Coinbase has laid out the most detailed corporate plan yet for surviving the arrival of quantum computing, and its framing is notably unglamorous. “There’s a lot of noise about quantum computing right now,” the exchange’s Chief Information Security Officer Jeff Lunglhofer wrote in a post published Thursday. “Some of it is hype. Some of it is fear. And some of it is real.”
The company’s conclusion, drawn from an advisory board it convened earlier this year, is that arguing about arrival dates is a distraction: a fault-tolerant quantum computer will eventually be built, the cryptography securing virtually every major blockchain is vulnerable when it arrives, and the hard problems are operational rather than mathematical. Post-quantum algorithms already exist and are being standardized. Migrating millions of users and coordinating upgrades across decentralised protocols does not get easier by waiting. What follows is a three-part plan, and the division of labour within it is the most revealing thing about it.
What Coinbase can fix by itself
The first workstream is entirely under Coinbase’s control, and it comes with a deadline. CoreKMS, the company’s proprietary key management system, protects approximately 99.9% of the assets Coinbase custodies. It is built on multi-party computation, a technique that splits key material so that no single party ever reconstructs a customer’s private key. Coinbase has begun building a post-quantum version, PQ-CoreKMS.
Within the next year, the company says it will deliver an automated signing pipeline combining secure enclaves, secret-sharing and threshold cryptography, capable of supporting any post-quantum signature algorithm, with keys shared across environments and hardware-enforced guarantees during signing. The design goal is algorithm-agnostic readiness: whatever scheme blockchains eventually adopt, the custody layer should be able to sign for it on day one.
A longer research effort follows over two to three years, developing full MPC capabilities for lattice-based and other post-quantum signing schemes so that keys are never combined even under the new cryptography.
Beyond custody, Coinbase says it is running a full inventory of every cryptographic dependency across the company — authentication, customer data protection, internal systems — ranked by migration priority according to how critical, exposed and complex each system is. It is also defining the specific milestones in quantum computing progress that would trigger actual migration, rather than migrating on a calendar. For Base, the company notes that Ethereum has published its own post-quantum roadmap and that the Layer 2 inherits much of that protection through its relationship with the base layer.
This is the straightforward half. Coinbase owns CoreKMS; it can rebuild it on its own schedule.
What it cannot
The second and third workstreams exist because of a limitation the post does not state outright but clearly acknowledges: quantum-safe custody protects the key, not the coin.
If an attacker with a sufficiently powerful quantum computer can derive a private key from a public key exposed on-chain, it does not matter how elegantly that key was stored, split or signed for. The vulnerability sits in the blockchain’s own signature scheme, and no custodian can patch it unilaterally. Bitcoin’s protection requires Bitcoin to change, which requires consensus across a decentralised developer community that has historically, and deliberately, been resistant to change.
Hence the second workstream. This August, Coinbase will co-host its first working session in partnership with Stanford, convening Bitcoin core developers, cryptographers and researchers for a day focused on post-quantum migration. The company says it plans to hold these regularly, and frames the goal modestly: an honest assessment of where things stand and which solutions are viable.
Hence, too, the third. Coinbase is a founding member of the Bitcoin Security Consortium, launched Thursday alongside BlackRock, Fidelity Digital Assets, Block, Blockstream, Strategy, Anchorage Digital, ARK Invest and Galaxy. As The Crypto Times reported, the nine members have pledged a combined $15 million over three years, with each firm directing its own capital independently and the group explicitly disclaiming any role in Bitcoin governance or protocol decisions. Coinbase says it is contributing both funding and engineering talent to open-source work supporting proposals including BIP-360, which would introduce a new output type designed to limit public-key exposure.
The sequence is worth appreciating. An exchange that could simply upgrade its own vault and declare the problem solved is instead paying developers it does not employ to fix a protocol it does not control, because the vault upgrade, on its own, would not actually protect its customers’ Bitcoin.
The number that explains the urgency
Coinbase’s own research puts a figure on the exposure: between 20% and 50% of Bitcoin’s supply could face exposure to a long-range quantum attack, much of it sitting in older wallet formats. Other estimates circulating this week put more than 7 million BTC, worth roughly $460 billion at current prices, in outputs with public keys already visible on-chain.
That is the crux of Bitcoin’s particular problem. Coins in modern addresses only reveal their public key when spent. Coins in older formats, or in addresses that have been reused, have their public keys sitting in the open ledger permanently, waiting. And a large share of that category belongs to holders who are unreachable, inactive, or — in the case of the earliest coins — very likely gone.
Which produces a genuinely uncomfortable choice the consortium’s money cannot resolve. Migration proposals can move active users to quantum-resistant addresses. They cannot move coins whose owners never respond. At some point Bitcoin may have to choose between leaving hundreds of billions of dollars vulnerable to theft, or freezing coins that legitimately belong to someone, a decision about property rights rather than cryptography.
The disagreement inside the tent
It is worth noting that the institutions funding this work do not agree on how soon it matters. Adam Back, founder of consortium member Blockstream, has characterised the quantum threat as decades away. BlackRock, another member, has flagged quantum computing as a risk factor in its spot Bitcoin ETF filings while publicly downplaying it as a near-term worry. The Bitcoin Policy Institute has warned the preparation timeline is compressing.
The consortium’s own framing is deliberately cool, noting that large-scale quantum computers capable of threatening Bitcoin do not exist today and that credible estimates place such capability years away. Coinbase’s advisory board reaches a similar landing point from the opposite direction: the timeline debate is “largely irrelevant,” because preparation takes years regardless of when the threat lands.
Skeptics have a reasonable case that this is an expensive insurance policy against a distant risk, and that engineering attention has more urgent claims. The counterargument is simply arithmetic: if migration takes five to ten years and the threat window is uncertain, starting late is the only unrecoverable error.
Why it matters
For Coinbase customers, the practical takeaway is a timeline rather than a warning. Nothing about custody changes today, and the company’s stated intent is to offer quantum-safe custody as soon as blockchains begin adopting post-quantum schemes, which means the custody layer is being built ahead of the protocols it will serve.
For the industry, the more interesting signal is institutional. Bitcoin’s core development has historically been funded by a small handful of organisations. It is now being funded, in part, by the asset managers, custodians and treasury companies holding the coins, firms with billions of dollars of direct exposure to whether the cryptography holds. That alignment brings real resources. It also brings the question the consortium pre-emptively addressed by renouncing any governance role: what happens the first time a well-funded member has a strong opinion about which proposal Bitcoin should adopt.
For now, the money is on the table and the working sessions start next month. As Lunglhofer put it, the quantum future is coming, and the preparation needs to start before it becomes urgent.
Also Read: Bitcoin Holds $65K as Spot ETF Inflows Reach $818M in Six Days
