Will a Quantum Computer Out-Mine Your ASIC? The Honest Answer

“A quantum computer will out-mine every ASIC on earth.” It is one of the most repeated claims in crypto, and it is the wrong thing to worry about. The real quantum risk to Bitcoin is not in mining at all — it is in signatures, it has two named repair proposals already drafted, and it changes nothing about what your machine is worth.

This question keeps surfacing because 2026 gave it fresh oxygen. A Google result this year indicated that the hardware required to break elliptic-curve signatures may be roughly twenty times lower than 2024 estimates suggested. That is a genuinely significant revision, it was widely reported, and it deserves a serious answer rather than either panic or dismissal.

So here is the serious answer, in the order that actually matters: quantum computing threatens Bitcoin’s signature scheme, not its proof-of-work. Those are different algorithms with different vulnerabilities and completely different consequences for someone who owns an ASIC.

First, the stakes: two algorithms, two entirely different problems

Bitcoin uses cryptography in two distinct places, and conflating them is what produces the bad headline.

SHA-256 — the mining function

Mining is a search. Your machine hashes candidate block headers with SHA-256, over and over, hunting for an output below the network target. It is brute force, and it is deliberately stupid. There is no clever structure for a quantum computer to exploit.

The best known quantum attack on an unstructured search is Grover’s algorithm, which offers a quadratic speedup — the square root of the work, not an exponential collapse. In practice that theoretical advantage is swamped by the enormous per-operation overhead of error-corrected quantum hardware, which is astronomically slower per operation than a purpose-built ASIC running trillions of hashes a second for a few cents of electricity.

And even if a machine did arrive that could mine meaningfully faster, Bitcoin has a built-in answer: the difficulty adjustment. Roughly every two weeks the network re-prices the work required per block based on how much hashrate showed up. Extra hashrate, quantum or otherwise, raises difficulty. It does not break anything. This is exactly why researchers describe the threat to SHA-256 as manageable.

ECDSA over secp256k1 — the ownership function

This is different in kind. When you spend Bitcoin you prove ownership with an elliptic-curve digital signature. Shor’s algorithm does not brute-force elliptic curves — it solves them, exponentially faster than any classical method. A sufficiently large, error-corrected quantum computer could derive a private key from an exposed public key.

That is the real risk, and it is a risk to coins, specifically coins whose public keys are already visible on-chain — old pay-to-public-key outputs and any address that has been spent from before. It is not a risk to your hashrate, your hardware, or your hosting contract.

How close is it, honestly

We are not going to give you a date, because nobody credible has one. What we can give you is the shape of the estimate and how it moved.

As of early 2026, breaking secp256k1 was assessed to require quantum systems with millions of logical qubits — far beyond anything that exists. Logical qubits are the key phrase: these are error-corrected units, each of which currently requires a large number of physical qubits to construct. The gap between headline physical-qubit counts and usable logical qubits remains enormous.

What changed in 2026 is the size of the target. Google’s result cut the estimated hardware requirement for breaking elliptic-curve signatures by roughly a factor of twenty against 2024 baselines. That does not put the attack in reach today. It does mean the estimates are moving in one direction, and that anyone treating this as a problem for the 2050s is relying on figures that have already been revised once.

CoinShares’ assessment is the framing we find most defensible: a manageable risk. Real, non-imminent, and — crucially — already being engineered around.

What Bitcoin is actually doing about it

This is the part that almost never makes it into the scare coverage. There are two concrete proposals on the table.

• BIP-360 introduces Pay-to-Merkle-Root (P2MR), a new transaction type built on NIST-approved ML-DSA post-quantum signatures. It gives Bitcoin an address format that is not vulnerable to Shor’s algorithm.
• BIP-361, authored by Jameson Lopp among others, defines the harder half: a phased migration away from legacy signature schemes over roughly three years, including blocking new funds from being sent to vulnerable address types.

Neither is activated. Both are real, published, and under active discussion — which is what a protocol doing its job looks like. Bitcoin has absorbed consensus changes before, and the migration problem here is social and logistical far more than it is cryptographic. The mathematics of the replacement is largely settled; getting millions of holders to move coins is the hard part.

Note what is absent from both proposals: any change to SHA-256, to proof-of-work, or to mining hardware. Your ASIC computes the same function before and after a post-quantum migration.

What this means if you own or are buying hashrate

Two practical consequences follow.

For your mining setup: nothing changes. The variables that decide whether a machine is worth owning in 2026 are exactly what they were — efficiency in joules per terahash, and the price and duration of your electricity contract. At today’s hashprice of $39.63 per PH/s per day, a 9.50 J/TH hydro unit breaks even at about $0.174/kWh. On a OneMiners seven-year Nigeria prepay at $0.0364/kWh, that is roughly a 4.8× cushion beneath the breakeven line. No plausible quantum development touches that arithmetic.

For your coins: basic hygiene is worth doing now. Avoid reusing addresses, which is what exposes public keys in the first place. Keep holdings in modern address types. Follow BIP-360 and BIP-361 as they progress, and be prepared to migrate when a post-quantum standard activates. None of this is urgent; all of it is free.

Why the mining decision stays boring

The reason we keep returning to $/kWh is not that it is our product. It is that it is the only variable in the whole system that you control and that compounds every single hour.

OneMiners publishes the complete rate card — fifteen locations, four pricing tiers each — at hosting centers. Nigeria runs $0.0480/kWh premium and $0.0364 on a seven-year prepay; the prepaid ladder is 4% off the online-ordered rate at one year, 12% at three and 30% at seven, so you can reproduce every number on the card with a calculator. Contracts run up to seven years fixed, the price includes all management services, there is a 95% guaranteed minimum uptime with compensation, and hosted machines carry a seven-year warranty covering defects — excluding normal wear and consumable items.

Against typical 2026 industrial hosting of $0.065–$0.08/kWh, and against providers who publish no rate at all or take a share of your output instead, that is a structural advantage that will still be an advantage in every quantum scenario anyone has seriously proposed.

Final thoughts

Quantum computing is one of the few genuinely hard open questions in Bitcoin, and it deserves better than either “it will break mining tomorrow” or “it will never happen.” The accurate version is narrower and more useful: it threatens signatures, not proof-of-work; the estimates are moving faster than people expected; and the repair is already written down and waiting on consensus rather than on mathematics.

For a miner, the practical implication is almost anticlimactic. Nothing about the machine you buy, the efficiency you should prioritise, or the electricity rate you should lock is affected. The thing most likely to end your mining operation in the next seven years is not a quantum computer. It is a power bill.

Cryptography is a research programme. Consensus is a negotiation. Electricity is physics.