Cryptocurrency analysis beyond price charts: market structure, regulatory developments, institutional adoption, tokenomics, and the technology reshaping digital finance and assets.
Strategy Has 843,000 Bitcoin. BlackRock Has More Than Most Countries. Your Treasury Has Zero.Institutional Bitcoin Adoption 2026
Strategy Has 843,000 Bitcoin. BlackRock Has More Than Most Countries. Your Treasury Has Zero.
The largest corporate Bitcoin holders are now navigating a bear market, broken flywheels, and quiet reversals of their founding doctrine. Here is what the June 2026 reality actually teaches CFOs about waiting.
On April 17, 2026, Strategy quietly crossed a threshold that almost no one outside the Bitcoin-treasury niche noticed. The company — formerly known as MicroStrategy — completed a $2.54 billion Bitcoin purchase, pushing its total holdings to 815,061 BTC. In doing so, it passed BlackRock’s iShares Bitcoin Trust (IBIT) to become the single largest institutional Bitcoin holder on the planet. For the first time since Q2 2024, a corporate treasury outranked an ETF giant in raw coin count.
That same week, Bitcoin was trading around $63,000. The Fear and Greed Index sat at 17: Extreme Fear. And the stock of that very company, Strategy, had already lost roughly 66% of its value from its July 2025 peak.
This is the story of institutional Bitcoin adoption in 2026. It is not the story most of the headlines told in late 2025. It is more complicated, more instructive, and frankly more useful to any CFO or board-level finance committee that is now being asked to formally document a position on digital asset treasury strategy.
843,706
BTC held by Strategy (June 2026)
$47.36B
BlackRock IBIT net assets (June 10, 2026)
172+
Public companies holding BTC (Q3 2025)
$61,274
Bitcoin price, June 25, 2026
The Leaderboard That Changed in April 2026
Walk into any institutional investor’s office in Q4 2025 and the Bitcoin conversation was dominated by a single data point: BlackRock’s IBIT had crossed $60 billion, then briefly flirted with figures near $100 billion in AUM as Bitcoin hit its all-time high of roughly $126,000 in October 2025. Financial media ran stories about the ETF sucking in capital at a rate that had not been seen in investment product history. Treasury teams at mid-sized corporates were receiving board memos with subject lines like: “Should we be doing what BlackRock is doing?”
Here is what those memos got wrong. BlackRock was not buying Bitcoin for its own treasury. IBIT is a passthrough vehicle. Every dollar of AUM in that fund belongs to BlackRock’s clients, not BlackRock itself. The ETF’s Bitcoin holdings fluctuate with creations and redemptions. When Bitcoin’s price falls 50%, so does the dollar AUM figure, even if the actual coin count stays flat. This distinction between BTC-denominated and dollar-denominated reporting is how the $102 billion figure circulating in early 2026 became a $47.36 billion figure by June 10, 2026, per SEC filings reviewed against the iShares fund page.
Strategy’s position is structurally different. Those 843,706 Bitcoin sit on a corporate balance sheet. They are an asset of the company, not of external investors. That distinction is what makes Strategy’s overtaking of IBIT in April 2026 genuinely meaningful for the corporate treasury conversation.
What Actually Happened to the $102B Number
The $100 billion-plus figures that dominated Bitcoin treasury coverage in late 2025 were accurate for a brief window. Bitcoin peaked near $126,000 in October 2025. At that price level, large holdings produced enormous dollar AUM numbers. IBIT briefly crossed into nine-figure territory. Headlines froze those numbers.
Then Bitcoin fell. As of June 25, 2026, Bitcoin trades at approximately $61,274, roughly $46,100 below where it stood a year ago, according to Fortune’s market data. That is approximately a 50% drawdown from the October 2025 high. Dollar AUM figures at every Bitcoin-holding institution have roughly halved alongside that price move, even where coin counts stayed flat or grew.
Editorial Accuracy Note
Any article, pitch deck, or board memo citing “$100 billion in BlackRock Bitcoin holdings” as of mid-2026 is anchoring on a peak-price figure. The verified net assets of IBIT as of June 10, 2026, per SEC filings, are $47.36 billion across approximately 1.35 billion shares outstanding. Verify this figure at ishares.com/IBIT before any publication or presentation.
This is not a trivial distinction for a CFO. A treasury committee modeling Bitcoin allocation off 2025 peak figures is doing the analytical equivalent of evaluating a prospective real estate purchase using the last sale price from a bubble year. The asset is the same. The entry point is not.
The Flywheel Is Broken. Here Is What That Means.
To understand why the corporate Bitcoin treasury conversation shifted so sharply in 2026, you need to understand the mechanism that powered it in the first place.
Strategy built its model on what analysts call the “Bitcoin flywheel.” The mechanics: when Strategy’s market capitalization trades at a premium to the value of its Bitcoin holdings (a multiple called mNAV, or market-cap-to-net-asset-value), the company can issue new shares at an elevated price, use those proceeds to buy more Bitcoin, and increase the Bitcoin per share for existing holders. In November 2024, Strategy’s mNAV reached 3.89x. The flywheel was spinning fast.
