“Quantum computers won’t break Bitcoin first.

They will break Zcash earlier.”

Bitcoin only exposes your public key when you spend.

Zcash exposes much more — and its zk-SNARK system depends on elliptic curves.

If quantum breaks ECC,

Bitcoin upgrades.

Zcash collapses.”

— Satoshi