U.S. Treasury Includes Digital Assets in Quantum Security Working Group to Assess Quantum Computing's Potential Impact on Existing Cryptography
The U.S. Treasury has established a "Quantum Preparedness Working Group," listing "Digital Assets and Emerging Technology Risks" as one of three independent workstreams to promote the financial system's assessment of quantum computing's potential impact on existing cryptographic systems.
This working group is part of a public-private collaboration mechanism involving government, financial institutions, financial market infrastructure, and technology providers. The other two workstreams focus on financial industry coordination and post-quantum cryptography migration, as well as third-party and vendor readiness.
The Treasury requires the working group to adopt a risk-oriented approach to identify key cryptographic dependencies, enhance "cryptographic agility," promote interoperability, strengthen operational resilience, and address implementation challenges related to third-party dependencies and digital assets. Cryptographic agility refers to a system's ability to change encryption algorithms, keys, and validation mechanisms in response to changes in security standards or threats.
Including digital assets in the workstream does not mean the U.S. Treasury has mandated that Bitcoin, Ethereum, or stablecoin networks must complete quantum-resistant upgrades by a certain date. The existing announcement does not set a uniform mandatory migration deadline for private blockchains, public chains, exchanges, or custodians.
On June 22, Trump signed an executive order requiring designated high-value assets and high-impact federal systems to migrate to post-quantum key establishment mechanisms by December 31, 2030; federal systems involving digital signatures must complete migration by December 31, 2031, at the latest. The deadline applies to relevant federal systems and does not automatically apply to all financial institutions or crypto networks.
The Office of Management and Budget has requested federal agencies to submit post-quantum migration plans to OMB and the National Cyber Director's Office within 120 days, and plans to promote pilot programs for priority systems from 2027 to 2028, revising migration plans based on experience.
The technical core of quantum risk is that sufficiently powerful fault-tolerant quantum computers could theoretically use Shor's algorithm to weaken widely used RSA and elliptic curve public-key cryptography; the private key signatures, wallet addresses, public chain validations, custodial systems, exchange logins, and cross-chain infrastructures of digital assets all rely on varying degrees of public-key cryptography. Currently, there is no public evidence that quantum computers can practically break the large-scale signature systems of mainstream blockchains.
In market mechanisms, banks, payment institutions, exchanges, custodians, stablecoin issuers, and blockchain infrastructure companies will become direct purchasers of quantum migration, with funds flowing towards post-quantum cryptography libraries, hardware security modules, key management, identity authentication, wallet upgrades, security audits, and system integration. Service providers with upgradable signature solutions, governance coordination capabilities, and institutional client channels will benefit; infrastructure that cannot identify cryptographic dependencies, struggles to rotate addresses or keys, or has high protocol upgrade coordination costs will be under pressure.
Source: Public Information
ABAB AI Insight
The U.S. Treasury's move continues the post-quantum cryptography migration path led by NIST, rather than issuing a warning that "quantum attacks are imminent" against crypto assets. The U.S. government has already completed the first batch of post-quantum cryptography standards by 2024, and the 2026 executive order converts technical standards into a federal system migration timeline. By separately listing digital assets, the Treasury indicates that blockchain is no longer viewed solely as an investment or law enforcement target, but is included in the list of cryptographic dependencies for critical financial infrastructure.
The capital path first flows to "cryptographic asset inventory." Large financial institutions need to identify which payment interfaces, APIs, historical data, hardware security modules, third-party SaaS, and custodial processes use RSA, ECC, or other algorithms that may be threatened by quantum computing; only then can they replace algorithms, re-sign certificates, upgrade equipment, and transform business continuity processes. For digital assets, costs are not only associated with developing new signature algorithms but also with wallet migration, transferring funds from old addresses, smart contract compatibility, exchange support, and reconstructing multi-party custodial processes.
Historically, the internet's transition from SHA-1 to TLS version upgrades and the payment industry's shift from magnetic stripe cards to EMV have shown that cryptographic upgrades typically cannot be completed simply by "releasing a new algorithm"; they require years of compatibility periods, supply chain replacements, and terminal updates. The additional challenge for blockchain is that protocol changes require coordination among nodes, miners or validators, wallets, exchanges, and users; even if Bitcoin or Ethereum has a technical upgrade path, the presence of old addresses, long-dormant coins, and governance disagreements will complicate migration more than internal enterprise systems.
This represents a restructuring of the industry chain. Quantum migration will extend security value from a single algorithm supplier to a complete chain of key lifecycle, hardware, identity, audit, custody, and protocol governance. The reason is that cryptographic strength is not determined by a single component: as long as there are irreplaceable old signatures, static keys, or third-party interfaces without upgrade paths in the supply chain, the entire financial system remains exposed to the weakest link. Digital assets are listed separately precisely because the upgrade rights of open networks are decentralized, while financial risks can still be concentrated along exchanges, stablecoins, and custodial nodes.
ABAB News · Cognitive Law
Quantum threats first reassess keys, then reassess assets
The hardest part of cryptographic upgrades is not the algorithm, but the coordination across the entire network
The weakest link in security often hides in unmovable old systems