Bitcoin Quantum Resistance: Coinbase Calls for a Multiyear Security Upgrade Plan

Bitcoin Quantum Resistance: Coinbase Calls for a Multiyear Security Upgrade Plan

Custom Image
Coinbase has called for a multiyear Bitcoin quantum resistance plan to address potential security threats from advanced quantum computers. In an announcement published on October 13, 2026, the cryptocurrency exchange urged Bitcoin developers to begin preparing for a transition toward post-quantum cryptography before existing digital signatures become vulnerable to practical attacks. The recommendations include Bitcoin Improvement Proposal 360 (BIP-360), quantum-resistant signatures, improved custody infrastructure, and migration strategies for older Bitcoin holdings. Coinbase, which says it safeguards approximately 5% of all existing BTC, emphasized that implementing these changes would require extensive testing and coordination. No comprehensive quantum-resistant Bitcoin upgrade or mandatory migration deadline has been approved.
 

Key Takeaways

  • Coinbase's Bitcoin quantum security plan: On October 13, 2026, Coinbase urged Bitcoin developers to begin a multiyear transition toward post-quantum security, emphasizing the need for coordinated technical development and testing.
  • Potentially vulnerable Bitcoin holdings: Coinbase's quantum advisory board estimated in April 2026 that approximately 6.9 million BTC had potentially exposed public-key information, although this does not mean those holdings have been compromised.
  • BIP-360 and quantum-resistant cryptography: The proposed Pay-to-Merkle-Root (P2MR) structure could reduce public-key exposure, while additional post-quantum signature algorithms would be needed to address other cryptographic vulnerabilities.
  • Wallet security and transaction costs: Future upgrades could require wallet compatibility changes, institutional custody adjustments, and larger transaction signatures, potentially affecting Bitcoin network fees and verification requirements.
  • Dormant Bitcoin and migration challenges: Lost private keys, inactive wallets, and vulnerable legacy outputs complicate migration planning, particularly if future consensus changes restrict traditional signature methods.
  • No approved Bitcoin quantum upgrade: BIP-360 and related migration proposals remain under development. Bitcoin holders face no mandatory post-quantum migration deadline, and no publicly demonstrated quantum computer has successfully broken Bitcoin's signatures at the scale required for practical theft.
 

Why Coinbase Is Calling for a Multiyear Bitcoin Quantum Security Upgrade

Coinbase has urged Bitcoin developers to begin preparing for quantum computing threats that could eventually compromise the network's existing cryptographic security. In its October 13, 2026 announcement, the cryptocurrency exchange called for a coordinated, multiyear transition involving developers, wallet providers, exchanges, and institutional custodians. Coinbase believes preparations should begin before sufficiently powerful quantum computers become available. Although several technical approaches are being discussed, Bitcoin has not approved a comprehensive quantum-resistant upgrade or established an implementation deadline.
 

How Quantum Computing Could Threaten Bitcoin's Cryptography

Bitcoin currently relies on the Elliptic Curve Digital Signature Algorithm (ECDSA) and Schnorr signatures to authorize transactions and protect ownership through private keys used to authorize transactions. These cryptographic systems are secure against known practical attacks using conventional computers, but sufficiently advanced quantum computers running Shor's algorithm could potentially derive private keys from exposed public keys. This would allow attackers to create unauthorized transactions and spend vulnerable Bitcoin holdings. Google Quantum AI's March 2026 research also presented lower theoretical estimates of the quantum computing resources required to attack elliptic-curve cryptography. However, no publicly demonstrated quantum computer has successfully broken Bitcoin's signatures at the scale necessary for practical theft.
 
The potential exposure depends on how Bitcoin addresses and public keys have been used. Early Pay-to-Public-Key (P2PK) outputs reveal public keys directly, while address reuse can expose cryptographic information associated with other unspent funds. Taproot outputs also contain publicly visible elliptic-curve keys. In an April 21, 2026 assessment, Coinbase's quantum advisory board estimated that approximately 6.9 million BTC were associated with public-key information potentially vulnerable to future quantum attacks. This historical estimate does not mean those holdings have been compromised or that every exposed coin could be stolen. Actual risks depend on future quantum capabilities, transaction authorization methods, and whether affected holdings migrate to stronger security mechanisms.
 

