Skip to main content

Quantum exposure

What a quantum computer would break, and who is preparing

No quantum computer can forge today's signatures. A large one could, one day, forge the elliptic-curve signatures most chains and wallets use. This page records, for every chain, wallet and custodian we rank, which scheme it signs with and what it has published about moving off it. As of 2026-10-15.

The short version

  • ECDSA, Ed25519 and BLS signatures rest on elliptic curves. A large enough quantum computer running Shor's algorithm could work out a private key from its public key. None exists today, and nobody knows when one will.
  • A key is exposed once its public key is on chain. On most account-based chains that happens with the first transaction you send; addresses that hold only a hash of the key (Bitcoin's and Cardano's) reveal it when they are first spent from.
  • Hash functions and symmetric encryption are not broken the same way, and the standards for new signatures (ML-DSA, SLH-DSA) and key exchange (ML-KEM) are published.
  • Moving a chain, or millions of wallets, to new signatures takes years, which is why a published plan matters now. Nothing here is a reason to move funds today.

Chains

Layer-1 Blockchains

  • Ethereum
    Accounts sign with: ECDSA (secp256k1) (elliptic curve)
    “The public key is generated from the private key using the Elliptic Curve Digital Signature Algorithm” ethereum.org, read 2026-10-15
    Consensus: BLS signatures (BLS12-381) (elliptic curve)
    “This new type of key uses the Boneh-Lynn-Shacham (BLS) signature scheme” ethereum.org, read 2026-10-15
    Post-quantum plan: A published migration plan with dates. A post-quantum research team and a roadmap targeting 2029 for full post-quantum protection.
    “The Ethereum Foundation has a dedicated post-quantum research team, and a structured "Lean Ethereum" roadmap targeting 2029 for full post-quantum protection” ethereum.org, read 2026-10-15
  • TON (The Open Network)
    Accounts sign with: Ed25519 (wallet contracts) (elliptic curve)
    “Wallet contracts use the Ed25519 signature scheme.” docs.ton.org, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Avalanche
    Accounts sign with: secp256k1 (elliptic curve)
    “The Avalanche virtual machine uses elliptic curve cryptography, specifically secp256k1 , for its signatures on the blockchain.” docs.avax.network, read 2026-10-15
    Consensus: Snowman voting by validators identified by TLS keys, each also holding a BLS key (elliptic curve)
    “The Staking Key ( staker.key ) is the TLS key that sets your node's ID. … The BLS signer key ( signer.key ) signs BLS messages.” build.avax.network, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Cardano
    Accounts sign with: Ed25519 (addresses hold a hash of the key) (elliptic curve)
    “hash digests of Ed25519 verification keys” raw.githubusercontent.com, read 2026-10-15
    Consensus: Key-evolving signatures (KES) and VRF keys (Ouroboros Praos) (elliptic curve)
    “To create an operational certificate for a block-producing node, you need a KES key pair, which authenticates who you are.” docs.cardano.org, read 2026-10-15
    Post-quantum plan: Published research or a stated intent, no migration plan yet. Input Output Research runs a post-quantum cryptography research stream in its Cardano Vision 2026 programme; no migration plan is published.
    “Varun Maram, research lead in post-quantum security at IOR, introduced one of the program's most consequential long-term bets: post-quantum cryptography (PQC).” iog.io, read 2026-10-15
    Exposed supply: not measured. Cardano addresses hold a hash of the key, which is revealed when an output is spent; measuring the share of supply in outputs whose key is already revealed needs a full-chain index ChainChoice does not run.
  • Solana
    Accounts sign with: Ed25519 (elliptic curve)
    “Accounts are currently indexed by a Ed25519 public key and the private key associated with that public key can be used to authorize transactions.” anza.xyz, read 2026-10-15
    Consensus: BLS signatures over pairing-friendly curves (Alpenglow) (elliptic curve)
    “Consensus: Alpenglow uses BLS signatures over pairing-friendly elliptic curves.” anza.xyz, read 2026-10-15
    Post-quantum plan: A published migration plan or accepted proposal, without dates. Anza (a validator-client team) has published a post-quantum checklist and Falcon as the leading candidate; no date is set.
    “The Anza team and members of the Solana community have already started laying the groundwork for a post-quantum transition” anza.xyz, read 2026-10-15
  • Sui
    Accounts sign with: Ed25519, ECDSA (secp256k1, secp256r1) or passkeys (elliptic curve)
    “User transactions authenticate with Ed25519, ECDSA (secp256k1 and secp256r1), or passkeys” docs.sui.io, read 2026-10-15
    Consensus: BLS12-381 (validator operations) (elliptic curve)
    “BLS12-381 signatures are available for validator operations” docs.sui.io, read 2026-10-15
    Post-quantum plan: A published migration plan with dates. ML-DSA-65 accounts and SLH-DSA vaults, with Mainnet targets for 2026 and Q1 2027.
    “Quantum-safe vaults are targeted for Mainnet this year and native ML-DSA-65 accounts for Testnet by end of year, with native account authentication on Mainnet targeted for Q1 2027.” sui.io, read 2026-10-15
  • Aptos
    Accounts sign with: Ed25519 by default; Secp256k1 ECDSA and multi-key also accepted (elliptic curve)
    “The Aptos blockchain defaults to Ed25519 signature” aptos.dev, read 2026-10-15
    Consensus: BLS12-381 consensus keys (elliptic curve)
    “bls12381::public_key_from_bytes_with_pop(” raw.githubusercontent.com, read 2026-10-15
    Post-quantum plan: A published migration plan or accepted proposal, without dates. AIP-137, accepted: opt-in post-quantum accounts signed with SLH-DSA-SHA2-128s; no date set.
    “Post-quantum Aptos accounts via SLH-DSA-SHA2-128s signatures … Status Accepted” github.com, read 2026-10-15
  • BNB Chain
    Accounts sign with: ECDSA (secp256k1) (elliptic curve)
    “Transaction signature ECDSA (secp256k1)” bnbchain.org, read 2026-10-15
    Consensus: BLS12-381 vote aggregation (elliptic curve)
    “Consensus vote aggregation BLS12-381” bnbchain.org, read 2026-10-15
    Post-quantum plan: Published research or a stated intent, no migration plan yet. BNB Chain tested ML-DSA-44 signatures and STARK vote aggregation in a research report; no migration is scheduled.
    “Post-quantum readiness is achievable on BSC today, with data size growth and network constraints as the main trade-offs.” bnbchain.org, read 2026-10-15