By early 2026, with Bitcoin’s price falling and market sentiment shifting, Strategy’s mNAV fell below 1.0x. Below 1x, new share issuance to buy Bitcoin is dilutive, not accretive. The flywheel stops. The company can no longer issue equity at a premium to add to its stack. The mechanism that turned Strategy into the world’s largest corporate Bitcoin holder essentially stalled.
What mNAV Below 1x Actually Signals
When a company’s market cap falls below the value of the assets it holds, the market is effectively telling you one of two things. Either it doubts the company’s ability to hold those assets (debt obligations, forced selling risk), or it sees the company itself as a liability sitting on top of those assets. For Strategy, with its layered convertible debt structure, both readings are plausible.
This has direct implications for any company considering a Strategy-style treasury approach. The model’s leverage and appeal depended on the premium. Without the premium, the model is just: borrow money, buy a volatile asset, and service the debt while the asset fluctuates. That is a very different risk profile from what the 2024 and early 2025 headlines implied.
“I think what people may have miscalculated is that institutional adoption is very slow. The ETFs got bought, but when BlackRock is saying they recommend 2% to 4% allocation in their general stock portfolio, the fund managers haven’t done that yet. And they will, but it’s slower than people anticipate.”
Adam Back, CEO and Co-Founder of Blockstream, speaking to CoinDesk, April 29, 2026
Back is not a Bitcoin skeptic. He is one of the longest-tenured technical contributors in the Bitcoin ecosystem, and he runs his own Bitcoin treasury company. His point is structural: the access infrastructure exists, the institutional mandate to act on it has not yet caught up.
The Institutions Now Selling, Not Buying
Corporate Bitcoin treasury coverage tends to focus on purchases. The press releases are easier to write. But the 2026 bear market has produced a quieter and more instructive data set: significant institutional sales.
In March 2026, Bitcoin mining company MARA Holdings sold approximately 15,133 BTC, raising roughly $1.1 billion. The stated purpose was to repurchase convertible debt and fund a strategic pivot into energy infrastructure and AI data-center development. A month later, Riot Platforms disclosed it had sold more than $250 million in Bitcoin during Q1 2026 as part of what it called a “strategic evolution” into data-center operations.
These are not fringe companies. MARA and Riot were among the most Bitcoin-forward public companies in the world during the 2020 to 2025 accumulation phase. Their selling in 2026 reflects something the headline narratives routinely underplay: for many institutional holders, Bitcoin is still a financial instrument to be managed, not an ideology to be maintained. Debt obligations, pivot capital, balance-sheet management. These are CFO-level decisions, not ideological retreats.
Strategy’s Own “Never Sell” Reversal
Even more instructive is what happened at Strategy itself. For years, the company’s defining characteristic was an absolute commitment to never selling Bitcoin. Executive Chairman Michael Saylor framed it in near-religious terms.
That framing shifted on the Q1 2026 earnings call. CEO Phong Le stated explicitly:
“We will sell Bitcoin when it’s advantageous to the company. We’re not going to sit back and just say, ‘We’ll never sell the Bitcoin.’”
Phong Le, CEO of Strategy, Q1 2026 Earnings Call, reported via Yahoo Finance
Saylor’s own comments in May 2026 were more nuanced but still notable. He suggested the firm might sell Bitcoin to “inoculate the market” before clarifying that Strategy’s broader goal remains to “never be a net seller.” (Our read: that clarification is doing a lot of work. “Never be a net seller” is meaningfully different from “never sell.” One is a doctrine. The other is an accounting outcome.) The distinction matters enormously for any CFO who was told by their investment advisors that the Strategy model was a buy-and-hold-forever commitment.
The CFO’s Real Question in a Bear Market
Here is the thing about the “your treasury has zero Bitcoin” framing that dominated financial media through 2025: it was a FOMO argument dressed in competitive-pressure clothing. It worked when Bitcoin was at $126,000 and every headline showed institutions piling in. It is harder to sustain at $61,274, with the Fear and Greed Index sitting at 17 and the poster-child adopter down 66% from its stock peak.
But that does not mean the underlying argument is wrong. It means it needs to be made more precisely.
The actual shift that has occurred in corporate treasury governance is this: 172 or more publicly traded companies disclosed Bitcoin holdings as of Q3 2025, up 40% quarter-over-quarter, collectively holding approximately 1 million BTC or about 5% of total circulating supply, according to Bitwise research cited in the SVB 2026 Crypto Outlook. Across the 94 weeks following the April 2024 Bitcoin halving, corporate treasuries accumulated Bitcoin at 2.8 times the rate of new mining supply, per BitcoinTreasuries.net data reported in Bitcoin Magazine.
That accumulation pace has a governance consequence entirely separate from price performance. When 172 companies have disclosed a position, the CFOs and treasury committees who have not disclosed one are now the ones with a documentation gap. Not because they made a bad decision. Because they made no documented decision. In a world where peers are filing formal treasury policies on digital assets, silence looks like oversight rather than discipline.
