What if someone builds a quantum computer fast enough to crack your bitcoin wallet’s security and siphon off your coins? That chilling question is increasingly on the minds of technologists and financial institutions alike, as projections suggest that such a quantum machine—while not yet in existence—could arrive within the next few years.
Nasdaq-listed cryptocurrency exchange Coinbase, which currently holds about 5% of all circulating bitcoin for its extensive client base of banks, asset managers, and hedge funds, has weighed in on the looming dilemma through a comprehensive blog post. The exchange laid out what it believes the Bitcoin network must do to safeguard itself against a potential future quantum threat, emphasizing that preparation must begin immediately rather than waiting for the risk to materialize, while also recommending that the thorny debate over lost coins be handled separately.
To fully understand the exchange’s urgent technical recommendations, it helps to examine the underlying architecture of Bitcoin’s cryptographic locks and how a future quantum computer could potentially bypass them.
The Lock and Key of the Bitcoin Network
Think of a bitcoin wallet as a mailbox featuring a narrow horizontal slot at the top alongside a key held exclusively by the owner. The visible slot, through which anyone can drop messages or funds inside, serves as the wallet’s public key. The private key, by contrast, is the physical key that unlocks the box to retrieve its contents. Kept strictly in the owner’s hands, this private key remains completely invisible to the outside world, ensuring that the bitcoin residing within the wallet stays secure.
When a user initiates a transaction to send bitcoin elsewhere, their wallet utilizes the private key to create a digital signature, functioning much like a tamper-proof cryptographic stamp. The broader network then checks this signature against the user’s public key; if a valid match is confirmed, the transaction is officially approved and recorded on the blockchain.
The Bitcoin blockchain currently relies on two primary cryptographic methods, known as ECDSA (Elliptic Curve Digital Signature Algorithm) and Schnorr, to generate and verify these vital digital signatures. These methods are extraordinarily secure under current technological standards because conventional computers lack the massive computational power required to crack the underlying mathematics and successfully reverse-engineer a user’s private key from either its public key or a generated digital signature.
Enter the Quantum Risk
The calculus changes dramatically with the advent of a sufficiently powerful quantum computer. According to estimates from researchers, a cryptographically relevant quantum computer—often abbreviated as a CRQC—could potentially materialize by the end of the decade. A machine of this caliber would possess the capability to perform complex calculations exponentially faster than classical computers, allowing it to reverse-engineer private keys from public keys and systematically drain holders’ bitcoin wallets.
The proposed remedy for this looming vulnerability is post-quantum, or PQ, cryptography. In plain terms, this involves developing and integrating entirely new digital signature methods capable of withstanding sophisticated quantum attacks.
According to Coinbase, simply selecting a single new security method will fall short of what is required. The exchange believes that a complete, robust upgrade to protect Bitcoin from quantum computers must successfully secure both legacy and newly generated funds, fit neatly within the strictly limited data space of Bitcoin blocks, and allow regular, classical computers to continue running the decentralized network without disruption. Furthermore, any viable solution must seamlessly accommodate both giant crypto platforms and everyday retail users, all while offering a clear, methodical plan for older, dormant coins that may never be moved by their original owners.
Coinbase Wants to Move Now
Such monumental efforts need to begin immediately, largely because Bitcoin’s decentralized design—frequently lauded as its greatest advantage over centralized financial institutions—also makes implementing sweeping systemic changes notoriously difficult.
As the exchange articulated in its analysis, Bitcoin consensus changes and ecosystem migrations can take years to deliberate, test, and deploy. This reality is precisely why foundational work needs to commence well ahead of any verified CRQC announcement. Bitcoin core developers and researchers are already considering various proposals aimed at building robust quantum defenses for the world’s largest blockchain network.
To address these multifaceted challenges, Coinbase has outlined several key measures that it believes the Bitcoin ecosystem should evaluate and adopt.
Measures Proposed by Coinbase
First, the exchange advocates for separating the container from the signature. In simpler terms, Bitcoin should be engineered so that its overarching transaction format can support new post-quantum signature types without requiring a complete structural rebuild of the entire system. This architectural decoupling would make it significantly easier to add, replace, or combine quantum-resistant signatures over time as technology evolves. Coinbase noted that existing proposals such as P2MR (BIP-360) and P2TRv2 appear to offer the precise type of flexibility needed for this approach.
