How Coinbase Is Preparing a $250 Billion Bitcoin Custody Strategy for a Post-Quantum Future

Table of Contents

• You might want to know


• Main Topic


• Key Insights Table


• Afterwards...

You might want to know

1. How is Coinbase designing custody safeguards so they remain effective if Bitcoin adopts a post-quantum signature standard?

2. If a post-quantum signature is unsuitable for Multi-Party Computation (MPC), what fallback options can preserve institutional-grade security?

Main Topic

Coinbase is proactively developing custody protections intended to secure roughly $250 billion in client assets in a future where large-scale quantum computers could undermine current cryptography. The company’s head of cryptography has explained that the design objective is broad compatibility: safeguards must accommodate multiple possible post-quantum signing schemes rather than assume a single standard. That approach recognizes uncertainty about which signature families blockchains — including Bitcoin — will ultimately standardize on.

Today, Multi-Party Computation (MPC) is widely used in institutional custody because it distributes cryptographic authority across participants. MPC achieves a functional equivalent of multi-signature setups by splitting a private key into shares stored on separate devices or held by different parties. Transactions are authorized only after a required quorum of shares collaborates to produce a valid signature, and at no point is the complete private key reconstructed on an exposed device. This off-chain technique reduces single points of failure and helps meet institutional security expectations.

However, the transition to post-quantum cryptography introduces challenges. Many candidate post-quantum signature schemes, notably certain hash-based constructions, do not possess the algebraic structure that makes conventional key-splitting and MPC straightforward. That structural absence, while a contributor to their presumed quantum resistance, can also make building MPC-compatible protocols difficult or impossible using established techniques.

This incompatibility between some post-quantum signature families and MPC is the central design problem Coinbase is addressing. Because it is unlikely that every blockchain will standardize on a single post-quantum signature scheme, custody systems must be capable of supporting multiple outcomes. Designing for such multiplicity requires both flexibility in the custody stack and contingency plans for schemes that are "non-MPC-friendly."

Active research is attempting to bridge this gap. Leading cryptographers have proposed exploratory approaches that could enable MPC-like behavior for otherwise difficult post-quantum signatures, and experimental papers have begun to appear. Nonetheless, these efforts remain in an early, uncertain phase: there is no guarantee a practical, secure MPC analogue will be available for all candidate schemes within a useful timeframe.

Given those uncertainties, Coinbase is also investigating an HSM-centered fallback architecture. Programmable Hardware Security Modules (HSMs) are tamper-resistant devices designed to store and operate on secret keys in physically secured environments. Under the proposed fallback, private keys would be encrypted with post-quantum algorithms and only ever assembled within the protected boundary of an HSM inside Coinbase’s secure data centers. This preserves strong protections even when the mathematical structure required for MPC is absent.

While keeping a whole key in a single place—even momentarily—appears less resilient than a distributed MPC approach, HSMs provide industry-grade mitigations: hardware-enforced side-channel countermeasures, strict controls over code uploads, auditability, and rigorous physical access protections. In practical terms, these measures can substantially reduce the attack surface and provide an acceptable security posture for institutional custody when MPC is infeasible.

Operationally, Coinbase aims for an agnostic custody platform: once its post-quantum work is complete, the company intends to support a wide array of signature schemes and blockchain-specific choices. That adaptability is intended to remove a future scenario where a given blockchain selects a post-quantum signature Coinbase cannot support, thereby preserving service continuity for institutional clients regardless of the technical paths different networks take.

In summary, Coinbase’s strategy is twofold: continue to pursue MPC-compatible constructions where feasible, while simultaneously building an HSM-based fallback that preserves strong protections when MPC is impractical. This dual approach balances cryptographic caution with pragmatic engineering controls to protect client assets as the ecosystem migrates toward post-quantum standards.

Key Insights Table

Afterwards...

Looking forward, the industry should continue investing in three complementary areas: cryptographic research to produce MPC-compatible post-quantum schemes where possible; robust engineering of hardware-backed key management like programmable HSMs; and cross-industry standards that enable interoperability and auditability across diverse signing schemes. Emphasizing both theoretical advances and practical mitigations will be essential to preserve institutional custody assurances as quantum-capable adversaries become a realistic consideration.

Sustained collaboration between academia, protocol developers, and custodians will accelerate viable solutions and reduce the risk of fragmented, unsupported choices across blockchains.