What Changed Operationally Since 2021
The “it’s too hard to custody and account for” objection that blocked most corporate Bitcoin conversations in 2021 through 2023 is largely resolved. Spot Bitcoin ETFs, launched after the January 2024 SEC approval, gave institutional treasuries a regulated, auditable, custody-free way to hold BTC exposure. Accounting treatment under current FASB guidance has become significantly more settled. The operational barrier is lower than it has ever been. What remains is a risk-tolerance and board-mandate question.
The Morgan Stanley Signal
In April 2026, Morgan Stanley’s wealth-management network reportedly entered the spot Bitcoin ETF market. The significance is not that Morgan Stanley is necessarily a Bitcoin bull. It is that one of the most conservative wealth-management distribution networks in the world decided the asset class had crossed a compliance and reputational threshold sufficient for client offerings. That is a structural change in the market’s architecture, not a price prediction.
What the Skeptics Are Getting Right
A credible analysis of institutional Bitcoin adoption in 2026 requires acknowledging what the bear market has validated on the skeptical side.
“Bitcoin and other cryptocurrencies’ latest plunge further underscores the highly volatile nature of this pseudo-asset class; one only hopes that policymakers will wake up to the risks before it’s too late.”
Nouriel Roubini, Professor Emeritus of Economics, NYU Stern School of Business, Benzinga via Yahoo Finance, February 2026
Roubini, known as “Dr. Doom” for his accurate prediction of the 2008 financial crisis, made a specific comparative point worth noting: gold rose more than 60% in the year prior to his February 2026 comment, while Bitcoin fell 7% over the same period. For any CFO building the “digital gold” case to their board, that comparison requires a direct answer.
There is also an analytical trap in how institutional adoption gets reported. Unit counts (BTC held) and dollar AUM tell different stories. Headline BTC holdings at major institutions have stayed relatively flat or grown slightly through 2026, because holders did not sell. But the dollar-denominated value of those holdings fell by roughly half. Coverage that cites coin counts without noting the dollar AUM decline is not wrong, but it presents a picture that is more bullish than the numbers warrant.
The block trade data from May 26, 2026 is the sharpest single data point in this category. A $1.26 billion sale of IBIT shares was executed at a 2.3% discount, costing the seller approximately $29.5 million in execution slippage, according to NYDIG analysis reported by CoinDesk. Someone was willing to pay $29.5 million to exit fast. That is what institutional conviction looks like on the other side of a trade.
The Current State of Corporate Bitcoin Holdings
Entity
BTC Holdings
Dollar Value (Approx.)
Structure
Key 2026 Development
Strategy (MSTR)
843,706 BTC
~$53.53B
Corporate treasury (direct hold)
mNAV fell below 1x; CEO reversed “never sell” stance
BlackRock (IBIT)
577K–805K BTC (range, snapshot-dependent)
$47.36B net assets (June 10)
Spot ETF (client assets, not BlackRock’s own)
$1.26B block sale at 2.3% discount in May 2026
MARA Holdings
Reduced in Q1 2026
Sold ~$1.1B worth
Mining company treasury
Sold ~15,133 BTC to repurchase debt and pivot to data infrastructure
Riot Platforms
Reduced in Q1 2026
Sold $250M+ worth
Mining company treasury
Sold BTC as part of “strategic evolution” into data centers
All public companies
~1,306,099 BTC (85 tracked companies)
~$81.2B Bitcoin NAV (June 10)
Mixed (direct, ETF, mining)
172+ companies disclosed holdings as of Q3 2025; 40% QoQ increase
As of June 10, 2026, BlackRock’s iShares Bitcoin Trust (IBIT) held $47.36 billion in net assets across approximately 1.35 billion shares outstanding, per SEC filings. BTC unit counts have ranged from roughly 577,000 to 805,000 BTC across 2026 snapshots as investor flows shifted with the market. The frequently cited $100 billion figures date to October 2025 when Bitcoin was near its all-time high of $126,000. Verify the current figure at ishares.com/IBIT.
What company holds the most Bitcoin?
As of June 2026, Strategy (formerly MicroStrategy) is the largest corporate and institutional Bitcoin holder, with approximately 843,706 BTC valued at roughly $53.53 billion. Strategy overtook BlackRock’s IBIT in coin count on April 17, 2026, after a $2.54 billion purchase. It is the first time a corporate treasury has outranked a major ETF vehicle in raw BTC held since Q2 2024.
How many public companies hold Bitcoin?
At least 172 publicly traded companies disclosed Bitcoin holdings as of Q3 2025, up 40% quarter-over-quarter, collectively holding approximately 1 million BTC, or about 5% of total circulating supply, according to Bitwise research. The Block’s live tracker shows 85 actively tracked Bitcoin-holding companies with combined holdings of 1,306,099 BTC as of June 10, 2026.
Is now a good time for a company to add Bitcoin to its treasury?
Opinion is genuinely divided. Bitcoin is down approximately 50% from its October 2025 peak, and the largest corporate adopter, Strategy, has seen its stock fall roughly 66% from its July 2025 high and its premium-to-NAV model break down below 1x. Adoption-side voices argue that slow institutional buildout is still underway and access is now more operationally straightforward than at any prior point. This is not investment advice. A qualified financial advisor and your legal team should be central to any treasury policy decision.
