{"id":86756,"date":"2026-04-27T11:01:39","date_gmt":"2026-04-27T11:01:39","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=86756"},"modified":"2026-04-27T11:01:39","modified_gmt":"2026-04-27T11:01:39","slug":"bitcoin-quantum-alarm-backfires-after-google-researcher-challenges-prize","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=86756","title":{"rendered":"Bitcoin Quantum Alarm Backfires After Google Researcher Challenges Prize"},"content":{"rendered":"
\n

Project Eleven\u2019s 1 BTC Q-Day Prize was meant to sharpen the debate over quantum risk to Bitcoin and other ECC-secured crypto assets. Instead, a sharp critique from Google quantum researcher Craig Gidney has turned the competition itself into the story.<\/p>\n

In an April 25 blog post<\/a> titled \u201cThe predictable failure of the QDay Prize,\u201d Gidney, a research scientist on Google\u2019s quantum computing team, argued that the winning submission did not meaningfully demonstrate progress toward a cryptographically relevant quantum attack. His central claim was blunt: the contest was structured around a benchmark that current quantum computers are poorly suited to measure.<\/p>\n

Bitcoin\u2019s Quantum Threat Debate Explodes<\/h2>\n

Project Eleven had announced the previous day that it awarded the Q-Day Prize to Giancarlo Lelli for breaking a 15-bit elliptic curve key on publicly accessible quantum hardware. The group described the result as the \u201clargest quantum attack on elliptic curve cryptography to date\u201d and said it represented a 512x jump from a prior 6-bit public demonstration.<\/p>\n

For crypto markets, the framing mattered. Project Eleven explicitly linked the result to the long-term security assumptions<\/a> behind Bitcoin, Ethereum, and more than $2.5 trillion in ECC-secured digital assets.<\/p>\n

But Gidney argued that the test may have proved far less than advertised. Gidney said he was invited last year to participate in the Q-Day Prize but declined because he viewed the premise as flawed. His first objection was that Shor\u2019s algorithm requires quantum error correction for cryptographically meaningful instances.<\/p>\n

\u201cCurrent quantum computers experience on the order of one error per thousand gates, but cryptographically relevant instances of Shor\u2019s algorithm require billions of gates,\u201d he wrote. \u201cThe only known way to cross this chasm is quantum error correction. There are promising quantum error correction experiments being done, but ultimately quantum error correction is still a work in progress.\u201d<\/p>\n

That distinction sits at the center of the dispute. In Gidney\u2019s view, running small non-error-corrected circuits does not provide a useful proxy for breaking real-world ECC keys<\/a>, because the scaling behavior is fundamentally different from the systems that would be needed to threaten Bitcoin-scale cryptography.<\/p>\n

His second objection was more damaging for the prize result. Gidney argued that small Shor-style problems can appear to succeed even when the quantum hardware is not contributing meaningful computational value.
\nThe issue, he said, resembles a joke paper he published for SIGBOVIK 2025, where he claimed to factor all numbers up to 255 using a quantum computer, only to show that the same success could be reproduced with randomness. He called this the \u201cFalling With Style\u201d problem.<\/p>\n

\u201cFor the near future, the contribution of luck is going to massively outweigh any legitimate contribution of the quantum computer,\u201d Gidney wrote, quoting the warning he said he gave when declining to participate. \u201cSo I suspect the winner in 2026 will be whoever did the best job at obfuscating how they made themselves unavoidably lucky. You\u2019re going to find yourself in a philosophical debate, with 100K$ on the line, over where exactly the line for a quantum computer \u2018really\u2019 breaking a key is.\u201d<\/p>\n

According to Gidney, that is effectively what happened.<\/p>\n

He pointed to work by GitHub user Yuval Adam, who reportedly replaced the quantum calls in the winning submission with random calls and found that the results were \u201cindistinguishable\u201d from the quantum version. Gidney said the circuit construction itself looked valid, including its implementation of the ELDPC circuit from Roetteler et al. 2017, but that this made the problem more subtle rather than less serious.<\/p>\n

\u201cYou make a correct circuit, you get the expected result, you celebrate\u2026 but you got the right answer for the wrong reason,\u201d he wrote. \u201cThis is a fear that every competent experimentalist knows in their bones. It\u2019s why they don\u2019t just check that something works when it should work, they check that it breaks when it should break.\u201d<\/p>\n

Project Eleven Defends The Broader Aim<\/h2>\n

Project Eleven framed the winning result as a practical demonstration of the attack class that could eventually threaten Bitcoin and Ethereum. In an reaction, CEO Alex Pruden said<\/a> the submission showed that \u201cthe resource requirements for this type of attack keep dropping\u201d and that the barrier to running such experiments was falling because the work used cloud-accessible public hardware rather than private or national-lab systems.<\/p>\n

The group also cited recent theoretical resource estimates, including Google\u2019s April 2026 estimate<\/a> of under 500,000 physical qubits for a full 256-bit attack and a later Caltech and Oratomic paper that put the figure as low as 10,000 qubits in a neutral-atom architecture. Project Eleven argued that while the distance from 15 bits to 256 bits remains large, the gap is increasingly an engineering problem rather than a fundamental physics problem.<\/p>\n

Pruden later acknowledged Gidney\u2019s critique on X, writing that \u201csmall factoring problems are a very imperfect yardstick for Q-Day.\u201d Still, he defended the purpose of the competition as an attempt to bridge a gap between quantum researchers who see rapid acceleration and cryptographers or Bitcoin developers who want stronger evidence before treating current systems as near-term vulnerable.<\/p>\n

\u201cSo, since small factoring problems aren\u2019t a good yardstick for Q-Day, then what is?\u201d Pruden wrote. \u201cI\u2019ll happily take feedback on how we can better incentivize open benchmarking towards Q-Day risk.\u201d<\/p>\n

A Credibility Problem For Quantum Risk Messaging<\/h2>\n

Gidney did not dismiss quantum risk to crypto outright. In fact, he wrote that there are \u201clegitimate concerns\u201d quantum computers could become cryptographically relevant before the end of the decade, pointing to post-quantum migration efforts at companies such as Google and Cloudflare.<\/p>\n

His argument was narrower, but consequential: a weak benchmark can undermine the case it is trying to make. If a competition designed to raise awareness produces a result that critics can reproduce with randomness, it risks becoming ammunition for skeptics rather than a warning signal for the industry.<\/p>\n

At press time, BTC traded at $77,750.<\/p>\n

\"Bitcoin<\/div>\n","protected":false},"excerpt":{"rendered":"

Project Eleven\u2019s 1 BTC Q-Day Prize was meant to sharpen the debate over quantum risk to Bitcoin and other ECC-secured crypto assets. Instead, a sharp critique from Google quantum researcher Craig Gidney has turned the competition itself into the story. In an April 25 blog post titled \u201cThe predictable failure of the QDay Prize,\u201d Gidney, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-86756","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/86756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86756"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/86756\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86756"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86756"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}