Google’s Willow chip cuts quantum errors threatening Bitcoin’s security model

Google’s latest quantum computing breakthrough reduces errors in a critical step toward cracking Bitcoin’s security, intensifying concerns about the timeline for protecting older coin holdings. The advance targets magic-state production, a resource bottleneck that prior discussions of quantum threats have largely overlooked.

• Google’s Willow chip reduced errors about 40-fold when preparing magic states, quantum resources needed for calculations threatening Bitcoin wallets.
• The experiment achieved 99.99 percent fidelity among states that passed inspection, though only 8 percent of preparation attempts succeeded overall.
• Willow’s gains address hardware efficiency in sustaining the roughly 500,000 reliable magic states per second required under one modeled Bitcoin attack scenario.

• 40-fold reduction in errors when preparing magic states compared with prior methods
• 99.99% fidelity achieved among quantum states that passed quality inspection checks
• 8% of magic state preparation attempts succeeded after error detection and measurement
• 500,000 reliable magic states per second needed under one modeled attack on Bitcoin cryptography

CoinDesk reported that Google’s Willow quantum chip has substantially reduced errors in preparing what researchers call “magic states,” a critical and often-overlooked ingredient in quantum calculations that could eventually threaten Bitcoin wallets. The findings, published in Science this week, shift the debate away from the raw size of a quantum computer toward the less-discussed engineering challenge of keeping such a machine supplied with the specialized quantum states it needs during an attack. Bitcoin’s security rests on the difficulty of deriving a private key from a public key, a task that remains practically impossible for classical computers but could theoretically fall to a sufficiently large quantum computer running Shor’s algorithm. Coins mined in Bitcoin’s earliest years have had their public keys exposed on the blockchain since creation, making them particularly vulnerable once quantum computers reach the required power.

Google’s Willow reduces the supply problem for quantum attacks

The quantum computing challenge that Google tackled with Willow centers on a resource bottleneck rarely emphasized in popular discussions of the Bitcoin quantum threat. Quantum computers store information in qubits, which are extraordinarily fragile units prone to errors from heat, vibration and stray electromagnetic signals. Engineers compensate by grouping many physical qubits into logical qubits that can detect and correct errors. Running certain operations requires specially prepared quantum states called magic states, which are consumed each time they are used, forcing the quantum computer to continuously produce fresh supplies throughout a calculation.

Google’s method, termed cultivation, creates higher-quality magic states from rougher versions by checking for errors and discarding failed attempts. The firm reported achieving 99.99 percent fidelity in the states that passed inspection, meaning the finished states matched the intended target with exceptional precision. However, only 8 percent of the preparation attempts succeeded after error detection and measurement, meaning that for every 100 tries, about 8 made it through. The advance addresses a hardware efficiency problem: resources devoted to producing magic states cannot simultaneously perform other calculations, making the supply chain a critical constraint on the overall speed and feasibility of an attack.

The improvement does not directly lower the cost of attacking Bitcoin

Google estimated in March that a future superconducting quantum computer with fewer than 500,000 physical qubits could break the wallet cryptography used by Bitcoin and Ethereum under specific hardware assumptions. That estimate already incorporated efficient magic-state production methods. The Willow result does not provide an additional 40-fold reduction in the overall cost of attacking Bitcoin, since the efficiency gains cannot be simply multiplied together with other advances. Instead, Willow demonstrates that one engineering approach to supplying magic states at scale can work better than previously shown, reducing the amount of hardware wasted on failed production attempts.

Google’s March paper detailed how much fuel an attack would consume: for one modeled attack scenario lasting roughly nine minutes after a public key appears on the blockchain, the machine would need to produce approximately 500,000 sufficiently reliable magic states every second. Willow’s 40-fold error reduction in magic-state preparation supports the feasibility of maintaining that production rate with less total hardware devoted to the task. The remaining challenge is substantial: the researchers acknowledge that more work is needed on real-time operations and integrating these states into stronger error-correcting frameworks.

Early Bitcoin holdings show signs of movement amid quantum concerns

As the quantum threat discourse intensifies, some of Bitcoin’s oldest coins have begun moving after years of dormancy. On October 7, 100.02 BTC untouched since July 2010 moved for the first time in more than 16 years, carrying a value of approximately $8.5 million at the time. In August, six wallets that had been inactive since 2011 to 2014 transferred 553.59 BTC, worth roughly $40 million when those transactions occurred. While such movements could reflect multiple motivations including wallet reorganization or preparation to sell, the timing coincides with heightened public discussion of quantum computing’s threat to Bitcoin security.

Recovery phrases stored offline offer no protection if an attacker extracts a secret key from the public key already recorded on the blockchain.

Some payment formats hide the public key until the owner spends, but once exposed, the key remains vulnerable to a future quantum computer capable of reversing Shor’s algorithm.

The BlockWest read. We don’t see Willow as a near-term threat to Bitcoin’s utility. The engineering challenge remains formidable: Google’s error rates, while improved, still discard 92 percent of attempts, and scaling from hundreds of qubits to the machines described in attack models requires overcoming substantial hurdles. What matters for allocators and custody providers: the quantum debate no longer rests on theoretical gaps. Vendors now compete on realistic engineering timelines, and the institutions holding legacy Bitcoin should assume private-key migration infrastructure will be needed well before cryptographically-relevant quantum computers exist.

The next pressure point arrives when quantum chip makers demonstrate magic-state production at the scale Google’s March estimate requires, or when researchers publish attack models incorporating Willow’s efficiency gains alongside other recent advances in quantum error correction. Watch for announcements from Google, IBM, and other quantum developers on scaling magic-state cultivation to the hundreds of thousands of states per second that would make an actual attack practical.

BlockWest is a news publication. Nothing here is investment advice. Read our disclaimer and editorial policy.