- Coinbase, which holds approximately 5% of all bitcoin in existence on behalf of clients including banks, asset managers, and hedge funds, has published a detailed proposal arguing that Bitcoin should begin preparing immediately for the quantum computing threat. The core risk: a sufficiently powerful quantum computer—which Google researchers believe could exist by 2029—would be able to reverse-engineer private keys from public keys and drain bitcoin wallets. That’s not theoretical risk. That’s a defined timeline. A cryptographically relevant quantum computer (CRQC) arriving in 2029 means Bitcoin has approximately 2.5 years to implement quantum-resistant defenses. The urgency is amplified by Bitcoin’s decentralized design: consensus changes and ecosystem migrations can take years. Coinbase is essentially saying: start now, or risk being caught unprepared when the threat arrives. The current Bitcoin security architecture relies on ECDSA and Schnorr signature methods that are “extremely secure for now because current computers aren’t powerful enough to crack the math.” A quantum computer changes that equation entirely. A CRQC could crack the math instantly. Coinbase’s proposal isn’t just about picking a new cryptography method. It’s about a complete, phased upgrade that protects both old and new funds, fits within Bitcoin’s limited data space, remains usable by everyday users and giant platforms alike, and creates a clear path for older coins that might never move (dormant wallets, lost keys). That’s a complex engineering and governance challenge.
- Coinbase proposes five specific measures. First, separate the “container” (transaction format) from the signature by supporting proposals like P2MR (BIP-360) and P2TRv2 that allow new post-quantum signature types without rebuilding the whole system. Think of it as making Bitcoin’s transaction format flexible enough to accept multiple cryptographic methods over time. Second, staged protection: let active wallets start using hybrid signatures (traditional ECDSA/Schnorr OR post-quantum key) before Bitcoin finalizes its full quantum defense rules. This “1-of-2” setup lets users protect funds early without forcing everyone to switch at once. Third, support both stateless and stateful post-quantum signatures. Some schemes require the wallet to track information after each signature (stateful); others don’t (stateless). Stateful signatures are smaller and faster but riskier if a wallet restores from an old backup and accidentally reuses a key. Offering both options gives users and developers a safer choice. Fourth, ensure robust implementations across platforms: clear verification, no timing leaks, safe even if the random-number generator fails. Fifth, make post-quantum schemes work with multi-party computation (MPC), a security technique that breaks key management across multiple parties. For Coinbase and custodians, MPC-friendliness is critical because it allows large organizations to secure bitcoin without a single person holding the key.
- The most delicate part of Coinbase’s proposal is the path for late migrators and the separate debate over “forgotten coins.” If Bitcoin eventually restricts ECDSA and Schnorr spending, some people might still have funds in older wallet formats—either because they never upgraded or because they’ve lost access to their keys. Coinbase proposes a mechanism to let those users move their funds to quantum-safe outputs later, separate from the technical upgrade. The reason for separation: the technical work shouldn’t be held up by philosophical debates about whether and how to rescue old wallets. However, the elephant in the room is “forgotten coins”—bitcoin sitting in dormant wallets, especially those with exposed public keys. Coinbase worries that someone could quietly build a CRQC and start draining these wallets before the public learns. The exchange stopped short of proposing what to do about it but stressed that any solution must itself be quantum-safe, or thieves could exploit the rescue method. This is the hardest part: if a CRQC drains dormant wallets, is that theft? Can the blockchain fork to “recover” those coins? Who decides? Coinbase is deliberately not answering that yet, but it’s the landmine in this whole upgrade. Bitcoin’s immutability principle says no, transactions can’t be reversed. But losing billions in coins to quantum attacks might force a reckoning on that principle.
- The timing and scale of this proposal matter because Bitcoin has never successfully implemented a major consensus-level upgrade focused on security. The Bitcoin community moves slowly, debates fiercely, and usually requires near-unanimous consensus for major changes. Post-quantum cryptography is not a small change. It’s a fundamental shift in how Bitcoin’s security works. Coinbase’s proposal is trying to break that into digestible pieces—flexible containers, staged transitions, separate debates on lost coins—but even that might not be fast enough if a CRQC arrives in 2029. Google researchers suggested 2029, but that’s not a guarantee. Some researchers think a CRQC could arrive sooner; others think it will take longer. The point is, the uncertainty alone justifies starting now. A 2-3 year implementation timeline for something this complex is aggressive. Bitcoin Core developers are already considering quantum defense proposals, but Coinbase’s intervention (as the holder of 5% of all BTC and a major exchange handling institutional capital) signals institutional-scale pressure. If Coinbase can’t offer quantum-safe custody to its clients by 2029, those clients will look elsewhere. That’s a competitive and business pressure that might finally move the needle on Bitcoin’s consensus process. For the crypto market, a successful quantum-resistant upgrade would be a validation of Bitcoin’s ability to adapt. A failed or delayed upgrade would undermine confidence in Bitcoin’s long-term security model.
