Citi’s Quantum Warning: 6.5M–6.9M BTC at Risk
In a May 18, 2026 digital asset research note, Citi warned that accelerating quantum computing advances pose an outsized threat to Bitcoin (BTC). The bank estimates that 6.5 to 6.9 million BTC—roughly one-third of circulating supply, valued at approximately $450 billion at current prices—have already exposed public keys on-chain. Bitcoin was trading near $76,900 at the time of the report.
The “Harvest Now, Decrypt Later” Risk
Citi flagged a scenario where attackers collect encrypted data today for future quantum-enabled decryption. Older Bitcoin addresses using pay-to-public-key (P2PK) outputs left public keys permanently visible, including wallets believed to belong to Satoshi Nakamoto. The bank warned that a quantum-enabled attack on a major U.S. bank could put $2 to $3.3 trillion of GDP at risk, as previously estimated by the Citi Institute.
Governance as Bitcoin’s Weakness
According to Citi analyst Alex Saunders, Bitcoin’s conservative, decentralized governance makes protocol upgrades slow and difficult to coordinate. This contrasts with proof-of-stake networks like Ethereum (ETH), which can upgrade more frequently and thus may be better positioned to respond. However, Citi noted that such networks also present a larger attack surface. Proposed Bitcoin upgrades such as BIP-360 and BIP-361 are in development but require broad consensus among miners and node operators—a process that historically takes years.
Broader Crypto and Mining Stress
The warning comes amid multiple structural pressures on Bitcoin infrastructure. As reported in crypto.news’ Q1 2026 mining coverage, the network is navigating rising energy costs and the AI pivot among miners. Separately, JPMorgan has warned that miners pivoting to AI face high capital needs and potential shareholder dilution. These factors amplify the urgency of quantum resilience.
Market Outlook and Investor Takeaways
Citi remains constructive on crypto’s long-term ability to adapt through post-quantum cryptography, but the compressed timeline warrants closer investor attention. For holders of BTC, the immediate risk is not a quantum attack tomorrow, but the “harvest now, decrypt later” threat that could devalue coins with exposed keys. In contrast, altcoins like Solana (SOL) or Cardano (ADA) with more agile governance could see relative demand if quantum fears intensify. TradFi banks and insurers may also begin pricing quantum risk into crypto custody and lending products. Conclusion: Medium-term bearish pressure on legacy Bitcoin UTXOs; long-term neutral with a need for protocol upgrades.
