Coinbase is advancing a post-quantum custody system capable of supporting a wide range of signature schemes as the industry prepares for potential quantum computing threats to digital asset security. Yehuda Lindell, the company’s head of cryptography, outlined the approach in a recent discussion, noting that the firm aims to protect roughly $250 billion in assets held for institutional clients including BlackRock.

The strategy prioritizes flexibility because no single post-quantum signing standard is expected to dominate across networks. Lindell stated that different blockchains will likely select different schemes, requiring custodians to remain ready for multiple technical outcomes.

Current Custody Model and Emerging Constraints

Coinbase’s institutional custody currently relies on multi-party computation, or MPC. Under this method, private key shares are distributed among multiple parties so that no complete key ever resides on a single device. Transactions require a quorum of shares, eliminating a single point of failure while enabling secure signing offline.

This model has underpinned the firm’s role as a major custodian for U.S. crypto exchange-traded funds. However, many candidate post-quantum signature schemes, particularly those based on hash functions, lack the mathematical structure that traditional MPC depends on. The same properties that make hash-based signatures resistant to quantum attacks also complicate key-splitting techniques.

Research into making hash-based signatures compatible with MPC-like approaches continues, including experimental work by cryptographers such as Dan Boneh. Wallet developers have also noted related challenges with certain post-quantum designs. At present, practical MPC solutions for these schemes remain uncertain.

Hardware Security Module Fallback

To address schemes incompatible with MPC, Coinbase is developing a fallback architecture centered on programmable hardware security modules. In this setup, private keys would be encrypted using post-quantum methods and assembled only inside physically secured HSMs located in private data centers.

Although assembling a full key within a single device is theoretically less ideal than pure MPC, the modules incorporate rigorous physical protections against side-channel attacks and strict controls over code uploads. Lindell indicated confidence in this layered approach given those safeguards.

The overall design remains agnostic to the specific signature scheme Bitcoin or other networks ultimately select. Once completed, the system is intended to support any standard that emerges.

Broader Industry Context

Coinbase has already taken steps on quantum-related security. In July 2026 the firm joined a group of major institutions to form a consortium focused on open-source Bitcoin security research, with quantum resilience among the priorities. The group committed funding over a multi-year period.

Timelines for full implementation of Coinbase’s post-quantum measures have not been finalized. The work proceeds against a backdrop of ongoing discussions about migration windows and varying approaches by other networks. The firm’s focus remains on building custody infrastructure that can adapt without depending on any single technical outcome.