Coinbase Council Urges Proactive Quantum Security Preparations for Blockchains
Coinbase’s quantum advisory council is pressing blockchain developers to begin preparing for a post-quantum future immediately, arguing that the technical work required to upgrade Bitcoin, Ethereum, and other networks should not be delayed until a consensus is reached on how to handle vulnerable or abandoned coins.
In a report released Thursday, the council highlighted one of the most contentious issues facing the industry: the fate of cryptocurrencies whose owners fail to migrate to quantum-safe addresses.
“No quantum computer can break blockchain cryptography right now,” the council stated. “But timelines are uncertain, and the crypto community needs to start preparing now rather than debating exactly when the threat will arrive.”
Launched in January, Coinbase’s Independent Advisory Board on Quantum Computing and Blockchain comprises researchers from academia and industry, including representatives from Stanford University, the University of Texas at Austin, the Ethereum Foundation, Eigen Labs, Bar-Ilan University, and UC Santa Barbara. The board’s mission is to study quantum risks to blockchain networks.
The report emerges as researchers warn that a “cryptographically relevant quantum computer”—one powerful enough to break the elliptic curve digital signatures that secure Bitcoin, Ethereum, and other major blockchains—is more likely than not to exist as early as 2030.
According to the advisory council, this issue could impact millions of Bitcoin currently held in legacy addresses where public keys are already exposed, rendering them directly susceptible to future quantum attacks.
“Many of these are believed to be Satoshi’s coins or funds whose owners have long since lost their keys,” the report noted. “Factor in address reuse across other address types, and approximately 7 million Bitcoin total are currently considered quantum-vulnerable.”
The report outlines three potential approaches for coins that do not migrate to quantum-safe addresses. The first option is to permanently freeze, or “burn,” these coins after a specified deadline. The second is to take no action, allowing users to decide their course, with the council adding that “forcing coins to be burned overrides property rights and sets a precedent for network-level interference that conflicts with Bitcoin’s core principles.” The third approach suggests intermediate steps, such as limiting the number of vulnerable coins that can be moved per block or accepting special cryptographic proofs in lieu of legacy signatures, enabling users to “pre-commit to migrations without publicly moving funds yet.”
“We stress that the above proposals are compatible with each other; there is no reason to not adopt more than one or all of them, since each has its own advantages,” the council wrote.
This debate unfolds as major blockchain networks begin their own preparations for a post-quantum era. In January, the Ethereum Foundation established a team to coordinate Ethereum’s transition to post-quantum security and has been exploring the replacement of validator and wallet signatures with quantum-resistant alternatives. This was followed in February by Ethereum co-founder Vitalik Buterin’s release of a roadmap for quantum upgrades.
In April, the Coinbase advisory council cautioned that proof-of-stake networks, including Ethereum and Solana, might be particularly vulnerable to future quantum attacks. This is because the validator signatures used to secure these blockchains rely on cryptography that quantum computers could eventually compromise.
On Tuesday, the Stellar Development Foundation unveiled a roadmap for migrating users to quantum-safe cryptography. Meanwhile, Bitcoin developers continue to deliberate on how vulnerable coins should be migrated and what actions should be taken regarding those that remain unmoved.
“The right time to prepare for a cryptographic transition is before it becomes urgent,” a Coinbase Advisory Board spokesperson previously told Decrypt. “Our view is that customer assets are safe today, but the industry should not confuse ‘not imminent’ with ‘not important.’”