What Happened?
Coinbase, the Nasdaq-listed cryptocurrency exchange that holds approximately 5% of all bitcoin in existence on behalf of institutional clients including banks, asset managers, and hedge funds, published a detailed proposal arguing that Bitcoin should begin preparing now for quantum computing threats rather than waiting for quantum computers to mature. The proposal was prompted by research from Google suggesting that a cryptographically relevant quantum computer (CRQC)—a machine capable of reverse-engineering private keys from public keys and draining bitcoin wallets—could exist by 2029, approximately 2.5 years from publication. Coinbase emphasized that Bitcoin’s current security architecture relies on ECDSA and Schnorr signature methods, which remain secure against conventional computers but would be vulnerable to a sufficiently powerful quantum computer. The exchange outlined five specific technical measures to prepare Bitcoin: (1) flexible transaction containers supporting new post-quantum signature types without system rebuilds (P2MR/BIP-360, P2TRv2); (2) staged protection allowing active wallets to use hybrid signatures (traditional OR post-quantum) before full ecosystem migration; (3) support for both stateful and stateless post-quantum signature schemes; (4) robust cross-platform implementations with rigorous verification standards; and (5) multi-party computation (MPC) friendliness for institutional custody security. Coinbase stressed that Bitcoin’s decentralized consensus model makes implementing changes difficult and time-consuming, necessitating immediate action despite the uncertain timeline of quantum computer development. The proposal also called for a separate debate on how to handle dormant wallets and “lost coins” that might be vulnerable to quantum attacks without holding up technical implementation.
Why It Matters?
Coinbase’s quantum computing proposal represents the most substantive institutional-scale warning about a material long-term Bitcoin security risk and signals growing pressure for Bitcoin’s governance model to respond to infrastructure threats on timelines faster than its historical consensus process allows. The proposal carries weight because Coinbase controls 5% of circulating bitcoin on behalf of large institutional clients; if Bitcoin cannot offer quantum-safe custody by 2029 (or earlier if CRQC development accelerates), Coinbase’s clients will face custody decisions between Bitcoin and quantum-resistant alternatives. The quantum threat is not hypothetical: Google researchers have provided a specific timeline (2029), and any delay in implementing post-quantum cryptography increases the window of vulnerability. The proposal’s most challenging element is the treatment of “forgotten coins” (dormant wallets with exposed public keys that could be drained by a quantum attacker). If a CRQC emerges and drains billions in these coins before Bitcoin implements defenses, it would create unprecedented pressure on Bitcoin’s immutability principle and potentially force a community decision on whether blockchain reversals are acceptable under existential security threats. Coinbase’s emphasis on staged implementation, hybrid signatures, and flexible containers suggests the exchange is trying to reduce implementation risk by breaking a massive upgrade into smaller, reviewable pieces. However, even this approach requires Bitcoin Core developer consensus and community buy-in—a process that has historically taken years. The risk: if Bitcoin moves too slowly, the security model that gave Bitcoin credibility (immutability, decentralization, no central point of failure) could be undermined by a quantum attack.
What’s Next?
Monitor Bitcoin Core development discussions and GitHub for post-quantum cryptography proposals gaining traction. If proposals like P2MR/BIP-360 or P2TRv2 move toward implementation timelines with clear milestones, it signals the Bitcoin community is taking the quantum threat seriously. If discussions remain theoretical or abstract, it suggests Bitcoin is moving slower than Coinbase’s suggested urgency. Track whether other major cryptocurrency custodians (Fidelity, Galaxy Digital, corporate treasuries like MicroStrategy) publicly endorse quantum-resistant Bitcoin upgrades or signal concerns about timing. Institutional pressure from multiple angles could accelerate consensus. Monitor Bitcoin’s price action if quantum security discussions intensify in forums or media. A perception that Bitcoin’s security is threatened could create short-term volatility. Conversely, visible progress on post-quantum upgrades could ease concerns and support price. Watch for Bitcoin Core developer commentary on feasibility and timeline for quantum-resistant implementation. If developers signal a 2-3 year implementation window is unrealistic, it creates a significant gap between Coinbase’s urgency and technical reality. Track regulatory discussions on quantum computing and cryptocurrency security. If governments begin mandating quantum-safe cryptocurrency holdings (as part of national security infrastructure), it could force Bitcoin’s hand on implementation timelines. Monitor quantum computing development announcements from Google, IBM, or other researchers for any acceleration of CRQC timelines. An earlier-than-expected CRQC announcement would dramatically change the urgency calculus. Finally, track community sentiment on “forgotten coins” and whether Bitcoin’s immutability principle remains sacrosanct or if quantum threats force philosophical reckoning on whether reversals are acceptable under existential risk.
Affected Tickers and Coins: COIN | BTC
Source: CoinDesk
