Today we've published the first position paper from the Coinbase Independent Advisory Board on Quantum Computing and Blockchain, a group of leading researchers from Stanford, UT Austin, the Ethereum Foundation, and beyond. The short version: your crypto is safe today. But a quantum computer capable of threatening blockchain cryptography will eventually be built, and the industry needs to start preparing now, not when it's urgent. The paper covers what's actually at risk, what isn't, where major blockchains stand on migration plans, and concrete recommendations for chains, custodians, and institutions. We stood up this board because we believe security decisions of this magnitude should be driven by the best available science. This is our first report, but will have more updates to share as we go. Full summary and link to the paper: coinbase.com/blog/coinbase-q…

I'll be leaving Coinbase at the end of June. After 10 years those words are surreal to type. I joined in April 2016 as employee #50-something, with a simple mandate: help keep this company, its employees and its customers safe. What followed was the most challenging, rewarding, and genuinely wild professional experience of my life. Coinbase is one of those rare companies where the mission is real. Every security decision we made, every late night, every incident, every hard call, was in service of something that actually matters: building an open financial system that works for everyone. I'm proud of the team we built and the standard we set. To the Security team: you are exceptional. I've watched you handle situations that would break most organizations, and you've done it with skill, professionalism, and real heart. It's been the honor of my career to build alongside you. To Brian, Emilie, and the broader Coinbase leadership team: thank you for the trust and for letting me do the work that mattered most. @JLunglhofer will be stepping up as Coinbase’s new CSO. He is the right person to lead this next chapter, he's been my partner and the clear successor for good reason. I’ll be sharing what’s next for me soon, but I'm forever a member of Team Coinbase.

100x yes. In the majority of cases security is about doing the basic things right, not about doing the extraordinary things right. Unfortunately, the basic things are hard and the extraordinary things are even harder.

This is a deeply concerning trend, and unfortunately it tracks with what we’re seeing more broadly: attackers are increasingly blending cyber and physical tactics to target high-value individuals through the apps we use everyday. A few practical steps that can meaningfully reduce risk: First, limit data exposure. Use unique emails and phone numbers for different services (especially delivery apps, financial accounts, and anything tied to your identity or location). The more attackers can correlate across datasets, the easier targeting becomes. Second, lock down your accounts. Strong, unique passwords and hardware security keys (not just SMS 2FA) should be table stakes, particularly for email, exchange accounts, and any service that contains personal information. Third, be thoughtful about real-time signals. Ordering food, posting location-tagged content, or sharing routines publicly can unintentionally create a live map of where you are and what you’re doing. Fourth, add friction to your doorstep. If you can, avoid direct handoffs with unknown drivers. Use contactless delivery, building security, or package lockers where possible. If something feels off, trust that instinct and don’t open the door. Finally, for those with significant exposure, this is a moment to think about physical security as part of your threat model. That can include anything from basic home security systems to more advanced measures depending on your profile. Crypto doesn’t make someone a target, but perceived access to value does. The best defense is reducing the amount of signal an attacker can gather and increasing the friction at every layer. Stay safe out there.

The latest quantum papers from Google and Caltech are an important signal for the industry. Timelines are still debated, but the time to act is now. The good news: post-quantum cryptography exists. This is a solvable problem, and many chains already have roadmaps. Bitcoin needs to catch up though. The bad news: post-quantum cryptography is relatively new and it would be fairly easy to create new security risks if implementation is rushed. The industry needs to align on what happens to wallets that fail to migrate before a CRQC appears. At Coinbase, we’ve been working on this for a while, auditing and upgrading our internal infrastructure, researching post-quantum cryptography and establishing a Quantum Advisory Council. It’s clear Bitcoin needs to make some fast progress here, so Coinbase is taking the role of rallying the troops and getting the right people in the room - Bitcoin core devs and the broader community - so they can start tackling this. But no one developer or company can do this alone. Real progress will require coordinated action across the ecosystem. If you’re working on post-quantum approaches for Bitcoin, we want to support you, and connect you with others that are working on it too. Please DM me directly and I’ll get you added to the working group. Bitcoin can and will upgrade, but it will take the entire community working together.

Scams are a scourge, and education is one of the most important tools we have. Maybe *you* already know everything there is to know about scams, but do your friends and family? My ask: share this video with at least one person in your life that might be vulnerable.

Only scammers demand you pay only with gift cards. Only scammers demand you pay only with Zelle. How about instead: “Only scammers pressure you to do things before you understand them”? If in doubt, take a beat, talk to a friend, be skeptical.

Excited to chat with @teddyfuse and @hongkim__ about how Coinbase does institutional grade custody!

hey @GaryGensler and @SECGov, serious offer: as a crypto exchange we've had a lot of experience with security protocols around social media, and as a veteran and patriot I love to help my country. If you'd like any suggestions feel free to reach out.

Check out a new in depth look at the Euler exploit coming out of our Unit 0x team. Part one (looking at the exploit) is below, part two coming early next week! coinbase.com/blog/euler-comp…