What is mNAV in Bitcoin treasury companies?
mNAV (market-cap-to-net-asset-value) compares a company’s total market capitalization to the current market value of its Bitcoin holdings. When mNAV is above 1x, a company can issue shares at a premium to buy more Bitcoin, growing Bitcoin-per-share for existing holders. When it falls below 1x, new share issuance is dilutive. Strategy’s mNAV peaked at 3.89x in November 2024 and fell below 1.0x in early 2026, effectively stalling its core accumulation mechanism.
What is the Bitcoin corporate treasury accumulation rate versus new supply?
Across the 94 weeks following the April 2024 Bitcoin halving, corporate treasuries collectively accumulated Bitcoin at 2.8 times the rate of new mining supply, according to BitcoinTreasuries.net data reported in Bitcoin Magazine as of March 2026. This supply-demand dynamic is separate from price performance and is one of the structural arguments made by long-term institutional holders for continued accumulation regardless of short-term price cycles.
What to Watch in the Next 18 Months
The institutional Bitcoin adoption story in 2026 is not over. It has entered a phase that is more complex, more honest, and more instructive than the 2025 euphoria cycle. Here is what the next 18 months will likely clarify:
Strategy’s debt structure under pressure. The company holds layered convertible notes and preferred equity instruments. With mNAV below 1x and the flywheel stalled, the market will be watching whether debt servicing forces a net-selling event that Saylor has publicly said the company wants to avoid. A forced sale at scale, even a partial one, would be the most significant stress test the corporate treasury model has ever faced.
Whether ETF flows resume at a meaningful rate. Spot Bitcoin ETFs collectively held more than $130 billion at their mid-2026 peak. The question is whether the broader wealth-management adoption that Adam Back described as “coming, but slower” actually accelerates as advisors move toward the 2% to 4% Bitcoin allocation ranges that BlackRock itself has recommended internally. Morgan Stanley’s entry into the distribution chain in April 2026 is a genuine signal that that process is moving forward.
How corporate treasury policy documents change. The governance shift here is durable regardless of price. Once 172 companies have disclosed positions, boards at non-holders face direct peer-pressure cycles at annual strategy reviews. The question is not whether Bitcoin treasury policy becomes a standard agenda item. It already has. The question is how companies document “we considered it and chose not to” versus “we have not considered it.”
The CFOs who navigate this most effectively will be the ones who engage with the actual 2026 data rather than the 2025 headlines. They will build a documented position based on verified current figures, understand the difference between ETF exposure and direct treasury holding, model the mNAV mechanism and its limitations, and separate the supply-demand structural thesis from the short-term sentiment cycle.
Strategy has 843,000 Bitcoin. BlackRock manages more than most countries hold in foreign reserves. Your treasury, statistically, has zero. What that fact requires of you is not panic-buying. It requires a documented analysis of why zero is the right answer for your balance sheet, or why it is not. That analysis, in June 2026, is no longer optional.
Stay Ahead of Institutional Crypto Moves
The Neural Loop covers institutional tech adoption, AI infrastructure, and corporate digital strategy every week, without the noise.
Subscribe to The Neural Loop
Determining the most overrated players is subjective and can vary based on individual opinions. However, during the 2019-20 Premier League season, some players received mixed reviews or were considered by some as overrated. Keep in mind that opinions may have changed since then, and these assessments were made at that specific time. Here are a few players who faced varying opinions during the 2019-20 season:
Paul Pogba (Manchester United):
Pogba has been a polarizing figure with some questioning if his performances justified the hype and price tag.
Mesut Özil (Arsenal):
Özil has been a talented player, but there were debates about his consistency and work rate during the 2019-20 season.
Dele Alli (Tottenham Hotspur):
Alli’s performances were inconsistent during the 2019-20 season, leading to discussions about his form and impact on the pitch.
Jesse Lingard (Manchester United):
Lingard faced criticism for his lack of goals and assists during the 2019-20 season, which led to discussions about his role in the team.
Nicolas Pépé (Arsenal):
Pépé, despite being a big-money signing, had moments of inconsistency during his debut season in the Premier League, leading to questions about his overall impact.
It’s important to note that opinions on players can change rapidly based on their performances, and these assessments may not reflect the current sentiments towards these players.
Artificial Intelligence (AI) is revolutionizing various industries, and cybersecurity is no exception. In 2025, we can expect AI to play an even larger role in safeguarding our digital lives. Here’s how:
AI-Powered Threat Detection
AI can analyze vast amounts of data in real-time, identifying potential threats faster and more accurately than traditional methods. By learning from previous attacks, AI can predict and neutralize new, unknown threats before they even occur.
Automated Incident Response
Instead of waiting for a human to step in, AI can autonomously take action during a security breach, isolating affected systems, blocking malicious traffic, and minimizing damage. This reduces response times and improves overall security efficiency.
Predictive Analytics
AI can analyze patterns in data to predict potential vulnerabilities or security breaches before they happen. By using historical data and machine learning algorithms, AI can provide proactive recommendations to organizations on how to bolster their security infrastructure.
Improved Authentication Systems
AI is advancing biometric authentication methods, such as facial recognition, fingerprint scanning, and voice identification. In the future, expect highly secure, multi-factor authentication systems powered by AI to become standard practice.