Why Coinbase Says Bitcoin's Quantum Security Transition Could Take Years

Upgrading Bitcoin's cryptographic security would require extensive development, testing, and coordination across its decentralized ecosystem. Unlike centralized financial platforms, Bitcoin has no single authority capable of requiring every participant to adopt new security standards. Developers must evaluate proposed changes through established review and consensus processes, while infrastructure providers need compatible systems before a large-scale migration can occur. Coinbase has already participated in these preparations, including a September 2026 workshop organized with Stanford University and Localhost Research. Its October recommendations identify several issues that could determine how long the transition takes:
 
  • Cryptographic development and testing: New post-quantum signature systems must undergo security reviews, implementation testing, and performance evaluations before they can be considered for Bitcoin's consensus rules.
  • Wallet and custody compatibility: Hardware wallets, exchanges, and institutional custodians may need substantial software and security infrastructure changes, particularly where existing systems rely on multiparty computation (MPC).
  • Transaction efficiency and network capacity: Some post-quantum signatures require considerably more data than Bitcoin's current signatures, potentially increasing transaction fees, bandwidth requirements, and verification workloads.
  • Legacy Bitcoin and migration policies: Developers must determine how to address older outputs, dormant holdings, and coins whose owners cannot authorize transfers without introducing unnecessary restrictions on legitimate ownership.
 
These challenges help explain why Coinbase considers Bitcoin quantum resistance a multiyear security project rather than an immediate software update. The recommendations remain subject to technical review and community agreement, with no confirmed activation schedule.
 

How Bitcoin Could Become Quantum-Resistant With BIP-360 and Post-Quantum Signatures

Bitcoin's transition toward quantum-resistant security could involve changes to transaction structures, digital signatures, and spending authorization methods. Coinbase has identified Bitcoin Improvement Proposal 360 (BIP-360), flexible cryptographic designs, and post-quantum signature algorithms as potential components of that transition. The objective is to introduce stronger security without requiring Bitcoin to redesign its transaction architecture whenever a new cryptographic algorithm becomes necessary.
 

What Is BIP-360 and How Does Pay-to-Merkle-Root Work?

BIP-360 proposes Pay-to-Merkle-Root (P2MR), a new Bitcoin output type designed to reduce exposure to future quantum attacks. It builds on Bitcoin's existing Taproot architecture but removes the key-path spending option, which relies on an elliptic-curve public key. Instead, P2MR commits directly to the root of a Merkle tree containing spending scripts. This allows transactions to use script-based authorization without permanently exposing a vulnerable key through the output itself. The proposal is designed as a soft fork, meaning compatible changes could potentially be introduced without requiring every existing Bitcoin node to upgrade simultaneously.
 
However, P2MR addresses a specific category of quantum risk rather than providing complete protection. It primarily reduces long-exposure attacks, in which an attacker has extended access to public-key information recorded on the blockchain. If a transaction later reveals a conventional public key while waiting for confirmation, a sufficiently advanced quantum computer could still attempt to compromise it. Preventing these short-exposure attacks would require additional cryptographic protections. BIP-360 remains a draft, and its proposed output type is not active on Bitcoin.
 

How Could Bitcoin Integrate Quantum-Resistant Signature Technology?

Replacing traditional transaction signatures would require Bitcoin to recognize new cryptographic authorization methods through its consensus rules. Coinbase supports an approach that separates the transaction output structure from the underlying signature algorithm. Designs such as P2MR and the proposed P2TRv2 could provide flexible foundations for introducing different post-quantum schemes over time. This would allow developers to evaluate alternative algorithms or respond to newly discovered vulnerabilities without necessarily creating an entirely new transaction output format for every change.
 
Such flexibility would require clearly defined verification rules. Each supported cryptographic scheme would need an identifiable algorithm and parameter set, with consistent rules governing how transactions are signed and validated. Developers would also need to examine signature verification speed, resistance to implementation attacks, and compatibility with Bitcoin's existing transaction rules. Coinbase has emphasized deterministic verification and secure implementation practices because weaknesses in signing software could compromise funds even when the underlying mathematical algorithm remains secure.
 

Which Post-Quantum Signature Algorithms Could Protect Bitcoin?

