For years, the biggest security fear in cryptocurrency has been painfully familiar: hackers steal private keys, exchanges get breached, or users lose access to their wallets.
Coinbase is preparing for a much more futuristic threat.
The cryptocurrency exchange is redesigning part of its institutional custody strategy around a problem that may still be years away but could eventually challenge the cryptographic foundations supporting Bitcoin and other digital assets: quantum computing.
Coinbase’s head of cryptography, Yehuda Lindell, says the company is developing safeguards that can adapt to multiple possible post-quantum signature systems because no single standard has yet emerged for how major blockchain networks will protect themselves against future quantum attacks.
The issue is enormous in scale because Coinbase says it safeguards roughly $250 billion in assets on behalf of institutional customers.
That means a technical problem that might look abstract to an individual Bitcoin holder becomes a very real infrastructure challenge for an institution responsible for hundreds of billions of dollars in digital assets.
At the heart of the issue is something called Multi-Party Computation, or MPC.
MPC has become an important security technique for institutional crypto custody because it allows a private key to be divided into multiple shares. Different parties or systems can hold those shares, and a transaction can be approved only when enough shares participate.
The advantage is straightforward: the entire private key does not need to exist in one place.
That reduces the risk associated with a single device or location being compromised.
Coinbase uses custody systems based around this kind of architecture, but quantum computing introduces a difficult question.
What happens if the cryptographic signatures selected by a blockchain are incompatible with MPC?
According to Lindell, that possibility is already being studied.
The problem is particularly relevant to certain hash-based post-quantum signature systems. These cryptographic methods are being explored because they are designed with resistance to quantum attacks in mind, but their mathematical structure may make some conventional forms of MPC difficult or impractical.
That creates a strange technological trade-off.
The same mathematical characteristics that can make a signature scheme attractive from a quantum-resistance perspective may also make it harder to divide and protect cryptographic keys across multiple independent parties.
For a crypto custodian, that is not a minor engineering inconvenience.
It could require the entire architecture of transaction authorization to change.
Coinbase is therefore researching a fallback approach involving programmable Hardware Security Modules, or HSMs.
An HSM is essentially a highly protected hardware environment designed to store and use sensitive cryptographic material. Under Coinbase’s proposed fallback architecture, private keys would be protected with post-quantum encryption and assembled within the secure environment of an HSM when needed for signing.
That differs fundamentally from traditional MPC.
With MPC, the complete private key is never assembled in one location. In the HSM approach described by Lindell, the full key would exist inside the secure hardware environment, at least temporarily.
From a purely architectural perspective, that is less attractive than never assembling the key at all.
But hardware security has a different set of defenses.
Lindell said Coinbase is comfortable with the proposed design because secure HSMs provide protections against physical attacks and unauthorized modification, including controls over what code can be uploaded to the device.
The project highlights one of the most unusual characteristics of cryptocurrency security: the industry has to plan for threats that do not yet exist at commercially meaningful scale.
There is no widely demonstrated quantum computer today that can simply walk into a crypto wallet and steal Bitcoin.
The concern is about the future.
A sufficiently capable quantum computer could theoretically threaten some of the mathematical problems underlying widely used public-key cryptography. In cryptocurrencies, that raises questions about whether an attacker might eventually be able to derive or exploit private keys associated with exposed public keys.
The precise timeline remains uncertain.
That uncertainty is exactly why Coinbase is focusing on flexibility rather than betting on a single future standard.
Lindell told Decrypt that it is unlikely every blockchain will adopt one universal signing scheme. Different networks may choose different approaches depending on technical constraints, security assumptions and upgrade capabilities. Coinbase wants its custody architecture to be able to support multiple outcomes.
That is an important distinction.
The company is not announcing that Bitcoin has already adopted a new post-quantum signature algorithm.
Bitcoin has not settled on one specific future scheme.
Instead, Coinbase is preparing for the possibility that networks may eventually require new cryptography and that those new systems may not fit perfectly with current custody technology.
Researchers are already exploring alternatives.
Decrypt noted that cryptographers including Stanford professor Dan Boneh are researching MPC-like methods for hash-based signatures, including work referenced in the PRAWNS research paper. But the research remains experimental, leaving open the question of whether such methods will become practical enough for large-scale institutional custody.
That uncertainty creates an unusual situation for companies like Coinbase.
They cannot wait until a quantum threat becomes immediate before upgrading their security systems.
Institutional custody infrastructure is highly regulated, deeply integrated and difficult to redesign overnight. Any major change has to be tested, audited and integrated without creating new operational vulnerabilities.
The scale of Coinbase’s custody business raises the stakes even further.
With roughly $250 billion in assets under custody according to the reporting, the exchange is no longer simply protecting individual traders’ wallets. It is building infrastructure for major financial institutions, funds and companies participating in the digital-asset market.
That customer base changes the meaning of security.
For retail users, losing access to a wallet can be catastrophic.
For an institution responsible for billions, a cryptographic failure could have systemic consequences for clients and counterparties.
The transition to quantum-resistant cryptography is therefore likely to become a major infrastructure theme across the digital-asset industry.
Exchanges, custodians, wallet manufacturers and blockchain developers will all eventually have to consider how their systems respond if traditional signature algorithms become vulnerable.
The challenge is that upgrading a blockchain is not like installing a software update on a laptop.
Different networks have different governance structures, technical constraints and user bases. Some assets are held in long-term addresses that may not move for years. Institutions may also need to migrate huge quantities of funds while preserving auditability and operational controls.
That makes preparation valuable even when the precise threat timeline remains uncertain.
Coinbase’s approach is essentially a hedge against technological uncertainty.
Rather than assuming Bitcoin or another blockchain will choose a particular signature system, the company wants custody infrastructure capable of adapting to whatever direction developers eventually take.
The work is still in development, and Coinbase has not announced a final timetable for completing the post-quantum architecture.
But the strategic message is already clear.
Crypto custody is entering a stage where security is no longer just about protecting keys from today’s hackers.
It is also about preparing for an entirely different generation of computing.
The quantum threat may still belong to the future.
For Coinbase, the engineering response has already begun.