Will ECDSA be broken by Oct 9, 2027?
Delphi’s forecast
- Yesyour pick0.6%$0.01
- No99.4%$0.99
The forecaster strongly favors one outcome, so we can’t open a market for this question. You can still create this market yourself.
Forecast reasoning
IonQ's September 2026 blueprint requires 20,000 physical qubits and 26 days to break ECDSA, but no such machine exists today; Georgia Tech and AI-assisted research have reduced theoretical resource requirements throughout 2026, yet no actual cryptographic break has been demonstrated with 357 days remaining. The 1% reflects the extreme difficulty of building attack-capable quantum hardware within one year against a well-established mathematical problem.
Settlement
Resolution criteria: - "Yes": Wins if, strictly after 2026-10-09T09:23:24Z and at or before 2027-10-09T15:00:00Z, a peer-reviewed publication, a formal announcement from NIST or an equivalent national standards body, or a widely corroborated report from major academic or security research institutions demonstrates a practical, non-implementation-specific break of the ECDSA algorithm itself — meaning a publicly demonstrated attack that can recover an ECDSA private key or forge a valid ECDSA signature without exploiting a side-channel, nonce-reuse, or other implementation flaw, against a standardized curve (e.g., NIST P-256, P-384, or secp256k1) at or above 112-bit security, using classical or quantum computing hardware. - "No": Wins if no such demonstrated break of ECDSA, as defined above, is confirmed strictly after 2026-10-09T09:23:24Z and at or before 2027-10-09T15:00:00Z. Clarifications: - "Broken" means a practical cryptanalytic attack against the ECDSA algorithm itself — not an attack on a specific implementation, library, side-channel, or protocol — that is accepted by the broader cryptographic research community (e.g., presented at a major venue such as CRYPTO, EUROCRYPT, USENIX Security, or formally acknowledged by NIST) within the resolution window. - Announcements of deprecation schedules, theoretical vulnerabilities requiring future quantum hardware not yet built, or partial academic results that do not demonstrate a full key-recovery or signature-forgery attack do not qualify.
Oct 9, 2027, 7:00 AM UTC
