Coinbase Urges Early Work On Bitcoin’s Post-Quantum Transition
AIThis post was created with the assistance of artificial intelligence (AI).

TL;DR

Before you orderOffer from Amazon

Get the latest gadgets delivered free with Prime

  • Fast, free delivery on millions of items
  • Prime Video, Amazon Music and more included
  • Member-only deals all year
Start your free Prime trial Free trial for eligible customers · Cancel anytime
As an affiliate, we earn on qualifying purchases.

Coinbase has urged Bitcoin developers and the wider community to begin evaluating quantum-resistant security well before a quantum computer capable of threatening current cryptography is available. The company describes the work as a multiyear technical and governance challenge, not an agreed upgrade or a migration with a set deadline.

Coinbase is urging early preparation for Bitcoin to adopt protections against possible quantum-computing attacks, arguing that changing the network and moving funds could take years. The exchange and custodian says the work should begin before a machine capable of threatening Bitcoin’s current signature cryptography is available, but its post is an input to an open discussion, not an agreed upgrade or a migration deadline.

Coinbase says the problem extends beyond choosing a replacement signature algorithm. Any proposed protection must work for ordinary wallet users and institutional custody systems, fit Bitcoin’s limited transaction capacity, and allow the network’s computers to verify transactions without excessive demands. It also needs to address funds whose owners cannot or do not move them. The company said it holds about 5% of all bitcoin in existence, and is preparing its own systems while speaking with Bitcoin developers and researchers and supporting open-source work through engineering resources and participation in the Bitcoin Security Consortium.

The company recommends a reproducible evaluation designed around Bitcoin’s operating conditions. It says researchers should compare transaction size, fees, verification workload and the time needed to migrate vulnerable funds, rather than assuming that results from general internet-security testing will apply directly. Bitcoin transactions and signatures are retained and checked by the network over time, Coinbase noted, creating constraints that may differ from other uses of cryptography.

Coinbase pointed to P2MR, associated with Bitcoin Improvement Proposal 360, and P2TRv2 as designs worth examining. It said a flexible approach should protect funds with exposed public keys as well as funds created in the future, conceal public keys until they are needed, and make it possible to add or replace signature algorithms later. The post also lists ML-DSA, SLH-DSA and FN-DSA for evaluation when standardized, as well as other candidates, including the hash-based SHRINCS proposal.

The company cautioned that signatures with attractive size or verification performance may involve operational tradeoffs. Some systems are stateful: signers must track which signing steps they have used, because reusing a state could enable forgery, according to Coinbase. That requirement may create difficulties for users restoring old backups and for exchanges running signing systems across multiple locations. Coinbase said checking blockchain history would not necessarily resolve the issue if a signature or update had never been recorded on-chain.

At a glance
reportWhen: Coinbase published its recommendations…
The developmentCoinbase has published recommendations for early technical work on Bitcoin’s potential transition to quantum-resistant signatures.

Bitcoin’s Migration Could Take Years

The recommendation matters because protecting Bitcoin would involve coordination across software, wallets, exchanges, custodians, miners and users—not just a change made by one company. If the community waits until a quantum capability is demonstrated, Coinbase argues, there may be too little time to agree on network rules and move funds in an orderly way. Its warning is about preparation time; the post does not establish that a quantum computer can currently break Bitcoin’s signatures.

The design choices could affect both security and day-to-day use. Larger signatures or heavier verification could increase transaction costs or strain node resources, while complex wallet procedures may make adoption harder for people who manage their own keys. Institutional custodians face separate demands, including keeping signing services available and coordinating systems across locations. The transition therefore has consequences for Bitcoin’s users and infrastructure even before any specific upgrade is selected.

Coinbase also emphasizes that technical work and debate about inactive funds need not be handled as a single decision. The question of what to do with abandoned or inaccessible coins is sensitive because it concerns control over assets, while protections for future transactions may require different choices. The company’s position is that discussion of those coins should not hold up work on technical safeguards.

