The conversation around quantum computing and its threat to crypto has been getting louder. Circle appears to have decided it’s not waiting around to see how it plays out.
The stablecoin issuer behind USDC, released a post-quantum security roadmap on Thursday for Arc, its layer-1 blockchain, outlining a phased implementation that covers all layers of the network’s tech stack, from wallets and signatures at mainnet launch to validator-level hardening and offchain infrastructure down the line.
The announcement is one of the more comprehensive quantum-readiness disclosures a crypto company has made to date, and the timing seems to be deliberate.
The case for acting now, not later
2026 has been designated the “Year of Quantum Security” by a global initiative backed by the FBI, NIST, and CISA. That framing alone tells you something about where institutional thinking has shifted.
And recent research has made the urgency feel more concrete. Google researchers showed in a new whitepaper that future quantum computers may break elliptic curve cryptography, the kind that secures cryptocurrency wallets, with fewer qubits and computational resources than previously realized, and the company has set a 2029 internal deadline for its own post-quantum migration.
Researchers at the California Institute of Technology have made similar arguments, suggesting capable quantum machines could arrive before 2030. NIST has explicitly flagged a concept known as “harvest now, decrypt later,” where adversaries collect encrypted data today with the intention of decrypting it once quantum hardware matures.
For digital assets, that creates a particularly awkward problem, sensitive offchain data, private transaction flows, and public-key-based authorizations all carry migration lead-time risks that can’t simply be patched overnight.
Circle framed it plainly: “Quantum resilience cannot live only in research papers, exploratory pilots, or distant roadmap slides. It has to show up in the infrastructure.” The window for an orderly transition, in other words, is open but it isn’t guaranteed to stay that way.
Arc’s phased roadmap, layer by layer
What makes the Arc roadmap worth examining is the sequencing. Rather than treating quantum resistance as a single upgrade event, Circle has broken it into four phases tied to Arc’s development timeline, covering wallet authorization, private smart contract state, validator authentication, and supporting infrastructure, both onchain and offchain.
At mainnet launch, expected sometime in 2026, Arc will introduce post-quantum signature support, enabling quantum-resistant wallets. The feature will be opt-in, with no forced migration or disruptive network reset.
That approach appears to be intentional. Post-quantum signatures are significantly larger than classical ones, in some cases by an order of magnitude, and pushing the whole ecosystem to adopt them on day one would create unnecessary friction.
After mainnet, Arc’s privacy roadmap is designed to extend quantum resilience to confidential financial workflows. Private balances, private transactions, and private recipients would be protected, with public keys in privacy mode wrapped in an additional symmetric encryption layer, intended to result in stronger long-term confidentiality for institutions that need both privacy and auditability.
When Arc’s opt-in privacy features launch, they are intended to be quantum-resistant from day one. Mid-term, the focus shifts to infrastructure. Protocols like TLS 1.3 already support post-quantum algorithms, and major cloud providers are already migrating quietly.
Arc’s infrastructure roadmap aligns with those broader industry transitions, meaning the security posture of the network’s underlying systems can keep pace with its onchain protections.
Validator hardening comes last, and the reasoning is actually worth understanding. Arc’s consensus architecture is built around deterministic finality that settles blocks in under a second, giving any attacker only roughly a 500-millisecond window to forge a validator signature before finality closes.
Based on current design assessment, that makes the validator attack path highly improbable even in a post-quantum scenario. The later timeline on validators is a triage based on actual risk exposure.
Where the rest of the industry stands
Circle isn’t alone in thinking about this, but the broader crypto industry’s response has been uneven at best. Responses vary widely: Bitcoin is still debating how to act amid concerns over vulnerable coins, while Ethereum and firms like Coinbase are actively building phased, quantum-resistant roadmaps, and Solana is experimenting with optional tools like quantum-safe vaults.
On the Bitcoin side specifically, Blockstream CEO Adam Back has argued that quantum risks are widely overstated and that no action is needed for decades. On the other hand, security researcher Ethan Heilman and others have proposed a new output type via Bitcoin Improvement Proposal 360, which seeks to protect Bitcoin addresses from quantum attacks, though that implementation may take seven years.
Naoris Protocol also launched its quantum-resistant blockchain mainnet this week, having processed over 106 million transactions and blocked 603 million security threats during testnet, using post-quantum cryptography algorithms approved by NIST.
The timing of multiple projects going public on quantum readiness within days of each other suggests the Google paper may have concentrated minds across the industry in ways that earlier, more theoretical warnings did not.
For Circle, building Arc with quantum resistance planned from the ground up, rather than retrofitting it later, is meant to be a selling point for the institutional clients it’s targeting. The straightforward argument here is that if you’re an enterprise issuing long-lived digital assets, the cryptographic assumptions baked into your infrastructure today need to hold for years, not months.