Advanced Phishing Detection
AI-powered systems are becoming better at identifying phishing emails and fake websites, helping users avoid scams. AI can examine the structure, content, and sender details to detect malicious intent that would be difficult for humans to catch.
As AI continues to evolve, its role in cybersecurity will only become more crucial. Stay safe and stay informed about the latest tech advancements!
“Mega city” generally refers to a large metropolitan area characterized by significant population density, economic activity, and urbanization. Here’s a comprehensive overview covering various aspects of mega cities:
(more…)
Designing and constructing roads with safety and protection in mind is a crucial aspect of urban planning. Roads are essential elements of any metropolitan area, and incorporating safety features can significantly enhance the well-being of both pedestrians and motorists. Here are several considerations for building roads with protection in mind:
Pedestrian Infrastructure:
Sidewalks:
Ensure well-maintained and spacious sidewalks separated from the road to provide a safe walking environment.
Crosswalks:
Implement marked crosswalks at intersections to guide pedestrians safely across the road. Pedestrian Overpasses/Underpasses: Consider constructing overpasses or underpasses in areas with high pedestrian traffic to minimize the risk of accidents.
Cyclist-Friendly Design:
Bike Lanes: Incorporate dedicated bike lanes separated from vehicular traffic to promote cycling safety. Bike Racks: Install bike racks at strategic locations to encourage cycling and provide secure places for parking.
Traffic Calming Measures:
Speed Bumps: Use speed bumps in residential areas and near schools to reduce vehicle speeds. Roundabouts: Implement roundabouts instead of traditional intersections to slow down traffic and improve safety.
Accessible Infrastructure:
ADA Compliance:
Ensure that road infrastructure is compliant with the Americans with Disabilities Act (ADA) to accommodate individuals with disabilities. Accessible Crossings: Install ramps and accessible crossings to facilitate the movement of people with mobility challenges.
Road Lighting:
Streetlights:
Adequate street lighting enhances visibility, reducing the risk of accidents and improving overall safety. Pedestrian Crosswalk Lighting: Install additional lighting at crosswalks to increase visibility for both pedestrians and drivers. Green Spaces and Landscaping:
Roadside Greenery:
Incorporate green spaces and landscaping along roads, providing aesthetic value while also promoting a sense of safety.
Tree Planting:
Plant trees strategically to provide shade and improve air quality. Advanced Traffic Management Systems:
Traffic Signals:
Implement modern traffic signal systems to optimize traffic flow and enhance safety.
Smart Crosswalks:
Use technologies such as smart crosswalks that provide signals or warnings to both pedestrians and drivers.
Emergency Services Access:
Emergency Lanes:
Designate lanes or routes for emergency vehicles to ensure quick and unobstructed access during emergencies.
Public Awareness and Education:
Signage:
Install clear and visible signage to communicate speed limits, pedestrian crossings, and other important information.
Educational Campaigns:
Conduct public awareness campaigns to educate residents about road safety and proper usage of infrastructure. By incorporating these elements into road design, metropolitan areas can create safer and more sustainable environments for their residents. Collaborative efforts between urban planners, engineers, and the community are essential to ensuring that road infrastructure prioritizes protection and safety.
Google Post-Quantum Cryptography 2029 Deadline Explained
Enterprise Security · Post-Quantum Cryptography
Google Just Moved Its Quantum Deadline to 2029
By NeuralWired Staff | Published June 21, 2026 | Last updated June 21, 2026
Your cryptography migration roadmap probably says 2035. Google’s doesn’t anymore. On March 25, 2026, Google set a new post-quantum cryptography 2029 deadline for its own systems, six years ahead of the federal backstop most enterprise security teams have been planning around for the past two years.
That’s not a marketing decision. It’s a response to math. Six days later, Google Research published the resource estimates behind it, and they’re the kind of numbers that make a CISO reread an email twice (and then forward it straight to the budget committee).
If you’re responsible for cryptographic risk at your organization, here’s exactly what happened, what the new research means and doesn’t mean, and what NIST’s separate, still-unfinished post-quantum cryptography deadline requires of you in the meantime.
“We’re setting a timeline for post-quantum cryptography migration to 2029.”
Heather Adkins & Sophie Schmieg, Google Security Engineering
That’s a specific, internal, engineering-driven deadline, not a regulatory mandate. Google ties it directly to faster than expected progress in quantum hardware, error correction, and updated estimates of what it actually takes to break current encryption standards.
The first concrete product step: Android 17 is integrating ML-DSA-based digital signature protection, on top of post-quantum support already shipping in Chrome and Google Cloud. Google is treating signature and authentication migration as the more time-sensitive half of the problem, ahead of encryption. The logic is straightforward once you sit with it: forging a signature only requires the attacker to break the math at the moment of the attack, so there’s no advance window. Encrypted data, by contrast, can be captured and stored today, then decrypted years later once the hardware catches up, which is the harvest-now, decrypt-later risk we’ll come back to in a moment. Both problems are urgent. They’re just urgent on different clocks.