Amazon

quantum-resistant Bitcoin wallet

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

From Quantum Risk to Upgrade Design

Bitcoin uses digital signatures to verify that a transaction was authorized by someone with the relevant private key. A public key lets the network check a signature; a private key provides the authority to spend. Coinbase is discussing the possibility that a sufficiently capable quantum computer could undermine cryptography used by existing signatures and put some funds at risk, particularly where public keys are exposed. The post describes a potential future threat, not a current attack or a confirmed machine capable of breaking Bitcoin’s cryptography.

Coinbase frames the response as a staged, multiyear process: assess candidate systems, design how Bitcoin would support them, make compatible tools available, and allow users and institutions to migrate funds. Its proposed candidates include signature standards at different stages of development and alternatives based on distinct security assumptions. The company says a design that can accommodate new algorithms could avoid locking Bitcoin into one choice as research and standards evolve.

The post does not announce a consensus among Bitcoin developers. Coinbase characterizes its recommendations as a contribution to discussion and says it is engaging with researchers and the open-source community. No network upgrade, adoption schedule or compulsory move of funds was announced in the source report.

““Some questions, including how to handle abandoned or inaccessible coins, are difficult and deserve thoughtful debate. In our view, that discussion can continue alongside the technical work to add post-quantum signature support to Bitcoin.””

— Coinbase, in its technical-priorities blog post

Amazon

cryptography signature hardware security module

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

No Upgrade or Deadline Agreed

No quantum-resistant Bitcoin design has been selected in the material cited, and Coinbase has not proposed a date by which users must move their funds. It is also unclear which signature systems will meet Bitcoin’s practical requirements after testing, how any eventual upgrade would be adopted, or how long the migration of funds would take.

The threat’s timing and capabilities remain uncertain. The report does not identify a quantum computer able to break Bitcoin’s current cryptography or provide a forecast for when such a machine might exist. The treatment of abandoned or inaccessible coins is also unresolved; Coinbase says that issue requires debate, rather than announcing a policy for those holdings. The operational effects of stateful signature systems, particularly for wallet recovery and large custody operations, would need further evaluation.

Amazon

post-quantum cryptography software

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Testing and Community Deliberation

The immediate next step described by Coinbase is continued evaluation and discussion, including a Bitcoin-focused comparison of candidate signature systems and their costs for users and network nodes. The company says it is preparing its own systems and engaging with developers and researchers, while supporting open-source work. The source report does not give a timetable for those activities or identify a scheduled decision.

Any future migration would depend on technical findings and agreement within the Bitcoin community about network changes, wallet and custody support, and how funds should be handled. Until those questions are resolved, Coinbase’s call is for advance preparation—not for users to take a particular action now.

Amazon

Bitcoin transaction verification hardware

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

Has Bitcoin agreed to a post-quantum upgrade?

No. Coinbase describes its post as an input to an open discussion. It does not announce an agreed protocol change or a decision by Bitcoin developers.

Does Coinbase say quantum computers can break Bitcoin today?

No. The company is calling for preparation against a possible future capability. The source report does not say that a quantum computer capable of breaking Bitcoin’s current signature cryptography exists.

What technical options did Coinbase identify?

Coinbase highlighted P2MR, associated with BIP 360, and P2TRv2 as designs to examine. It also listed ML-DSA, SLH-DSA and FN-DSA when standardized, along with other candidates such as SHRINCS; it did not endorse a final choice.

What remains undecided about inactive bitcoin?

The community has not settled how to handle coins whose owners cannot or will not move them. Coinbase says that debate should continue alongside technical work, but its post does not set a policy for those funds.

Source: rss

FALL

Fall Picks

As an affiliate, we earn on qualifying purchases.

You May Also Like

Why AI Hallucinations Feel So Convincing When They Are Wrong

Discover why AI hallucinations seem so believable despite being incorrect. Learn how these errors occur and what you can do about them.

Unlock Efficiency: 14 AI Automation Tools You Need In 2026

A ranking of 14 AI automation resources favors agent workflows, but most selections are instructional books rather than automation software.

How to Choose Wireless Earbuds With Noise Cancellation

Learn step-by-step how to set up and use wireless earbuds with noise cancellation for optimal sound and comfort. Easy guide for beginners.

The labor share. Is value really moving from labor to capital? The data isn’t on anyone’s side yet.

Examining whether AI is truly reallocating value from labor to capital, with current data showing stable aggregate labor share but rising marginal signals.