Quantum ComputingQuantum Security & PQCQuantum Snake Oil

Quantum Snake Oil Is Flooding the News Cycle — and the Industry Is Letting It Happen

June 17, 2026 — I wanted to catch up with the quantum news to share here, but I couldn’t. I got too frustrated.

My quantum news feed over the past few days was dominated by quantum snake oil. Several separate announcements so detached from physical reality that I initially assumed they were satire, each backed by zero peer review. Trade publications ran them with minimal scrutiny. LinkedIn amplified them. And the legitimate quantum research that actually matters got buried under the noise.

I have written about Q-FUD and quantum snake oil before and I am not going to rehash those arguments here. What I want to do instead is describe what showed up in a few-day window in June 2026, because the concentration tells us something about where this industry is heading. And it’s not good.

I am deliberately not naming the companies involved. They do not deserve additional attention, and the patterns are more useful than the names. If you follow the quantum industry, you will recognize them.

Three Claims, Zero Peer Review

Claim 1: FTQC achieved on rented cloud hardware by a software startup.

A small company with two founders, neither of whom has a physics degree, quantum computing publications, or any documented experience in quantum error correction, issued a press release claiming to have achieved fault-tolerant quantum computing on rented IBM cloud hardware. Their proprietary AI software layer, they said, had eliminated the need for the qubit overhead that every QEC scheme requires. They reported “zero detected logical errors” at what they described as a one-to-one physical-to-logical qubit ratio on a 150-qubit register.

Let me be direct about what this means physically. A distance-5 surface code requires 49 physical qubits per logical qubit: 25 data qubits and 24 measurement qubits arranged in a specific lattice. That ratio is a mathematical consequence of how quantum error-correcting codes work, grounded in the quantum Hamming bound and the Knill-Laflamme conditions. No software layer can optimize it away. Claiming a 1:1 ratio is claiming that proven theorems in quantum information theory do not apply to your company.

Google’s Willow result, published in Nature in December 2024, was celebrated because it demonstrated for the first time that logical error rates decreased with increasing code distance on a superconducting platform. That required a purpose-built 72-qubit processor, a team of over 100 researchers, and more than a decade of engineering. IBM’s own roadmap targets its first fault-tolerant system (Starling) for 2029, using architectures and interconnects that do not yet exist.

The company’s evidence? A self-published report on Zenodo, available in full only to “qualified reviewers” under “confidentiality terms.” The CEO’s prior career was as a technology evangelist for an unrelated AI company. The announcement was timed to a major quantum commercialization conference in London. Three days later, not a single QEC researcher had commented publicly.

Claim 2: A $3 billion SPAC for a quantum company built on an unvalidated algorithm.

A quantum company announced a definitive business combination with a blank-check acquisition vehicle, valuing the company at approximately $3 billion. The company describes itself as operating across five quantum business lines simultaneously: quantum security, quantum AI, quantum communications, quantum sensing, and quantum computing. It was founded in early 2025.

The company’s chairman is an adjunct professor in mechanical engineering at a Canadian university. His publication record is in environmental engineering, air quality dispersion modeling, fluid dynamics, and risk assessment software. Earlier this year, an affiliated institute announced a new factoring algorithm that would, they claimed, reduce the resources needed to break RSA by a factor of one thousand, requiring fewer than 5,000 qubits. Security trade press ran the story. Social media amplified it. The algorithm has not been independently validated, peer-reviewed, or reproduced by any cryptography research group.

I should add that I have personal experience with this company’s claims. In private conversations, their representatives went further than anything in the public announcements, telling me they had already broken RSA-4096, but that the results were too sensitive to share publicly. This is a familiar move in quantum snake oil: the public claim is extraordinary, the private claim is even more extraordinary, and the evidence for both is always just out of reach. If you have broken RSA-4096, you have broken the security infrastructure of every government and financial institution on Earth. You do not keep that in a drawer while you negotiate a SPAC listing.

Now the same company is asking public-market investors to value it at $3 billion on the basis of, among other things, that unvalidated algorithm. The SPAC has roughly $215 million in trust.

Claim 3: An “RSA-breaking challenge” starting at 348 bits.

A European quantum company partnered with a cryptocurrency platform to launch what they called a “Breaking RSA Challenge.” The name implies an attempt at something that has never been done. The first milestone? Factor RSA keys of 348 bits on a GPU within four hours. The organizers acknowledged in their own livestream that they had already broken this milestone themselves.

The current classical factoring record is RSA-250, an 829-bit number, achieved in 2020 using 2,700 CPU core-years. Keys of 348 bits were being routinely factored two decades ago. No one who understands RSA would learn anything about the security of RSA-2048 from watching someone factor a 348-bit key. Yet the public-facing marketing invoked bank accounts, passwords, and secure websites, with no mention of the actual bit size. The challenge launched shortly after the quantum company’s partner announced a multi-billion-dollar public listing.

