EU Supervisors Rate Quantum Risk as High: What to Check on Crypto Custody and Exchange Choice

The three European financial supervisory authorities added quantum risk to their official autumn risk picture on September 23, 2026. Nothing about your holdings changes today, and the paper is not a warning about an imminent attack. What changes is the expectation placed on your provider: exchanges, custodians and banks in the EU now have to plan the migration of their encryption, and you can measure them against that. This article sets out what the document actually says, which deadlines sit behind it, where the real attack surface lies for Bitcoin and Ether, and which three things you can check about your own custody without waiting for technology that does not yet exist. What the EU supervisors wrote about quantum risk on September 23 Behind the paper stand the three European Supervisory Authorities, the ESAs: the banking authority EBA, the insurance authority EIOPA and the markets authority ESMA. Twice a year they publish a joint risk update in which the Joint Committee names the weak points of the EU financial system. The autumn 2026 edition appeared on September 23, and its core findings had been presented on September 10 at the Financial Stability Table of the EU Economic an...