L2 Blockchains

  • Arbitrum One
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    “while Ethereum still settles the results and keeps the data available” docs.arbitrum.io, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • OP Mainnet
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    “publishes the data for those transactions to a parent chain, usually Ethereum” docs.optimism.io, read 2026-10-15
    Post-quantum plan: A published migration plan with dates. OP Labs will deprecate ECDSA-signed externally owned accounts by January 2036, subject to governance.
    “As of this post, OP Labs is committing to a 10-year timeline to deprecate ECDSA-based externally owned accounts (EOAs) on OP Mainnet and across the Superchain, subject to governance approval.” optimism.io, read 2026-10-15
  • Base
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: Published research or a stated intent, no migration plan yet. Coinbase says Base inherits much of Ethereum's plan and that a Base-specific plan will follow.
    “This work extends to Base as well. Ethereum has laid out a post-quantum roadmap, and Base inherits much of that protection through its relationship with L1.” coinbase.com, read 2026-10-15 in a browser
  • Ink
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: A published migration plan with dates. Ink is built on the Superchain, which the OP Labs roadmap covers: ECDSA-signed accounts deprecated by January 2036, subject to governance.
    “As of this post, OP Labs is committing to a 10-year timeline to deprecate ECDSA-based externally owned accounts (EOAs) on OP Mainnet and across the Superchain, subject to governance approval.” optimism.io, read 2026-10-15
    “Ink - DeFi unleashed by Kraken, built on the Superchain” inkonchain.com, read 2026-10-15
  • Unichain
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    “As an OP Stack chain, Unichain is EVM-equivalent with minimal changes to standard Ethereum behavior” docs.unichain.org, read 2026-10-15
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    “Unichain is an Ethereum L2 with a permissionless fault-proof system designed for trust-minimized security.” docs.unichain.org, read 2026-10-15
    Post-quantum plan: A published migration plan with dates. Unichain is part of the Superchain, which the OP Labs roadmap covers: ECDSA-signed accounts deprecated by January 2036, subject to governance.
    “As of this post, OP Labs is committing to a 10-year timeline to deprecate ECDSA-based externally owned accounts (EOAs) on OP Mainnet and across the Superchain, subject to governance approval.” optimism.io, read 2026-10-15
    “As part of the Superchain, Unichain supports native interoperability and cross-chain liquidity access.” docs.unichain.org, read 2026-10-15
  • Arbitrum Nova
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Scroll
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    “We use Ethereum as the Settlement Layer and deploy the bridge and rollup contract onto Ethereum.” docs.scroll.io, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: docs.scroll.io/en/technology, scroll.io, 2026-10-15.
  • Starknet
    Accounts sign with: Set by each account contract (native account abstraction)
    “Determine what it means for a signature to be valid” docs.starknet.io, read 2026-10-15
    Consensus: No validator set of its own: a sequencer orders transactions, STARK proofs (hash-based) settle them on Ethereum (BLS validator signatures) (elliptic curve), following Ethereum
    Post-quantum plan: A published migration plan or accepted proposal, without dates. StarkWare publishes a phased roadmap; Falcon-512 account contracts already exist.
    “a committed, inspectable roadmap for finishing it” starkware.co, read 2026-10-15
  • zkSync Era
    Accounts sign with: ECDSA, as on Ethereum; smart accounts may set their own scheme (elliptic curve), following Ethereum
    “Smart Accounts are fully programmable, allowing for various customizations such as signature schemes” docs.zksync.io, read 2026-10-15
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Mantle
