Coinbase Wants Bitcoin Ready for Quantum. Nobody Agrees on How.
Coinbase is pushing Bitcoin to start preparing for post-quantum cryptography. The signatures, the migration rules, and the millions of old coins with exposed keys are all still unresolved.
Coinbase custodies around 5% of all the Bitcoin in existence. That's more than a million coins held for banks, asset managers, and hedge funds.
Now the exchange says the network needs to start prepping for quantum computers.
Here's the thing. The threat isn't here yet. Bitcoin's signatures hold up fine against any classical machine. But a powerful enough quantum computer running Shor's algorithm could pull a private key straight out of a public one. Every wallet that's ever spent a coin has an exposed public key. That's a huge chunk of the supply.
Coinbase Blinks First
Coinbase isn't panicking. It's positioning. The company wants Bitcoin to begin a post-quantum migration early, because swapping out the cryptography under a $2 trillion network is a decade-long job. Not a weekend fork.
And that's the easy part. There's no agreed signature scheme yet. No migration rule for old coins. No answer for wallets whose owners are long gone.
Real talk: this is the coordination problem that's haunted Bitcoin since the block size wars. There's no CEO. There's no upgrade button. Changes move through rough consensus, and rough consensus is slow on purpose.
The Hard Part
Look at the math. Post-quantum signatures are fat. Lattice schemes like Dilithium and Falcon run 10 to 40 times the size of the ECDSA signatures Bitcoin uses now. Bigger signatures mean bigger transactions. Bigger transactions mean more block space eaten per payment. On a chain that already fights over every megabyte, that's a real throughput hit and higher fees.
Then there's the legacy coin problem. Millions of BTC sit in old pay-to-public-key outputs from 2009 and 2010. Satoshi's stash included. Those keys are already out in the open. A quantum attacker wouldn't have to crack anything new. The targets are just sitting there.
So who decides what happens to a wallet whose owner died in 2013? Freeze it? Force-migrate it? Let it get drained? Nobody has an answer, and Coinbase knows it.
Here's where I land. Coinbase raising this now is smart. Get the research out, get the BIPs drafted, get the conversation started while the threat is theoretical and the stakes are low. The chain doesn't lie, and the chain also doesn't move until enough people agree. Better to argue about it in 2024 than to scramble in 2034.
The losers in a rushed migration are miners and small holders who eat the fee spike. The winners are custodians like Coinbase, who get to shape the standard before it's locked in. And honestly, that's fine. Somebody has to start.
What to Watch
Watch the BIPs. If post-quantum signature proposals start showing up in Bitcoin Improvement Proposal threads this year, that's your signal. Watch for a migration deadline. If someone floats a hard cutoff for legacy coins, that fight will get loud fast.
And watch the quantum clock. Google's Willow chip dropped in December 2024 with 105 qubits. That's nowhere near breaking Bitcoin. But the curve isn't flat, and cryptographers who dismissed this five years ago aren't dismissing it now.
Anon, let me explain. Early prep costs almost nothing. Late prep costs everything. Coinbase gets that.