Menu

Post-Quantum Cryptography

Bitcoin Address Reuse Warning Puts Quantum Risk Back In Focus

Bitcoin Address Reuse Warning Puts Quantum Risk Back In Focus

, , , , , ,

BitcoinJune 15, 2026·6 min read

A Coinbase-linked advisory has surfaced concerns about Bitcoin address reuse and legacy cold wallets as long-term exposure points if quantum computing advances threaten current cryptographic assumptions. For institutional custodians and large holders, this signals the need for migration planning well before quantum risk becomes an active threat rather than a theoretical one.

  • Coinbase-linked discussion flagged address reuse and legacy Bitcoin wallets as future quantum-risk exposure points for large holders
  • Exposed public keys become visible on-chain when coins are spent, creating potential vulnerability under quantum-capable computing scenarios
  • Institutional custodians face custody model adaptation challenges if ecosystem requires migration to quantum-resistant signatures in future
  • Future Timeline when quantum risk becomes active threat, not immediate emergency or security break
  • Legacy Wallets and reused addresses representing class of coins requiring special attention in post-quantum migration
  • Long-term Planning horizon institutions need to develop clear migration paths before threat becomes urgent

Bitcoin’s quantum-risk debate has crossed a threshold from academic developer discussion into institutional custody planning.

A Coinbase-linked advisory discussion has put address reuse and legacy cold wallets back into focus as long-term exposure points, not because Bitcoin faces an immediate break in its cryptographic security, but because institutions holding large balances need clear migration paths before the risk becomes urgent.

The issue centers on a specific technical fact: when Bitcoin is spent from an address, the public key becomes visible on-chain. Under today’s cryptographic assumptions, that visibility poses no immediate problem.

But if quantum computing advances to the point where it can attack the elliptic-curve digital signature algorithm that secures Bitcoin transactions, those exposed public keys could become more sensitive targets.

Coinbase Advisory Flags Address Reuse as Quantum Exposure Points

The discussion did not originate from a security breach or an active attack. Rather, a Coinbase-linked advisory reportedly flagged custody practices that look acceptable today but may require migration plans before quantum computing becomes a genuine threat. The specific concern is address reuse, the practice of spending Bitcoin from the same address multiple times.

Most Bitcoin users are already discouraged from reusing addresses for privacy reasons, but the quantum angle adds a security dimension that institutional operators cannot ignore.

For institutional custodians, the distinction matters enormously. A retail wallet holding a small balance presents one risk profile. A cold wallet holding large institutional balances presents another entirely.

Institutions do not need Bitcoin to be secure only in 2024 or 2025; they need confidence that their custody model can adapt over time as technology and threats evolve. That requirement creates a forward-looking problem that cannot be deferred until quantum computers actually threaten Bitcoin’s security.

The advisory is not a panic alert. It is a preparation signal. Custody practices that look acceptable today may need a documented migration plan before quantum risk becomes active.

For large holders and exchanges, this means identifying which addresses and wallets hold exposed public keys, understanding which of those represent legacy systems, and developing a timeline for moving to quantum-resistant approaches if the ecosystem eventually requires it.

Exposed Public Keys Create Long-term Migration Liability

Bitcoin’s transaction model works differently from many other systems. When a user spends Bitcoin, they must provide a signature proving ownership of the coins at that address. That signature is generated using a private key, but the transaction also reveals the corresponding public key on-chain.

In the current era of cryptographic security, knowing the public key does not allow an attacker to derive the private key or spend the coins. The mathematics of elliptic-curve cryptography make that computation effectively impossible with today’s computing power.

Quantum computers, if they reach sufficient capability, could change that equation. Shor’s algorithm, which runs on quantum computers, is theoretically capable of breaking elliptic-curve cryptography much faster than classical computers could. This does not mean quantum computers exist at that scale today or will exist tomorrow.

It means that addresses holding spent coins with exposed public keys represent a potential future liability class that serious custodians need to track.

The problem compounds for institutions holding Bitcoin in legacy wallets or cold storage systems that may not easily support newer quantum-resistant cryptographic schemes. A dormant address holding large institutional balances cannot be easily migrated if the entity controlling it no longer exists, is unreachable, or operates under governance structures that move slowly.

That is where the institutional custody problem becomes genuine: not as an immediate emergency, but as a long-term infrastructure challenge that requires planning and coordination across wallets, exchanges, developers, and custodians.

