Bitcoin’s Quantum Migration Debate Moves Into Engineering

Avatar photo

ByRyan Mitchell

October 28, 2026

Coinbase’s discussion of post-quantum Bitcoin upgrades puts wallet compatibility, signature standards and dormant coins at the center of a long-term infrastructure debate.

Bitcoin’s most consequential infrastructure discussion this week is not a completed protocol upgrade, but how the network might prepare for a future in which quantum computers threaten today’s cryptographic signatures. Coinbase has circulated a discussion document outlining possible migration paths; it has not chosen a final design or proposed an immediate change to Bitcoin’s rules.

The issue is as much operational as cryptographic. A new signature scheme would need to work across wallets, nodes, exchanges and custodians, while holders would have to move funds into compatible addresses. Coinbase is seeking evaluation of wallet and node compatibility and performance before determining next steps, according to ChainCatcher’s October 27 report.

The document describes a five-stage concept: voluntary transfers to quantum-resistant addresses, hybrid addresses, measures to conceal public keys during transfers, restrictions on vulnerable legacy addresses, and a final policy for coins that remain in old addresses. That sequence is a proposal for discussion, not an adopted timetable. The treatment of dormant or lost Bitcoin remains particularly sensitive, and Coinbase’s proposal separates that question from the broader signature upgrade rather than endorsing immediate freezing or forced recovery.

Two designs illustrate the engineering trade-offs. BIP-360, also known as Pay-to-Merkle-Root or P2MR, removes Taproot’s key-path spending and can reduce public-key exposure. But it is not a complete quantum-resistant solution: additional upgrades would still be needed to support post-quantum signatures, ChainCatcher reported.

P2TRv2 is another design under consideration. Its proposed output structure could accommodate multiple or replaceable signature schemes. A possible 1-of-2 hybrid arrangement would let a holder spend using either a conventional ECDSA or Schnorr key, or a post-quantum key. Such a bridge could offer flexibility during migration, but it would also add complexity that developers and infrastructure providers would need to assess.

Candidate signature systems include ML-DSA, SLH-DSA, FN-DSA, also known as Falcon, and experimental SHRINCS. The report describes ML-DSA and SLH-DSA as standardized, while noting that Falcon offers smaller signatures but has implementation and standardization concerns. SHRINCS, meanwhile, carries strict key-management requirements. NIST’s standardization of post-quantum schemes provides possible building blocks, but does not settle which one Bitcoin should adopt. Larger keys and signatures could increase bandwidth, storage and transaction-cost burdens.

The central risk described in the coverage is coordination, not a known current quantum attack. Any migration would involve developers and miners, but also hardware-wallet makers, custodians, exchanges and individual holders. Coinbase’s role as a major custodian gives its proposal institutional weight, but Bitcoin’s decentralized engineering process leaves no single company in a position to dictate a network-wide change.

ETF flows offered a separate measure of institutional activity. U.S. spot Bitcoin funds recorded about $176 million in net inflows on October 27, according to TokenPost reports published the following day. BlackRock’s IBIT accounted for roughly $151.5 million and Fidelity’s FBTC for about $24.5 million; the other 10 funds reported no net flow, and none reported an outflow. A SoSoValue-based accounting put the total at $175.99 million and total net assets at $103.94 billion.

The flows were concentrated, but they do not resolve the protocol questions. For Bitcoin, the week’s more durable development is a debate about how cryptography, custody and governance might adapt before a future threat becomes urgent. Coinbase has framed possible routes; the technical choices, migration mechanics and policy for unmoved coins remain open.

Leave a Reply

Your email address will not be published. Required fields are marked *