What specific vulnerabilities in quantum hardware implementations might attackers actually exploit today?

# Quantum Hardware Vulnerabilities Under Active Attack Today

Today's quantum computers face several implementable vulnerabilities that attackers can actually exploit on currently deployed hardware.

Pulse-Level Circuit Attacks

The most direct threat comes from the gap between what a quantum programmer writes and what the hardware actually executes [AG-2024.06-1682]. Quantum computers accept high-level gate instructions but implement them as low-level electromagnetic pulses. Attackers who can modify custom gate specifications can launch seven distinct attacks:

• Qubit plunder: stealing computational results from other users' qubits
• Qubit block: preventing other qubits from operating
• Timing/frequency/phase/waveform mismatches: corrupting gate fidelity to produce wrong answers

The critical point: [AG-2024.06-1682] demonstrates these attacks on real quantum hardware and shows that "most current software development kits are vulnerable."

Crosstalk Exploitation in Shared Environments

Since quantum computers are accessed through shared cloud services, adversaries can deliberately trigger crosstalk—unwanted electromagnetic interference between neighboring qubits [AG-2024.02-1368]. By carefully designing their own quantum circuits, an attacker can engineer crosstalk noise to sabotage calculations on nearby qubits belonging to other users, forcing wrong answers while their own computation runs normally [AG-2024.02-1368].

Side-Channel Information Leakage

Readout crosstalk in frequency-multiplexed qubit architectures creates a subtle but exploitable vulnerability: correlated measurement errors can leak information about other users' qubit states [AG-2024.05-2051]. An attacker monitoring their own measurement outcomes can infer details about a victim's quantum state.

State Leakage During Reset

When qubits are reset between computation rounds, noise in the reset mechanism can leave residual quantum information [AG-2024.01-1977]. Attackers running jobs after victims can extract partial information about previous results through repeated access.

Current Risk Level

These vulnerabilities are real on today's hardware, but [AG-2024.01-2022] notes that quantum computers "are not yet at a level such that they can be used in production for large-scale, industrially-relevant problems, and they are not believed to currently pose security risks" to classical cryptography. The attacks work, but only when multiple users share a machine—a scenario becoming standard as quantum cloud services grow.