Coinbase is urging the Bitcoin ecosystem to plan now for a post-quantum transition rather than wait for a cryptographically relevant quantum computer to emerge. In a position paper published on 13 October 2026, the custodian—responsible for roughly 5% of outstanding bitcoin—outlined design principles for protecting active wallets, institutional custody and legacy coins.
The risk is structural, not immediate
Bitcoin relies on elliptic-curve signatures: ECDSA on secp256k1 for legacy transactions and Schnorr signatures for Taproot. A sufficiently capable fault-tolerant quantum computer could use Shor's algorithm to derive a private key from an exposed public key. No such machine exists today, and Coinbase explicitly describes the threat as a long-term engineering problem rather than an imminent loss event.
Exposure is uneven. Public keys become visible when coins are spent, while old pay-to-public-key outputs disclose them permanently. Coinbase's advisory work estimates that roughly 1.7 million BTC remain in old-style P2PK outputs. Reused addresses and dormant holdings create separate migration and governance challenges.
What Coinbase is proposing
The paper does not endorse a single signature algorithm or activation date. Instead, it favors crypto-agility: a flexible output design that can support multiple post-quantum schemes and parameter sets without redesigning Bitcoin each time. It points to proposals such as P2MR (BIP-360) and P2TRv2 as possible containers for that flexibility.
- Staged protection: active wallets could adopt a hybrid 1-of-2 spending path using either a classical or post-quantum key before policy for legacy coins is settled.
- Operational resilience: at least one stateless option would reduce the risk that backup restoration or state reuse causes a signing failure.
- Institutional compatibility: signature choices must work with multi-party computation, hardware wallets and independent full-node verification.
- Separate legacy policy: dormant, lost and exposed coins require their own governance process because freezing, burning or rescuing them changes property and supply assumptions.
Why investors should care
This is not a near-term Bitcoin price catalyst. The financial significance is in tail-risk management: a credible migration plan could strengthen the institutional custody case, while a contentious or rushed upgrade could fragment liquidity, increase fees and create legal disputes over dormant balances. For Coinbase, the work also matters operationally because custody security and multi-party signing are core institutional services.
NIST finalized its first post-quantum standards in 2024, including ML-DSA and SLH-DSA for digital signatures. Those standards show that usable building blocks exist, but Bitcoin still has to solve network-specific constraints such as signature size, block-space cost, verification speed and decentralized governance.
Bull case, bear case and what comes next
The constructive interpretation is that developers and major custodians are addressing a foreseeable risk years in advance. The bearish interpretation is that consensus could be slow, legacy-coin policy could become politically divisive, and larger signatures could raise transaction costs. Investors should monitor concrete Bitcoin Improvement Proposals, test vectors and audits, wallet and hardware support, MPC benchmarks, activation design and any policy for P2PK or otherwise exposed coins.
Sources: Coinbase, 13 October 2026; Coinbase Quantum Advisory Council; NIST post-quantum standards.