Nine crypto infrastructure firms have formed a Quantum Alliance to coordinate the industry's defense against future quantum computers, according to a report from Decrypt published October 17, 2026. The group is modeled on the Internet Engineering Task Force, the body that set the open standards underpinning the modern internet, and its stated goal is to agree on common post-quantum cryptography standards before a capable machine arrives.
The trigger behind the announcement is a specific figure: roughly 6 million Bitcoin sit in a state that a sufficiently powerful quantum computer could eventually target. That is close to a third of all Bitcoin that will ever exist, and at a price of about $81,297 as of October 17, 2026, it represents a large share of the network's value.
The exposure problem the group is built around
Bitcoin's security rests on elliptic curve cryptography, which protects the link between a private key and the funds it controls. A large, fault-tolerant quantum computer running Shor's algorithm could, in theory, derive a private key from a public key that has been revealed on-chain. The 6 million figure covers coins whose public keys are already visible, including very early pay-to-public-key outputs and addresses that have been reused after spending.
No machine capable of this exists today, and the alliance is not claiming one is imminent. The point of a standards body is lead time. Migrating a decentralized network with no central operator to new signature schemes is slow, contentious, and dependent on wallet software, exchanges, custodians, and miners moving in rough coordination. Agreeing on the standards years ahead of any threat is the work the group is taking on.
A standards body, not a product
Modeling the effort on the IETF is a deliberate signal. The IETF produced the protocols that let independent networks interoperate without a central authority, through open proposals and rough consensus rather than a single vendor's roadmap. Crypto has lacked an equivalent forum for cryptographic migration, where competing firms have incentives to protect their own implementations.
A nine-member group is small, and the harder test comes later: whether the standards it publishes get adopted across wallets, nodes, and the Bitcoin protocol itself. Bitcoin's history of protocol change is a record of multi-year debate even for modest upgrades. Post-quantum signatures are larger and more computationally heavy than today's schemes, which raises questions about block space and verification costs that the group will have to resolve in public.
Practical takeaways for people holding keys
For most holders, nothing changes today, and no action is urgent. The clearest lesson is an old one: address reuse weakens the protection quantum resistance is meant to preserve. A fresh address that has only ever received funds has not exposed its public key on-chain, which keeps it outside the most exposed category until it is spent.
That principle sits at the heart of self-custody practice, where key handling is the user's responsibility rather than a custodian's. Hardware wallet vendors such as Ledger and the broader signing-device market will be among the parties that eventually ship whatever post-quantum scheme the industry settles on, since firmware is where most users would receive the change. Custodial platforms and exchanges carry the same obligation for the balances they hold on behalf of customers.
The counterparty question is worth stating plainly. Coins held by a custodian depend on that custodian migrating in time; coins held in self-custody depend on the holder updating their own software. Neither path is automatic, and both rely on the standards work now beginning.
Overview
Nine crypto firms have launched an IETF-style Quantum Alliance to set open post-quantum cryptography standards, spurred by roughly 6 million Bitcoin sitting in address types that a future quantum computer could target. No such machine exists yet, and the group's value is lead time: coordinating a decentralized network's migration to new signature schemes is slow enough that the preparation has to start years early. The near-term lesson for holders is unchanged, which is to avoid address reuse and keep wallet software current. The real test is whether a nine-member group's standards gain adoption across Bitcoin's wallets, nodes, and protocol.
