This content originally appeared on HackerNoon and was authored by Ishan Pandey
\
AmericanFortress closes $8 million to solve the migration problem Bitcoin's governance cannot. As Google's March paper accelerated the timeline, the money is already exposed.
\ How do you migrate $483 billion in Bitcoin out of quantum-vulnerable addresses when nobody owns the keys to a fifth of it?
\ That is the problem Grayscale Research flagged this quarter, the problem BIP-360 entered the Bitcoin Improvement Proposals repository to address, and the problem Vitalik Buterin's "Strawmap" laid out for Ethereum in February. It is also the problem AmericanFortress just raised $8 million to bypass.
\ The company announced today that it has closed an $8 million seed round co-led by SAVA Digital Asset Fund, Moon Pursuit Capital and 0G Labs. Alongside the funding, AmericanFortress filed a patent for quantum-resistant cryptographic transaction signing built as a licensable retrofit. Any chain that wants the protection can adopt the technology without waiting for its own governance to ratify a hard fork. 0G Labs is the first to deploy it in production.
\
What Is Already Exposed
Every major blockchain in existence runs on elliptic curve cryptography. ECC works because deriving a private key from a public key is computationally infeasible for classical computers. Shor's algorithm, running on a sufficiently powerful quantum computer, breaks that asymmetry. Once a public key is on chain, the private key is recoverable.
https://x.com/Americanfort_io/status/2051715859123704067?embedable=true
\ That distinction matters because of how Bitcoin addresses work. Pay-to-Public-Key (P2PK) addresses, used in Bitcoin's earliest years and including the coins mined by Satoshi Nakamoto, store the full public key directly. Reused Pay-to-Public-Key-Hash (P2PKH) addresses expose the public key the moment the owner first spends from them, which a substantial proportion of users have done through years of poor wallet UX. Deloitte Netherlands estimated in 2023 that approximately 4 million BTC sat in these formats. More recent on-chain analysis from early 2026 puts the total quantum-vulnerable supply at 6.26 to 6.89 million BTC, roughly 30% of all Bitcoin in circulation.
\ Ethereum's exposure surface is structurally larger. Every Ethereum wallet that has ever sent a transaction has exposed its public key by definition. The Ethereum Foundation has acknowledged the vulnerability in its public roadmap.
\ This is the harvest-now-decrypt-later threat model. Nation-state adversaries do not need a working quantum computer today. They need only the patience to record exposed public keys on public blockchains and the conviction that a sufficiently powerful machine will exist within their adversary's lifetime. Both conditions appear to be met.
\
How Close Is Q-Day
The technical bar to break ECDSA-256 has been moving downward, not upward. Google Quantum AI and a Caltech-Oratomic team published independent analyses in March 2026 that significantly reduced the qubit count and computational steps required to run Shor's algorithm against secp256k1, the elliptic curve Bitcoin uses. Pre-2026 estimates put the threshold at roughly 4,000 logical qubits with safety margin. The post-March estimate is closer to 2,330.
\ At the same time, demonstrated quantum capability is climbing. QuEra Computing reported 96 logical qubits in January 2026. The leading roadmaps from Google, IBM, and the neutral-atom platforms project aggressive scaling through the rest of the decade.
\
\ Justin Drake, a researcher at the Ethereum Foundation, has publicly estimated at least a 10% probability that a quantum computer recovers a secp256k1 ECDSA private key by 2032. Bitcoin Suisse's Q1 2026 research framed the timeline more starkly: the threat is no longer a distant horizon, it is a preparation window that is open now.
\
The Governance Trap
A hard fork that invalidates ECDSA signatures across Bitcoin or Ethereum solves the active-wallet problem. It does not solve the dormant-wallet problem. Roughly 1.7 million BTC sit in early-era P2PK scripts, and a similar quantity is held in addresses whose owners are dead, lost, or simply unreachable. Those coins cannot be migrated regardless of what the network decides. They can be left exposed as a quantum honey pot, or they can be invalidated by consensus. Neither option is politically clean.
\ Bitcoin's BIP-360 proposes Pay-to-Merkle-Root, a new address type that preserves programmability without exposing the public key. Ethereum's Strawmap targets quantum resistance across consensus, accounts, data availability, and ZK proofs through the Glamsterdam and Hegotá hard forks. XRP Ledger has a four-phase plan to 2028 using ML-DSA signatures. Circle's Arc, a post-quantum stablecoin layer, is in active development. NIST finalized the foundational PQC standards (FIPS 203, 204, 205, derived from ML-KEM, ML-DSA, and SLH-DSA) in August 2024 and selected HQC as a fifth algorithm in March 2025.
\
Twenty months after NIST finalized the standards, only one major chain has reached production deployment. That chain is 0G Labs, with AmericanFortress's signing infrastructure underneath.
\
The Bet AmericanFortress Is Making
\ Michal Pospieszalski, CEO of AmericanFortress, explains,
\
"We invented Send-to-Name to make crypto as easy and safe as sending a Venmo. Now, with this patent filing, we're adding a layer of security that protects every transaction against the quantum threat horizon," said
\ The commercial logic underneath the patent filing is straightforward. Bitcoin and Ethereum migration timelines are bounded by their governance processes, which is to say they are slow by design. New chains, particularly AI-native infrastructure like 0G Labs, do not have legacy wallets to fork around. They can adopt PQC signing from day one and license the technology that does it.
\ Michael Heinrich, CEO of 0G Labs, explains
\
Post-quantum security isn't a future feature, but a present necessity, 0G is proud to be the first chain to bring this technology to production.
\
What to Watch
Three signals will determine whether AmericanFortress's bet plays out at scale. The first is whether other AI-native or modular L1s adopt the licensable infrastructure. The thesis depends on chains being willing to pay for production-ready PQC rather than build it themselves.
\ The second is whether Bitcoin and Ethereum's actual migration timelines slip. The longer BIP-360 and Strawmap take to execute, the more attractive the retrofit licensing model becomes for chains that want to advertise quantum safety to institutional users. The third is the quantum hardware curve itself. If demonstrated logical qubit counts continue doubling on the trajectory of the past three years, the conversation moves from preparation to remediation faster than any current governance process can absorb.
\ The cryptographic foundation underneath crypto has an expiration date. The only question left is whether the industry migrates on its own schedule or on the quantum hardware roadmap's schedule.
\ Don’t forget to like and share the story!
This content originally appeared on HackerNoon and was authored by Ishan Pandey
Ishan Pandey | Sciencx (2026-05-05T19:45:38+00:00) AmericanFortress Raises $8M to Defend the $483 Billion in Bitcoin Already Exposed to Quantum Risk. Retrieved from https://www.scien.cx/2026/05/05/americanfortress-raises-8m-to-defend-the-483-billion-in-bitcoin-already-exposed-to-quantum-risk/
Please log in to upload a file.
There are no updates yet.
Click the Upload button above to add an update.