What if someone builds a quantum computer fast enough to crack your bitcoin wallet’s security and siphon off your coins? That question, once relegated to the realm of theoretical physics and science fiction, is increasingly occupying the minds of cryptographers, financial institutions, and digital asset exchanges. While such a powerful quantum machine does not exist today, technological projections suggest that advancements in the field could bring such a machine into reality within the next few years.
As the digital asset landscape prepares for this paradigm shift, Nasdaq-listed cryptocurrency exchange Coinbase—which currently holds about 5% of all bitcoin in existence for clients ranging from retail investors to major banks, asset managers, and hedge funds—has stepped forward to share its perspective. In a comprehensive blog post, the exchange laid out what it believes the Bitcoin network must do to secure itself against a potential future quantum threat, emphasizing that the ecosystem must start preparing immediately rather than waiting for the risk to materialize.
To understand the scope of the challenge outlined by Coinbase, it helps to examine how Bitcoin’s foundational security mechanisms operate and how a theoretical quantum computer could disrupt them.
The Lock and Key of Digital Assets
Think of a bitcoin wallet as a secure mailbox equipped with a narrow horizontal slot at the top and a key held exclusively by the owner. The visible slot, through which anyone in the world can drop letters inside, functions as the wallet’s public key. The private key, by contrast, is the physical key that unlocks the box. Kept strictly in the owner’s possession, this private key remains invisible to the outside world, ensuring that the bitcoin stored within the wallet stays safe and inaccessible to unauthorized parties.
When a user initiates a transaction to send bitcoin, their wallet utilizes the private key to generate a digital signature, acting as a tamper-proof cryptographic stamp. The decentralized network then checks this signature against the user’s corresponding public key. If the mathematics align and the signature matches, the transaction is formally approved and recorded on the blockchain.
The Bitcoin blockchain currently relies on two primary cryptographic methods, known as ECDSA (Elliptic Curve Digital Signature Algorithm) and Schnorr, to create and verify these digital signatures. These techniques have proven exceptionally secure over the years because traditional, classical computers lack the immense computational power required to crack the underlying mathematics and reverse-engineer a user’s private key simply by analyzing its digital signature or public key.
Enter the Quantum Risk
The security paradigm shifts dramatically when considering the capabilities of a sufficiently advanced quantum computer. According to researchers at tech giants like Google, a machine capable of breaking current cryptographic standards—often referred to by researchers as a cryptographically relevant quantum computer, or CRQC—could potentially emerge by the end of the decade.
A CRQC would possess the computational capacity to effectively reverse-engineer a private key from a public key, allowing malicious actors to drain holders’ bitcoin wallets completely undetected under current cryptographic rules. To neutralize this threat, the broader cryptographic community has been researching post-quantum, or PQ, cryptography. In plain English, these are entirely new signature methods designed to withstand sophisticated attacks from quantum algorithms.
According to Coinbase, simply selecting a new security method will not be enough to solve the problem. The exchange believes that a complete, robust upgrade to protect Bitcoin from quantum computers must successfully achieve multiple complex objectives simultaneously. It must secure both legacy and newly generated funds, fit neatly within Bitcoin’s strictly limited data space, and allow standard classical computers to continue running and validating the network. Furthermore, the solution must accommodate everyone from giant crypto trading platforms to everyday retail users, all while offering a clear, methodical plan for older, dormant coins that might never move.
Coinbase Wants to Move Now
Implementing such profound technological changes requires immediate action, largely because Bitcoin’s decentralized design—while widely praised as a major advantage over traditional, centralized financial institutions—also makes executing sweeping upgrades inherently difficult. Without a central authority to decree a software update, consensus must be built organically across a global network of developers, miners, and node operators.
As the exchange noted in its analysis, Bitcoin consensus changes and ecosystem migrations can take years to conceptualize, test, and deploy. This reality is precisely why preparatory work needs to begin well ahead of any official CRQC announcement or breakthrough. Fortunately, Bitcoin developers are already actively considering various proposals aimed at building robust quantum defenses into the world’s largest blockchain.
Measures Proposed by Coinbase
To navigate this complex technological transition safely and efficiently, Coinbase has put forward several specific measures for the Bitcoin development community to evaluate.
