Coinbase Urges Bitcoin to Begin Post-Quantum Migration Now
Coinbase is calling on the Bitcoin community to begin developing post-quantum signatures now, before a quantum computer capable of compromising the network exists. The custodian, which holds approximately 5% of all Bitcoin for clients including banks and asset managers, outlined its reasoning in a blog post on Bitcoin’s post-quantum readiness.
Why Coinbase Advocates for Early Coordination
Specifically, the primary concern is timing. A sufficiently powerful quantum computer could potentially derive a private key from an exposed public key, which would allow it to drain a wallet. Coinbase highlights that Bitcoin’s decentralized nature makes implementing any protocol changes a lengthy process. The company said that “Bitcoin consensus changes, and ecosystem migrations can take years,” and emphasized the need to begin work “well ahead of any” announcement of a cryptographically relevant quantum computer.
Bitcoin currently uses ECDSA and Schnorr signatures for transaction verification. Though these are secure against current machines, it’s impossible to subsequently hide a public key once it’s on the chain. This exposure is what Coinbase aims to address proactively, before a threat emerges.
Coinbase’s recommendations, as reported, include:
- Separating the transaction container from the signature to allow for the addition, swapping, or combination of new post-quantum signature types, citing P2MR (BIP-360) and P2TRv2 as potential candidates.
- Implementing a staged “1-of-2” setup, which enables a coin to be spent with either a classical key or a post-quantum key, and thereby provides early protection for active wallets.
- Supporting both stateless and stateful signature options, given that stateful schemes can be vulnerable to signature forgery if a key is reused.
- Making sure any chosen scheme remains compatible with multi-party computation, used by exchanges and custodians.
- Addressing dormant and lost-key wallets as a separate discussion to avoid delaying protection for other users.
The Wider Landscape
Coinbase isn’t alone in highlighting wallet exposure concerns. Ethereum Foundation researcher Justin Drake has suggested that advancements in AI and mathematics could weaken ECDSA even before the advent of a full quantum machine. He has pointed to hash-based schemes like SPHINCS and key rotation.
Other blockchain projects have already taken steps. Starknet has published its plan for quantum resistance, which relies on a smart-contract account model. Bitcoin’s opcode and block-space limitations prevent it from adopting this approach directly. The standardization landscape remains fragmented, with NIST FIPS 204 signature schemes lagging behind key-encapsulation deployment.
Moving forward, key developments to monitor include concrete Bitcoin developer proposals, timelines from wallet vendors, and any further statements from Coinbase. For additional information, refer to QNews coverage of quantum security and post-quantum cryptography.