Coinbase, one of the world’s largest cryptocurrency custodians, has unveiled a detailed technical roadmap to prepare Bitcoin for the eventual advent of cryptographically relevant quantum computers (CRQC). The company published a blog post on Tuesday, October 13, 2026, outlining its strategic priorities and recommendations for securing the leading digital asset against a future
Written by Coinbase’s Shashank Agrawal, the publication emphasizes the need for proactive measures. It stresses that the multi-year process of Bitcoin consensus changes and ecosystem migrations necessitates early preparation. This move underscores a growing industry-wide concern over the long-term cryptographic integrity of digital currencies. The proactive approach is also reflected in the ongoing Marqeta and Coinbase partnership.
The looming quantum threat to Bitcoin post-quantum computing transition
Bitcoin’s current cryptographic infrastructure, primarily relying on the Elliptic Curve Digital Signature Algorithm (ECDSA), faces a significant existential threat from advanced quantum computing. While no quantum computer currently exists that can break Bitcoin’s cryptography, the theoretical capabilities of Shor’s algorithm pose a direct challenge to ECDSA.
Shor’s algorithm could efficiently derive private keys from public keys, potentially compromising the security of Bitcoin transactions. This vulnerability is particularly acute for funds held in addresses where the public key has already been exposed on the blockchain, creating a critical window for potential exploitation.
Estimates from Coinbase’s quantum advisory board, released in April, suggest approximately 6.9 million BTC are currently held in such vulnerable addresses. This represents a staggering value of around $575 billion, based on an average price of $83,307 per coin, according to the board’s valuation. These figures highlight the immense financial stakes involved in securing the network.
Beyond ECDSA, Bitcoin also employs SHA-256 for proof-of-work mining and public key hashing. While Grover’s algorithm could weaken SHA-256 by effectively halving its security level, this is generally considered less catastrophic than the full compromise of public-key cryptography. It could, however, accelerate mining significantly.
The inherent asymmetry of these threats means that while hash functions might need stronger key lengths, public-key systems face a more fundamental challenge. This distinction drives much of the urgency around developing and implementing new post-quantum cryptographic standards for the network.
Global efforts to standardize post-quantum cryptography
The urgency around quantum preparedness extends far beyond the cryptocurrency sector. The U.S. National Institute of Standards and Technology (NIST) initiated its post-quantum cryptography (PQC) standardization process in 2016. This was driven by concerns that quantum computing could break widely used public-key cryptographic systems.
NIST finalized its first three PQC algorithms on August 13, 2024: ML-KEM (for general encryption), ML-DSA (a digital signature algorithm), and SLH-DSA (a hash-based digital signature). These selections followed rigorous evaluation of 82 algorithms submitted by researchers worldwide.
Further algorithms, including HQC and FN-DSA, are also being considered or finalized. This process aims to diversify the cryptographic toolbox against quantum attacks. These standardized algorithms provide a crucial foundation for any industry, including blockchain, seeking to transition its systems.
Government mandates are accelerating this transition. A June 2026 executive order requires U.S. federal agencies to complete post-quantum key establishment by December 31, 2030, and digital signatures by December 31, 2031, for high-value systems. This demonstrates a clear path away from elliptic curve cryptography in government systems.
Coinbase’s strategic pillars for Bitcoin’s evolution
Shashank Agrawal’s blog post details several core technical priorities aimed at fortifying Bitcoin against quantum adversaries. These recommendations are designed to foster an open discussion within the Bitcoin development community. They serve as input rather than definitive instructions, emphasizing collaboration over dictation.
A key focus is on flexible output architectures, advocating for designs that permit quantum-resistant signature systems to be introduced and replaced without requiring a complete overhaul of the Bitcoin network. Options like P2MR, as part of BIP-360, and P2TRv2 are specifically highlighted. These aim to achieve adaptability and ensure future-proofing for the network.
Another crucial element involves implementing hybrid transition schemes. These schemes would allow the same funds to be spent using either existing ECDSA/Schnorr signatures or a new post-quantum key. This facilitates a gradual and less disruptive introduction of quantum protection across the ecosystem, minimizing user friction.
