Key takeaways

  • Google says a technique called "magic state cultivation" now works on its Willow chip, cutting quantum errors about 40x and reaching a record 99.99% accuracy.
  • The result targets quantum error correction, not Bitcoin itself, so the immediate threat to the network is unchanged.
  • Google's March white paper estimated breaking Bitcoin's security would require 1,200 to 1,450 logical qubits, far beyond today's hardware.
  • About 6.26 million BTC sits in quantum-vulnerable addresses, but the risk is conditional on machines that do not yet exist.
  • Prediction markets price the near-term risk as small, while the longer-term migration question grows harder to dismiss.

What happened

Google reported a quantum computing advance built around "magic state cultivation," a technique it says now works on its Willow chip. According to the primary report, the method cuts relevant error rates by a factor of 40 and reaches 99.9% accuracy, with the announcement citing a record 99.99%.

Magic states are a specialized resource in quantum computation. The primary report says they typically consume about 95% of a quantum computer's capacity. Improving how reliably and efficiently those states are produced could ease a major bottleneck in building larger, more useful machines.

The claim is a milestone in quantum error correction, the discipline that turns noisy physical qubits into dependable logical ones. It is not a demonstration of a machine capable of attacking Bitcoin. Google's method still needs to be shown at a larger scale.

Market context

The gap between laboratory results and a Bitcoin-breaking system is the central fact here. Google's March white paper estimated that breaking Bitcoin's security would require 1,200 to 1,450 logical qubits — error-corrected units, not the raw physical qubits installed in a processor.

Current hardware is far from that bar. Google's Willow chip, announced in December 2024, has 105 qubits. IBM reported 70 logical qubits, while QuEra had executed algorithms using up to 96 logical qubits. IBM's roadmap targets 200 logical qubits by 2029 and 2,000 by 2033 — a future company target rather than a present capability.

A separate Google-linked resource estimate discussed in other reporting puts the requirement below 500,000 physical qubits under specific assumptions. That conditional physical-qubit figure is not a substitute for the 1,200–1,450 logical-qubit estimate.

A scenario in which an advanced machine derives a private key from an exposed public key in nine minutes describes a hypothetical attack capability, not an existing machine. Practical exposure also depends on whether a public key is revealed in the first place. A Google analysis of quantum vulnerabilities in cryptocurrency addresses the broader risk, while any Bitcoin response would require a technically sound migration path and coordination across users, developers and custodians.

Why it matters

The primary report estimates about 6.26 million BTC sits in quantum-vulnerable addresses. That exposure is conditional on future machines becoming capable of deriving private keys from exposed public keys. The long-term security debate therefore covers two things: the strength of future quantum hardware and the ability to move affected funds to safer arrangements.

Jameson Lopp, Casa's co-founder and chief security officer, says a machine powerful enough to decode a Bitcoin public key could be at least another decade away. Google's error-correction progress reinforces why the issue deserves planning rather than panic.

As of today, Polymarket assigned a 1% chance to the relevant possibility by year-end and 11% by the end of 2027, as reported in the source article.

For BTC positioning, Google's result does not establish an immediate security event or a standalone sell signal. It does add weight to the long-dated tail risk. Error correction is advancing, but the leap from a laboratory milestone to a reliable Bitcoin-breaking system still requires scale, fault tolerance and sustained computation that current machines have not demonstrated. The immediate network threat is unchanged, while the longer-term Bitcoin quantum risk becomes harder to dismiss as a purely theoretical engineering problem. The gap is narrowing, but it remains substantial.

What to watch

  • Whether Google demonstrates magic state cultivation at larger scale, since the current result addresses quantum error rather than cryptographic attack capability.
  • Progress against IBM's roadmap of 200 logical qubits by 2029 and 2,000 by 2033, and whether other teams report comparable logical-qubit counts.
  • Any movement in prediction-market odds, which currently sit at 1% for year-end and 11% by the end of 2027.
  • Development of a post-quantum migration path for Bitcoin, including coordination among users, developers and custodians, and how addresses with exposed public keys are handled.
  • Whether the roughly 6.26 million BTC in quantum-vulnerable addresses becomes a focus of long-horizon planning discussions.