Coinbase Starts a Full Post-Quantum Cryptography Upgrade: PQ-CoreKMS Targeted Within One Year and a Bitcoin Developer Workshop with Stanford

Quantum computing is no longer a purely academic concern for crypto security teams. While today’s practical attacks remain out of reach, the blockchain industry is beginning to treat post-quantum cryptography as a roadmap item rather than a distant research topic.

Coinbase has now outlined a broad preparation plan for the quantum era. According to a recent article by Coinbase Chief Information Security Officer Jeff Lunglhofer, the company is working on three parallel tracks: upgrading internal key infrastructure, coordinating with Bitcoin researchers and developers, and contributing resources to industry-wide quantum safety efforts.

For crypto users, builders, and custodians, the message is clear: post-quantum migration will not happen overnight. It will require years of protocol design, wallet support, infrastructure changes, user education, and careful execution.

Why Quantum Computing Matters for Crypto

Most public blockchains rely on cryptographic assumptions that have held up well against classical computers. Bitcoin, Ethereum, and many other networks use elliptic curve cryptography for digital signatures. These signatures allow users to prove ownership of funds without revealing private keys.

A sufficiently powerful quantum computer could change that model. Shor’s algorithm, first described in the 1990s, theoretically enables a large-scale quantum computer to break widely used public-key cryptographic systems. That does not mean Bitcoin or Ethereum are “broken” today, but it does mean the industry must prepare before quantum hardware reaches a dangerous threshold.

This is especially important because blockchain systems are hard to upgrade. Unlike centralized software, public networks require broad coordination among core developers, miners or validators, wallets, exchanges, custodians, institutions, and users. If quantum-safe signature schemes are needed, the migration path must be designed and tested long before the risk becomes urgent.

The wider cybersecurity community is already moving in this direction. The U.S. National Institute of Standards and Technology has finalized its first post-quantum cryptography standards, including lattice-based algorithms designed to resist both classical and quantum attacks. These standards are an important reference point for the crypto industry, even though blockchain-specific implementation challenges remain different from traditional enterprise systems. See NIST’s overview of its post-quantum cryptography project.

Coinbase’s First Track: Building PQ-CoreKMS

The most concrete part of Coinbase’s plan is the development of PQ-CoreKMS, a post-quantum version of its internal key management system, CoreKMS.

Key management is one of the most sensitive layers in crypto infrastructure. For a major exchange and custodian, signing systems must protect assets at scale while maintaining reliability, operational control, and auditability. Coinbase’s plan indicates that PQ-CoreKMS is expected to support an automated signing pipeline that combines several security techniques, including secure enclaves, secret sharing, and threshold cryptography.

The goal is not to immediately force a post-quantum signature format onto existing blockchains. Instead, Coinbase is preparing infrastructure that can support different post-quantum signature algorithms once networks begin adopting them. This distinction matters. A custodian cannot unilaterally make Bitcoin or Ethereum quantum-safe, but it can make sure its internal systems are ready when protocol-level options become available.

Coinbase expects the first version of PQ-CoreKMS to be delivered within a year. Over the following two to three years, the company plans to work toward more complete multi-party computation capabilities for post-quantum schemes, including lattice-based cryptography.

That timeline reflects a practical reality: post-quantum cryptography is not just a matter of replacing one algorithm with another. Signature sizes, verification costs, transaction formats, hardware constraints, network bandwidth, address design, and user migration all become part of the engineering problem.

Mapping the Cryptographic Attack Surface

The second major element of Coinbase’s approach is an internal inventory of cryptographic dependencies.

Large crypto companies rely on many layers of cryptography beyond blockchain signatures. These can include authentication systems, internal messaging, custody workflows, encrypted backups, API infrastructure, secure communications, and compliance systems. A quantum-resilience program must identify where cryptography is used, how exposed each system is, and how difficult migration would be.

Coinbase is reportedly prioritizing this inventory based on several factors:

• How critical the system is to security or availability
• How exposed it is to external attackers
• How complex it would be to migrate
• Which quantum computing milestones would trigger action

This type of milestone-based planning is important because the timing of quantum risk remains uncertain. Overreacting too early could create unnecessary complexity, while waiting too long could leave systems with little time to adapt. A mature strategy needs clear decision points rather than vague assumptions.

For blockchain networks, the challenge is even harder. Some public keys may already be visible on-chain, especially when coins have been spent from an address before. In a future quantum-risk scenario, exposed public keys could become more sensitive than unused addresses. This is one reason why address reuse has long been discouraged in Bitcoin and why quantum discussions often focus on migration mechanics and user behavior, not only cryptographic algorithms.

What This Means for Base and Ethereum

Coinbase also indicated that Base, its Ethereum Layer 2 network, is included in the post-quantum planning process.

Base benefits from Ethereum’s security model, so its long-term quantum posture will be closely tied to Ethereum’s Layer 1 roadmap. If Ethereum introduces post-quantum signature options or broader account abstraction patterns that support new authentication schemes, Layer 2 ecosystems can inherit or adapt those protections.

However, Layer 2 networks also have their own components. Sequencers, bridges, governance systems, cross-chain messaging, account infrastructure, and upgrade mechanisms may require separate analysis. A quantum-safe future for Layer 2 will therefore depend on both Ethereum’s base-layer progress and the specific operational design of each scaling network.