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: mantle.xyz, docs.mantle.xyz/network, 2026-10-15.
  • Taiko Alethia
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    “Taiko is an Ethereum-equivalent (type-1) based rollup.” docs.taiko.xyz, read 2026-10-15
    Consensus: Ethereum validators (BLS) sequence its blocks (elliptic curve), following Ethereum
    “"Based" means Ethereum L1 validators sequence Taiko blocks” docs.taiko.xyz, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: docs.taiko.xyz, taiko.xyz, 2026-10-15.
  • Linea
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: linea.build, docs.linea.build, 2026-10-15.
  • Blast
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    “Blast is an EVM-compatible, optimistic rollup” docs.blast.io, read 2026-10-15
    Consensus: No validator set of its own: a sequencer orders transactions; data goes to Ethereum, and no proof system checks its state there (elliptic curve), following Ethereum
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: docs.blast.io/about-blast, 2026-10-15.
  • Manta Pacific
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions; data goes to Celestia, and no proof system checks its state on Ethereum (elliptic curve)
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: manta.network, 2026-10-15.
  • Polygon zkEVM
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: None since its sequencer stopped on 1 July 2026; funds are claimed on Ethereum (BLS validator signatures) (elliptic curve), following Ethereum
    Post-quantum plan: The chain has stopped; no plan applies. The sequencer stopped on 1 July 2026; the chain is kept for asset recovery only.

Sidechains

  • Polygon PoS
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: Heimdall validators (a CometBFT fork) whose signer keys are set on Ethereum (elliptic curve)
    “When a validator updates their signer key on Ethereum” docs.polygon.technology, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Gnosis Chain
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: Ethereum's consensus clients and validator keys (BLS) (elliptic curve), following Ethereum
    “The purpose of the validator private key is to actively sign on-chain operations such as block proposals and attestations.” docs.gnosischain.com, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • BNB Smart Chain
    Accounts sign with: ECDSA (secp256k1) (elliptic curve)
    “Transaction signature ECDSA (secp256k1)” bnbchain.org, read 2026-10-15
    Consensus: BLS12-381 vote aggregation (elliptic curve)
    “Consensus vote aggregation BLS12-381” bnbchain.org, read 2026-10-15
    Post-quantum plan: Published research or a stated intent, no migration plan yet. BNB Chain tested ML-DSA-44 signatures and STARK vote aggregation in a research report; no migration is scheduled.
    “Post-quantum readiness is achievable on BSC today, with data size growth and network constraints as the main trade-offs.” bnbchain.org, read 2026-10-15
  • Chiliz Chain
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: Parlia proof of staked authority, inherited from BNB Smart Chain (elliptic curve), following BNB Smart Chain
    “Chiliz Chain inherits the following from the BSC consensus mechanism , Parlia” docs.chiliz.com, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • SKALE Network
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: BLS threshold signatures (elliptic curve)
    “SKALE uses leaderless, asynchronous BFT consensus with BLS threshold signatures.” docs.skale.space, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Cronos
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: CometBFT validator keys (Ed25519), as on Cosmos SDK chains (elliptic curve)
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: cronos.org, docs.cronos.org, 2026-10-15.
  • Harmony
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: BLS aggregate signatures (FBFT) (elliptic curve)
    “BLS (Boneh-Lynn-Shacham) aggregate signature is used to significantly reduce the communication cost” docs.harmony.one, read 2026-10-15
    Post-quantum plan: The chain has stopped; no plan applies. The chain stopped producing blocks on 10 September 2026.

