Washington Bought Into Quantum Computing – Crypto Should Be Paying Attention

The US Department of Commerce said on May 21 that it had signed letters of intent to put $2.013 billion into nine quantum computing companies in exchange for minority, non-controlling equity stakes, and over the past two weeks those letters have started converting into signed contracts.

D-Wave finalized its agreement on September 9 for up to $100 million in CHIPS and Science Act funding, following Quantinuum's own finalized pact a day earlier and a similar deal with Rigetti. The letters-of-intent-to-contract pipeline is now working through the rest of the list.

The money splits two ways. Two companies are being funded to build the physical manufacturing base the industry lacks: GlobalFoundries is getting $375 million to build a secure domestic quantum foundry that can fabricate chips across five different quantum modalities, and IBM is getting $1 billion, more than the other eight combined, to spin up a dedicated quantum foundry subsidiary producing quantum-grade superconducting wafers. The remaining seven companies are computing firms spanning nearly every architecture competing to build a useful quantum computer: Atom Computing and Infleqtion ($100 million each, neutral-atom systems), D-Wave ($100 million, annealing and gate-model superconducting), Quantinuum ($100 million, trapped-ion), Rigetti (up to $100 million, superconducting), PsiQuantum ($100 million, photonic) and Diraq (up to $38 million, silicon spin).

Commerce Secretary Howard Lutnick framed the program as a jobs and capability play, saying the investments would "build on our domestic industry, creating thousands of high-paying American jobs while advancing American quantum capabilities."

The structure mirrors the equity stake the government took in Intel earlier in 2025 under the same CHIPS Act authority: money in exchange for a passive ownership slice rather than a loan or a grant, an approach the administration has now applied to steel, rare earths and nuclear power as well as semiconductors. It was followed within a month by Executive Order 14413 in June, which set up a Quantum Computer for Application Development and Discovery Science program to get at least one large-scale quantum machine into a Department of Energy facility, expanded counterintelligence protections specifically for quantum research, and ordered a refreshed national quantum strategy within 180 days. Between them, the equity program and the executive order describe a government treating quantum computing the way it has historically treated nuclear weapons and satellite launch capability: too strategically important to leave entirely to private capital.

That framing invites the obvious conflict-of-interest questions, and they have already surfaced, as Data Center Dynamics has reported. Emil Michael, a D-Wave executive, is also serving as the US Under Secretary of Defense for Research and Engineering, putting him on both sides of a defense-adjacent technology bet. Donald Trump Jr.'s venture firm, 1789 Capital, holds a stake in PsiQuantum, though PsiQuantum has described the firm as a passive minority investor with no operational role. And IonQ, a publicly traded quantum computing company that might otherwise have been an obvious candidate for the list, is notably absent; short seller Wolfpack Research has separately accused IonQ of overstating revenue tied to lost government contracts, a claim IonQ disputes.

For Blockhead's audience, the more direct relevance is what this money is chasing. A sufficiently powerful, fault-tolerant quantum computer would not just accelerate drug discovery and materials science, the applications Commerce and the White House keep citing. It would also break the elliptic curve cryptography that secures essentially every Bitcoin and Ethereum private key in existence, using an algorithm, Shor's algorithm, that has been mathematically understood since 1994 and is simply waiting on hardware capable of running it at scale.

Google's own 2026 research, cited in Ethereum's official roadmap, puts the qubit count needed to break 256-bit elliptic curve cryptography at roughly 1,200 logical qubits, well beyond what any of the nine funded companies have announced today but no longer a number anyone in the field treats as fantastical. The US National Institute of Standards and Technology, which sets the cryptographic standards both the government and much of the private sector build on, has already told federal agencies to plan on deprecating ECDSA, the signature scheme Bitcoin and Ethereum both rely on, by 2030 and disallowing it entirely by 2035.

Both major blockchains are now running actual migration programs rather than academic exercises. Bitcoin developers have two proposals moving through the BIP process: BIP-360 defines a new pay-to-quantum-resistant-hash address format, while BIP-361, authored by a group including Bitcoin Core contributor Jameson Lopp, lays out an actual migration and legacy-signature sunset timeline. That plan is notably aggressive: roughly three years after activation, new transactions to legacy address types would be barred outright, and roughly two years after that, the network would restrict spending from legacy signatures at the consensus level, using quantum-safe rescue protocols meant to let authentic holders recover funds while shutting out attackers. The proposal's supporting research estimates that more than a third of all circulating bitcoin, including coins widely attributed to Satoshi Nakamoto, sits in address types that would be affected, since those addresses expose the underlying public key on chain rather than only a hash of it.

Ethereum's approach, laid out on the Ethereum Foundation's own roadmap and reinforced in the "Lean Ethereum" plan Vitalik Buterin detailed in August, is less about freezing funds and more about swapping out vulnerable primitives one at a time. The consensus layer's BLS signatures are set to be replaced with a hash-based scheme called leanXMSS, paired with a new proof system to compress the much larger resulting signatures back down to a usable size. Validator and data-availability layers reliant on elliptic-curve KZG commitments are being evaluated for STARK-based or lattice-based replacements, both of which rely on hash functions and lattice math rather than elliptic curves. For ordinary account signatures, Ethereum is not forcing a network-wide cutover at all: account abstraction is meant to let individual wallets opt into post-quantum signature schemes on their own timeline once they are available, avoiding Bitcoin's more binary freeze-or-migrate structure. The Ethereum Foundation stood up a dedicated Post-Quantum Security team in January and is running weekly interoperability tests across more than ten client teams, with core protocol changes targeted for rollout through 2029.

Neither chain's user base needs to do anything today; existing funds are not immediately at risk, and both migration plans still run for years. But the gap between the two efforts and Washington's own posture is worth sitting with. The federal government is treating quantum computing as a strategic asset serious enough to take equity stakes in nine companies and stand up a counterintelligence unit around it, on a timeline NIST itself pegs at deprecation by 2030. Bitcoin's core developers are debating whether to lock a third of the existing supply behind new recovery protocols to get ahead of that same clock, and Ethereum is rewriting large parts of its protocol to avoid ever having to make that choice. Whichever chain executes its migration with less friction will have a real claim to durability that the other will not, and the $2 billion Commerce just put into scaling up the hardware is a reminder that the clock both of them are racing against is not merely theoretical.