Coinbase Publishes Quantum Security Goals for Bitcoin
Coinbase, which custodies roughly 5% of all bitcoin, released technical priorities for defending Bitcoin against future quantum attacks but said the document is not an approved migration plan. The exchange urged preparation before a cryptographically relevant quantum computer is demonstrated and noted that consensus changes could take years. It highlighted proposals such as P2MR and P2TRv2, along with post-quantum signature algorithms including ML-DSA and SLH-DSA.
Coinbase, custodian of roughly one-twentieth of bitcoin, framed its Oct. 13 post as a discussion document rather than a settled corporate stance or migration blueprint. The exchange argued groundwork should begin before a quantum machine able to break transaction-authorizing signatures is publicly shown — a device that does not yet exist. Since exchanges, wallet providers and other participants must coordinate, any consensus change could stretch across years.
Among the ideas discussed: P2MR, from draft BIP 360, which would drop Taproot's key-path spending and conceal public keys until coins move; P2TRv2, which would graft post-quantum signature paths onto a Taproot-style output and lacks its own BIP; and hybrid classical/post-quantum designs. Candidate algorithms include ML-DSA, SLH-DSA, FN-DSA and SHRINCS.
Bitcoin holders, exchanges and custodians could feel the effects of any eventual migration, since signature changes may require coordinated action across wallets and trading platforms. Large custodians such as Coinbase might bear early engineering costs, while users of dormant or early-era addresses may face unresolved questions about recovery. Because no approved plan exists and no quantum threat is currently demonstrated, the near-term practical impact may be limited, though the discussion could shape how the industry budgets for long-horizon security work.