Quantum turns cryptographic migration into a diligence line item

The number worth sitting with is seven: the years SWIFT took to modernize a 1970s-era messaging format, an overhaul begun in 2018, and it is the figure Chris Perkins reaches for in a Fortune op-ed dated Sept. 25 because it does the work his argument needs. Quantum computing, he writes, will not kill public blockchains; the more useful question is which parts of finance can rebuild their cryptography when they have to.

The doomer case he sets out first is familiar: Bitcoin, Ethereum and Solana will be among the first targets of quantum attacks, and the decentralization that keeps those networks from upgrading in their own defense becomes the Achilles heel that lets trillions of dollars disappear. Perkins calls the threat real and the conclusion wrong, then widens the frame to Q-day, his term for the moment quantum machines can pick the locks of the encryption the internet runs on. What is at risk is far more than chain balances: hundreds of trillions of dollars of the world's assets, he writes, along with its most sensitive private data. Bad actors, in his account, have already begun "harvest now, decrypt later" programs aimed at that future, and governments have responded with mandated action plans.

The asymmetry Perkins draws is where an allocator's attention belongs: public blockchains have spent their lives under attack, patching in the open, and he argues that habit makes crypto the industry most capable of meeting the challenge while legacy financial systems are prone to rolling out insufficient responses. SWIFT is the exhibit — seven years to retire a messaging format across 11,000 institutions and 200 countries, an undertaking he grants was sprawl and one he describes as a simple job next to the broader task of replacing decades-established cryptography.

The contrast points somewhere the op-ed does not go. Migration cost is a selection pressure on settlement venues: if one stack measures its upgrade in years and another in decades, the venue that can ship a client update over a weekend has a real argument for holding value. Tokenization's binding constraint is the wrapper and the register, not the chain, and what institutions are actually buying is a counterparty you can name. The ETP sponsor, the tokenized-fund operator, the custodian taking tokenized collateral each sit between the allocator and the network; none of them inherits the network's patch velocity, and their changes move at the speed of documents and service providers. The chain is the part of the stack that was not the problem allocators were trying to solve.

For anyone holding a tokenized position through the next decade, the practical question runs during the years a network coordinates a cryptographic change, when the underlying rail is rebuilt beneath live holdings and the wrapper has to decide how to treat whoever sits on either side of the change. That question is answerable today, out of documents and service-provider commitments, and nothing in the op-ed gets near it.

There is a second gap, and this publication's coverage keeps running into it: chain-level architectural change arrives as a governance event with a price attached. When GnosisDAO voted to settle Gnosis Chain on Ethereum, the move would release roughly 350,000 GNO and end the treasury's staking subsidy; a cryptographic migration across a large network is a coordination problem of that shape, magnified to include validator sets, staking contracts, bridge assumptions and treasury positions repriced at once. Perkins is right that open-source networks are practiced at shipping fixes, but he leaves alone the part where somebody has to agree on the fix and pay for it.

The timetable inside the argument also goes unstated, which is fair for an op-ed and unhelpful for a diligence file: "harvest now, decrypt later" describes collection, and collection is the half Perkins says is already underway. The exposure opens earlier than Q-day, at the moment ciphertext meant to stay secret for decades gets captured, and that is why post-quantum readiness belongs in the same questionnaire that asks a custodian about segregation and a chain about validator concentration. Any allocation written with a ten-year hold is, in part, a bet on the migration finishing before the decryption does.

Governments mandating action plans is the detail that ties this to the rest of the year's business, because the crypto rulebook now runs through agency requirements and supervisory expectations rather than legislation, revocable and unevenly applied. A post-quantum expectation landing on banks and their custody arms reaches tokenized assets sideways, and it arrives well before any network named in the op-ed has to do anything.

Perkins' yardstick is seven years across 11,000 institutions; run the same measurement against a tokenized fund and it splits three ways — chain, custodian, and wrapper — with the slowest of the three setting the number that matters. That arithmetic is not in the op-ed, and it is the part allocators will have to do for themselves.