Coinbase pushes Bitcoin's post-quantum migration

Select what genuinely interests you. Your picks feed directly into our editorial planning.

Crypto news that's actually worth your time.

Weekly. 60 seconds. Carefully curated by our editors: no hype, no promo flood, no spam.

Coinbase published a position paper on the future of Bitcoin signatures on October 13, 2026. Its central claim is that the move to schemes a quantum computer cannot break has to begin before such a machine exists. Bitcoin is untouched by it at around $81,600 (CoinGecko, October 16). The paper names neither a deadline nor an activation mechanism, and that is precisely its message: the debate is starting, the implementation is not.

Coinbase sets out a position paper on post-quantum migration

The document carries more weight than the usual industry , because Coinbase custodies around five percent of all existing Bitcoin according to consistent reports, mostly for banks, asset managers and hedge funds. A firm holding that much of other people's money does not carry migration risk in theory.

The company's reasoning is set down verbatim in the paper: "Bitcoin consensus changes and ecosystem migrations can take years, so it is important that we begin this work now." Elsewhere it states that preparation should start "well ahead of any CRQC". CRQC stands for cryptographically relevant quantum computer, meaning a machine actually strong enough to break today's signatures. No such machine exists so far; the most capable known devices work with fewer than 1,000 qubits.

For the timing, the paper cites an estimate by Google researchers under which a CRQC could emerge around 2029. That number is someone else's forecast, not a commitment by Coinbase, and the expert debate rates it differently.

BIP-360 separates the output type from the signature

Technically the paper rests on one idea that is the real point of the proposal: the container of a Bitcoin output and the signature scheme used to spend it later should be separated from each other.

Pay-to-Merkle-Root as an interchangeable container

Under the name Pay-to-Merkle-Root, or P2MR, BIP-360 describes an output type that is not tied to one particular signature scheme. A Merkle root is the condensed root of a hash tree, under which several possible spending conditions can be hidden without all of them being disclosed. Its advantage during migration is that a new, quantum-safe scheme can be added later without changing the output format again.

P2TRv2 as a second, less mature route

Alongside it the paper names P2TRv2, a second version of Taproot pursuing the same separation. Coinbase publicly rates it as less advanced than BIP-360. Both are drafts so far. BIP-360 has the status of a proposal, P2TRv2 has not been adopted, and no Bitcoin upgrade covering these points has been agreed.

The 1-of-2 wallet avoids a hard cut-off date

For the early phase of the switch, Coinbase proposes a construction the paper calls 1-of-2. A balance can be spent either with the classic key or with an additional, quantum-safe key. Both routes are valid at the same time.

The practical benefit is a network that does not have to flip on a single date. Nor does it create outputs movable only under the old scheme, which would then be stranded when that scheme is switched off. Anyone who has carried a wallet through a format change knows the difference between a transition and a cut.

Stateful schemes such as XMSS and LMS carry a forgery risk of their own

On the choice of the future scheme, Coinbase keeps its distance. Stateful signature schemes such as XMSS and LMS count as small and fast, but they have to remember which part of the key material has already been used. Manage that state wrongly and use a part a second time, and forging a signature becomes immediately possible. Coinbase therefore demands that such schemes ship only together with a stateless fallback.

The paper expressly avoids settling on a particular algorithm. It names no activation mechanism either. Readers expecting a finished upgrade find a description of the problem with guard rails.

Exposed keys sit in P2PK and in already-spent addresses

The part that matters most to holders concerns which balances would be vulnerable at all. The public key of an address is not always visible. With modern address formats the blockchain initially holds only a hash of it, and the key itself becomes public only with the first spend.

How to recognise an exposed address

The paper lists the exposed set along that logic: very old P2PK outputs, where the public key stands in the clear from the start, plus P2PKH and Taproot outputs that have already been spent from, and finally deposits arriving during an ongoing migration. The rule of thumb is therefore this: an address you have already sent Bitcoin from has given up its public key. An address that has only received has not.

How to go through your own holdings on that basis is set out in a separate cryptoticker.io piece on the quantum risk of individual Bitcoin addresses . The size of the affected stock is given differently: Coinbase's own advisory board arrived at around 6.9 million Bitcoin with potentially exposed key material in April 2026, while older analyses name 6.7 million. Both figures describe an upper bound of what is theoretically exposed, not damage done.

