BitGo launches quantum-risk tools for Bitcoin wallets

BitGo has introduced quantum-risk management tools for Bitcoin wallets aimed at institutional users of its multi-signature custody platform.

The new controls focus on UTXO-based wallets and are designed to help clients identify and reduce exposure linked to Bitcoin addresses whose public keys have been revealed on-chain. The launch adds operational measures to BitGo's existing multi-signature wallet design, which it has long presented as a way to limit single points of failure.

At the centre of the rollout is a scoring system that assesses potential quantum-related exposure across supported Bitcoin wallets. BitGo has also added a remediation workflow to guide clients in moving funds from higher-exposure addresses to newly generated ones.

Another change affects how wallets select coins for transactions. BitGo's new UTXO selection method groups and prioritises UTXOs by address to reduce exposure to partial spends.

It has also updated default wallet settings to reduce the use of certain Bitcoin address types and transaction patterns that could raise quantum-related concerns. Assets already held in address types that expose a public key from creation, including Taproot and Pay-to-Public-Key, require separate remediation and are outside the scope of this application.

Managing exposure

The announcement addresses a long-running issue in Bitcoin security research. While practical quantum attacks on Bitcoin do not exist today, advances in quantum computing could eventually threaten the privacy of addresses whose public keys have been exposed. That risk does not apply evenly across all holdings, because some address types and transaction behaviours reveal more information on-chain than others.

BitGo said its existing wallet architecture already promotes address hygiene by using new addresses for Bitcoin transactions. The latest additions are intended to give institutions clearer visibility into where exposure sits within a wallet and how operational changes, rather than protocol changes, can reduce it.

That distinction matters because the new controls do not alter Bitcoin itself. Instead, they aim to reduce risk at the wallet and transaction level using measures available within the current infrastructure, while broader post-quantum signature changes would require protocol-level action.

Mike Belshe, Chief Executive Officer and Co-founder of BitGo, outlined the company's position: "BitGo is investing in the foundation required for a post-quantum future for our clients.

"We believe the safest key is one whose public key has never been revealed on-chain. These capabilities give institutions a practical way to understand and reduce quantum exposure while continuing to rely on the proven security of multi-signature."

Industry backdrop

The move comes as digital asset firms examine how existing systems would cope if quantum computing makes major progress. Security specialists have argued for years that the industry should start by reducing unnecessary public-key exposure in current wallet operations rather than waiting for a protocol-level shift to post-quantum cryptography.

That view was echoed by Adam Back, Co-Founder and CEO of Blockstream and BSTR.

"Nobody has a quantum computer that can touch Bitcoin today, but that's exactly why the work should start now, while it's calm and optional rather than urgent and forced," he said.

For institutional custody providers, the issue is both technical and operational. Large holders often manage complex pools of UTXOs across multiple wallets, and changes in coin selection, address reuse and transaction handling can affect how much of a wallet's history reveals public-key data.

BitGo said the new features apply to supported UTXO-based assets and multi-signature wallet configurations, suggesting the company is targeting clients that hold Bitcoin and similar assets in custody setups where transaction policies can be centrally managed.

The launch also reflects a broader trend in digital asset infrastructure toward more detailed risk controls for institutional users. As the sector matures, providers have been adding monitoring, policy and workflow tools that address not only current threats but also lower-probability risks that could grow more important over time.

Belshe said institutions should act before the issue becomes urgent. "We believe institutions do not need to wait for a quantum event to begin managing quantum risk.

"The right approach is to reduce exposure now, harden wallet operations, and prepare for the migration from today's security models to future post-quantum standards."