
Q-Day will not be announced with a headline. There will just be wallets draining. Here is how it actually plays out for the people holding assets when it happens.
It is a Tuesday morning in 2029.
A security researcher in Geneva, let us call her Laura, is running a routine audit on a post-quantum migration report for a mid-sized European bank.
The bank did the work. They migrated their internal comms two years ago. Updated their certificate infrastructure. Rotated keys. They went through the checklist and signed off. Their CISO presented it to the board as done.
But buried in Laura's audit is a single line item she almost skips, Legacy transaction signatures, 2019 to 2023. Not re-signed under PQC. Archived, not active.
She pauses.
Those transactions are not active. The bank is not using them. They are just sitting in the archive, like old files in a folder nobody opens. Except this is not a folder on a hard drive in a server room the bank controls. This is a blockchain.
Archived does not mean gone. Archived means permanently stored, publicly accessible, readable by anyone with an internet connection, forever.
A quantum computer powerful enough to run Shor's algorithm does not care that those transactions are old. It does not need permission to access them. It does not need to break into anything.
The public keys are right there on-chain. As they always were. As they were designed to be. And a public key, to a sufficiently advanced quantum computer, is just the beginning of the calculation.
The exposure did not happen in 2029. It happened the day each transaction was broadcast. The quantum computer just has to show up.
Laura types slowly now. Because the question she is adding to her report is not "could this happen." It is "how many other ledgers have this same line item and do not know it yet."
English

