Coinbase Tells Bitcoin to Quantum-Proof or Bust — Clock's Tickin' 🕰️

Coinbase is urging Bitcoin's developers to begin migrating the network to post-quantum cryptography now, warning that consensus changes and ecosystem-wide upgrades "can take years" and cannot wait for a confirmed threat to arrive. The exchange, which custodies roughly 5% of all Bitcoin in existence, published a detailed technical paper on Tuesday laying out seven priorities for what it called "Bitcoin post-quantum readiness."

The post, authored by Coinbase engineer Shashank Agrawal, frames the transition as far more than a simple swap of signature algorithms. Any plan would need to safeguard both newly created coins and existing holdings, fit within Bitcoin's limited block space, keep full-node validation feasible on modest hardware, and work for everyday users and institutional custodians alike. Coinbase holds Bitcoin worth more than $80 billion at current prices and said its considerations reflect its own custody work and needs expressed by institutional clients.

The company's recommendations span five key areas: a flexible output type, such as P2MR under BIP-360 or P2TRv2, that can introduce, replace, or combine signature schemes without a full redesign; staged wallet protection allowing a 1-of-2 hybrid construction spendable through either a classical or post-quantum key; a stateless option alongside any stateful scheme to prevent errors that could enable forgery; reliable implementations with deterministic verification and protection against random-number-generation failures; and compatibility with multi-party computation (MPC) used by large custodians.

Coinbase's quantum advisory board estimated in April that approximately 6.9 million BTC sit in addresses with exposed public keys. At $83,307 per coin, those holdings are valued at roughly $575 billion. The paper calls for a separate governance and engineering track covering pay-to-public-key outputs, reused keys, lost keys, and Satoshi-era holdings, and cautions that any rescue mechanism for legacy coins must itself be quantum-safe. The post also raises whether late movers could still migrate if Bitcoin later restricts or ends current signature types.

"Choosing a quantum-resistant signature scheme is only one part of securing Bitcoin," Coinbase wrote, adding that it aims to inform community debate and does not set a final company position. The push comes as the $15 million Bitcoin Security Consortium, fresh EU and Europol warnings, and figures including Kevin O'Leary tie long-term price expectations to quantum risk, while Ethereum Foundation researcher Justin Drake on Wednesday called on the blockchain industry to begin planning for "bunker mode," a controlled mass migration of funds to fresh addresses whose public keys remain hidden behind a hash.