Institutional Custody Models Must Plan for Migration Before Urgency Arrives

Bitcoin is becoming more institutional every year. Banks, exchange-traded funds, custodians, public companies, and large asset managers are now material holders of Bitcoin. That shift changes the risk calculus around quantum-resistant migration.

Retail users holding small amounts in modern wallets can afford to wait and move quickly when a genuine threat appears. Large custodians holding billions in client assets cannot operate that way. They need clear paths, tested procedures, and documented plans before a crisis moment forces rushed migration.

The complexity lies not just in technical migration but in coordination. If the Bitcoin ecosystem eventually needs to adopt quantum-resistant signatures, that change would require consensus among developers, miners, and node operators. It would require exchanges to upgrade custody systems.

It would require wallet software to support new signature schemes. It would require institutions to migrate holdings from old addresses to new ones. That coordination problem becomes exponentially harder if it happens in response to an active threat rather than in response to a planned, predictable timeline.

This is why the Coinbase advisory discussion matters now. Good security planning happens before a threat becomes active, not after. If the industry waits until quantum risk becomes obvious and immediate, migration will be more stressful, more politically contentious, and more technically difficult.

Institutions that map their exposure today, understanding which addresses hold exposed keys, which wallets are legacy systems, and what governance changes would be required to migrate, will be far better positioned than those that defer the conversation.

Quantum Risk Moves from Theory to Institutional Planning Agenda

The quantum-computing threat to cryptocurrency has existed in academic literature for years. Cryptographers and protocol developers have understood the theoretical vulnerability for some time. What has changed is that the conversation is no longer confined to developer conferences and research papers.

It is now appearing in institutional custody discussions, advisory memos, and long-term planning documents at exchanges and custodians. That shift reflects a maturation of Bitcoin as an institutional asset class.

The risk itself is not immediate. Bitcoin is not being broken by quantum computers today. There is no evidence of imminent quantum computing capability that would threaten elliptic-curve signatures at scale. This is not a story about an emergency. It is a story about responsible institutional planning happening in advance of a known long-term vulnerability.

Large holders and custodians cannot afford to treat quantum risk as either an emergency requiring immediate action or as a non-issue to be ignored. The middle path, planning and coordination well before the threat becomes active, is where serious institutions need to operate.

That planning requires understanding which addresses and wallets represent exposure, which require migration, and what clear procedural paths exist for moving to quantum-resistant systems if the ecosystem eventually requires it.

The open question for institutional Bitcoin holders is not whether quantum risk will arrive, but when the industry will coalesce around a clear migration pathway and timeline. Custodians that have already begun mapping their exposure and developing migration strategies will have significant advantages over those that wait for regulatory guidance or consensus to emerge under pressure. Watch for whether major custodians publish quantum-migration roadmaps in the next 12-18 months, and whether Bitcoin protocol developers begin consensus discussions around quantum-resistant signature scheme adoption as a long-term priority.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

BNB Chain Publishes Research Report Exploring Post-Quantum Cryptography Migration Path for BSC

BNB Chain Publishes Research Report Exploring Post-Quantum Cryptography Migration Path for BSC

, , , , , ,

BlockchainMay 14, 2026·5 min read

BNB Chain has published a technical roadmap for migrating BSC’s core cryptography to quantum-resistant algorithms, revealing that the transition is technically feasible but would cut transaction throughput by roughly 40% and increase block sizes by 18x. This matters to institutional investors because it signals how major L1 chains are preparing for long-term infrastructure resilience against future quantum threats, and reveals the hard tradeoffs between security hardening and network performance that will shape blockchain architecture decisions over the next decade.

  • Native transfer throughput would drop from 4,973 TPS to 2,997 TPS under post-quantum migration, a 40% reduction in capacity.
  • Transaction size would balloon from 110 bytes to approximately 2.5 KB, and block size from 110 KB to 2 MB, creating network propagation bottlenecks.
  • Validator signature aggregation achieved 43:1 compression using pqSTARK, keeping consensus-layer overhead manageable despite larger individual signatures.
  • 2.5 KB Post-quantum transaction size versus 110 bytes in current BSC operations
  • 40% Throughput decline from 4,973 to 2,997 native transfer TPS under migration
  • 43:1 Validator signature compression ratio achieved by pqSTARK aggregation layer

BNB Chain has released a comprehensive technical evaluation of how the BSC mainnet could transition to post-quantum cryptographic primitives, mapping out the path, performance costs, and architectural bottlenecks that would accompany such a migration.