Second, Coinbase supports an approach centered on staged protection. This mechanism would allow active wallets to begin utilizing quantum-resistant, or hybrid, signatures before Bitcoin finalizes its permanent rules for older signature types. One plausible transition path would involve a setup where the exact same bitcoin could be spent using either a traditional ECDSA or Schnorr key, or alternatively, a post-quantum key. This transitional flexibility would enable proactive users to secure their funds much earlier, eliminating the need to force the entire global network to switch simultaneously and dramatically reducing the risk of sudden, accidental losses of access.
Third, the exchange highlights the careful use of state in cryptographic schemes. Certain post-quantum signature schemes require the user’s wallet to keep track of internal information, referred to as state, after every single signature is executed. These particular schemes often rely on numerous one-time signing keys, meaning the wallet must meticulously remember which keys have already been consumed to ensure a key is never reused. If a user restores their wallet from an old backup or fails to preserve that precise record, they could inadvertently reuse a key, potentially allowing an attacker to forge a valid signature. While stateful signatures can offer smaller and faster footprints, they carry a higher risk of user error. Coinbase suggests that if Bitcoin decides to support stateful signatures, it should simultaneously support stateless options that eliminate the need for this meticulous record-keeping, thereby giving users and wallet developers a safer alternative and reducing the risk of compromised funds.
Fourth, Coinbase emphasizes the importance of robust implementations. The exchange hopes that the ongoing evaluation process places significant weight on software that operates reliably across diverse platforms, verifies signatures consistently in every environment, avoids leaking secret information through subtle timing variations, utilizes clear operational settings, and remains secure even if the random-number generator employed during the signing process encounters a failure. This level of rigor would make quantum-resistant Bitcoin wallets substantially more dependable and minimize the incidence of bugs, software vulnerabilities, or hacks.
Fifth, the technical solutions must be compatible with multi-party computation, commonly known as MPC. For Coinbase and a vast number of its institutional customers, post-quantum schemes must integrate smoothly with MPC frameworks. When executed correctly, MPC helps protect sensitive private keys from theft and introduces a critical layer of structural security for large organizations that face relentless, sophisticated attacks on their infrastructure. Ensuring MPC compatibility would make it vastly easier for cryptocurrency exchanges, institutional custodians, and major enterprises to secure bitcoin holdings without depending entirely on a single person or a single physical device to hold a master key.
Finally, Coinbase addresses the path for wallets that migrate late. If the Bitcoin network eventually restricts or entirely sunsets ECDSA and Schnorr spending methods, a segment of users will inevitably still hold funds trapped in older wallet formats. Coinbase believes the community should actively consider whether and how those lingering users could be permitted to move their funds to quantum-safe outputs at a later date, even after initial deadlines pass. While the exact approach and its inherent trade-offs remain open questions, addressing this scenario thoughtfully would help prevent everyday users from being permanently locked out of their bitcoin if they fail to upgrade in time. The exchange suggests that this discussion can take place alongside, and entirely separate from, the core technical work required to add post-quantum signature support, ensuring it does not bottleneck urgent cryptographic upgrades.
Forgotten Coins and the Path Forward
Beyond active users and institutional funds, the broader quantum debate must also confront the reality of forgotten coins. Not every participant in the ecosystem will upgrade to post-quantum standards in a timely manner, a reality especially true for wallets that have remained dormant for years. A portion of these untouched coins belongs to individuals who have tragically lost their private keys, while other funds sit securely in older address types that have historically left public keys exposed to the blockchain.
Coinbase has expressed apprehension that a malicious actor could theoretically develop a clandestine quantum machine in secret and begin quietly draining coins from these vulnerable, dormant wallets long before the general public becomes aware of the breach.
While the exchange did not officially endorse a specific policy regarding what should ultimately be done with these abandoned or lost coins, it strongly recommended that the debate be handled separately from standard technical upgrades so as not to stall the critical process of protecting active network participants. Furthermore, Coinbase stressed that any potential rescue mechanism proposed for these coins must itself be strictly quantum-safe, ensuring that malicious actors cannot exploit the rescue process to compromise the wider network.
Global Crypto Markets
Global Crypto Markets
Global Crypto Markets