And there were more…

My Analysis

The Pattern

These announcements share a structure worth spelling out.

Non-domain experts making extraordinary claims. In every case, the people behind the announcement lack the specific credentials the claim demands. Fault-tolerant quantum computing is a problem in quantum information theory. Cryptanalytic algorithms are a problem in number theory and computer science. The people making these claims have backgrounds in AI evangelism, environmental engineering, and cryptocurrency infrastructure. Cross-disciplinary breakthroughs happen, but they get validated by domain experts through peer review. None of these have been.

Press releases instead of papers. All three announcements reached the public through paid distribution (BusinessWire, PRNewswire) and were amplified by quantum trade media that, in at least two cases, essentially republished the press release verbatim. The established path for credible quantum results is submission to a peer-reviewed journal, presentation at a recognized scientific conference, and independent replication by other research groups. Press releases bypass all of those filters.

Commercial events as the real timeline driver. Every announcement was timed to a commercial event: a conference, a SPAC listing, a funding milestone. The commercial context does not automatically invalidate the technical claims, but it changes the question you should ask. Instead of “Is this true?” the question becomes “Why is this being announced now, in this way, to this audience?”

The quantum trade media’s failure to filter. This is the part that frustrates me most. Publications that cover quantum computing professionally ran these announcements with minimal scrutiny. One trade outlet published an article on the FTQC claim that was, sentence by sentence, a restatement of the company’s own press release. No expert was contacted. No physicist was asked whether a 1:1 physical-to-logical qubit ratio is consistent with known QEC theory. The trade press functioned as a pass-through for marketing, and the people who suffer are the CISOs, investors, and policymakers who rely on these outlets for information.

Why This Matters

I have been warning about quantum winter risks for months. The quantum computing industry is in a period where legitimate progress is real but expectations have outrun delivery. The snake oil operators damage everyone, including the legitimate players, because they set expectations that cannot be met and train decision-makers to dismiss all quantum claims as hype.

When a CISO sees several absurd quantum announcements in a single week and concludes that quantum computing is all hot air, that conclusion is wrong. That CISO still needs to migrate to post-quantum cryptography. The regulatory deadlines are still set. CNSA 2.0 still requires quantum-resistant algorithms for national security systems. The CRQC timeline, based on the CRQC Quantum Capability Framework and serious resource estimation research from Google, IBM, and academic groups, has been compressing. The threat is real. The snake oil makes it harder for people to see that.

This is the two-front problem I keep coming back to. Q-FUD and quantum denialism feed each other. The hype merchants inflate the threat to sell products and valuations. The backlash produces cynics who dismiss the entire field. Both groups are wrong, and both make the work of actual quantum security preparation harder.

What Enterprises Should Do

Nothing in these announcements changes anything about your migration timeline or your threat model.

Use the NIST-standardized algorithms: ML-KEM (formerly CRYSTALS-Kyber), ML-DSA (formerly CRYSTALS-Dilithium), SLH-DSA (formerly SPHINCS+). Build your migration plan on the PQC Migration Framework, not on vendor press releases. Align your timeline with regulatory deadlines that are already set, not with Q-Day predictions from companies selling quantum fear.

And when the next “breakthrough” press release lands in your inbox, ask two questions before anything else: Where is the peer-reviewed paper? And what is their next funding event?

If the answer to the first is “Zenodo” or “available to qualified reviewers under NDA,” and the answer to the second is “next quarter,” you have all the information you need.

Quantum Upside & Quantum Risk - Handled

My company - Applied Quantum - helps governments, enterprises, and investors prepare for both the upside and the risk of quantum technologies. We deliver concise board and investor briefings; demystify quantum computing, sensing, and communications; craft national and corporate strategies to capture advantage; and turn plans into delivery. We help you mitigate the quantum risk by executing crypto‑inventory, crypto‑agility implementation, PQC migration, and broader defenses against the quantum threat. We run vendor due diligence, proof‑of‑value pilots, standards and policy alignment, workforce training, and procurement support, then oversee implementation across your organization. Contact me if you want help.

Talk to me Contact Applied Quantum

Marin Ivezic

I am the Founder of Applied Quantum (AppliedQuantum.com), a research-driven consulting firm empowering organizations to seize quantum opportunities and proactively defend against quantum threats. A former quantum entrepreneur, I’ve previously served as a Fortune Global 500 CISO, CTO, Big 4 partner, and leader at Accenture and IBM. Throughout my career, I’ve specialized in managing emerging tech risks, building and leading innovation labs focused on quantum security, AI security, and cyber-kinetic risks for global corporations, governments, and defense agencies. I regularly share insights on quantum technologies and emerging-tech cybersecurity at PostQuantum.com.