The research focuses on replacing traditional ECDSA transaction signatures with ML-DSA-44, a quantum-resistant algorithm, and deploying pqSTARK aggregation for validator consensus signatures.

While quantum computers remain theoretically incapable of threatening existing blockchain cryptography in production systems, the work reflects institutional-grade infrastructure planning for a future threat horizon that could emerge within 10 to 20 years.

The research represents a departure from typical blockchain development, which has historically treated cryptographic foundations as immutable. Instead, BNB Chain is publishing concrete engineering data on the feasibility, cost, and timing of a controlled migration, information that will likely inform how other L1 chains and institutional custodians approach quantum readiness.

Post-Quantum Migration Cuts Throughput by 40% While Network Overhead Emerges as Primary Constraint

The most significant finding from BNB Chain’s testing is that post-quantum readiness is technically achievable, but the performance penalty falls almost entirely on network layer efficiency rather than cryptographic computation.

Transaction sizes would expand 23-fold, from 110 bytes to roughly 2.5 kilobytes, and block sizes would grow proportionally from 110 KB to 2 MB. These larger data structures create measurable propagation delays across the BSC validator network, particularly in cross-region consensus rounds.

The throughput impact is concrete: native transfer transactions per second would decline from 4,973 TPS to 2,997 TPS, representing a 40% capacity loss.

For comparison, Ethereum currently processes around 12-15 transactions per second on its base layer, making BSC’s post-quantum throughput still substantially higher than the dominant settlement layer, but meaningfully lower than BSC’s current competitive positioning among high-throughput L1s.

Solana, by contrast, claims 65,000 theoretical TPS, though finality and consistency remain distinct from raw throughput claims.

The report makes clear this penalty stems from data propagation overhead, not signature verification speed itself.

Validator Consensus Remains Efficient Despite Larger Signature Sizes Through pqSTARK Aggregation

A critical mitigating factor emerges in the validator consensus layer, where BNB Chain’s testing of pqSTARK aggregation achieved a 43:1 compression ratio on validator signatures.

This means that while individual post-quantum signatures are substantially larger than ECDSA equivalents, cryptographic aggregation techniques can compress validator consensus data back into a manageable footprint, preventing the validator set from becoming a scaling bottleneck.

This distinction matters operationally. In Ethereum’s proof-of-stake model, validators are already aggregating signatures using BLS aggregation; switching the underlying cryptographic scheme would not require a fundamental rearchitecture of consensus, merely a substitution of the aggregation scheme itself.

BNB Chain’s pqSTARK results suggest that post-quantum consensus layers can achieve similar efficiency gains, keeping the overhead manageable even as transaction-level data expands.

The implication is that transaction throughput, not validator coordination, would be the binding constraint in a post-quantum BSC.

Public Key Storage and Cross-Chain Interop Remain Outside Current Scope, Requiring Ecosystem Coordination

BNB Chain explicitly notes that several critical infrastructure components were deliberately excluded from this evaluation, including post-quantum replacements for P2P handshake cryptography and KZG commitments used in rollup verification.

These omissions are not trivial: KZG commitments anchor the security model of Ethereum’s EIP-4844 blob storage, and similar commitment schemes underpin interoperability between L1s and L2s across the broader ecosystem.

The research acknowledges that any production migration to post-quantum cryptography would require coordination far beyond a single chain. Bridges between BSC and other L1s, custodial systems, and cross-chain messaging protocols would all need simultaneous or staged upgrades to prevent cryptographic asymmetries that could create exploit vectors.

This coordination problem is why the National Institute of Standards and Technology (NIST) finalized post-quantum cryptography standards only in August 2022, after a multi-year public vetting process, ecosystem lock-in and standardization are prerequisites, not afterthoughts.

BNB Chain frames the research as a long-term infrastructure study rather than a response to immediate threat, a distinction that matters for institutional risk assessment. No known quantum computer currently poses a threat to blockchain cryptography, and the timeline for such capability remains highly uncertain.

The research appears aimed at establishing technical readiness and identifying architectural constraints that will need to be solved over the next 5-10 years as quantum computing matures.

Institutional Custody and Bridge Security Expose Longer Time Horizon Than Commonly Assumed

For institutional investors and custodians, the real urgency of post-quantum migration stems not from an imminent quantum threat to mainnet validators, but from the longer security lifespan of stored private keys.