The timeframe stays open and the estimates diverge

Figures on how long the rebuild takes differ, and the paper contributes to that by setting no deadline. Part of the coverage reports an estimate of up to seven years for replacing the signature scheme. Other reports speak generally of several years and note explicitly that Coinbase deliberately fixes no schedule. What holds is therefore only the span from several years up to an estimate of seven, not a single number.

That is less unsatisfying than it sounds. A consensus change in Bitcoin needs agreement among developers, miners, exchanges and wallet providers. A date set by a single company would carry no binding force.

A transfer to a fresh address leaves the German holding period intact

The obvious reaction for many holders would be to move balances to new addresses as a precaution. In tax terms that is uncritical in Germany: in its circular on the income tax treatment of crypto assets, the federal finance ministry does not treat a transfer between your own wallets as a disposal. The one-year holding period under section 23 of the Income Tax Act therefore keeps running when you send Bitcoin from one address of your own to another.

Two points still matter. First, your records have to be right, because a portfolio tracker or a tax tool might otherwise book such a transfer as a sale and a repurchase. Second, every transfer costs a network fee. Against a horizon of years, panic is the worse adviser. How the legislator will handle the holding period is open in the ongoing reform debate.

Anyone thinking custody anyway will find the models, their setup and their running costs in our hardware wallet comparison . Only one property matters for this article: the device has to be able to add signature schemes by firmware update.

Holding on an exchange hands the migration to the provider

If your Bitcoin sits with an exchange or a broker, what you own is a claim against the company, not a private key. Moving to quantum-safe signatures would then be the custodian's job. Among other things, Coinbase describes multi-party computation in the paper as a building block of its own infrastructure and states: "When implemented effectively, MPC can provide strong protection against key theft." Under MPC a key is never assembled in full in one place but split across several parties.

That creates a division of labour worth knowing. In custody with a provider you carry the counterparty risk but not the technical migration. In self-custody it is the other way round. Both are defensible; the decision should simply be a deliberate one rather than the result of inertia.

Dormant Bitcoin and lost keys remain the open flank

The paper deliberately leaves the thorniest point outside the bracket: a balance that never moves cannot be migrated either. That covers the early holdings from the network's first years and every coin whose keys are lost. Coinbase treats this question as a separate problem and not as a precondition for the rest of the rebuild.

That is a political choice, not a purely technical one. Whether such outputs are eventually frozen, given a deadline or left untouched touches on questions of ownership that the Bitcoin world has argued over for years. Coinbase states its expectation that Bitcoin will "continue to be the most trusted cryptocurrency in a post-quantum world". That is no answer on the dormant holdings.

Post-quantum switch: nothing happens until BIP-360 is activated

As long as no output type is activated, your wallet keeps working exactly as it does today. Three steps make sense, in this order:

Look at your address behaviour. Make sure your wallet creates a fresh receiving address for every deposit and that you do not reuse an address. Which programs do that reliably is shown in the software wallet comparison .

Choose custody deliberately. Decide which part of your holdings should sit with a provider and which in self-custody. Fees, domicile and custody model of the providers are in the exchange comparison .

Keep clean records. Document every transfer between your own wallets so the holding period stays provable. Tools for that are in the comparison of tax and portfolio tools .

The reliable signal will not come from a corporate release but from the development process: only once BIP-360 leaves draft status and an activation route exists does the paper turn into a roadmap.

Sources on the position paper: The Quantum Insider and crypto.news .

(As of October 16, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)

Frequently asked questions Bitcoin's post-quantum switch

No. A quantum computer able to break today's signatures does not exist so far; the most capable known machines work with fewer than 1,000 qubits. Coinbase justifies the early start by pointing out that a consensus change in Bitcoin itself takes years.

Addresses whose public key is visible are affected. Those are very old P2PK outputs and every address you have already sent Bitcoin from. An address that has so far only received has not yet given up its key.

Under the name Pay-to-Merkle-Root, BIP-360 describes a Bitcoin output type that separates the container of an output from the signature scheme. A quantum-safe scheme could then be added later without changing the format again. The proposal has draft status and is not activated.

No. The federal finance ministry does not treat a transfer between your own wallets as a disposal, so the one-year holding period under section 23 of the Income Tax Act keeps running. What matters is that your tax or portfolio tool does not book the transfer as a sale and a repurchase.

Not in the short term. As long as no new output type is activated, your wallet stays unchanged. It makes sense to use a fresh receiving address for every deposit and to decide deliberately which part of your holdings sits with a provider and which in self-custody.

Transparency note: This article was produced with the assistance of artificial intelligence and reviewed by our editorial team before publication. All figures and claims were checked against the primary sources linked in the text. The feature image was generated with AI.