Several post-quantum digital signature systems could potentially replace or supplement Bitcoin's existing authorization methods. The U.S. National Institute of Standards and Technology (NIST) finalized ML-DSA and SLH-DSA standards in August 2024, providing established cryptographic alternatives for further evaluation. However, standardization does not automatically make an algorithm suitable for Bitcoin, where signatures must be stored permanently and verified by independent network nodes. Coinbase has identified several candidates with different security assumptions and implementation requirements:
 
  • ML-DSA: A lattice-based digital signature scheme standardized by NIST. It offers a potential foundation for quantum-resistant authorization, although Bitcoin-specific performance and integration would require further evaluation.
  • SLH-DSA: A standardized stateless hash-based signature scheme that relies on different mathematical security assumptions from lattice-based cryptography, providing an alternative if weaknesses emerge in other approaches.
  • FN-DSA: A lattice-based signature scheme being considered through NIST's standardization process. Its relatively compact signatures make it relevant to further research, subject to security and implementation assessments.
  • SHRINCS: An experimental compact hash-based construction combining stateful signing with a stateless fallback. Its potential efficiency advantages must be weighed against the serious security risks associated with accidental signing-state reuse.
 

Could Hybrid Signatures Support Bitcoin's Post-Quantum Migration?

Coinbase has also proposed evaluating hybrid signature arrangements that would allow traditional and post-quantum authorization methods to coexist during migration. One possible design uses a 1-of-2 structure, where funds can be spent through either an existing ECDSA or Schnorr key or a separate post-quantum key. This could give users access to newer cryptographic mechanisms before decisions about restricting older signatures are finalized. Another approach would allow post-quantum-only spending from the beginning, providing stronger protection for users willing to adopt the new authorization method.
 
The distinction between these designs is important. A hybrid output that permits either signature independently does not become fully quantum-resistant simply because it includes a post-quantum option. If an attacker can compromise the traditional signing key, that authorization path could still expose the funds. Post-quantum-only arrangements could eliminate this particular weakness, although their adoption would depend on suitable consensus rules and secure implementations. Neither approach has been approved for Bitcoin, and developers must still determine how transitional flexibility can be balanced against the security requirements of a completed post-quantum migration.
 

What Does Coinbase's Quantum Security Plan Mean for Bitcoin Holders?

For Bitcoin holders, Coinbase's proposed quantum security transition could eventually change how BTC is stored, transferred, and protected against future cryptographic threats. However, no immediate wallet replacement or Bitcoin migration is required as a result of the October 13, 2026 announcement. If the Bitcoin network eventually adopts quantum-resistant transaction standards, users may need updated wallet software and compatible addresses to protect their holdings. For those using crypto wallets for long-term Bitcoin storage, the distinction between custodial and self-custody arrangements could become increasingly important. Self-custody users would generally be responsible for authorizing transfers, while customers holding BTC through exchanges or institutional custodians would depend on their providers' migration procedures. The exact requirements remain uncertain because developers have not finalized the upgrade architecture or activation schedule.
 
Bitcoin holders should distinguish between future security preparations and actions they need to take now. Coinbase has not announced a mandatory transfer deadline, and no officially activated post-quantum migration process exists. Several practical considerations could become important as development progresses:
 
  • Wallet compatibility: Hardware and software wallet providers may need to introduce support for new address formats and signature verification methods. Users should follow official wallet updates and maintain secure backups of their recovery information.
  • Exchange and institutional custody: Platforms holding customers' BTC may manage technical upgrades internally, but withdrawals, deposits, and transfers between different wallet types could require additional compatibility checks.
  • Migration costs: Moving existing BTC into quantum-resistant outputs would require blockchain transactions. Network fees and processing requirements would depend on the final implementation and prevailing transaction demand.
  • Security against migration scams: Fraudulent websites or messages could exploit concerns about quantum computing by claiming that users must urgently transfer their Bitcoin. Legitimate wallet upgrades should never require disclosing private keys or recovery phrases to third parties.
  • Long-term ownership protection: Future restrictions on vulnerable legacy signatures could affect holdings that remain unmigrated. Such policies would require further technical review and community agreement, particularly where legitimate owners are unable to access or transfer their coins.
 
For investors monitoring the Bitcoin spot trading market, long-term cryptographic security developments should be distinguished from short-term price fluctuations. The most relevant developments to follow are formal Bitcoin Improvement Proposal decisions, wallet-provider support, and any confirmed migration requirements. Coinbase's recommendations do not establish a specific effect on Bitcoin's market price, and there is insufficient evidence to attribute a particular BTC price movement to the announcement alone.
 