The company also prioritizes stateless signature schemes to mitigate risks associated with managing and updating state with each signature. Such processes can be complex and error-prone. Additionally, ensuring compatibility with Multi-Party Computation (MPC) is vital, especially for institutional-grade custody solutions that demand robust security against key theft. This ensures broader protection for assets.
Deutsche Bank custody solutions also reflect this growing demand for secure institutional handling of crypto assets.
Coinbase plans to evaluate specific algorithms like ML-DSA, SLH-DSA, FN-DSA, and SHRINCS for their suitability within Bitcoin’s framework. This rigorous assessment will consider not only cryptographic strength but also practical implications for the network. It ensures any chosen solution is both secure and scalable for wide adoption.
Navigating the complex migration challenges
The successful transition of Bitcoin to a post-quantum cryptographic landscape presents a multifaceted challenge. This includes technical, economic, and user adoption considerations. Coinbase has outlined several comprehensive goals that any migration strategy should ideally address to ensure a smooth and secure shift.
These goals include protecting both newly created and existing exposed funds, optimizing solutions to fit within Bitcoin’s limited block space, and preserving independent validation by full nodes. It’s also critical that new systems work seamlessly with both institutional custody infrastructure and ordinary user wallets, ensuring broad accessibility and security across the network.
Furthermore, any robust strategy must provide a credible migration path for legacy coins that may not be moved promptly by their owners, or perhaps never. Coinbase also suggests exploring options for users who migrate their funds late. This includes considering how they might still move their assets if Bitcoin eventually phases out spending through existing, vulnerable signatures.
When evaluating candidate post-quantum schemes, Coinbase stresses the importance of looking beyond just cryptographic strength. Criteria such as signature size, verification speed, their impact on block load and transaction cost, and compatibility with multisig systems are equally important for practical implementation and network health. These factors are crucial for maintaining large Bitcoin holdings securely and efficiently.
Discussions regarding abandoned or inaccessible coins, particularly those in addresses with exposed public keys, should proceed in parallel with technical upgrades. The company emphasizes that these legacy issues should not impede the progress of implementing post-quantum signature support. This separation ensures immediate security upgrades are prioritized over long-term asset recovery challenges.
Ethereum’s proactive quantum resistance roadmap
Bitcoin isn’t the only major cryptocurrency addressing the quantum threat. Ethereum has also integrated quantum resistance into its long-term roadmap. Ethereum 2.0, which transitioned to Proof of Stake (PoS) in late 2022, is generally considered more quantum-resistant than its predecessor, but further steps are planned.
The Ethereum Foundation has a dedicated post-quantum research team, actively working towards robust solutions. Their “Lean Ethereum” roadmap targets 2029 for full post-quantum protection, showcasing a proactive approach to future-proofing the network.
Plans include the introduction of quantum-resistant signature schemes such as Lamport, XMSS, and SPHINCS+. Ethereum 3.0, expected around 2027, aims to implement even more advanced protocols like Winternitz signatures and zk-STARKs. These are designed to enhance transaction security and prevent private key exposure.
However, implementing these advanced schemes comes with challenges. Quantum-resistant signatures can consume significantly more gas, potentially increasing transaction costs and network congestion. Researchers are working to mitigate these trade-offs, ensuring security without sacrificing efficiency.
Industry-wide push for quantum resistance
The drive towards post-quantum cryptography isn’t limited to individual blockchain projects; it’s a systemic push across the entire digital infrastructure landscape. Coinbase’s proactive stance, while significant, is part of a broader movement driven by both technological foresight and government mandates.
The US government, for instance, plans to impose post-quantum standards by 2030, with web browsers and operating systems potentially following suit by 2033. The goal is to entirely abandon elliptic curve cryptography after 2035, underscoring the finite lifespan of current cryptographic methods.
Coinbase, as a major player holding approximately 12% of all existing Bitcoin, has a vested interest in the success of this transition. Its leadership role in convening discussions with Bitcoin developers, researchers, and supporting open-source work through the Bitcoin Security Consortium is crucial.
This collaborative approach ensures that the migration is not merely a technical upgrade but a community-driven evolution. The outcome will likely shape the fundamental security and operational parameters of Bitcoin for decades to come, proving the resilience of decentralized systems in the face of emerging threats.