What to Know
- Coinbase says Bitcoin should begin preparing now for quantum computers that could eventually derive private keys from public keys and drain vulnerable wallets.
- The exchange holds about 5% of all bitcoin in existence today for clients including banks, asset managers and hedge funds.
- Coinbase is recommending flexible post quantum signatures, staged adoption, reliable implementations and support for both individual users and institutions using multiparty security systems.
- Google researchers have suggested that a sufficiently powerful quantum computer capable of attacking current cryptography could exist by 2029.
- Bitcoin currently relies on ECDSA and Schnorr digital signatures, which remain secure against today’s conventional computers.
- Coinbase says the politically difficult issue of dormant wallets, lost coins and late migrations should be debated separately so it does not slow broader protection work.
Bitcoin’s Quantum Debate Moves From Theory to Planning
Coinbase is urging the Bitcoin ecosystem to begin preparing for a potential future quantum computing threat now, rather than waiting for the technology to become an immediate danger. The concern is not that current Bitcoin wallets are being broken today. Instead, the issue is whether a cryptographically relevant quantum computer could eventually derive a private key from a public key and use that information to move coins from exposed or vulnerable wallets.
The call matters because Coinbase is one of the largest institutional gateways into Bitcoin. The exchange holds about 5% of all bitcoin in existence today for clients that include banks, asset managers and hedge funds. That role gives its position added weight in a debate that touches software developers, miners, exchanges, wallet providers, custodians and long term holders.
At the heart of the message is a simple point: Bitcoin upgrades can take years. Consensus changes are difficult by design, and broad ecosystem migrations require coordination across many independent actors. Coinbase argues that the work should begin well ahead of any public announcement that a cryptographically relevant quantum computer has arrived.
How Bitcoin’s Current Security Model Works
A bitcoin wallet can be understood as a lock and key system. The public key functions like a visible receiving mechanism, while the private key is the secret that allows the owner to authorize spending. When a user sends bitcoin, the wallet creates a digital signature using the private key. The Bitcoin network then checks that signature against the public key. If the signature is valid, the transaction can proceed.
Bitcoin uses ECDSA and Schnorr signatures to create and verify these authorizations. These methods are considered secure today because conventional computers cannot practically reverse the mathematics and discover the private key from the public key or the signature. The current concern is that quantum computers may eventually change that assumption.
In the quantum risk scenario, a sufficiently advanced machine could use quantum algorithms to solve problems that are out of reach for ordinary computers. Researchers describe such a machine as a cryptographically relevant quantum computer, often shortened to CRQC. If a CRQC could derive private keys from public keys, exposed wallets could face a serious security problem.
Why Coinbase Wants Action Before the Threat Arrives
Coinbase’s position is that Bitcoin should not wait until quantum risk becomes urgent. A rushed response could be harder to audit, harder to coordinate and more likely to create dangerous implementation mistakes. By starting early, developers and market participants may have more time to test post quantum cryptography, consider trade offs and give wallet users a manageable migration path.
The exchange is not presenting quantum failure as an existing fact. The risk remains potential and future oriented. Some projections suggest a machine capable of threatening current cryptographic assumptions could arrive within a few years, and Google researchers have pointed to 2029 as a possible timeframe for a sufficiently powerful quantum computer. That does not mean such a machine exists today, but it strengthens the case for preparation.
The proposed answer is post quantum cryptography. In practical terms, that means new digital signature methods designed to withstand attacks from quantum computers. Coinbase argues that selecting a signature algorithm is only part of the challenge. The broader upgrade must secure old and new funds, fit within Bitcoin’s constrained data environment and allow ordinary computers to continue validating the network.
Flexible Signature Containers Are Central to the Proposal
One of Coinbase’s major recommendations is to separate the transaction container from the signature system. In plain language, Bitcoin should be able to support new post quantum signature types without rebuilding the entire transaction format each time. That would make it easier to add, replace or combine quantum resistant signatures as research develops.
Two proposals, P2MR, also known as BIP 360, and P2TRv2, appear to offer that type of flexibility, Coinbase said. The attraction of this approach is adaptability. Post quantum cryptography is still an active area of research, and different signature schemes may involve different trade offs around size, speed, safety and ease of use. A flexible format could reduce the chance that Bitcoin locks itself into a single imperfect choice too early.
Technical traders and long term Bitcoin watchers often frame this kind of upgrade as infrastructure rather than market momentum. It does not directly change Bitcoin’s supply schedule or monetary policy. Instead, it focuses on preserving the asset’s security assumptions as computing technology changes.
Staged Adoption Could Reduce Migration Shock
Coinbase also supports staged protection, allowing active wallets to begin using quantum resistant or hybrid signatures before Bitcoin finalizes rules for older signature types. One possible transition structure is a 1 of 2 setup. Under that model, the same bitcoin could be spent with either a traditional ECDSA or Schnorr key, or with a post quantum key.
This would allow users to strengthen protection earlier without forcing the entire ecosystem to switch at once. It could also help avoid sudden loss of access for users who are slower to upgrade. A staged migration is especially relevant for Bitcoin because holders vary widely. Some use modern hardware wallets and custodians, while others have coins stored in older formats or have not moved funds for long periods.
The staged approach reflects a practical reality: Bitcoin is global, decentralized and conservative about change. Any security upgrade needs not only mathematical strength, but also a path that ordinary holders, institutions, custodians and wallet developers can realistically follow.
Stateful and Stateless Signature Choices Matter
Coinbase highlights another technical issue: the use of state in some post quantum signature schemes. Stateful signatures require a wallet to track information after each signature. These schemes use many one time signing keys, and the wallet must remember which ones have already been used so it never repeats one.