The Math That Convinced Google to Move Early
Six days after the deadline announcement, on March 31, 2026, Google Research published the paper that explains why. Ryan Babbush, Director of Research for Quantum Algorithms, and Hartmut Neven, VP of Engineering at Google Quantum AI, laid out two optimized quantum circuits for solving the elliptic curve discrete logarithm problem at the 256-bit security level, the math underneath ECDSA, the signature scheme securing most TLS connections, SSH sessions, code signing, and the majority of cryptocurrency wallets, including Bitcoin and Ethereum.
The numbers: one circuit uses fewer than 1,200 logical qubits and roughly 90 million Toffoli gates. The second uses fewer than 1,450 logical qubits and about 70 million Toffoli gates. Run on a superconducting quantum computer, Google estimates either circuit could complete the attack with fewer than 500,000 physical qubits in a matter of minutes, an approximately 20-fold reduction from prior estimates of what the attack would require.
It’s not an isolated revision either. Craig Gidney, also at Google Quantum AI, updated his RSA-2048 factoring estimate in 2025 to under 1 million physical qubits and less than a week of runtime, down from his own 2019 estimate of 20 million qubits and roughly eight hours. Same researcher, same category of algorithm, same order-of-magnitude drop. Two separate 20-fold reductions in attack-resource estimates, from the same research group, inside a single decade, is arguably more significant than either individual number. That’s the trend that moved Google’s internal calendar, not one paper.
One more detail worth knowing: Google didn’t publish the actual attack circuits. It used a zero-knowledge proof, developed in coordination with the U.S. government, that lets outside researchers verify the resource estimate without releasing a usable attack blueprint, an approach modeled on standard coordinated vulnerability disclosure practice.
NIST’s Slower, Still-Unfinished Deadline
Google’s 2029 timeline is the freshest news, but the post-quantum cryptography schedule most compliance teams actually have to plan against still comes from NIST. NIST finalized its first three post-quantum standards back in August 2024: FIPS 203 (ML-KEM, for key encapsulation), FIPS 204 (ML-DSA, for digital signatures), and FIPS 205 (SLH-DSA, a hash-based signature scheme). A fourth standard, FIPS 206, based on the Falcon algorithm, is still in draft and isn’t expected to finalize until late 2026 or early 2027. A fifth, HQC, selected as a backup key-encapsulation method in March 2025, won’t see a final standard until 2027 at the earliest.
The 2030 and 2035 dates you’ve probably seen cited everywhere actually come from a separate document, NIST Internal Report 8547, which proposes deprecating 112-bit-security algorithms like RSA-2048 and ECC P-256 by 2030, and disallowing all quantum-vulnerable public-key algorithms by 2035. Here’s the part that doesn’t get repeated often enough: IR 8547 is still an initial public draft. It was released in November 2024, public comment closed in January 2025, and it has not been finalized as of this writing. Treat the 2030 and 2035 dates as the most likely outcome of an open process, not as settled law, especially if your organization sits outside direct U.S. federal scope.
National security systems run on a separate, tighter clock. The NSA’s CNSA 2.0 guidance sets preference dates as early as 2025 for some categories, required adoption between 2030 and 2033, and full quantum resistance by 2035, with ML-KEM-1024 and ML-DSA-87 specified as the mandated parameter sets. If you’re a defense contractor or anywhere in that supply chain, this is the schedule that actually governs you, not IR 8547.
Where Other Governments Stand
Canada, the EU, and the UK are each running parallel post-quantum cryptography tracks, on slightly different clocks. If your organization operates across any of these jurisdictions, the deadline that matters is whichever one applies to your weakest-governed system, not the most generous one.
Authority
Key Deadline(s)
Status
NIST (U.S. civilian federal)
Deprecate by 2030, disallow by 2035
Draft (IR 8547), not finalized
NSA CNSA 2.0 (U.S. national security systems)
Required adoption 2030 to 2033, full by 2035
Active guidance
Google (internal corporate policy)
2029
Announced March 2026
Canada (federal departments)
Migration plans due April 2026
Active mandate
European Union (NIS Cooperation Group)
Critical infrastructure by end of 2030, medium-risk systems by end of 2035
Endorsed by 18 member states, June 2025
United Kingdom (NCSC)
Map dependencies by 2028, complete migration by 2035
Phased guidance, March 2025
Not Everyone Is Convinced This Is Urgent
Worth saying plainly: no quantum computer capable of breaking today’s public-key encryption exists yet. CISA’s own Post-Quantum Cryptography Initiative says so directly, while still flagging harvest-now-decrypt-later as a present-tense risk for long-lived data. Both statements are true at the same time, which is exactly why the expert debate over urgency hasn’t settled.
Scott Aaronson, the Schlumberger Centennial Chair of Computer Science at the University of Texas at Austin and one of quantum computing’s most consistent public skeptics, wrote in comments reported in early May 2026 that people whose hardware judgment he trusts more than his own now think a fault-tolerant, attack-scale quantum computer “ought to be possible by around 2029.” That’s a notable shift for Aaronson. It’s also worth knowing his own caveat: an earlier prediction of his would technically count as fulfilled even by a trivial demonstration, like factoring 15 into 3 times 5, a calculation a human can do faster by hand than any quantum computer currently running. Most headline coverage drops that part.
