Start with authorization
A sufficiently capable quantum computer could attack the mathematics behind widely used public-key signatures. Recovering private keys from exposed public keys would undermine ownership checks. This is a future capability question, not evidence that present hardware can drain wallets.
There is no reliable doomsday date
Migration needs to begin before capable hardware arrives. Error correction, engineering and network coordination matter. A dramatic qubit headline is not a measurement of an executable attack.
A better research question
Ask which primitive is exposed, which component uses it, and how that component can migrate. A token's branding does not answer those questions.