Key Takeaways
- Coinbase says bitcoin needs more than a new signature algorithm to become quantum-resistant.
- Protecting 5% of BTC supply makes custody, MPC, and dormant coins critical migration challenges.
- Progress now rests on adaptable designs like BIP-360 that can evolve before quantum threats become urgent.
Bitcoin Faces Quantum Migration Test as Coinbase Details the Risks
Bitcoin’s quantum-computing problem is moving from theory toward engineering.
Coinbase has published a detailed framework describing what developers, custodians, and wallet providers may need to solve before bitcoin can safely migrate to post-quantum cryptography.
The exchange argued that any transition must protect exposed coins, fit within bitcoin’s limited block space, preserve full-node validation, and work for both institutional custody and everyday users.
For one of the world’s largest crypto custodians, holding about 5% of bitcoin’s supply, the issue is more than academic.
Coinbase Says a New Signature Scheme Is Not Enough
Coinbase’s central argument is that bitcoin needs an adaptable architecture rather than a one-time cryptographic fix.
It pointed to designs including P2MR under BIP-360 and P2TRv2, which could potentially allow post-quantum signature systems to be introduced or replaced without creating an entirely new output format every time.
One possible migration path would use a 1-of-2 hybrid structure, allowing funds to be spent using either today’s ECDSA or Schnorr keys or a future post-quantum key.
That could let wallets move early without waiting for the bitcoin community to decide when legacy signatures should eventually be restricted.
Institutional Custody Creates a Harder Problem
The requirements become more complicated at institutional scale.
Coinbase warned that some stateful post-quantum signature schemes, while potentially smaller and faster, introduce operational risks. Reusing a signing state can make forgery possible.
That is difficult for ordinary wallets, but also for institutions running distributed signing systems across multiple servers and locations.
Coinbase therefore wants bitcoin to retain a stateless signing option and says post-quantum schemes should also be evaluated for compatibility with multi-party computation, or MPC, which large custodians use to reduce key-theft risk.
The firm also highlighted implementation requirements including constant-time verification, reliable cross-platform behavior, predictable signing and resistance to random-number failures.
Dormant Bitcoin May Be the Toughest Question
The hardest issue may be coins that never migrate.
Bitcoin contains old outputs with exposed public keys, reused addresses, dormant holdings, and funds for which private keys may already be lost.
If quantum computers eventually become capable of breaking current signature systems, then deciding what happens to those coins becomes both a technical and governance problem.
Coinbase says that debate should not delay work on post-quantum signature support.
That distinction matters. There is no immediate quantum attack on bitcoin described here. The significance is that a custodian responsible for roughly one-twentieth of all BTC is treating migration planning as something the crypto industry should begin before the threat becomes urgent.
