Coinbase Prepares Post-Quantum Custody Architecture Amid Growing Quantum Risk Concerns

Coinbase is working on a post-quantum custody architecture for approximately $250 billion in institutional assets it holds for BlackRock and other clients. This move comes as a response to growing concerns about quantum risk, which could potentially compromise the security of existing custody models.

The current system relies on multi-party computation (MPC), where private key shares are split across multiple parties, making it difficult for any single machine to assemble the full key. However, this approach may not be compatible with post-quantum signatures, which lack the arithmetic structure required for MPC to function.

Coinbase is treating quantum risk as an operational migration challenge rather than a distant threat. The company's head of cryptography, Yehuda Lindell, has stated that 'it's unlikely that there will be a single signing scheme that everybody will use,' due to the uncertainty surrounding Bitcoin's post-quantum standard.

Coinbase is developing a programmable hardware security module (HSM) fallback as a hedge against potential incompatibility issues. If Bitcoin chooses an incompatible signing scheme, Coinbase would post-quantum-encrypt keys and assemble them only inside physically hardened HSMs in private data centers.