cryptocurrency exchange warns of quantum computing threat
Cryptocurrency exchange Coinbase, a major custodian holding approximately 5% of all Bitcoin (around one million BTC) in existence, is sounding the alarm over the future threat of quantum computing. In a technical paper released on October 13, 2026, the company called for the Bitcoin community to immediately begin the complex, multi-year process of upgrading the network to quantum-resistant cryptography.
The firm, which safeguards roughly one million BTC for a wide range of clients including banks, asset managers, and hedge funds, argues that waiting for the threat to materialize would be too late. The core concern is that a sufficiently powerful quantum computer could one day break the fundamental encryption that secures every Bitcoin wallet, potentially allowing attackers to steal funds.
The future of cryptocurrency exchange security
Bitcoin currently relies on cryptographic methods known as the Elliptic Curve Digital Signature Algorithm (ECDSA) and Schnorr signatures. These systems are incredibly secure against today’s computers, which lack the power to reverse-engineer a private key from a public one. This mathematical shield prevents unauthorized spending and keeps the network secure.
However, the arrival of a cryptographically relevant quantum computer, or CRQC, would change the equation entirely. While such a machine does not yet exist, its development timeline is genuinely uncertain. A CRQC, running algorithms like Shor’s, could theoretically crack this encryption, posing a long-term risk to Bitcoin’s foundational security.
The Coinbase Independent Advisory Board on Quantum Computing and Blockchain concluded that “there is high confidence that a fault-tolerant quantum computer will eventually be built.” The board stressed that while the threat isn’t imminent, the timeline is “genuinely uncertain.” This proactive stance underscores the potential severity of the threat and the complexity of implementing a solution across a decentralized global network.
The Advisory Board’s central message is that “the debate about timelines is largely irrelevant, because the preparation needs to happen now regardless.” This highlights the need for immediate action, given that major changes to blockchains take a long time to implement, and the transition to quantum-resistant security could take several years.
Coinbase’s Comprehensive Transition Strategy
Simply choosing a new, quantum-resistant algorithm is not enough; Coinbase states, “making Bitcoin secure against this emerging threat involves more than choosing a quantum-resistant digital signature scheme.” Coinbase’s paper, authored by Shashank Agrawal, lays out a comprehensive strategy for migrating Bitcoin’s security.
The exchange emphasizes that the solution must protect old and new funds, fit within Bitcoin’s limited data space, and support both individual users and large-scale institutions.
This is a delicate balancing act. Any upgrade must be carefully managed to avoid disrupting the network or creating new vulnerabilities. The plan is not just a technical fix but a strategic roadmap for a foundational change to Bitcoin’s core protocol, affecting every user and stakeholder.
Flexible Architectures and Staged Adoption
A core recommendation is to separate the transaction “container” from the signature itself. Proposals like P2MR (BIP-360) and P2TRv2 would allow Bitcoin to support new post-quantum signature types without a complete system overhaul. This flexibility would make it easier to add or replace security measures as technology evolves.
Coinbase also supports a staged transition. This could involve a “1-of-2” setup where a user could spend their Bitcoin with either their old ECDSA/Schnorr key or a new post-quantum key. This hybrid approach would let active users protect their funds early without forcing a sudden, network-wide switch that could risk locking users out of their coins.
Robustness and Institutional Support
The upgrade must also cater to the needs of large-scale custodians. Coinbase and its institutional clients rely heavily on Multi-Party Computation (MPC) systems, where private keys are split into multiple shares to prevent a single point of failure. New post-quantum schemes must be “MPC-friendly” to maintain this crucial security layer for firms offering services for institutional clients.
The exchange is already practicing what it preaches, developing a post-quantum version of its proprietary key management system, known as PQ-CoreKMS. Coinbase aims to deliver an automated signing pipeline supporting post-quantum algorithms within the next year, with full MPC capabilities for these new schemes developed over the following two to three years.
The transition also demands exceptionally high standards for the new software. Coinbase stressed that any new quantum-resistant scheme must work reliably across all platforms, verify signatures consistently, and avoid leaking secret information through side-channel attacks like timing analysis. The chosen algorithms, such as the NIST-selected ML-DSA and SLH-DSA, must be rigorously tested.
This focus on robust implementation is critical for preventing the kind of bugs or hacks that could undermine the very security the upgrade is meant to provide. A flawed rollout could be more damaging than the quantum threat itself, eroding trust in the network and potentially leading to catastrophic losses for users.
Addressing Dormant and Inaccessible Coins
One of the most complex challenges in this transition is how to handle old and inactive Bitcoin wallets. Some Bitcoin sits in old address types that have left public keys exposed, and some wallets belong to people who have lost their keys.
These dormant or vulnerable addresses could be targets for a quantum attacker, as would the funds held by any long dormant wallets whose owners have lost their private keys.
Coinbase expresses concern that a malicious actor might quietly build a quantum machine and start draining coins from these vulnerable wallets before the public is fully aware. The question of what to do with these “forgotten” coins is fraught with controversy, touching on the core principles of ownership and immutability in Bitcoin.
Rather than letting this debate stall progress, Coinbase proposes a pragmatic solution: handle it separately. Coinbase leaders write, “In our view, that discussion can continue alongside the technical work to add post-quantum signature support to Bitcoin.”
It also warns that any potential rescue mechanism for these coins must itself be quantum-safe, lest the solution become a new vector for attack. The discussion on dormant coins should happen alongside, and separately from, the technical work to add post-quantum signature support, so it does not need to hold up that work.
This approach helps prevent users from being locked out of their Bitcoin if they don’t upgrade in time.
A Collaborative Industry Endeavor
Coinbase has made it clear that this monumental task cannot be shouldered by one entity alone. “No company or organization can, or should, solve this challenge alone,” the company stated. This initiative is being driven by a broad coalition of industry leaders who recognize the shared risk and responsibility.
The exchange is a founding member of the Bitcoin Security Consortium, a group that includes financial giants like BlackRock and Fidelity Digital Assets, as well as crypto-native firms Block and Blockstream. This consortium provides a forum for coordinating research and development efforts across the ecosystem.
In August 2026, Coinbase co-hosted a working session with Stanford University, bringing together Bitcoin core developers, cryptographers, and academic researchers for a focused day of discussions on the migration. The exchange has committed to continuing these sessions regularly, fostering the open collaboration needed to navigate this complex technological shift.
Long-Term Outlook for Bitcoin’s Resilience
For the average Bitcoin user and investor, Coinbase’s message is one of cautious preparation, not immediate panic. The key takeaway is that “quantum computing is not an immediate threat, but the ecosystem is taking the long-term risk seriously and working on it now—before the need becomes urgent.”
This effort represents a significant maturation of the digital asset space, moving from reactive problem-solving to proactive, long-term risk management. By starting the conversation and development process years ahead of a potential crisis, leaders in the space hope to ensure Bitcoin remains a secure and resilient store of value for decades to come.
The road ahead is long. It involves deep technical research, extensive testing, and the difficult process of achieving community consensus in a decentralized network. But as one of the largest and most influential players in the ecosystem, Coinbase’s decisive call to action has set the wheels in motion for one of the most important upgrades in Bitcoin’s history.