Quantinuum Smashes Error-Correction Record 10x, Tightening Bitcoin's Q-Day Clock
Quantinuum's Helios computer hit 99.9995% logical fidelity on October 19, a 10x improvement over its own September record and 100x better than any competing hardware. A fault-tolerant quantum computer by 2029 is the stated target. Bitcoin's post-quantum migration is not keeping pace.

Two competing quantum hardware teams hit major error-correction milestones within one week. Bitcoin's post-quantum migration is on testnet. The math is worth reading carefully.
Key takeaways
- Quantinuum's Helios computer achieved 99.9995% logical fidelity on October 19, five errors per million operations, a 10x improvement over its own September record and 100x better than the prior best on any competing hardware architecture, per the Quantinuum press release.
- Google Quantum AI separately demonstrated 40x error reduction via "magic state cultivation" on its Willow processor last week, published in Science, two record-setting results on two different architectures inside seven days.
- Bitcoin's quantum-resistant address standard (BIP-360) is merged and live on testnet; BIP-361 remains a contested draft; neither is activated on mainnet, and an estimated ~7 million BTC sit in addresses with already-exposed public keys.
Quantinuum announced Monday that its Helios quantum computer reached a logical error rate of just five errors per million operations using a "color code" error-correction technique, the most accurate result ever recorded on any quantum hardware platform, according to the company's press release. The announcement lands one week after Google Quantum AI published a separate breakthrough on its Willow chip, compressing what was a diffuse long-range risk into a credibly scheduled engineering target.
What Quantinuum Actually Achieved
The color code technique encodes up to 37 physical qubits into a single logical qubit, a heavier overhead than the Helix code Quantinuum used for its September record (10 physical qubits per logical qubit), but it produced dramatically cleaner results. Errors declined exponentially as code distance increased, with each tested step cutting remaining logical errors by a factor of 12.
"We've crossed the threshold necessary for exponential improvements in accuracy, reinforcing our path to Apollo and how we can help users unlock commercial value from quantum at scale," CEO Rajeeb Hazra said in the press release.
Apollo is Quantinuum's planned universal fault-tolerant quantum computer, targeted for 2029. The company says this result brings error-correction performance into Apollo's target range. Quantinuum's shares (NASDAQ: QNT) rose 4.3% in premarket trading following the announcement.
The result does not mean a cryptographically relevant machine exists today. What it demonstrates is that error correction is now improving exponentially on multiple competing hardware architectures at the same time. That pace of improvement is the actual signal.
The Seven-Day Window That Changes the Framing
Google Quantum AI's magic state cultivation result, published in Science on October 15, achieved 40x error reduction and 99.99% logical fidelity on T-states using its Willow superconducting processor. Quantinuum's color code result on trapped-ion hardware now sits at 99.9995%. Two different physical modalities, two different error-correction approaches, both hitting records in the same week.
The engineering gap between these benchmarks and a machine capable of running Shor's algorithm against a 256-bit elliptic curve key within a Bitcoin block window (~10 minutes) remains large. But the prior comfort of "this is theoretical and distant" is harder to sustain when two competing teams are demonstrating exponential improvement curves simultaneously, both targeting commercial fault-tolerant systems by 2029.
Bitcoin's specific exposure is concentrated, not distributed evenly across all UTXOs. Project Eleven estimates roughly 7 million BTC sit in addresses with already-exposed public keys: P2PK outputs (the format used in early coinbase transactions) and P2PKH addresses that have been spent from at least once, revealing the public key on-chain. A cryptographically capable quantum computer doesn't need to attack all of Bitcoin. It needs to target high-value exposed UTXOs within a confirmation window. That is a narrower, more tractable problem than breaking Bitcoin wholesale.
The Quantum Alliance that launched earlier this year estimated 6.04 to 6.4 million BTC in exposed addresses and proceeded without a single Bitcoin Core contributor at the table. The hardware progress this week makes that governance gap more conspicuous.
Bitcoin's Response Is Real but Incomplete
BIP-360 introduces a quantum-resistant address type (P2MR, prefix bc1z) and is merged into the bitcoin/bips repository as of February 2026, live on testnet. BIP-361, published as a draft in April 2026, proposes sunsetting legacy ECDSA and Schnorr signatures in phases, with a contested mechanism that would eventually restrict spends from unmitigated legacy UTXOs. Neither is activated on mainnet.
BIP-360 is the less controversial of the two. BIP-361 forces a harder question Bitcoin has not answered: does the network prioritize property rights for lost and dormant coins, or does it prioritize quantum security at the network level? That debate is live. The hardware news this week does not resolve it, but it raises the cost of delay.
Coinbase, which holds roughly 5% of all Bitcoin, has already called for post-quantum migration on mainnet. The broader self-custody community can act without waiting for consensus: stop reusing addresses, move coins out of P2PK outputs, and watch the BIP-360 activation debate closely.
What to Watch
The falsifiable version of the thesis: if independent peer review of either result reveals the fidelity claims are not reproducible at scale, or if the engineering distance between these benchmarks and a Shor's-capable machine proves far larger than current projections imply and the 2029 timelines slip materially, the urgency softens. The thesis also weakens if BIP-360 achieves mainnet activation and meaningful UTXO migration velocity before a fault-tolerant machine is demonstrated at scale. None of those conditions are met today. The next milestone to watch is Apollo's 2029 target and whether BIP-360 moves from testnet to a mainnet activation proposal before that date.
Sources
- Quantinuum press release, October 19, 2026
- BIP-360 (bitcoin/bips repository)
- BIP-361 (bitcoin/bips repository)
- Google Quantum AI blog post (Emma Rosenfeld, Craig Gidney), October 15, 2026; paper published in Science
Frequently Asked Questions
Does Quantinuum's result mean a quantum computer can break Bitcoin now?
No. This benchmark measures error-correction fidelity in a controlled test environment, not the ability to run Shor's algorithm against a live Bitcoin UTXO. Significant engineering steps remain between a 99.9995% fidelity result and a machine that can factor a 256-bit elliptic curve key within a 10-minute block window. The 2029 Apollo target is for a universal fault-tolerant computer, not a purpose-built Bitcoin cracker. The gap is shrinking on a measurable schedule, which is precisely why the timeline matters now.
Which Bitcoin addresses are most at risk from a future quantum computer?
P2PK outputs (used extensively in early coinbase transactions, including Satoshi-era coins) and P2PKH addresses that have been spent from at least once, which places the public key permanently on-chain. Standard receive-only addresses where the public key has never been revealed are harder targets. Address reuse compounds the exposure. Moving to a fresh, never-spent Taproot address today reduces long-range quantum risk, though it does not eliminate it entirely.
What is the difference between BIP-360 and BIP-361?
BIP-360 introduces a new quantum-resistant address type you can voluntarily migrate to, protecting forward-looking UTXOs without touching existing coins. BIP-361 proposes phased sunsetting of legacy signature schemes, including a mechanism that would eventually restrict spends from unmitigated legacy UTXOs. BIP-360 is merged and on testnet. BIP-361 is a contested draft. Neither is activated on mainnet. BIP-360 is the near-term actionable standard; BIP-361 is where the hard political fight over dormant coins will happen.