The first proposal involves separating the container from the signature. In simple terms, Bitcoin should be engineered so that its core transaction format can support new post-quantum signature types without requiring a complete rebuilding of the underlying system. This architectural flexibility would make it significantly easier to add, replace, or combine quantum-resistant signatures over time. Coinbase noted that two existing proposals, known as P2MR (BIP-360) and P2TRv2, appear to offer the kind of structural flexibility required for this approach.
Second, the exchange advocates for staged protection. Coinbase supports an approach that would allow active wallets to begin using quantum-resistant or hybrid signatures long before Bitcoin finalizes its permanent rules for older signature types. One potential transition method would be a setup where the exact same bitcoin could be spent using either a traditional ECDSA or Schnorr key, or alternatively, a post-quantum key. This strategy would enable cautious users to safeguard their funds early, avoiding a scenario where everyone is forced to switch simultaneously or risk a sudden loss of access due to software bugs or delayed upgrades.
Third, the debate over the use of state must be carefully managed. Some post-quantum signature schemes require the user’s wallet to keep track of sequential data, commonly referred to as state, after every single signature is executed. These specific schemes utilize numerous one-time signing keys, requiring the wallet to meticulously remember which keys have already been utilized to ensure a key is never reused. If a user restores their wallet from an old backup or fails to preserve that digital record, they could accidentally reuse a key, potentially allowing an attacker to forge a valid signature. While stateful signatures can be smaller and faster, they are inherently easier to misuse. Coinbase suggests that if Bitcoin decides to support stateful signatures, it should simultaneously support stateless alternatives that do not require continuous record-keeping, thereby providing users and wallet developers with a safer choice and minimizing the risk of accidental fund loss or forged transactions.
Fourth, Coinbase emphasizes the need for robust implementations. The exchange hopes the broader evaluation process gives strong weight to software solutions that operate reliably across diverse computing platforms, verify signatures consistently everywhere, avoid leaking secret information through timing discrepancies, utilize clear configuration settings, and remain secure even if the random-number generator employed during the signing process happens to fail. Ensuring these qualities would make quantum-resistant Bitcoin wallets substantially more dependable, drastically reducing the risk of bugs, unexpected hacks, or lost funds.
Fifth, any adopted post-quantum schemes must be compatible with multi-party computation, or MPC. For large-scale cryptocurrency exchanges, institutional custodians, and enterprise customers, MPC is vital because it helps protect private keys from theft by distributing cryptographic signing operations across multiple independent parties. Ensuring MPC-friendliness would make it far easier for large businesses and financial institutions to secure vast amounts of bitcoin without relying on a single person or physical device to hold a master private key.
Finally, the ecosystem must establish a clear path for wallets that migrate late. If the Bitcoin network eventually restricts or entirely sunsets traditional ECDSA and Schnorr spending methods, a significant portion of users may still have funds trapped in older wallet formats. Coinbase believes the community should actively consider whether and how those users could eventually move their funds to quantum-safe outputs at a later date. While the right approach and its associated trade-offs remain open questions, addressing this scenario would help prevent everyday users from being permanently locked out of their bitcoin if they fail to upgrade their security in time. Crucially, Coinbase suggests that this discussion can happen alongside, and separately from, the technical work required to add post-quantum signature support, ensuring that administrative debates do not stall critical cryptographic progress.
Forgotten Coins and Dormant Wallets
Beyond active users and institutional holdings, the Bitcoin network faces a distinct challenge regarding forgotten coins and long-dormant wallets. Not every participant will manage to upgrade their security posture in time to meet the quantum threat. A substantial portion of the circulating bitcoin supply sits in addresses that have been abandoned for years, including coins belonging to early adopters who have permanently lost access to their private keys. Furthermore, significant amounts of bitcoin reside in legacy address types that have historically left public keys directly exposed on the blockchain.
Coinbase has expressed concern that a malicious actor could theoretically develop a clandestine quantum machine and quietly begin draining coins from these vulnerable, dormant wallets before the general public is even aware that a cryptographically relevant quantum computer has been successfully built.
While the exchange did not formally take a definitive side on what the network should ultimately do with these abandoned coins, it strongly recommended that the debate be handled separately from the immediate task of securing active users. This administrative and philosophical separation would prevent contentious debates over lost coins from holding up essential technical protections for the rest of the network. Furthermore, Coinbase stressed that any potential rescue mechanism or protocol intervention designed to address abandoned funds must itself be fully quantum-safe; otherwise, sophisticated thieves could simply exploit the rescue method to steal the very assets it was designed to protect.