If a wallet restores from an old backup or fails to save the correct record, it could accidentally reuse a key. That mistake could allow an attacker to forge a valid signature. Stateful signatures can be smaller and faster, but they are easier to misuse. For that reason, Coinbase believes Bitcoin should also support stateless options if stateful systems are considered.
Stateless signatures do not require the same record keeping burden. That can make them safer for many users and easier for wallet developers to implement correctly. The trade off is that different post quantum schemes may consume more data or computation, which matters on Bitcoin because block space is limited and full node validation must remain accessible.
Implementation Quality Is a Security Issue
Coinbase is also emphasizing robust implementations. In a system as valuable and adversarial as Bitcoin, cryptography can fail not only because the underlying math is weak, but also because software is written or deployed poorly. The exchange wants evaluation to give strong weight to software that works reliably across platforms and verifies signatures consistently everywhere.
It also points to the importance of avoiding leaks of secret information through timing, using clear settings and remaining safe even if the random number generator used during signing fails. These concerns may sound technical, but they are central to wallet safety. A theoretically strong signature scheme can still create losses if real world implementations introduce bugs, side channels or confusing defaults.
For everyday users, the result of this work should be simple: wallets that are dependable, difficult to misuse and compatible with the broader network. For institutions, the stakes include operational security, custody standards and client asset protection.
Institutions Need Multiparty Security Support
Coinbase says post quantum schemes should work well with multi party computation, or MPC. MPC allows private key control to be divided across multiple parties or systems, reducing reliance on a single device or person. When implemented properly, it can make key theft more difficult and add an important security layer for large organizations that face constant attacks.
This requirement is especially important for exchanges, custodians and large businesses. Institutions often need internal controls, approval workflows and distributed signing arrangements. If post quantum signatures cannot fit into these operational models, adoption could be slower or more complex.
Coinbase’s focus on MPC friendliness shows that a Bitcoin quantum upgrade is not only a developer issue. It is also a custody, compliance and operational resilience issue for the firms that secure large pools of bitcoin on behalf of clients.
Dormant Wallets and Lost Coins Remain the Hardest Debate
The most contentious part of the quantum discussion involves wallets that do not migrate. Some bitcoin has been dormant for long periods. Some private keys may be lost forever. Some coins also sit in old address types where public keys have already been exposed. If a powerful quantum computer arrived and could attack exposed keys, these wallets could become targets.
Coinbase is concerned that someone could quietly build a quantum machine and begin draining coins before the public learns. Even so, the exchange is not taking a position on what should happen to dormant or lost coins. Instead, it says that debate should be handled separately from the work of adding post quantum protection for active users.
That separation is important because the lost coin issue touches Bitcoin’s deepest norms. Any proposal that freezes, rescues or restricts funds would likely face intense debate. Coinbase’s view is that this should not delay less controversial protections that allow active users to move toward quantum safe outputs.
A Late Migration Path Could Protect Slow Movers
If Bitcoin eventually restricts or ends spending from ECDSA and Schnorr outputs, some users may still hold funds in older wallet formats. Coinbase says it would be useful to consider whether and how those users could later move funds into quantum safe outputs. The right approach remains an open question, including its trade offs and security risks.
A late migration path could reduce the chance that users are locked out simply because they failed to upgrade early enough. However, any rescue or migration mechanism would itself need to be quantum safe. If the rescue path exposes users to the same quantum threat, attackers could exploit it.
The broad message is that Bitcoin’s quantum planning needs both technical precision and social coordination. The network must protect users without creating unnecessary attack surfaces, and it must do so in a way that respects Bitcoin’s decentralized governance culture.
Frequently Asked Questions (FAQs)
What is Coinbase asking Bitcoin to do?
Coinbase is asking the Bitcoin ecosystem to begin preparing for a potential future quantum computing threat by developing post quantum signature support, staged migration options, reliable implementations and separate handling for dormant or late migrating wallets.
Is Bitcoin vulnerable to quantum computers today?
The concern is about a potential future threat, not a confirmed present day break. Bitcoin’s ECDSA and Schnorr signatures remain secure against current conventional computers, but a sufficiently powerful quantum computer could change the risk model.
What is a cryptographically relevant quantum computer?
A cryptographically relevant quantum computer, or CRQC, is a quantum machine powerful enough to break cryptographic systems that currently protect digital signatures and private keys. In Bitcoin’s case, the concern is that such a machine could derive a private key from a public key.
Why does Coinbase say preparation should start now?
Coinbase says Bitcoin consensus changes and ecosystem migrations can take years. Starting early gives developers, wallet providers, custodians and users more time to test post quantum systems and move funds without a rushed emergency response.
What are post quantum signatures?
Post quantum signatures are digital signature methods designed to resist attacks from quantum computers. They would replace or supplement today’s ECDSA and Schnorr signatures if Bitcoin adopts quantum resistant spending methods.
What is staged adoption?
Staged adoption means allowing users to begin protecting funds with quantum resistant or hybrid signatures before the entire network fully retires older signature types. One possible structure would allow spending through either a traditional key or a post quantum key.
Why are dormant wallets controversial?
Dormant wallets are controversial because some may belong to users who still control their keys, while others may contain coins whose keys are lost. Any attempt to freeze, rescue or restrict such coins would raise difficult questions for Bitcoin’s governance and property norms.
Why does MPC matter for a quantum upgrade?
Multi party computation helps institutions distribute key control across multiple systems or parties. Coinbase says post quantum schemes should work well with MPC so exchanges, custodians and large organizations can maintain strong operational security.
Could late migrating users lose access to bitcoin?
If Bitcoin eventually restricts old signature types, users who do not upgrade in time could face access challenges. Coinbase says the ecosystem should consider whether a safe late migration path is possible, while keeping that debate separate from immediate quantum protection work.