Coinbase is engineering a post-quantum custody architecture to protect approximately $250 billion in institutional assets held for clients, including BlackRock. The initiative addresses upcoming cryptographic threats as federal timelines and industry migration deadlines approach.
Currently, Coinbase's institutional infrastructure relies on multi-party computation (MPC), where private key shares are split across multiple parties so that no single machine ever assembles the full key. However, Yehuda Lindell, Head of Cryptography at Coinbase, revealed that leading post-quantum custody candidates—particularly hash-based signatures—lack the specific arithmetic structure required for MPC to function.
To address this blind spot, Coinbase is planning a programmable hardware security module (HSM) fallback. If Bitcoin eventually adopts a signing scheme that is incompatible with MPC, Coinbase intends to post-quantum-encrypt keys and assemble them exclusively inside physically hardened HSMs located within private data centers.
As part of its broader quantum strategy, Coinbase co-founded the Bitcoin Security Consortium in July 2026 alongside firms including BlackRock, Strategy, Fidelity, ARK Invest, Block, Blockstream, Anchorage, and Galaxy. The consortium pledged $15 million over three years to support open-source Bitcoin security work, with a primary focus on quantum resistance.
Industry-wide urgency is growing due to NIST-aligned migration deadlines pointing toward the 2028 to 2031 window, as well as distinct plans from other blockchain networks. Ethereum is targeting a full quantum-resistant Layer 1 by December 2029, El Salvador has split its Bitcoin holdings to reduce exposure, and XRP Ledger engineers have warned that the threat window could close as early as 2028.
Coinbase aims to establish a crypto-agile, dual-stack custody model utilizing hybrid signatures where possible and HSM fallbacks where necessary, ensuring readiness for future blockchain improvement proposals without risking its institutional mandate.
