21 Funky
4.9K posts




Project Eleven Awards 1 BTC Q-Day Prize for Largest Quantum Attack on Elliptic Curve Cryptography to Date Researcher breaks 15-bit ECC key on publicly accessible quantum hardware in a 512x jump from the previous public demonstration. Project Eleven today awarded the Q-Day Prize, a one Bitcoin bounty, to Giancarlo Lelli for breaking a 15-bit elliptic curve key on a publicly accessible quantum computer. The result is the largest public demonstration to date of the attack class that threatens Bitcoin, Ethereum, and over $2.5 trillion in ECC-secured digital assets. "The resource requirements for this type of attack keep dropping, and the barrier to running it in practice is dropping with them," said @apruden08, CEO of Project Eleven. "The winning submission came from an independent researcher working on cloud-accessible hardware. No national lab, no private chip. It shows that tangible progress is possible and highlights the urgency to migrate to post-quantum cryptography sooner rather than later. Google just committed to being quantum-secure by 2029. The window to get ahead of this is closing.” Lelli derived a private key from its public key across a search space of 32,767 using a variant of Shor’s algorithm. Shor's targets the Elliptic Curve Discrete Logarithm Problem (ECDLP), the math underlying the digital signature schemes securing Bitcoin, Ethereum, and most blockchains. Quantum attacks on ECC have moved from theory to practice over the last seven months. Steve Tippeconnic's 6-bit demonstration in September 2025 was the first public break on quantum hardware. Lelli's 15-bit result extends it by a factor of 512. Theoretical resource estimates for a full 256-bit attack, the scale Bitcoin operates at, have fallen sharply over the same period. Google's April 2026 whitepaper put the requirement at under 500,000 physical qubits. A subsequent paper from Caltech and Oratomic brought that figure as low as 10,000 qubits in a neutral-atom architecture. Lelli's result is the practical counterpart to those optimizations. The distance from 15 bits to 256 bits is large, but the gap is increasingly viewed as an engineering problem and not a fundamental physics problem. Roughly 6.9 million Bitcoin sit in wallets whose public keys are visible on-chain, exposing them to quantum attack. All blockchains using ECC share similar risks with vulnerable assets. Project Eleven is developing its next challenge, focused on the intersection of frontier AI models and quantum cryptanalysis.
















Three things happened on April 8, 2026. The United States and Iran announced a two-week ceasefire. The Financial Times reported that Iran’s IRGC is charging oil tankers approximately one dollar per barrel in cryptocurrency to transit the Strait of Hormuz, with Bitcoin explicitly preferred for its non-freezable properties. And Treasury Secretary Scott Bessent released the GENIUS Act’s proposed stablecoin rules, requiring all permitted stablecoin issuers to run full sanctions compliance programs with the ability to “block, freeze, and reject” illicit transactions. The ceasefire, the toll, and the regulation landed on the same day. This is not coincidence. This is the opening salvo of a financial war that will outlast the kinetic one. Bessent’s GENIUS Act is a precisely calibrated weapon. It treats stablecoin issuers as financial institutions under the Bank Secrecy Act. It mandates that Tether, Circle, and every permitted issuer must screen transactions against OFAC sanctions lists and freeze wallets linked to designated entities. The IRGC has already lost $3.3 billion in frozen USDT through exactly this mechanism. Tether blacklisted $182 million in IRGC-linked wallets in a single enforcement action. The sword is real and it cuts. But it cuts only stablecoins. And the IRGC knows this. The Hormuz toll system, operational since mid-March and codified by Iran’s parliament on March 30, explicitly promotes Bitcoin over stablecoins for one structural reason: Bitcoin has no issuer. There is no company to serve with a subpoena. There is no compliance officer to pressure. There is no “block, freeze, and reject” button. When a laden tanker emails its cargo manifest to the IRGC intermediary, receives a quote in BTC equivalent, and transfers the exact amount to a fresh wallet within seconds, the transaction settles on a network that no Treasury secretary on earth can reverse. The GENIUS Act gave Bessent the sword. The IRGC chose the asset without a throat to cut. This is the regulatory paradox that nobody in Washington or on crypto Twitter is willing to state plainly. The tighter Bessent makes stablecoin compliance, the more he validates the IRGC’s preference for Bitcoin. Every USDT wallet frozen is another data point proving to Tehran that stablecoins are controllable and Bitcoin is not. The regulation designed to stop sanctions evasion is actively teaching the adversary which rail to use. The GENIUS Act does not close the door. It labels which doors are locked and which one remains open. TRM Labs confirmed on April 9 that the IRGC received over $3 billion in crypto inflows in 2025, roughly half of Iran’s entire $7.78 billion ecosystem. Chainalysis confirmed IRGC-linked addresses dominated Q4 2025. The Qeshm Island conversion window, operational since mid-March, routes toll receipts from crypto to rials without touching SWIFT. The infrastructure is not theoretical. It is built, tested, and running. What it lacks is volume, because Hormuz traffic remains below ten percent of its pre-war average, with only a handful of vessels transiting daily and no major oil tankers confirmed as having paid. But here is what the volume skeptics are missing. The system does not need to process twenty million barrels a day to matter. It needs to exist. Its existence is the proof of concept. The moment one verified transaction clears a BTC toll at the world’s most important energy chokepoint, it establishes a precedent that cannot be unestablished: that a sanctioned nation-state can extract sovereign revenue in a currency no government can freeze, at a chokepoint no navy has yet reopened, converting military control into monetary infrastructure in real time. Bessent’s sword is sharp. The IRGC built the maze. And on April 8, they showed the world both at the same time. open.substack.com/pub/shanakaans…












