Coinbase Details Quantum-Resistant Security Steps

Coinbase protects 99.9% of its custodied assets with its CoreKMS key management system and is now prioritizing an upgrade to prepare for the eventual arrival of quantum computing. While the timeline for a large-scale, cryptography-breaking quantum computer remains uncertain, the company established the Coinbase Independent Advisory Board on Quantum Computing and Blockchain earlier this year to proactively address the looming threat. The Board determined that preparation must begin immediately, regardless of when such a computer is built; as they state, “the debate about timelines is largely irrelevant, because the preparation needs to happen now regardless.” Coinbase is responding with a three-pronged approach, beginning with a post-quantum version of CoreKMS and extending to a full inventory of cryptographic systems across the company, and collaboration with Bitcoin developers.

Upgrading Our Key Management System to Support Post-Quantum Cryptography Coinbase’s CoreKMS

This proactive overhaul focuses on building a post-quantum version, dubbed PQ-CoreKMS, demonstrating a commitment to long-term security despite the uncertainty surrounding the timeline for functional quantum computers. Unlike some approaches that wait for definitive breakthroughs, Coinbase is initiating preparations now, recognizing that the complex process of cryptographic migration demands immediate attention. The company’s strategy centers on layering defenses, beginning with an automated signing pipeline slated for completion within the next year. This pipeline will integrate secure enclaves, secret-sharing techniques, and threshold cryptography, creating a system capable of supporting any post-quantum signature algorithm. Keys will be distributed across diverse environments, bolstered by hardware-enforced security during the signing process; this will allow Coinbase to offer quantum-safe custody as soon as blockchain protocols adopt compatible schemes.

Further strengthening this foundation, a dedicated research effort spanning two to three years will focus on developing full Multi-Party Computation (MPC) capabilities specifically for lattice-based and other post-quantum signing schemes. This ensures that private keys are never fully reconstructed in a single location, adding an additional layer of resilience. A Coinbase representative stated that there is “a lot of noise about quantum computing right now, and some of it is real,” emphasizing the need to move beyond speculation and focus on concrete action. Beyond CoreKMS, Coinbase has initiated a company-wide assessment of its cryptographic infrastructure, cataloging all instances of cryptographic use and prioritizing migration based on system criticality, exposure, and complexity. The company is also establishing clear milestones tied to advancements in quantum computing that will trigger actual system migrations. This extends to Base, the layer-2 scaling solution built on Ethereum, which benefits from Ethereum’s own post-quantum roadmap.

Coinbase is actively analyzing Base-specific vulnerabilities beyond those already addressed by Ethereum and will formulate a detailed plan as the threat landscape evolves. The company asserts that “At Coinbase, we think it’s important to cut through the noise and be direct with our customers, the industry, and the broader public about what we actually know, what we’re doing about it, and what we believe the entire ecosystem needs to do together,” highlighting a commitment to transparency and collaborative security.

Coinbase is actively fostering collaboration to address the significant challenge of preparing Bitcoin for the advent of quantum computing, recognizing the need for coordinated effort within the decentralized development community. This August, the company will co-host a working session with Stanford University, assembling Bitcoin core developers, cryptographers, and researchers for a day dedicated to post-quantum migration strategies. The initiative stems from a recognition that effective solutions require open debate and realistic timeline assessments, best achieved through direct interaction among experts.

Contributing Coinbase Engineering Talent and making a donation to the Bitcoin Security

Coinbase recognizes that securing cryptocurrency infrastructure against the potential threat of quantum computing requires a collaborative approach extending beyond internal system upgrades; the company is actively contributing both financial resources and engineering expertise to bolster the broader Bitcoin network’s defenses. While 99.9% of custodied assets are currently protected by Coinbase’s CoreKMS key management system, the company understands that Bitcoin’s long-term security hinges on open-source protocol development, necessitating sustained investment in collective solutions. This commitment materialized with Coinbase becoming a founding member of the Bitcoin Security Consortium, a new initiative launched with backing from financial institutions like BlackRock and Fidelity Digital Assets, alongside other Bitcoin-focused companies including Block and Blockstream. The Consortium’s primary goal is to support the ongoing work of Bitcoin developers focused on quantum-resistant cryptography, and Coinbase is directly contributing to this effort through financial donations and the dedication of its engineering talent.

Coinbase engineers are now working alongside core developers and researchers on proposals like BIP-360, and the broader migration path for Bitcoin, actively contributing to implementations designed to protect the network. This proactive engagement signifies a departure from simply observing the development of quantum-resistant solutions and instead demonstrates a commitment to accelerating the process. The company stated, “Rather than standing on the sidelines, we are putting our engineers alongside the core developers and researchers who are doing this work, helping to move the ball forward on the proposals and implementations that will ultimately protect the network.” The Bitcoin Security Consortium aims to establish itself as a reliable source of information regarding Bitcoin’s security and its preparedness for the quantum computing era, providing clarity for investors, the public, and the media.

Coinbase emphasizes that no single entity can resolve this challenge independently, highlighting the necessity of a unified effort involving researchers, developers, protocols, and companies, reinforcing the importance of collective action in preparing for the future.