BitGo adds quantum-risk controls for institutional Bitcoin custody

BitGo Holdings (NYSE: BTGO) has rolled out a suite of tools designed to measure and reduce quantum-computing risks associated with institutional Bitcoin custody. The features integrate directly into the firm's multi-signature service and UTXO-based wallets. They give institutional clients a structured method to assess current cryptographic exposure and actively migrate vulnerable funds.

The new system centers on a Quantum Risk Score that evaluates potential vulnerabilities across supported Bitcoin wallets. When elevated risks are identified, a Fix Exposed Addresses Workflow guides clients through moving assets into new addresses with stronger key hygiene. A new UTXO Selection Method groups coins by address to prevent the additional exposure created by partial spends, while updated default settings steer wallets away from transaction patterns that elevate quantum concerns.

The underlying threat stems from Bitcoin's architecture, as any address with a public key visible on the blockchain could theoretically be targeted by a sufficiently powerful quantum machine. Estimates indicate roughly 6.9 million Bitcoin currently sit in these exposed addresses. However, funds held in address types like Taproot or Pay-to-Public-Key, which reveal keys immediately upon creation, fall outside the scope of these new tools and require separate remediation strategies.

For institutional investors and corporate treasuries, quantum computing represents a long-term tail risk that could abruptly crystallize, threatening the security of dormant or actively traded holdings. While BitGo explicitly acknowledged that no existing quantum computer can currently break Bitcoin's cryptography, managing this exposure proactively prevents a chaotic, forced migration of assets later. The firm positions these operational controls as a necessary bridge to eventual protocol-level post-quantum signature upgrades to the Bitcoin network, rather than a replacement for them.

“We believe the safest key is one whose public key has never been revealed on-chain,” said Mike Belshe, CEO and co-founder of BitGo. He noted the capabilities give institutions a practical way to reduce quantum exposure while relying on multi-signature security. Adam Back, co-founder and CEO of Blockstream and BSTR, agreed with the timing, stating, “Nobody has a quantum computer that can touch Bitcoin today, but that’s exactly why the work should start now, while it’s calm and optional rather than urgent and forced.”