What Did Google Actually Achieve With Willow?
Quantum computers rely on fragile physical qubits that must be protected against errors. Researchers group these into error-corrected logical qubits, but certain advanced operations also require specially prepared resources known as magic states.Producing those states can consume a substantial proportion of a quantum computer’s capacity. Google estimates that conventional approaches could devote up to 95% of a machine’s resources to magic-state production, leaving comparatively little hardware available for computation.Magic state cultivation offers an alternative. It prepares an initially imperfect state, applies repeated checks to identify errors and discards unsuccessful attempts. The surviving states can then support operations needed for complex quantum algorithms.On Willow, the process reduced errors approximately 40-fold compared with states prepared without cultivation. The experiment also demonstrated transferring a cultivated state between different quantum error-correction codes.The 99.99% fidelity figure applies only to accepted states. Approximately 92% of preparation attempts were rejected, meaning the result does not establish a 40-fold reduction in total computing costs.
Investor Takeaway
How Does the Breakthrough Affect Bitcoin’s Quantum Risk?
Bitcoin relies on elliptic-curve cryptography to verify transaction signatures. A sufficiently powerful quantum computer running Shor’s algorithm could theoretically derive a private key from an exposed public key, allowing an attacker to authorize unauthorized transfers.Google’s March research estimated that approximately 1,200 to 1,450 logical qubits could perform the underlying calculation using between 70 million and 90 million Toffoli gates, depending on the circuit design.Under specified superconducting hardware assumptions, the researchers estimated that fewer than 500,000 physical qubits could execute such calculations within minutes.One modeled attack, involving precomputation before a public key becomes available, required approximately nine minutes of additional processing and the production of roughly 500,000 sufficiently reliable magic states per second.The new experiment tests an important part of that engineering problem. However, Google’s earlier resource estimates already incorporated efficient magic-state generation, so Willow’s 40-fold error improvement cannot simply be applied as an additional reduction in the estimated number of qubits.As FinanceFeeds previously reported in its coverage of Galaxy Digital’s quantum-risk assessment, the practical threat depends on both computing capabilities and the exposure of individual wallet public keys.
Investor Takeaway
Why Are Older Bitcoin Wallets Particularly Vulnerable?
Quantum exposure differs across Bitcoin address formats. Early Pay-to-Public-Key transactions reveal public keys directly on the blockchain, while several later formats conceal them behind hashes until funds are spent. Taproot outputs also expose elliptic-curve public keys.Already exposed keys could theoretically be targeted without waiting for a new transaction. For wallets that initially conceal their keys, exposure generally occurs when spending, potentially creating a narrower attack window.Dormant holdings introduce another complication. A future quantum-resistant upgrade would require owners to migrate vulnerable funds, but coins whose private keys have been permanently lost cannot be moved through ordinary owner-authorized transactions.Blockstream CEO Adam Back previously discussed how a post-quantum migration could affect dormant Bitcoin and Satoshi-era holdings. Any proposal to freeze or otherwise restrict unmigrated coins would also raise difficult questions about property rights and Bitcoin’s monetary rules.
What Should Bitcoin Investors and Custodians Watch Next?
Bitcoin’s post-quantum transition remains an unresolved engineering and governance challenge. Proposed changes must address digital signatures, transaction sizes, wallet compatibility and the treatment of previously exposed keys.Coinbase recently outlined recommendations for phased post-quantum migration, including flexible signature arrangements and institutional custody requirements. Bitcoin Improvement Proposal 360 provides one possible transaction structure, but does not independently deliver a complete post-quantum signature solution.Investment in defensive research is also increasing. Galaxy Digital has committed up to $5 million to Bitcoin quantum-readiness development, supporting efforts to prepare the network before practical attacks become feasible.For Google, the next engineering milestones include improving cultivation yield, scaling magic-state production and integrating reliable states into longer computations. None currently establishes a definitive date for a quantum attack on Bitcoin.