Coinbase has published a technical framework for preparing Bitcoin for a future in which quantum computers could threaten the digital signatures used to authorize transactions. The October 13 paper urges developers and infrastructure providers to begin work before any cryptographically relevant quantum computer is announced, arguing that Bitcoin consensus changes, wallet upgrades and large-scale fund migrations can take years. The proposal does not say that such a machine exists or that Bitcoin is facing an active quantum attack.

A transition problem, not just a new signature

The exchange says post-quantum readiness requires more than selecting a resistant signature algorithm. Any transition would also need to fit Bitcoin's limited block space, preserve full-node verification, work with hardware wallets and institutional custody, and give users a credible way to move coins. Coinbase identifies P2MR, described in BIP-360, and P2TRv2 as possible flexible output designs because they could separate the transaction container from the signature system and make later algorithm changes easier. Neither design is an adopted Bitcoin consensus rule.

Related reporting: Coldcard Probes Phishing Post Sent From Its Official X Account

Hybrid protection could arrive in stages

Coinbase favors a staged approach in which active wallets could opt into post-quantum or hybrid protection before the network settles every rule for older signatures. One example is a one-of-two structure that lets the same funds be spent with either a current ECDSA or Schnorr key or a post-quantum key. The company also calls for explicit versioning, predictable verification costs and careful limits on signature size, because larger or slower schemes could increase fees, validation work and pressure on block capacity.

Custody systems add operational constraints

The paper highlights a trade-off between stateful and stateless post-quantum signatures. Stateful schemes can be smaller or faster, but reusing signing state can permit forgery. That risk is especially difficult for wallets restored from backups and for distributed custody systems that sign across multiple servers. Coinbase therefore argues that any stateful option should have a stateless alternative. It also wants at least one approach compatible with multiparty computation, which institutions use to divide control over signing keys and reduce single points of failure.

Legacy coins remain the hardest policy question

A future migration would have to address coins whose public keys are already exposed, reused addresses, dormant holdings and wallets whose owners cannot recover their keys. Coinbase treats those issues as a separate governance and engineering problem that should not delay basic support for post-quantum signatures. Potential responses range from migration deadlines and hybrid spending paths to rescue mechanisms, freezes or rate limits, each of which creates security, ownership and fairness questions. The company does not endorse a final policy for those coins.

Why the institutional view matters

Coinbase says it holds about 5% of all Bitcoin in its capacity as a major custodian, making wallet compatibility, signing throughput and migration operations material to its business. Independent reporting by The Block confirmed that the company is preparing its own systems and contributing its requirements to the wider technical discussion. The paper gives the Bitcoin community a detailed institutional checklist, but it does not set a deadline, prove imminent quantum risk or change the protocol. Any upgrade would still require public technical review, implementation work and broad coordination across developers, miners, custodians and users.

Sources

AI-generated editorial image; not a photograph of the reported event. Prepared with AI assistance and source verification.