threat to crypto holders, but it's a real long-term security problem. The most likely ways crypto gets stolen today, he said, are phishing, malware, social engineering, compromised credentials and poor wallet security. His comments land as fresh data shows the bulk of crypto thefts this year come from infrastructure and operational failures, not futuristic attacks.
The threats that actually matter
Su didn't put quantum computers at the top of his worry list. Instead, he pointed to the same attack vectors that have plagued the industry for years: phishing emails, malware, social engineering, stolen credentials and wallets that aren't secured properly. These are the methods that actually take money from holders, and they don't require a lab full of physicists. They require a convincing email or a careless click.
The numbers behind the hacks
Data from TRM Labs for the first half of 2026 shows about $972 million was stolen across 207 hacks. Infrastructure and operational compromises drove roughly 76% of those losses, even though they made up only about 15% of incidents. That's a lopsided ratio that points to a few big failures rather than a broad wave of attacks. SlowMist's numbers tell a slightly different story. Contract and logic vulnerabilities accounted for the most incidents, private key and credential compromises ranked second, and supply chain attacks came in third. The two datasets together suggest that while many attacks are opportunistic, the biggest losses come from systemic weaknesses in how exchanges and platforms handle their infrastructure.
The quantum question
Su acknowledged that quantum computing is a real long-term security issue, but he didn't suggest it's imminent. The industry will have to deal with it eventually, but for now, the immediate risks are far more mundane. He didn't offer a timeline, and he didn't say what the industry should do about it beyond keeping an eye on developments.
Su's security checklist
Su's recommendations are basic but often ignored. He said users should keep recovery phrases and private keys secure, use reputable wallet software, install software and security updates promptly, and limit unnecessary address reuse. None of that is new, but it's a reminder that the most effective defenses are usually the least glamorous.
Su didn't put a timeline on when quantum computing might become a real problem, but he made clear it's not something to lose sleep over tonight. The threats that are actually stealing crypto right now are the ones that have been around for years. Quantum, he said, is a long-term issue that will need attention eventually — just not today.