Matthew Green, a cryptography professor at Johns Hopkins University, takes a more grounded stance. In comments reported by CyberScoop in April 2026, Green called the recent research a useful precautionary exercise, but questioned whether quantum computing has enough near-term, lucrative applications to accelerate past foundational research into deployed attacks on the timeline implied by recent coverage. He raises a sharper point too: several of NIST’s own earlier post-quantum candidates turned out to have classical, non-quantum vulnerabilities. SIKE, one of the standardization process’s later-round finalists, was broken in 2022 using ordinary computers. Calling something “post-quantum” doesn’t automatically make it secure against everything else.
Adam Back, CEO of Blockstream and one of the cypherpunk movement’s earliest figures, pushed back specifically on cryptocurrency alarm following Google’s paper, telling Bloomberg the practical threat to Bitcoin remains decades off.
“The biggest calculation it’s performed is factoring 21 into 7 times 3.”
Adam Back, CEO, Blockstream
Back still thinks Bitcoin and other chains relying on the same elliptic curve signatures, the kind of dependency that also shows up in cross-chain bridge designs, should start migrating to quantum-resistant signatures now. He just doesn’t think anyone should be panicking about it this month.
The research group a16z crypto goes further, arguing the field isn’t close to a cryptographically relevant quantum computer by any reasonable reading of public progress data. Even reporting on Google’s own resource-estimate reduction tends to include the same caveat: shrinking the qubit count on paper doesn’t solve the unsolved systems-engineering problem of running hundreds of thousands of physical qubits with real-time error correction at scale. Reducing one bottleneck just exposes the next one.
What This Actually Means for Your Organization
Strip out the deadline debate and the actual post-quantum cryptography adoption gap is the unglamorous part. A Propeller Insights survey of 1,042 senior cybersecurity managers, commissioned by DigiCert and published in 2025, found that 69% of respondents recognize the quantum risk to current encryption, but only 5% have actually implemented quantum-safe encryption anywhere in their environment. Nearly half, 46.4%, believe a substantial share of their own encrypted data could eventually be compromised.
A separate Ponemon Institute study of 1,426 IT and security practitioners across the U.S., EMEA, and Asia-Pacific found 61% don’t expect to be ready, only 30% have allocated budget, and just 52% have even started a cryptographic inventory, the mandatory first step in any migration. A more recent Omdia survey of over 400 senior IT leaders, published in early June 2026, puts the share who’ve fully assessed their systems for cryptographic risk at just 22%.
None of that requires believing a quantum computer will exist next year. It requires believing harvest-now-decrypt-later is real today. Adversaries can capture encrypted traffic now and simply wait. Anything with a confidentiality requirement stretching into the mid-2030s, financial records, legal archives, government communications, long-lived intellectual property, is exposed under today’s encryption the moment it’s intercepted, regardless of when the decryption key eventually becomes breakable.
The takeaway isn’t “panic.” It’s “inventory now.” You can’t migrate what you haven’t found. NIST’s own migration methodology treats the inventory phase alone as a six-to-twelve-month project for a complex enterprise, before remediation even starts, which is exactly why most organizations need to begin before they feel ready.
This is the same regulator setting the clock on zero trust security architecture, so if your team is already mapping NIST-aligned controls for that initiative, cryptographic inventory belongs on the same project plan rather than a separate one.
A Practical Migration Checklist
Here’s the post-quantum cryptography migration sequence security teams are actually using, in order:
Run a cryptographic inventory. Find every system, certificate, library, and hardcoded dependency using RSA, ECDSA, ECDH, DSA, or Diffie-Hellman. Most teams underestimate how many places this math is buried.
Prioritize by data lifespan, not system criticality. A low-priority system with 20-year data retention requirements is a higher quantum risk than a high-priority system that only handles short-lived sessions.
Deploy hybrid cryptography first. Pairing a classical algorithm with a post-quantum one means you stay protected even if one half is later broken, which matters given Matthew Green’s point about unproven new candidates.
Treat signatures as time-sensitive on their own clock. Migrate authentication and signing separately from encryption, since forged signatures become possible the moment a capable quantum computer exists, with no advance-harvest grace period.
Wait on unfinished standards. Hold off building production dependencies on FIPS 206 (Falcon) or HQC until they’re finalized, expected sometime between 2026 and 2027.
Budget against the four-year window. Use Gartner’s “unsafe by 2029, fully breakable by 2034” framing as a planning heuristic for budget approval, not a precise countdown.
The Real Timeline vs. the Headlines
So which date should actually go on your roadmap? Probably more than one. Google’s 2029 is the most concrete forcing function available right now, especially since it comes from the organization that’s done the most original research on how hard this attack actually is. NIST’s 2030 and 2035 dates remain the closest thing to a regulatory backbone, even in draft form, and they’re the dates auditors, cyber insurers, and procurement teams will most likely reference once IR 8547 finalizes. The skeptics aren’t wrong that no cryptographically relevant quantum computer exists today. They’re just answering a different question than “when should my migration start.”
