Community Trust ScoreVerified
Quantum computing isn’t going to break Bitcoin tomorrow. But Coinbase isn’t waiting around to find out when it will.
The exchange is pushing hard on post-quantum security right now — building new custody tech, reviewing its entire cryptographic infrastructure, and throwing money and engineers at open-source research. The company’s Independent Advisory Board on Quantum Computing and Blockchain has been pretty clear on one thing: a fault-tolerant quantum computer will eventually exist. When it does, the cryptography protecting Bitcoin, Ethereum, and most other blockchains could be in serious trouble. Nobody knows the exact timeline. That’s basically the whole problem, and it’s why Coinbase says early action beats late panic.
The board’s confidence on that eventual arrival isn’t hedged. It’s not “maybe” or “possibly.” It’s when, not if.
PQ-CoreKMS and the 99.9% Problem
The crown jewel of Coinbase’s internal effort is something called PQ-CoreKMS — its proprietary key management system. Right now, that system protects roughly 99.9% of the assets Coinbase holds in custody. That’s an enormous concentration of risk if quantum machines ever get powerful enough to crack current encryption standards. So the company is upgrading PQ-CoreKMS to be post-quantum resistant, and it’s planning to launch an automated signing system within the next year. That system will incorporate multiple post-quantum signature algorithms, built to adapt as blockchain networks themselves evolve and adopt new standards.
It’s not just one fix. It’s a layered approach, designed to flex.
Coinbase is also doing a full audit of the cryptography running throughout its broader infrastructure — customer data systems, authentication processes, everything. Each system gets ranked by how critical it is, how exposed it is, and how hard it would be to migrate to a quantum-resistant alternative. The point is to figure out what needs to move first, not to tackle everything at once and make a mess of it.
And Coinbase is assigning engineers to support BIP-360, an open-source proposal aimed at building quantum resistance into Bitcoin’s protocol layer. That’s real engineering time, not just a press release commitment.
Stanford, NIST, and a $15 Million Consortium
The internal work is only part of it. Coinbase is co-hosting a working session with Stanford, scheduled for August, that’ll pull together Bitcoin Core developers, researchers, and cryptographers. The focus: migration strategies. Specifically, how do you actually move Bitcoin to quantum-resistant security without breaking things? It’s a hard technical problem, and there aren’t clean answers yet. The session is meant to surface those challenges and start building shared frameworks for solving them.
On the regulatory and standards side, the U.S. National Institute of Standards and Technology released draft updates for post-quantum cryptographic standards in June 2026. Those updates push for adoption of quantum-resistant technologies across industries — not just crypto. Coinbase’s timing on all of this isn’t accidental. NIST moving means the broader tech world is taking the threat seriously, and exchanges that wait too long will scramble to catch up.
Then there’s the Bitcoin Security Consortium. Coinbase is a founding member. The consortium is running a $15 million initiative to fund open-source research on Bitcoin’s long-term security. The lineup of members matters here — BlackRock and Fidelity Digital Assets are both in. That’s not a group of crypto-native true believers. Those are institutional players with serious fiduciary obligations, and they’re putting money behind quantum security research. Coinbase is contributing both funds and engineering talent to the effort.
Fifteen million dollars sounds big. Whether it’s enough for the scale of the problem is unclear.
Why the Collective Push Matters Now
Coinbase’s position is pretty direct: no single company can solve this alone. Researchers, developers, protocols, and companies all need to move together. The cryptographic foundations of Bitcoin and Ethereum weren’t built by one organization, and they can’t be rebuilt by one either. The migration to post-quantum standards will require coordination across the entire ecosystem — wallet providers, node operators, exchanges, and the open-source developers who actually write the code.
That’s a coordination problem as much as a technical one. And coordination problems in crypto are notoriously slow.
The urgency Coinbase is pushing isn’t based on an imminent threat. Quantum computers capable of breaking elliptic curve cryptography — the math underpinning most blockchain security — don’t exist yet at the scale needed. But the cryptographic community has long warned that once a capable machine appears, the window to react could be very short. You can’t migrate a network like Bitcoin overnight. The preparation has to happen years before the actual risk materializes.
So Coinbase is cataloging its cryptographic protocols now, ranking vulnerabilities now, funding research now, and building out PQ-CoreKMS now. The Stanford session in August will probably shape how the broader Bitcoin developer community thinks about the migration path. Fidelity Digital Assets and BlackRock being inside the consortium adds institutional weight that could push other major players to take similar steps.
The automated signing system is expected to launch within the next year, per Coinbase’s own timeline.
Frequently Asked Questions
What is Coinbase’s PQ-CoreKMS system?
PQ-CoreKMS is Coinbase’s proprietary key management system, currently protecting approximately 99.9% of assets held in custody, and it’s being upgraded to resist quantum computing attacks.
Who else is part of the Bitcoin Security Consortium?
The Bitcoin Security Consortium, of which Coinbase is a founding member, includes BlackRock and Fidelity Digital Assets, and is running a $15 million initiative to fund open-source Bitcoin security research.
