Are Crypto Exchanges Safe from Quantum Computers?

The short answer, the two places an exchange is exposed, and what both the platform and you can do about it.

No publicly demonstrated quantum computer can break the relevant cryptography today · 2 exposure surfaces (custody keys and off-chain data) · exchanges concentrate both.

Exchanges deserve a guide of their own because they concentrate large customer balances and stores of long-lived personal data. Their on-chain exposure depends on the assets they hold, their wallet architecture, and their key-management practices. This guide gives the direct answer to this concern, separates the two ways an exchange is exposed, and lists what platforms are doing and what you can do. For the exchange-by-exchange numbers, the detail are in the exchange-by-exchange Bitcoin exposure analysis.

Long story short

At the moment, no publicly demonstrated quantum computer can break the relevant cryptography at the scale required. Coinbase’s independent quantum advisory board reached a reassuring assessment of the current quantum threat in its April 2026 position paper, but urged preparation and flagged exposed Bitcoin holdings and proof-of-stake validator systems as areas to watch.

The concern is future-facing and uneven, and because exchanges hold so much in one place, they are where that future exposure concentrates. It splits into two surfaces.

The two exposure surfaces

On-chain custody: Coins an exchange holds in addresses whose public key is already visible, through address reuse, spent addresses, or Taproot, could be attacked by Shor’s algorithm once a capable machine exists. Glassnode’s May 2026 analysis classified 30.2% of the Bitcoin supply issued at the time as exposed at rest, with exchanges holding a disproportionate share; those figures measure on-chain exposure at rest, not a platform’s overall security, and the breakdown is available in the exchange-by-exchange Bitcoin exposure analysis. Exchanges can reduce some public-key exposure through custody hygiene without a protocol change. On Bitcoin, moving funds to suitable hash-committed outputs under new, undisclosed keys reduces exposure at rest. However, it doesn’t provide post-quantum spending protection: spending reveals keys, and fresh Taproot outputs expose their output key from creation.

Off-chain systems and data: An exchange also relies on encrypted communications, stored customer records, authentication, and software-signing infrastructure. Captured communications or archives may face harvest-now-decrypt-later risk where their confidentiality depends on quantum-vulnerable public-key cryptography. Authentication and signing systems face a different future risk: forged credentials or signatures. AES-256-encrypted data isn’t automatically exposed by Shor’s algorithm; the encryption design and the protection of its keys are what’s important. Submitting documents to an exchange doesn’t establish that they have been captured.

What exchanges can do, and are starting to

• Custody hygiene first: On Bitcoin and other networks where the output type hides the public key, stop reusing deposit addresses, rotate to fresh ones under undisclosed keys, and manage change outputs. This reduces exposure at rest but doesn’t make classical signatures quantum-resistant. BitGo announced quantum-risk management tools for supported Bitcoin multisignature wallets in July 2026, including an exposure score and a workflow for moving funds away from exposed addresses. It explicitly states that these controls don’t replace future Bitcoin protocol upgrades. Its chief executive described a public key never revealed on-chain as the safest case, though absence from the chain doesn’t establish that a key has never been disclosed elsewhere.
  
• Enterprise post-quantum migration: Beyond the chain, an exchange runs the same migration any large organization does: inventory where cryptography is used, prioritize long-lived customer records and signing keys, deploy hybrid key exchange, re-encrypt or rewrap vulnerable backups, and move firmware signing toward hash-based schemes. You can read about the method in the post-quantum migration guide.
  
• Signing infrastructure: Institutional custody architectures vary, including hardware-backed signing and multiparty computation. Exchanges need to assess whether their hardware, software, signing protocols, and recovery arrangements support the intended migration. Adding post-quantum capability inside a device doesn’t change the classical spending rules a blockchain enforces.
  
• Governance and transparency: Custodians should publish their wallet-hygiene metrics so the exposure is visible, and not assumed. Coinbase’s independent advisory board is one governance model.

What users should know

• Measured Bitcoin public-key exposure varies between platforms: Glassnode’s May 2026 snapshot found large differences among labeled exchange-held Bitcoin balances. Those figures describe on-chain public-key exposure at rest, not every platform’s complete reserves, current exposure, or overall security. They’re one custody metric, not a standalone basis for choosing an exchange; and you can find the breakdown in the exchange-by-exchange Bitcoin exposure analysis.
• Assess custody practices rather than assuming self-custody is automatically quantum-safer: Self-custody gives you control over keys and address use, but also responsibility for backups and transaction security. Its quantum exposure still depends on the network, the output or account type, public-key disclosure, and spending rules. The routine is described in how to protect your crypto from quantum computers and hot wallets vs cold wallets.
• Treat submitted KYC as a long-term confidentiality concern, not evidence of a breach: Review the platform’s retention and data-protection practices. A later cryptographic upgrade can’t secure vulnerable encrypted copies an attacker already captured. Disclosure wouldn’t itself reveal your blockchain private key, though it could support identity fraud or targeted account attacks.
• No publicly demonstrated attack requires pulling your funds off an exchange in a panic today: The useful move is choosing custody carefully and watching how platforms migrate, not a rushed withdrawal.

Bottom line

No publicly demonstrated quantum computer can break the relevant cryptography at the required scale today. Exchanges can nevertheless prepare by reducing avoidable public-key exposure, planning migration to ledger-enforced post-quantum authorization, and upgrading vulnerable enterprise systems. Address hygiene reduces exposure; it does not replace post-quantum signatures. Users should assess custody practices and migration plans, and treat any “quantum-safe” badge as a claim requiring evidence.

Sources

• Coinbase, quantum advisory board position paper (April 2026): coinbase.com
• Coinbase, working together on BTC post-quantum readiness (October 2026): coinbase.com
• BitGo, quantum risk management capabilities for Bitcoin wallets (July 2026): bitgo.com press release
• Glassnode, measuring Bitcoin’s quantum-exposed supply (May 2026): research.glassnode.com
• NIST Post-Quantum Cryptography project: csrc.nist.gov

Keep going

New to the threat? Start with What Is Q-Day?

Continue the series:

• Is Bitcoin Safe From Quantum Computers?
• How to Protect Your Crypto From Quantum Computers
• Post-Quantum Migration Guide for Crypto

Browse all post-quantum cryptography guides.

This article is educational and does not constitute security or investment advice.