Our read: the binding constraint here isn’t compute, it’s organizational inertia. Most enterprises won’t miss the 2029 or 2030 deadlines because the cryptography isn’t ready. They’ll miss it because the inventory phase alone quietly eats two of the four years they thought they had.
The Y2K comparison shows up constantly in coverage of this story, and it’s useful shorthand with one real flaw: Y2K had a single, fixed, universally agreed date. Q-Day doesn’t. The Global Risk Institute’s seventh annual Quantum Threat Timeline Report, built from structured input from 26 named quantum-computing experts, puts a full-scale cryptographically relevant quantum computer at “quite possible” within 10 years and “likely” within 15. That’s a probability distribution, not a deadline. Plan accordingly.
Frequently Asked Questions
When will quantum computers be able to break encryption?
No cryptographically relevant quantum computer exists yet. The Global Risk Institute’s expert survey puts a full-scale version at “quite possible” within 10 years and “likely” within 15. Google’s own internal deadline targets 2029, six years ahead of NIST’s 2035 federal backstop.
What is NIST’s deadline for RSA-2048?
NIST’s draft document IR 8547 proposes deprecating RSA-2048 and ECC P-256 by 2030 and disallowing all quantum-vulnerable public-key algorithms by 2035. The document remains an unfinalized draft as of mid-2026, so treat the dates as a likely outcome, not finished law.
Why did Google move its quantum deadline to 2029?
Google cited faster than expected progress in quantum hardware and error correction, plus new research showing elliptic curve cryptography could be broken with roughly 20 times fewer qubits than previously estimated, published alongside its March 2026 deadline announcement.
What is harvest now, decrypt later?
It is an attack pattern where adversaries capture encrypted data today and store it, planning to decrypt it once a powerful enough quantum computer exists. It makes long-lived encrypted data vulnerable right now, even though no quantum computer can currently break it.
Is Bitcoin vulnerable to quantum computers?
Bitcoin’s signature scheme relies on the same elliptic curve math Google’s research targeted, so it is theoretically exposed long term. Most cryptographers, including Bitcoin advocate Adam Back, consider the practical threat years to decades away, but support migrating gradually now.
What to Watch Next
Here’s what you didn’t know a few minutes ago: the urgency in this post-quantum cryptography story isn’t coming from a finished government deadline. It’s coming from a trend line, two separate 20-fold reductions in attack-resource estimates from the same Google research group inside a decade, that’s compressing every other timeline built around it.
Over the next 6 to 18 months, watch three things. First, whether NIST finally finalizes IR 8547 or pushes the date again, the way an earlier proposed target was already revised once before. Second, whether other major infrastructure operators follow Cloudflare’s reported move to align with Google’s 2029 date, which would turn one company’s internal policy into something closer to an industry standard. Third, whether FIPS 206 and HQC actually land in their projected 2026 to 2027 window, since both are needed before several hybrid deployment strategies can fully mature.
None of this requires belief in an imminent Q-Day. It requires an honest inventory, a realistic budget conversation, and a migration plan that survives whichever date turns out to be the right one.
Building and maintaining a positive, fulfilling relationship takes effort, communication, and mutual respect. Here are some general tips for fostering a kind and loving relationship in the context of the USA or any cultural setting:
Communication is Key:
Open and honest communication is crucial. Share your thoughts, feelings, and concerns with your partner, and encourage them to do the same. Active listening is equally important to understand each other better.
Quality Time Together:
Spend quality time with your partner. Whether it’s going for a walk, enjoying a meal together, or engaging in shared hobbies, creating moments of connection strengthens your bond.
Express Gratitude:
Regularly express gratitude for the little things your partner does. Appreciation and acknowledgment can go a long way in making your partner feel valued and loved.
Kindness and Respect:
Treat your partner with kindness and respect. Simple acts of kindness, such as saying “please” and “thank you,” contribute to a positive and respectful atmosphere.
Shared Goals and Values:
Discuss and establish common goals and values. Knowing that you are working towards a shared future can strengthen your connection and sense of unity.
Celebrate Milestones:
Celebrate important milestones and achievements together. Whether it’s an anniversary, personal accomplishment, or a shared success, take the time to acknowledge and celebrate each other.
Support Each Other:
Be supportive during both good and challenging times. Knowing that you have each other’s back creates a sense of security and trust in the relationship.
Maintain Independence:
While spending time together is essential, it’s also important to maintain individual identities and interests. Encourage each other to pursue personal goals and hobbies.
Resolve Conflicts Constructively:
Disagreements are a natural part of any relationship. When conflicts arise, address them calmly and constructively. Seek solutions together and avoid blame or resentment.
Cultural Sensitivity:
Be aware of cultural differences and sensitivities, especially in a diverse country like the USA. Understanding and respecting each other’s cultural backgrounds can enhance your connection.
Professional Support:
If needed, consider seeking professional support through couples counseling. A neutral third party can provide guidance and facilitate communication.
Adventure and Fun:
Keep the relationship dynamic by introducing new experiences and having fun together. This can range from trying new activities to traveling to different places. Remember that every relationship is unique, and these tips can be adapted to fit the specific dynamics of you and your partner. The key is to invest time and effort into nurturing a strong and positive connection.
