'It Can Take Years': Coinbase Presses for Bitcoin Quantum Migration to Start Now

Coinbase is pressing Bitcoin’s developers to begin preparing for the quantum-computing threat before it’s too late, laying out a detailed technical wish list for how the network should harden itself and arguing the work can’t wait for certainty that a threat has arrived.

In a blog post published Tuesday, the exchange, which says it custodies roughly 5% of all Bitcoin in existence, framed the shift to quantum-resistant cryptography as a complex, multi-year undertaking that needs to start now.

“Bitcoin consensus changes and ecosystem migrations can take years,” the company wrote, warning that waiting for the announcement of a cryptographically relevant quantum computer, the kind capable of breaking Bitcoin’s signatures, would leave too little time to respond.

The concern centers on how Bitcoin secures wallets. A sufficiently powerful quantum machine could, in theory, derive a private key from an exposed public key and drain the funds, a hypothetical milestone the industry calls “Q-Day.”

Coinbase stressed that a fix involves far more than picking a new signature scheme: any transition would need to protect both existing and newly created coins, fit Bitcoin’s limited block space, keep working for ordinary wallets and institutional custody alike, and offer a migration path for coins that never move.

The post reads less like a mandate than a set of requirements from one of the network’s largest stakeholders. Coinbase backed a flexible “container” design, pointing to proposals such as BIP-360, that would let new post-quantum signature systems be swapped in over time without a full redesign.

It also floated a staged “1-of-2” construction, letting the same funds be spent with either a classical key or a quantum-safe one during the transition. The company emphasized that whatever scheme Bitcoin adopts should be compatible with multi-party computation, the key-splitting technique custodians like Coinbase rely on to guard against theft.

Thornier still is the question of dormant, lost, or exposed coins, including Satoshi-era holdings, which Coinbase said should be treated as a separate governance problem. It cautioned that any rescue mechanism must itself be quantum-safe, so an attacker who only knows an exposed public key couldn’t exploit it.

The push builds on Coinbase’s steady drumbeat of quantum warnings.