Google said its Willow quantum chip reduced errors about 40-fold when preparing special states used in quantum calculations. The result, published in Science this week, matters because it addresses an often overlooked step in the bitcoin quantum debate. Most discussion asks how large a quantum machine must be to break a wallet. Less attention goes to how much of that machine must be used just getting ready to calculate. That preparation cost has been a practical barrier. Willow’s error reduction does not mean bitcoin is breakable now. It does move the underlying engineering question forward.
Why exposed keys matter
A bitcoin wallet uses a secret key to approve payments and a public key that lets the network verify them. Spending normally reveals the public key. Some payment types expose it from the start. If someone recovers the secret from the public key, they can sign transactions as the owner. The network would treat those signatures as valid. Shor’s algorithm, published in 1994, describes how a large enough quantum computer could do that math. No one has demonstrated it.
A recovery phrase in a drawer does not help if the public key is already on the blockchain. The attacker works from public data. Later payment formats hide the public key behind a hash until the owner spends. That gives some protection, but the key becomes exposed during a payment. An attacker would need to recover the secret quickly enough to interfere. That is a narrower window, not a guarantee.
Old and lost coins
Some of bitcoin’s oldest holdings have had public keys exposed since they were mined. Lost coins are harder. Bitcoin could add stronger spending protections, but someone must move the old holdings into them. If the keys are lost, no one can make that move. The exposed public key stays available to a future attacker.
Old coins have moved as the debate grows louder. On Oct. 7, 100.02 BTC untouched since July 2010 moved after more than 16 years. It was worth about $8.5 million. In August, six wallets inactive since 2011 to 2014 moved another 553.59 BTC, worth roughly $40 million at the time. Those transfers do not prove holders are reacting to quantum fears. Moving coins can mean changing wallets, reorganizing holdings, or preparing to sell.
A warning, not a break
Willow’s result is a step in error correction, perhaps a meaningful one. It is not a working attack on bitcoin. The practical risk still depends on machine size, error rates, and time. But the debate should include preparation overhead, not just the final calculation. For old wallets with exposed keys, that distinction matters. The threat is not here yet. The research is moving, though, and the oldest coins have the least room to adapt.
