Coinbase Recommends Proactive Bitcoin Security Upgrades for Quantum Computing Era

Coinbase is urging the Bitcoin network to begin preparing for quantum security measures, citing the potential threat posed by future cryptographically relevant quantum computers (CRQCs). While the exact timeline for CRQCs remains uncertain, with Google researchers projecting their existence by 2029, Coinbase emphasizes the critical need for early preparation and flexible transaction output designs to accommodate new cryptographic standards.

Coinbase, a major custodian safeguarding approximately 5% of all Bitcoin for institutional clients, warns that a sufficiently capable quantum computer could derive private keys from exposed public keys, potentially allowing attackers to spend vulnerable coins. A covert attacker, Coinbase suggests, could exploit these vulnerabilities before the capability becomes widely known.

To address this prospective threat, Coinbase has outlined technical considerations for Bitcoin’s migration. The core recommendation is to design transaction outputs that can support new post-quantum cryptography without necessitating a complete overhaul of the Bitcoin transaction system each time signature methods evolve. This flexibility would allow for the addition, replacement, or combination of quantum-resistant signatures as technology advances and security assessments are refined.

Coinbase suggests exploring options like P2MR (associated with BIP-360) and P2TRv2 for quantum-resistant signatures. The exchange favors a staged protection approach, proposing hybrid arrangements where funds could be spent using either traditional ECDSA or Schnorr keys, or a post-quantum key. This would allow users to adopt stronger protection incrementally, though Coinbase’s recommendations do not dictate the final design or the timeline for retiring older signature methods.

Implementation quality and the availability of stateless alternatives are also highlighted. Coinbase points out that signature schemes requiring wallets to meticulously track state could introduce risks if records are lost or mishandled, potentially leading to forged signatures. Therefore, stateless designs are preferred alongside stateful ones. Coinbase calls for consistent verification, protection against timing leaks, clear settings, and resilience in random-number generation to minimize the risk of new vulnerabilities being introduced during an upgrade.

Institutional compatibility is another key consideration. Coinbase asserts that post-quantum Bitcoin schemes should integrate with multiparty computation (MPC), enabling organizations to distribute key operations. Designs exclusive to individual wallets might create a slower or less practical migration path for exchanges, custodians, and large businesses.

The structural challenge of Bitcoin’s decentralized nature means that any consensus changes require broad coordination among wallets, custodians, and other services, all of which need ample time for implementation and testing. Coinbase’s call for preparation aims to create space for evaluating designs and upgrading infrastructure, distinct from the immediate threat of a quantum attack. The immediate development task, according to Coinbase, involves assessing flexible designs, implementation risks, and institutional compatibility, rather than settling on a single output type or signature scheme. This crucial upgrade work should not be delayed by debates over legacy coins, such as dormant, quantum-exposed, or lost Bitcoin, which Coinbase suggests should be addressed separately with quantum-safe solutions.

Why This Matters

Coinbase’s recommendations address the potential for quantum computers to break current Bitcoin encryption, necessitating proactive security upgrades. The migration challenge is structural, requiring broad coordination for consensus changes. Early adoption of quantum-resistant cryptography is crucial for Bitcoin’s long-term security and institutional compatibility, as highlighted by Coinbase’s emphasis on flexible designs and integration with systems like multiparty computation (MPC).

Broader Context

Coinbase, which safeguards 5% of all Bitcoin for clients including banks, asset managers, and hedge funds, is urging the network to begin preparing for quantum security. This proactive stance is crucial given the projected existence of cryptographically relevant quantum computers by 2029, a development that could pose a significant risk to current encryption standards.