Cryptocurrency exchange Coinbase has publicly outlined its preparations for post-quantum cryptography, arguing that the digital asset industry must begin migration efforts immediately—regardless of uncertainty about when a sufficiently powerful quantum computer may emerge.

The warning carries particular weight for blockchains like Bitcoin and Ethereum, whose transaction signatures rely on elliptic curve cryptography (ECDSA). A sufficiently powerful fault-tolerant quantum computer running Shor's algorithm could derive private keys from exposed public keys, potentially allowing an attacker to forge signatures and move funds without authorization.

Earlier this year, Coinbase established an Independent Advisory Board on Quantum Computing and Blockchain to distinguish genuine risk from hype. The board concluded with high confidence that a fault-tolerant quantum computer capable of breaking current cryptographic standards will eventually be built, rendering the cryptography securing virtually every major blockchain vulnerable.

While the board assessed the threat as not imminent, it stressed that post-quantum cryptographic solutions already exist and are undergoing standardization. The U.S. National Institute of Standards and Technology (NIST) published its first finalized post-quantum cryptography standards in August 2024, providing a reference framework that industries—including blockchain—can build toward. Coinbase noted that the more difficult challenges are operational—migrating millions of users, coordinating decentralized protocol upgrades, and maintaining existing security standards throughout the transition.

Coinbase maintains that debating timelines is largely irrelevant because preparation must begin regardless. The company is developing detailed playbooks now to enable rapid action once standards mature.

https://x.com/coinbase/status/2080267955938484691?ref_src=twsrc%5Etfw

Three Parallel Workstreams

Coinbase is advancing its quantum readiness through three concurrent initiatives:

First, the company is developing PQ-CoreKMS, a post-quantum iteration of its proprietary key management system. The current system safeguards approximately 99.9% of custodied assets using state-of-the-art Multi-Party Computation (MPC) protocols designed to prevent any single party from reconstructing a private key.

Within the next year, Coinbase plans to deliver an automated signing pipeline that integrates secure enclaves, secret-sharing, and threshold cryptography to support post-quantum signature algorithms across distributed environments. Over the subsequent two to three years, a dedicated research effort will build full MPC capabilities for lattice-based and potentially other post-quantum signing schemes.

Second, Coinbase is conducting a company-wide inventory of all cryptographic systems to rank migration priorities based on criticality, exposure, and complexity. This includes its Base Layer-2 network, as Ethereum advances its own post-quantum roadmap.

Third, Coinbase will co-host its first working session with Stanford University in August, bringing together Bitcoin Core developers, cryptographers, and researchers for focused discussions on Bitcoin's post-quantum migration. The workshop aims to assess realistic timelines, evaluate viable migration strategies, and identify what the decentralized developer community requires to move forward. Coinbase intends to convene such sessions regularly to keep the conversation productive and grounded.

Bitcoin Security Consortium

As a founding member of the Bitcoin Security Consortium—alongside BlackRock, Fidelity Digital Assets, Block, Blockstream, Strategy, and others—Coinbase is contributing to a fund that supports Bitcoin developers working on quantum-related challenges. The company is also dedicating internal engineering resources to open-source contributions, including proposals such as BIP-360.

The consortium will additionally serve as an authoritative source of information on Bitcoin's security posture and post-quantum preparedness.

Coinbase emphasized that no single entity can address this challenge alone, underscoring the necessity of coordinated efforts among researchers, developers, protocols, and financial institutions.