The Quantum Threat: Coinbase Warns of Security Risks for 7 Million Bitcoin

A new report from Coinbase’s Quantum Advisory Council highlights a looming long-term challenge for the Bitcoin network, identifying millions of coins that could eventually be vulnerable to sufficiently powerful quantum computers.

The Vulnerability of Legacy Addresses

According to the findings, approximately 7 million Bitcoin—nearly a third of the total supply—could face security risks if the network does not migrate to post-quantum cryptographic standards. The primary concern lies in legacy Pay-to-Public-Key (P2PK) addresses and instances of address reuse. The report estimates that 1.7 million BTC are currently stored in legacy formats, while another 5 million BTC are tied to reused addresses that expose public keys. In a future where quantum computing is sufficiently advanced, these exposed public keys could potentially be used to derive private keys, putting those funds at risk of theft.

Planning for a Post-Quantum Future

While the threat of quantum computing remains a future-oriented risk rather than a present-day reality, the report emphasizes the necessity of proactive governance and long-term planning. Proposed mitigations include the implementation of zero-knowledge proof tools, such as BIP-361, and the introduction of "Hourglass" withdrawal rate limiters to slow down potential exploits. However, any migration strategy would likely be met with controversy within the community. Decisions regarding whether to freeze or restrict abandoned coins and inactive wallets would require unprecedented social coordination and consensus among Bitcoin stakeholders.

A Governance Challenge, Not a Market Panic

For investors, the takeaway is one of measured preparation rather than immediate alarm. The report frames the quantum threat as a complex governance and technical migration hurdle rather than a near-term market threat. By separating alarmist claims from verifiable cryptographic risks, the analysis provides a roadmap for how the network can evolve its security model over time. Ultimately, the strength of Bitcoin’s response will depend on the community's ability to balance security upgrades with the core principles of decentralization and user autonomy.