A large institutional holding locked in cold storage today could potentially remain vulnerable to “harvest now, decrypt later” attacks, where an adversary records encrypted transactions or signatures today and waits for quantum capability to break the key material retroactively.

This risk applies most sharply to bridge custody and long-term holdings. If a custodian holds private keys for five or ten years, and quantum computers become capable of breaking ECDSA within that window, the holder faces immediate loss.

This asymmetry explains why major custodians and institutions have quietly begun evaluating post-quantum key migration strategies, independent of when mainnet protocols migrate. Fidelity, Coinbase Custody, and other institutional-grade services will likely face pressure to offer post-quantum key management options before any blockchain infrastructure makes the switch.

BNB Chain’s research thus accelerates institutional timeline pressure rather than mainnet urgency.

40% Throughput Loss Suggests Post-Quantum Networks May Require New Scaling Architecture

The BSC testing results illuminate a broader architectural question: if a major L1 chain faces 40% throughput loss under post-quantum migration, can that be offset through layer 2 scaling, or does it fundamentally alter the economics of high-throughput chains?

Optimistic rollups and ZK-rollups both rely on signature verification for both execution and verification; moving to post-quantum primitives would ripple through the entire scaling stack.

This suggests that post-quantum blockchains may emerge with different scaling patterns than current networks. Rather than competing primarily on mainnet throughput, post-quantum L1s might optimize for rollup verification efficiency or move consensus to threshold schemes that are naturally quantum-resistant. Chains built around threshold cryptography

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

qday-2-thumbnail

Q-Day Is Coming. Your Wallet Is Already Being Targeted.

, , , , , , , ,

Ripple reveals a four-phase plan to make the XRP Ledger quantum-safe by 2028

Ripple reveals a four-phase plan to make the XRP Ledger quantum-safe by 2028

, , , , , ,

BlockchainApril 20, 2026·5 min read

Ripple has unveiled a four-phase roadmap to make the XRP Ledger quantum-resistant by 2028, responding to mounting industry concern that quantum computers could break the cryptographic foundations securing blockchain networks. For institutional investors, the timeline signals both urgency around a technical threat and an opportunity to assess which networks are preparing defenses versus those still treating quantum risk as distant theory.

  • Ripple targets 2028 completion for full XRP Ledger quantum-safety upgrade via four distinct implementation phases beginning now.
  • Approximately 300,000 XRP accounts holding 2.4 billion XRP remain quantum-safe because their public keys have never been exposed on-chain.
  • Recent Google Quantum AI research has elevated quantum risk from theoretical to credible, forcing networks to prioritize post-quantum cryptography adoption timelines.
  • 2028 Target year for complete XRP Ledger quantum-resistance upgrade versus current baseline security.
  • 300,000 XRP accounts with 2.4 billion total XRP unexposed to quantum attacks today.
  • 2026 Year Phase Two begins with formal testing of post-quantum security methods and privacy research.

Ripple has moved faster than most blockchain networks in confronting the quantum computing threat, publishing a detailed four-phase plan to make its XRP Ledger resistant to quantum attacks by 2028.

The timeline addresses a concern that has shifted from academic speculation to credible near-term risk following recent research from Google Quantum AI showing that quantum computers sufficiently powerful to break widely-deployed cryptography could emerge within the next decade.

The roadmap reflects a broader industry split: while some networks remain skeptical of the threat, others are treating quantum-resistant upgrades as infrastructure priorities requiring years of testing and coordination.

Google Research Elevates Quantum Threat From Theoretical to Credible Risk

The Google Quantum AI paper reignited industry concern by demonstrating that the elliptic curve cryptography protecting blockchain wallets, transaction approvals, and digital asset storage could be vulnerable to sufficiently advanced quantum computers.

Most major blockchains, including Bitcoin and Ethereum, rely on this class of cryptography, creating a systemic vulnerability if quantum hardware advances faster than expected. The finding has split industry opinion sharply: some participants, including MicroStrategy founder Michael Saylor, have dismissed the concern as overblown, while others view it as requiring immediate preparation.

Ripple’s assessment differs. In its announcement, the company stated that “the threat has moved from theoretical to credible, and preparation timelines now matter.” The company also flagged a less-discussed vector called “harvest now, decrypt later,” in which bad actors collect encrypted blockchain data today and store it for decryption once quantum computers become powerful enough.

