Quantum Attack on Ethereum: Why Banks Must Act by 2027

I must admit: When I first heard about quantum computers, I thought of science fiction—something involving Schrödinger’s cat and parallel universes. It seemed far-fetched that this technology could one day upend our digital world. Yet reality is moving faster than many anticipate—and Ethereum now sits at the center of a ticking time bomb.
Swiss Sygnum Bank has made this brutally clear. Thomas Brunner, who oversees custody and staking there, is among the few who don’t dismiss the threat as distant speculation. To him, it’s not an abstract scenario but a concrete danger—for banks already dealing with crypto-assets. His warning is unambiguous: "We need to act now. Not when the first quantum computers are ready for mass production."
The Ticking Time Bomb for Ethereum
Ethereum has been working on a post-quantum strategy for years. The team even outlined a roadmap: by 2029, all necessary upgrades will be complete. Sounds reassuring? Not really. The real deadline could arrive two years earlier—thanks to regulatory pressure.
Imagine being a bank forced to prove your systems are quantum-resistant. Suddenly, it’s not just a technical nicety but a licensing requirement. Brunner warns: "If a bank fails to meet these demands, it could lose its license." And this isn’t a distant threat—it could happen as early as 2027.
Why 2027 Is the Critical Turning Point
Quantum computers, still in their infancy today, may become powerful enough by the 2030s to crack classic encryption like ECDSA. Sounds like a long time? Not for banks. FATF and other regulators are already drafting guidelines to ensure financial institutions protect their systems in time.
The catch? These rules could take effect in just three years. And here’s the dilemma: Ethereum might finish its upgrades by 2029—but what about the banks? Many still rely on outdated systems that can’t be easi



ly upgraded to quantum-resistant encryption. Brunner calls it a "regulatory trap": "Anyone unable to prove their infrastructure is secure by 2027 risks losing their license."
Ethereum vs. Banks: A Race Against the Clock
Ethereum is betting on quantum-resistant cryptographic algorithms like CRYSTALS-Dilithium or SPHINCS+. But the transition isn’t simple. Existing validation systems must be completely rethought—and that’s just the technical hurdle.
The organizational challenge for banks is just as daunting. Many still haven’t grasped the urgency. Brunner puts it bluntly: "Most banks aren’t even asking the question yet. But when the first lose their licenses, it’ll be a wake-up call for the entire market."
Not Just Banks: Everyone in the Ecosystem Is Affected
It’s not just banks on the hook. Crypto exchanges and custodians like Sygnum must also act. Brunner emphasizes: "Regulated custodians must prove they’re protected against every conceivable risk—and quantum computers are part of that."
Yet not all in crypto share this urgency. Many small projects and exchanges still treat the threat as theoretical. That could prove fatal. Brunner predicts: "When the first banks lose their licenses for failing to comply, it’ll shock the entire market into action."
The Time to Act Is Now
The debate over quantum computers is no longer an academic discussion—it’s a real threat, and for regulated banks, a matter of survival. Ethereum has taken a first step with its post-quantum roadmap. But without banks’ willingness to adapt their systems in time, even the best technical safeguards will be useless.
The question isn’t whether quantum computers will eventually pose a danger. It’s whether we’ll be ready when they do. Brunner and his team at Sygnum are convinced: those who don’t act now will regret it later. And after this conversation, I’m inclined to agree.