Community Trust ScoreVerified
Coinbase wants the crypto world to stop treating quantum security like a future problem. The exchange published a detailed framework laying out exactly why migrating Bitcoin to post-quantum cryptography is far harder than swapping one signature algorithm for another — and it’s doing so from a position of unusual weight, given that it custodies roughly 5% of all Bitcoin in existence.
Why It Matters
The warning from Coinbase highlights the urgent need for the cryptocurrency industry to address quantum security vulnerabilities, especially as it holds a significant portion of Bitcoin. With the potential for quantum computing to undermine existing cryptographic protections, the challenge of transitioning to post-quantum solutions could have far-reaching implications for the security and stability of the entire crypto ecosystem. This discussion is particularly critical as institutional adoption of digital assets continues to grow, necessitating robust security measures to maintain confidence among investors and users.
That’s not a small stake. One in twenty Bitcoin sits under Coinbase’s watch. So when the company puts out a technical roadmap on quantum risk, it’s probably worth reading.
Why Changing the Algorithm Isn’t Enough
The framework is blunt about the scope of the problem. A post-quantum transition, per Coinbase, has to do several things simultaneously: protect coins with already-exposed public keys, fit new signature schemes inside Bitcoin’s constrained block space, keep full-node validation working, and serve both massive institutional custodians and ordinary users holding self-custody wallets. That’s a genuinely hard set of constraints to satisfy at once.
Coinbase pushes for what it calls an adaptable architecture — not a one-time cryptographic fix that gets bolted on and forgotten. The company points to design approaches like P2MR under BIP-360 and P2TRv2 as examples of how post-quantum signature systems could be introduced or swapped out later without requiring an entirely new output format every time. The idea is to build a structure flexible enough to accommodate whatever post-quantum standard eventually wins out, rather than locking Bitcoin into a single scheme that might itself need replacing.
The proposed migration path involves a 1-of-2 hybrid structure. Funds could be spent using either existing ECDSA or Schnorr keys, or a future post-quantum key. That kind of setup would let wallets start transitioning early, without having to wait for the broader Bitcoin network to reach consensus on restricting legacy signatures entirely. And given how slowly Bitcoin governance moves, that flexibility matters.
Institutional Risks That Most People Miss
At the institutional level, the challenges get messier. Coinbase flags stateful post-quantum signature schemes as a particular concern. These schemes can be faster and produce smaller signatures, which sounds appealing. But they carry a serious operational risk: if a signing state gets reused — say, across distributed servers in different locations — the result can be forgery. Not theoretical forgery. Actual forgery.
For a large custodian running signing infrastructure across multiple data centers, that’s not a minor edge case. It’s a live operational threat. Coinbase says it wants Bitcoin to keep a stateless signing option available for exactly this reason. Stateless schemes don’t carry that reuse risk. They’re safer for institutions running the kind of distributed, redundant systems that serious custody demands.
There’s also the question of multi-party computation. Big custodians rely on MPC to reduce the risk of key theft — splitting signing authority so no single server or employee holds a complete key. Coinbase wants any post-quantum scheme evaluated specifically for MPC compatibility before it gets adopted. And it adds that constant-time verification matters too, along with reliable cross-platform performance. A signature scheme that behaves differently on different hardware is basically a liability.
The Dormant Coin Problem
Then there’s the dormant coin issue, which is probably the thorniest governance question of the bunch.
Bitcoin has a significant number of outputs where the public key is already exposed — reused addresses, old-style pay-to-public-key outputs, wallets that haven’t moved in years, and coins that may have lost private keys entirely. If quantum computers eventually get powerful enough to break current signature systems, those coins become vulnerable. And deciding what to do about them is both a technical problem and a political one.
Coinbase doesn’t pretend there’s an easy answer. But it’s clear that the existence of this problem shouldn’t slow down work on post-quantum signature support for new coins and new wallets. The two tracks can run in parallel. Waiting for the dormant coin debate to resolve before starting anything else would just waste time.
It’s worth being clear: there’s no immediate quantum attack on Bitcoin. Current quantum hardware can’t break ECDSA. But the point Coinbase is making — and it’s a fair one — is that the infrastructure work takes years, Bitcoin governance takes years, and waiting until the threat is urgent means starting too late.
The exchange also touches on resilience against random-number failures in signing processes. Predictable, reliable signing behavior across different platforms isn’t glamorous engineering, but it’s the kind of thing that breaks catastrophically if it’s wrong.
Coinbase’s framework doesn’t name a specific timeline or a single recommended algorithm. Unclear whether that level of specificity will come later, or whether the company sees its role as framing the problem rather than prescribing the solution. Either way, the document pushes the conversation forward — and given that Coinbase holds roughly one-twentieth of all BTC, the industry has some reason to take the push seriously.
The 1-of-2 hybrid structure remains the most concrete near-term proposal on the table.
Hub: Bitcoin price, news, and analysis
Frequently Asked Questions
How much Bitcoin does Coinbase currently custody?
Coinbase custodies approximately 5% of all Bitcoin in existence, roughly one-twentieth of the total supply.
What is the 1-of-2 hybrid structure Coinbase proposes?
It’s a setup that lets funds be spent using either existing ECDSA or Schnorr keys, or a future post-quantum key, allowing wallets to transition early without waiting for broader network consensus.
Why does Coinbase want a stateless post-quantum signing option?
Stateful schemes risk forgery if a signing state is reused across distributed servers — a real danger for large custodians running signing infrastructure in multiple locations.