This attack surface means institutions cannot simply wait until quantum computers are demonstrably powerful before beginning upgrades; the window for protecting historical data closes today.

The threat has moved from theoretical to credible, and preparation timelines now matter.

Ripple, in company announcement

Other networks are beginning similar work. Tron founder Justin Sun indicated his blockchain is evaluating post-quantum technical defenses, and various research teams are exploring quantum-resistant alternatives based on lattice cryptography and other methods designed to withstand quantum attacks.

Ripple’s Four-Phase Roadmap Allocates Five Years for XRP Ledger Quantum Upgrade

Phase One, starting immediately, focuses on emergency preparedness. Ripple is building tools enabling users to migrate assets to post-quantum encryption schemes, including zero-knowledge proof methods that would function even if current cryptography is compromised. This phase treats quantum risk as imminent enough to warrant defensive infrastructure now, before Phase Two begins formal testing.

Phase Two launches in early 2026 and runs through year-end, involving formal research into quantum risks and testing of new security tools in collaboration with Project Eleven, an external research initiative. By the end of 2026, Ripple will test advanced post-quantum security methods and explore new privacy-preserving techniques.

Phase Three, spanning 2027, encompasses the formal transition work preparing the entire XRP Ledger for cryptographic upgrade. The fourth and final phase, completing by 2028, deploys native post-quantum cryptography across the entire ledger via formal network amendment, making the protocol resistant to quantum attacks.

The five-year timeline reflects the complexity of upgrading a decentralized network. Unlike centralized systems, blockchain changes require consensus among validators and developers, testing on testnets to prevent unintended breaks, and coordination across custody providers, exchanges, and wallet operators who must support the new cryptographic standards.

XRP’s Current Quantum Exposure Is Lower Than Bitcoin’s Due to Account Age Distribution

An important detail distinguishes XRP Ledger’s quantum vulnerability from Bitcoin’s. Quantum computers pose the greatest risk to wallets where the public key has already been published on-chain, which typically occurs after a wallet’s first transaction.

An April 2026 audit by XRPL validator “Vet” found that approximately 300,000 XRP accounts, collectively holding 2.4 billion XRP, have never executed a transaction and therefore have no publicly exposed cryptographic keys. These accounts remain immune to quantum attacks under current threat models because their public keys remain hidden.

Bitcoin’s holder base skews older, with a far larger proportion of accounts that executed transactions years or decades ago, exposing their public keys to quantum decryption risk.

The same audit noted that only two major dormant XRP accounts with combined holdings exceeding 21 million XRP have remained inactive for more than five years, suggesting most XRP holders either trade regularly or hold on exchanges, where private key management differs from self-custody scenarios.

This distinction matters for institutional custody and risk models. If a significant portion of an institution’s XRP holdings are in newly funded accounts that have never transacted on-chain, quantum risk from those specific holdings is currently lower than for similarly sized Bitcoin positions.

Institutional Investors Face Timing Risk as Quantum Threat Accelerates Timeline

The shift from theoretical to credible quantum threat compresses institutional decision-making timelines. Five years is a short window for upgrading a protocol relied upon by exchanges, custodians, and asset managers managing billions in value. Institutions must now decide whether to treat quantum-resistant upgrades as core infrastructure priorities or allocate resources assuming longer timelines.

Ripple’s public roadmap gives market participants specific milestones to monitor: Phase Two testing in 2026 will reveal whether post-quantum methods can be deployed without breaking wallet interoperability or exchange settlement processes.

The Google research also raises competitive questions among layer-one protocols. Networks that complete quantum-resistant upgrades first may attract institutional capital seeking maximum cryptographic assurance, while networks remaining on classical cryptography face increasing regulatory and operational scrutiny.

Some institutions may require quantum-resistant custody or settlement before adding to positions in networks still running unencrypted key material.

Ripple will publish Phase Two results by end of 2026, providing the first real-world test data on whether post-quantum cryptography can scale on a live decentralized network. Institutions should monitor that testing window closely to assess whether Ripple’s timeline is achievable and whether other networks, particularly Bitcoin and Ethereum, announce comparable roadmaps before the 2028 target. The absence of formal quantum upgrade plans from larger networks by mid-2026 would signal either technical confidence in longer timelines or institutional risk that upgrades may prove more difficult to coordinate than Ripple’s sequential phases assume.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe