Europol warns crypto wallets are the weak spot for future quantum attacks
Europol has a message for the crypto industry: the lock on your wallet might not survive the next generation of computers.On October 7, 2026, the European Union's law enforcement agency published two reports through its European Cybercrime Centre (EC3). Both point to crypto wallets as the primary vulnerability point if quantum computing matures into a practical attack tool.The agency's advice is simple to state and hard to execute. Start the transition to quantum-resistant cryptography now, not when the threat arrives.Today's cryptography assumes nobody can work backward from a public key to forge the private key. Classical computers would need absurd amounts of time to try.Europol's concern is that advanced quantum computers could change that math. The reports explain that such machines could potentially run algorithms like Shor's to deduce private keys from public keys that have been exposed.Shor's algorithm is a quantum method for solving the kind of math problems that underpin much of modern public-key cryptography. If someone can derive your private key, they can sign transactions as you.Without robust cryptographic protections in place, Europol warns, unauthorized fund transfers could become feasible.The reports did not single out any specific crypto asset or platform. Instead, Europol framed the weakness as one that applies across the crypto spectrum.The second thread running through Europol's publications is a tactic with an ominous acronym: HNDL, or "harvest now, decrypt later."The idea is patient rather than flashy. Bad actors collect sensitive encrypted data today, store it, and wait for quantum hardware capable of cracking it.For crypto, that matters because blockchains are public and permanent. Information that is exposed on-chain today stays exposed indefinitely, which gives a future attacker plenty of material to work with.Approximately 6.9 million Bitcoin sit in legacy or reused addresses that face potential quantum vulnerabilities, according to CryptoQuant estimates. That stash was valued at around $586 billion at the time.Europol is not sounding the alarm alone. Its warnings echo a September 2026 alert from the Joint Committee of European Supervisory Authorities (ESAs).That alert pointed to the potential hazards of quantum advances arriving before any significant commercial applications of the technology emerge. In other words, the security risk could show up well before quantum computers become everyday business tools.The European Commission's roadmap requires member states to begin transitioning to post-quantum security measures by the end of 2026.Europol's recommended response is a phased, systematic move to quantum-resistant cryptography. The agency addressed that call to a broad cast: blockchain developers, wallet providers, policymakers, and everyday users.Alongside new cryptography, the reports push for better wallet security and stronger key management practices.The most direct pressure lands on wallet providers and protocol developers. They are the ones who would have to build, test, and ship quantum-resistant signature schemes, then convince users to migrate.Migration is where things get messy. A new cryptographic standard does nothing for coins sitting in old addresses whose owners never move them. That makes the 6.9 million Bitcoin figure less a technical problem and more a coordination problem.The reports' focus on key management is a reminder that reusing addresses and leaving funds in older formats carries risk that may compound over time.None of this means a quantum computer is draining wallets tomorrow. Europol's argument is about lead time: cryptographic transitions take years, and the agency would rather the industry start before the deadline is set by an attacker.