Ethereum’s account abstraction work is relevant here because it may make wallet authentication more flexible over time. Instead of being locked into one signature scheme forever, smart contract accounts can potentially support new validation logic. That flexibility could become valuable as post-quantum wallet design matures. Developers can follow broader protocol discussions through the Ethereum roadmap and related research channels.

A Bitcoin Developer Workshop with Stanford

Coinbase’s second public-facing initiative is a Bitcoin developer workshop planned with Stanford University in August. The meeting is expected to bring together Bitcoin Core contributors, cryptographers, researchers, and industry engineers to discuss post-quantum migration paths.

This is a meaningful step because Bitcoin’s upgrade process is intentionally conservative. Any change to Bitcoin’s signature system must be evaluated with extreme care. The network’s value proposition depends on stability, predictability, and broad social consensus. Even when a technical proposal looks promising, it still needs review, implementation, testing, wallet adoption, miner and node operator support, and user trust.

A focused workshop can help the community clarify several hard questions:

• Which post-quantum signature schemes are realistic for Bitcoin?
• How would larger signatures affect block space and fees?
• Should migration be optional, phased, or eventually mandatory?
• How can users move funds safely without creating new attack windows?
• What should happen to coins controlled by old or exposed public keys?
• How should proposals such as BIP-360 be evaluated against alternatives?

The purpose is not to rush a solution into Bitcoin. It is to build a shared understanding of the trade-offs before the industry faces a deadline. That is exactly how high-stakes cryptographic migration should work.

The Bitcoin Security Alliance and Industry Funding

Coinbase is also participating as a founding member of the Bitcoin Security Alliance, a new initiative focused on supporting Bitcoin’s long-term security. The alliance has reportedly received three-year funding commitments totaling $15 million from nine institutions, including major asset managers and Bitcoin infrastructure companies.

This funding matters because Bitcoin development is a public-good problem. The network secures a large global asset, but many of the developers who maintain and improve it do not work for a single company that captures all the benefits. Long-term issues such as quantum readiness require sustained research, review, and engineering capacity.

Coinbase’s contribution is expected to include both financial support and direct engineering work. That combination is important. Grants can help independent developers focus on deep protocol research, while engineering support from large infrastructure operators can help test real-world implementation constraints.

The broader lesson is that quantum safety cannot be outsourced to one company. Bitcoin, Ethereum, and the wider crypto ecosystem are shared systems. Their long-term resilience depends on coordination across researchers, protocol maintainers, wallet developers, exchanges, custodians, miners, validators, and users.

Why Post-Quantum Migration Is Harder for Blockchains

Traditional software systems can often rotate certificates, update encryption libraries, or change authentication methods through centralized deployments. Blockchains are different.

A public blockchain must preserve old state while allowing future upgrades. It must avoid breaking existing users. It must prevent attackers from exploiting migration confusion. It must maintain decentralization and keep verification affordable for ordinary nodes.

Post-quantum signatures also tend to be larger than today’s elliptic curve signatures. This can affect transaction size, fee markets, block propagation, archival storage, and hardware requirements. Some schemes may be efficient for verification but costly for signing, while others may have different assumptions or implementation risks.

There is also the user side. If a network introduces quantum-safe addresses, users need to understand when and how to move funds. Exchanges and custodians need operational procedures. Wallets need clear interfaces. Developers need testing tools. Indexers, explorers, tax software, payment processors, and institutional systems may all need updates.

In short, post-quantum cryptography is not just a cryptographic upgrade. It is an ecosystem migration.

What Crypto Users Should Do Today

For everyday users, the most important point is to stay realistic. Quantum attacks against Bitcoin or Ethereum are not a practical consumer threat today. There is no need to panic, move funds impulsively, or trust anyone claiming to offer an urgent “quantum-proof” workaround.

However, users can still improve their security posture now:

• Avoid address reuse where possible, especially on Bitcoin.
• Keep wallet software and firmware updated.
• Use strong self-custody practices and protect recovery phrases offline.
• Be cautious of phishing campaigns that exploit quantum-related fear.
• Follow credible protocol development rather than social media alarmism.
• Understand that true quantum safety must be supported at the network level.

Hardware wallets remain important for today’s threat model because they help keep private keys isolated from internet-connected devices. But no wallet can single-handedly make a blockchain quantum-safe if the underlying protocol still uses legacy signature schemes. The responsible approach is to combine strong present-day key protection with readiness for future network upgrades.

Where OneKey Fits In

OneKey’s focus on secure self-custody, open-source transparency, and offline private key protection aligns with the security principles users need today. As the industry prepares for post-quantum cryptography, the most practical user action remains protecting keys against current risks: malware, phishing, malicious approvals, seed phrase exposure, and compromised devices.

When major networks eventually adopt post-quantum standards, wallet ecosystems will need to support new address types, signing flows, and migration tools. Until then, a hardware wallet helps users reduce the most common attack surface while maintaining control of their assets.

The Bottom Line

Coinbase’s post-quantum roadmap is significant because it treats quantum readiness as an engineering and coordination challenge, not a marketing slogan. PQ-CoreKMS, internal cryptographic inventory work, Base planning, the Stanford Bitcoin workshop, and support for the Bitcoin Security Alliance all point in the same direction: crypto security must prepare before the threat becomes immediate.

The industry does not need panic. It needs research, standards, testing, funding, and careful migration design.

Quantum computing may arrive gradually, then suddenly. For blockchain networks built to last for decades, preparation has to start now.