Conclusion

Coinbase's October 2026 recommendations outline the technical and operational work that may be necessary to prepare Bitcoin for future quantum computing threats. BIP-360, post-quantum digital signatures, and transitional authorization methods offer possible approaches, but their security benefits, implementation costs, and compatibility requirements still need further evaluation.The biggest challenge is developing protections that Bitcoin users and institutions can adopt without compromising the network's security or accessibility. No quantum-resistant upgrade has been approved, and there is no confirmed migration deadline. Continued cryptographic research, technical testing, and community agreement will determine how Bitcoin's post-quantum security transition develops.
 

🔥 Beyond the Headlines: What KuCoin 5.0 Means for You

Market news moves fast — but where you act on it matters just as much. This October, KuCoin launches KuCoin 5.0, transforming KuCoin into a rebuilt platform. Here's what actually changes for you:
 
  • One account for everything. Older platforms split your money across separate "spot," "margin," and "futures" accounts and expected you to understand why. KuCoin 5.0's unified account removes that entirely — deposit once, and everything is simply there (only available to VIPs for now).
  • Stocks, indices, and commodities. KuCoin 5.0 expands beyond crypto into global markets. When crypto chops sideways and equities rally (or the reverse), you rotate in minutes instead of opening a brokerage account and waiting days for fiat rails.
  • Real-world assets (RWA). Tokenized exposure to traditional assets like commodities, right inside your crypto account. One of the fastest-growing segments in global finance is no longer reserved for institutions — you access it from the same balance you trade with.
  • Earn while you learn. Not ready to trade? KCUSD lets your stablecoins earn daily, auto-compounding interest. The lowest-stress way to put your idle deposit to work for 4% yield.
  • An AI assistant in plain language. Ask questions, get market context, understand what you're looking at — built into the platform, no jargon required.
  • An app that doesn't overwhelm. Faster, cleaner, and consistent — intuitive from the first tap, not after a tutorial.
  • Safety you can check, not just trust. A MiCAR-licensed EU entity, Proof of Reserves you can verify yourself, and internationally certified security (SOC 2 Type II, ISO 27001:2022).
 
Create your account in minutes — and start on the platform built for where crypto is going, not where it's been.
 

FAQs

Does quantum computing threaten Bitcoin mining and SHA-256 security?

Quantum computing could theoretically affect Bitcoin's SHA-256 proof-of-work system through algorithms that accelerate certain computational searches. However, this differs from the threat to elliptic-curve digital signatures. Bitcoin's signature systems face a more direct potential vulnerability, while SHA-256 is not considered broken by existing quantum computers. The practical implications for mining remain uncertain.

Would Bitcoin need a hard fork to introduce quantum-resistant security?

Not necessarily. Bitcoin could introduce certain quantum-resistant capabilities through a soft fork, which makes previously valid transaction rules more restrictive while preserving compatibility with older consensus rules. BIP-360 proposes this approach. However, full validation of new transaction types would require upgraded software, and the exact implementation would depend on the final proposals accepted by the network.

Does BIP-361 establish a five-year Bitcoin quantum migration deadline?

No. BIP-361 remains a draft proposal, not an activated Bitcoin rule. It outlines a phased transition that would eventually restrict traditional ECDSA and Schnorr signatures, with major restrictions proposed approximately five years after activation. Because the proposal has not been approved or activated, Bitcoin holders do not currently face an official five-year migration deadline.

Could quantum computing also affect the Bitcoin Lightning Network?

Yes. The Lightning Network relies on Bitcoin's underlying cryptographic security and uses digital signatures to authorize off-chain transactions. A future transition to post-quantum cryptography could require changes to Lightning implementations, channel management, and transaction authorization. The specific requirements would depend on Bitcoin's eventual upgrade design and how Lightning developers adapt their protocols.
 
 

Disclaimer

The information provided on this page may originate from third-party sources and does not necessarily represent the views or opinions of KuCoin. This content is intended solely for general informational purposes and should not be considered financial, investment, or professional advice. KuCoin does not guarantee the accuracy, completeness, or reliability of the information, and is not responsible for any errors, omissions, or outcomes resulting from its use. Investing in digital assets carries inherent risks. Please carefully evaluate your risk tolerance and financial situation before making any investment decisions. For further details, please consult KuCoin’s Terms of Use and Risk Disclosure.