TL;DR

What are the two threats, actually?

Shor's algorithm attacks signatures. Bitcoin ownership rests on elliptic-curve signatures: your public key is mathematically derivable-from, but not reversible-to, your private key — classically. A large, fault-tolerant quantum computer running Shor's algorithm reverses that relationship. If such a machine exists at production width, exposed public keys become spendable by whoever runs the algorithm. This is the real Q-Day: a polynomial speedup against the exact math Bitcoin uses to prove ownership. Nothing in current hardware is close to running it at that width, but the attack itself is not speculative — only the machine is.

Grover's algorithm attacks hashes. Grover's is a generic search accelerator: it finds an input matching a test in roughly the square root of the classical number of tries. Against hash functions that is a quadratic improvement — real, but bounded, and the standard response is unglamorous: wider hashes restore the margin. Grover's also carries a hidden line item that a new preprint has just priced in public (see below): every iteration runs a complete oracle circuit, and the oracle's cost can dwarf the headline speedup.

Fusing these two into one threat produces timelines that are wrong in both directions — too casual about signatures, too alarmist about hashes.

What did the Minecraft paper just prove about the Grover side?

Reeves, Sopkin, and Searles (arXiv:2610.33139) built a production Grover oracle — for recovering Minecraft world seeds — and published its full cost. After heavy optimization, one run of the test costs 48,896 two-qubit gates; their unoptimized baseline cost 2,038,804. A search needs on the order of √N such runs (our arithmetic on their figures: ~50,000 runs for their 32-bit residual space, ≈2.4 billion gates in total). What they executed on actual hardware — IBM processors and a Quantinuum H2-1 — was a reduced-width loop with one marked state among eight candidates, with results sensitive to compilation and routing, and no end-to-end advantage over classical search demonstrated.

That is the honest state of the Grover art: excellent oracle engineering, toy-width execution, production-width estimates. Apply the same shape to hash attacks at Bitcoin's widths and the quadratic headline survives — attached to an oracle bill orders of magnitude larger, on hardware that does not yet exist at that scale.

So what is the actual clock for Q-Day?

Not a year. A sequence of engineering milestones, each publicly checkable:

  1. Logical qubits at scale. Fault-tolerant machines are counted in logical (error-corrected) qubits, not physical ones. Signature attacks at production width need logical-qubit counts far beyond anything demonstrated; the gap between demonstration and requirement is the timeline.
  2. Production-width resource estimates shrinking. Serious research groups publish full costings — qubits, gates, error-correction overhead — for attacks at real widths. When those estimates fall by orders of magnitude because of better algorithms or better error correction (not better headlines), the clock genuinely moves.
  3. Complete algorithm executions climbing in width. Demonstrations progress from toy widths toward production widths in the open literature — full loops, real oracles, published gate counts, like the Minecraft paper's reduced-width runs writ larger each generation.
  4. Oracle costs at cryptographic widths. For the Grover side specifically: a costed, executed oracle for a cryptographic test function at meaningful width — not a query count — is the milestone that would make hash timelines concrete.

A claim that cannot point to movement on one of these four is not a timeline update. It is marketing wearing a lab coat.

What would change our assessment?

Movement on the milestones above — specifically, production-width fault-tolerant resource estimates for signature attacks falling sharply, or logical-qubit demonstrations reaching the regime those estimates require. The White Report grades its own published calls in public, on the record, passes and fails in the same type size; our quantum coverage follows the same rule. We will update this assessment when the milestone evidence moves, and we will say so in the same place we published the original. What we will not do is convert a preprint, a demo, or a vendor announcement into a date — or into a trade.

Is this financial advice? No. This article separates two published algorithms by their demonstrated costs and states the milestones that would change the assessment. It is not financial advice, and nothing here is a recommendation to buy, sell, or hold anything.

FAQ

Which quantum algorithm actually threatens Bitcoin? Shor's algorithm, against elliptic-curve signatures — a polynomial speedup against the math that proves ownership. Grover's algorithm affects hash functions only quadratically and carries a per-iteration oracle cost that honest resource estimates show is enormous at production widths.

Did the Minecraft study bring Q-Day closer? No. It improved oracle engineering (a ~42× gate reduction on its test circuit) and ran toy-width hardware loops over eight candidates. Its contribution to the timeline debate is accounting discipline, not capability.

Why won't you just give a year? Because no honest one exists. The binding constraints are fault-tolerance milestones — logical-qubit counts and production-width error-correction estimates — and their arrival is an engineering question with public evidence, not a forecasting contest.

What should a Bitcoin holder actually watch? The four milestones in this article, and the ecosystem's own preparedness: signature-scheme migration research and address-hygiene practices are the productive responses. A headline with a date and no milestone is neither.

Is this financial advice? No. Nothing in The White Report is financial advice or a recommendation to buy, sell, or hold any asset.

Sources

Reeves, Sopkin & Searles, "The Cost of a Real Grover Oracle: Minecraft Seed Search from Software to Quantum Hardware," arXiv:2610.33139 (Oct 23, 2026); QubitWire, "Minecraft reveals the hidden cost of quantum search" (Oct 27, 2026).

The White Report publishes news and analysis about crypto and SI markets. Nothing on this site is financial advice, and nothing here is a recommendation to buy or sell any asset. Do your own research before making investment decisions.

Where Super Intelligence Meets Money