More on Bitcoin: All Bitcoin news at a glance

Bitcoin's Quantum Problem: Why 6.7 Million Coins Could Be Frozen Forever

Should Satoshi's Bitcoin Be Frozen? CZ's Quantum Warning Splits the Industry

Bitcoin and the Quantum Computer: Which Addresses Already Expose Their Keys

Will AI Break Bitcoin? Vitalik Says Prepare for "Bunker Mode", Hoskinson Calls It Numerology

Ethereum and Quantum Computers: Are Your ETH Affected?

Which topics should we dive deeper into?

Select what genuinely interests you. Your picks feed directly into our editorial planning.

Crypto news that's actually worth your time.

Weekly. 60 seconds. Carefully curated by our editors: no hype, no promo flood, no spam.

October 11, 2026 4:35 PM

Satoshi's bitcoin: why 1.1 million coins could be frozen

Around 1.1 million bitcoin, worth a good $91 billion today, are attributed to Bitcoin's inventor Satoshi Nakamoto. A draft from Bitcoin developers would freeze them before a quantum computer can steal them. What lies behind BIP-361, what argues against it, and which addresses of yours would also be affected.

September 25, 2026 7:11 AM

EU Supervisors Rate Quantum Risk as High: What to Check on Crypto Custody and Exchange Choice

EBA, EIOPA and ESMA name quantum computers explicitly as a threat to blockchain cryptography in their autumn risk picture of September 23. What the paper says, which migration deadlines run to 2030, and three things you can check your custody.

April 21, 2019 4:16 PM

Quantum Computer: The End of Bitcoin?

For decades, physicists have been working on quantum computers. These computers, based on quantum mechanical principles, should be far superior to classic binary computers in certain fields of application. In 1994, years before the first experimental quantum computers existed, Peter […]

May 14, 2024 11:59 AM

Bitcoin Whales and Market Trends: What’s Driving the Accumulation?

Bitcoin Whales are influencing market trends with strategic accumulation moves. What will this mean for Bitcoin's future price?

September 29, 2026 4:23 PM

Ethereum After Hegotá: Buterin Sees the Last Normal Fork Coming Year

Vitalik Buterin calls Hegotá, the fork planned for 2027, Ethereum's likely last normal upgrade. After it the focus turns to recursive STARKs and quantum-safe signatures, and that helps decide how you hold your ETH.

August 5, 2026 10:33 PM

$130 Million Gone Because the Randomness Was Predictable: Which Hardware Wallet You Can Still Buy

The Coldcard flaw proved the most respected wallet is not the safest. Which vendor has which track record – and why now is the wrong moment to pause your savings plan.

August 18, 2026 2:48 PM

Citi Bitcoin Custody Confirmed for 2026: BTC Price Impact

Citi Bitcoin custody is going live later this year via its new Custody+ platform. Here is what a $24 trillion custodian holding BTC means for crypto prices.

October 17, 2026 7:19 AM

Bitcoin price at $81,437 as Deutsche Bank nears its custody launch: What investors need to know

Bitcoin trades at $81,437 on Saturday morning, and the US spot ETFs lost $82.39 million on Friday. The bigger story sits elsewhere: Deutsche Bank is weeks away from taking bitcoin and ether into its own custody.

March 31, 2026 5:13 PM

Quantum Threat to Bitcoin? Google Research Sparks Urgent Crypto Security Debate

Google’s quantum breakthrough raises fears for Bitcoin security. Can crypto survive quantum attacks—or is an upgrade urgent?

February 15, 2025 11:34 AM

Bitcoin Price Surges Amid International Governmental Adoption - Can It Break $100K?

Bitcoin price is on the rise, fueled by massive international adoption and growing interest in crypto custody services. Will these developments push Bitcoin past the elusive $100K mark?

Germany’s Banking Giants Go Crypto: Deutsche Bank and Sparkassen, the 2026 Launch Status

Deutsche Bank plans crypto custody for institutional clients by the end of 2026, the Sparkassen want to offer crypto trading in their app from mid-October. Where both plans stand.

August 14, 2026 6:18 PM

Bitcoin From a Foreign Exchange to Austria: Which Tax Data You Need

Transferring Bitcoin from a foreign exchange to an Austrian platform: which tax data can be missing for the withholding tax. And what investors need to watch out for.

