The financial industry is investing heavily in tokenization, stablecoins, and digital asset infrastructure. Banks are exploring new settlement systems, asset managers are bringing traditional investments on-chain, and governments are examining how digital assets could reshape financial markets. One foundational question deserves more attention: Will the cryptography securing these systems remain safe for the lifetime of the assets they hold?
Much of today's blockchain infrastructure relies on cryptographic standards that sufficiently powerful quantum computers could eventually break. If the industry builds the next generation of financial markets on those foundations without a credible plan for change, it risks creating a costly security problem at the very moment it is trying to modernize finance.
Most major blockchains use elliptic-curve cryptography to authorize transactions. These methods are secure against conventional computers, but a sufficiently powerful quantum computer could derive private keys from exposed public keys, potentially allowing attackers to forge signatures and take control of digital assets. That threat is no longer something the industry can comfortably leave to the distant future. A recent breakthrough from Google Quantum AI that opened a critical bottleneck brings quantum computing one step closer. This follows a March 2026 research paper from the organization indicating that breaking widely used elliptic-curve cryptography could require fewer quantum computing resources than previously estimated. No one knows when a machine capable of doing so will become practical, but some estimates are as soon as 2029.
Financial institutions understand that infrastructure decisions have long lives. Payment networks, custody systems, and market infrastructure are not easily replaced. Blockchain introduces a similar challenge: ledger records persist, and assets may remain on chain for years or decades.
An attacker who can derive a private key from an exposed public key could potentially compromise assets protected by that key. The level of exposure depends on the network and account design, but the implications for long-lived digital assets are clear. Security decisions made today may determine whether those assets remain protected tomorrow.
The challenge is in coordinating a transition across networks, wallets, exchanges, custodians, and hardware providers. That takes time to design, test, and implement. Waiting until quantum computers pose an immediate threat could leave institutions racing to upgrade systems on which substantial value already depends. The better time to address this risk is while the infrastructure is still being built.
Post-quantum security should be a core infrastructure consideration, alongside reliability, scalability, and interoperability. Institutions evaluating blockchain networks should ask not only what a platform can do today, but how it will adapt as cryptographic standards and computing capabilities evolve. That requires practical progress toward protecting ledger records, authorizing transactions, and managing the keys that control assets.
Algorand offers one example. In 2022, it introduced State Proofs, which use Falcon, a post-quantum signature scheme selected by the U.S. National Institute of Standards and Technology (NIST), to certify the state of its ledger every 256 rounds (about every 12 minutes). By 2026, Algorand deployed native post-quantum accounts. Together, these developments address distinct parts of the challenge: verifying ledger history, demonstrating quantum-resistant transaction authorization, and supporting accounts that use post-quantum signatures.
No single protocol upgrade can secure the entire digital asset ecosystem. Wallets, custody providers, exchanges, and hardware systems must also support the transition. The industry also needs cryptographic agility: the ability to adopt new signature schemes and migrate accounts and services as standards evolve, without rebuilding entire systems. No one can predict exactly how quantum computing will develop or which cryptographic standards future systems will require. Infrastructure must be designed to accommodate that uncertainty.
Quantum resilience is often discussed as a protocol-level problem. In practice, it extends across the entire financial technology stack. A blockchain may support post-quantum signatures, but assets can remain vulnerable if the wallet controlling them uses exposed keys or a custodian cannot support migration. Institutions must evaluate the readiness of the services they depend on, establish migration plans, and understand how assets will be protected throughout the transition.
This creates responsibilities for both infrastructure providers and the institutions choosing among them. Developers need to demonstrate credible progress, support cryptographic flexibility, and communicate what their systems can and cannot protect. Financial institutions need to ask harder questions before committing assets and operations to networks that may be difficult to change later.
The same scrutiny should apply to tokenization projects. Decision-makers naturally focus on transaction costs, settlement speed, interoperability, and regulatory requirements when evaluating digital asset platforms. Quantum readiness belongs in that conversation, too. It should influence infrastructure selection. Tokenization promises to make financial markets more efficient, programmable, and accessible. Delivering on that promise requires infrastructure that can remain secure as technology changes.
The industry has an opportunity to address quantum risk before digital assets, custody arrangements, and market systems become even more deeply established. Doing so will require investment, coordination, and a willingness to confront a problem whose timeline remains uncertain but whose consequences could be substantial.
A financial system built for the future cannot depend indefinitely on cryptographic assumptions that future technology may invalidate. Quantum readiness should already be a key discussion point today, not just a theoretical topic for an uncertain future.
Disclaimer: The content provided in this blog is for informational and educational purposes only. The information is provided by the Algorand Foundation and while we strive to keep it accurate and current, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability, or availability of the blog or the information contained in it for any purpose. Nothing in this blog is legal, financial, tax, or investment advice, nor an endorsement, guarantee, or investment recommendation. Technical descriptions are provided as of the date of publication and may change. Any statements about future plans, features, integrations, protocol or consensus upgrades, fees, or timelines are forward-looking and subject to change, including subject to community adoption, and are not commitments. You should conduct your own research and consult a qualified professional before acting on any information here; any reliance you place on it is strictly at your own risk. All third-party names and trademarks are the property of their respective owners, and their mention does not imply affiliation or endorsement.