September 26, 2026 4:11 AM

Shielded Bitcoin: what the privacy proposal means for your Bitcoin addresses

Three researchers published a draft for encrypted Bitcoin transfers without a soft fork on September 24, 2026. What Shielded Bitcoin hides, what stays public and which points you can check on your own wallet today.

February 18, 2026 9:19 PM

Why Bitcoin is Crashing: The Quantum Threat and the Ghost of Lost Coins

Bitcoin underperforms in 2026 as markets weigh the return of 4M lost coins against quantum computing threats. Discover why institutional demand isn't enough.

Bitcoin Price Prediction: Will BTC Price Reach $150K in MAY 2025?

With the latest news, Bitcoin is off to a good start in May 2025. With BTC price predictions assuming a new ATH before the end of Q2, how likely for it to happen in May?

September 24, 2026 4:11 PM

Bitcoin Cash Falls 5.5 Percent After a 50 Percent Week: Check Your Buy Route, Leverage and Holding Period

Bitcoin Cash fell to $335.19 on September 24, 2026, after gaining almost 50 percent in seven days. The rally was set off by CME's announcement of September 22; what that means for buy route, leverage, holding period and custody is set out here.

September 16, 2026 7:39 PM

Deutsche Bank to Custody Bitcoin and Ether: Why Retail Clients Are Missing and What to Check in Your Own Custody

Deutsche Bank will custody Bitcoin, Ether and three stablecoins, but addresses corporates and institutions only. What the launch under supervisory reservation means, and the four questions you should put to any custody arrangement.

June 28, 2026 10:44 AM

Bitcoin Price Prediction: Why Some Analysts Warn of a Crash to $16K

A dark Bitcoin narrative is spreading: quantum computing and AI could "kill" BTC, with some bears eyeing $16K. Here's the case — and why it may be overblown.

Crypto News Today: ETF Shocks, Trump’s Bold Bitcoin Play, and Altcoin Momentum Surging

The crypto market is pulsing with energy. From Trump’s ETF push to $1B BlackRock outflows and an altcoin breakout, today’s headlines mark a momentum shift for traders and institutions alike.

October 7, 2026 10:33 PM

Bitcoin Price Falls as 41,700 BTC Leave Binance: The Exchange Reserve Drops to 663,100 BTC

Binance's bitcoin reserve has fallen by 41,700 BTC to around 663,100 bitcoin since September 20, the largest weekly outflow since June 2023. Why the price is giving way all the same, and what the finding means for your custody.

September 13, 2026 1:13 PM

Sparkasse Crypto Custody: Why You Get No Key to Your Bitcoin and What to Check First

From October, Sparkasse customers are to be able to buy Bitcoin and Ether inside their own banking app, with DekaBank acting as custodian. What you get is a custody position rather than a private key. What that means in practice and what you should settle before your first purchase.

September 2, 2026 10:31 PM

ECX Fork of Bitcoin: When the Snapshot at Block 973,728 Really Lands

Layertwo Labs is copying Bitcoin's ledger onto a new chain and crediting every bitcoin with one ECX. Our own measurement shows the three fork stages hang on difficulty periods, and the snapshot reported for October 31 will most likely fall on November 1.

August 4, 2026 1:21 PM

Coldcard Losses Near $114 Million as a Fourth Sweep Hits: Why Is Bitcoin Rising Anyway?

A fourth wave of Coldcard sweeps took another 449 BTC on Monday, yet Bitcoin climbed back toward $64,000. Here is what changed and who is still exposed.

August 1, 2026 10:59 AM

Bitcoin Treasury Model Under Fire: Strategy Posts $8.22 Billion Loss as BTC Slips Below $63,000

Strategy booked an $8.22 billion quarterly loss and Coinbase missed again. Here is what crypto's brutal earnings week means for Bitcoin.

April 17, 2026 10:14 PM

FIBE Berlin 2026 Review: Bitcoin, AI Trading & Tokenization at Europe's Biggest FinTech Conference

FIBE Berlin 2026 brought together the future of finance — from AI-powered crypto portfolios to Bitcoin self-custody and tokenized real-world assets.

April 3, 2026 8:40 AM

Coinbase Receives OCC Approval for National Trust Charter

Coinbase has secured conditional OCC approval for a National Trust Charter, a historic move that signals a massive shift in the U.S. crypto market structure.

November 19, 2025 5:44 PM

BTC Price Falls Under $90K: Vitalik’s Quantum Warning Intensifies Sell-Off

Bitcoin broke below $90K again as fear spikes. New warnings from Vitalik Buterin quantum computers breaking BTC and ETH add fresh panic.

More from CryptoTicker