Appchains / L3s

  • Abstract
    Accounts sign with: ECDSA, as on Ethereum; smart accounts may validate other elliptic-curve schemes (elliptic curve), following Ethereum
    “Alternative signature validation methods & support for different ECC algorithms.” docs.abs.xyz, read 2026-10-15
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • dYdX Chain
    Accounts sign with: secp256k1 by default (Cosmos SDK) (elliptic curve)
    “an L1 blockchain built on top of CometBFT and using CosmosSDK” docs.dydx.xyz, read 2026-10-15
    Consensus: CometBFT validator keys (Ed25519) (elliptic curve)
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Zora Network
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Ethereum (BLS validator signatures) settles them (elliptic curve), following Ethereum
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: zora.energy, docs.zora.co, 2026-10-15.
  • ApeChain
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions and Arbitrum One, which settles on Ethereum, settles them (elliptic curve), following Arbitrum One
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: apechain.com, docs.apechain.com, 2026-10-15.
  • Xai
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own: a sequencer orders transactions, a five-member committee holds the data, and Arbitrum One settles them (elliptic curve), following Arbitrum One
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: xai.games, 2026-10-15.
  • Ronin
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: No validator set of its own since May 2026: a sequencer orders transactions, data goes to EigenDA, and Ethereum settles them (elliptic curve), following Ethereum
    “In 2026, Ronin returned to Ethereum, as an L2” docs.roninchain.com, read 2026-10-15
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Immutable zkEVM
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    “EVM Compatible Use Solidity, Foundry, Hardhat” docs.immutable.com, read 2026-10-15
    Consensus: Not stated on the pages read
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
  • Eclipse
    Accounts sign with: Ed25519, as on Solana (SVM) (elliptic curve), following Solana
    Consensus: No validator set of its own: a sequencer orders transactions, data goes to Celestia, and the proof system on Ethereum is not yet live (elliptic curve)
    Post-quantum plan: No post-quantum plan found on the pages read. No post-quantum migration plan found on the pages read.
    Pages read: eclipse.xyz, docs.eclipse.xyz, 2026-10-15.
  • Degen Chain
    Accounts sign with: ECDSA, as on Ethereum (elliptic curve), following Ethereum
    Consensus: None since it shut down; it settled to Base (elliptic curve), following Base
    Post-quantum plan: The chain has stopped; no plan applies. The chain has shut down; L2BEAT archived it on 2026-09-01.

Wallets and signing

Hardware Wallets

7 of 23 have published something on post-quantum readiness.

  • Trezor
    Ships post-quantum cryptography or a quantum-exposure control today. Trezor Safe 7 verifies firmware with SLH-DSA and attests the device with ML-DSA; Trezor says it is not quantum-proof until chains upgrade.
    “The boardloader uses SLH-DSA-128 to verify firmware signatures, and the device certificate uses ML-DSA-44 for attestation.” trezor.io, read 2026-10-15
  • Ledger
    Ships post-quantum cryptography or a quantum-exposure control today. ML-KEM and ML-DSA are in Ledger's developer SDK; no post-quantum signing for a chain is described.
    “Ledger has added two new algorithms in its SDK: These are called ML-KEM and ML-DSA.” ledger.com, read 2026-10-15
  • Ledger Nano X
    Ships post-quantum cryptography or a quantum-exposure control today. ML-KEM and ML-DSA are in Ledger's developer SDK; the post names no device, so it may not reach the Nano X.
    “Ledger has added two new algorithms in its SDK: These are called ML-KEM and ML-DSA.” ledger.com, read 2026-10-15
  • OneKey
    A published post-quantum plan for its own product. OneKey says it is preparing ML-KEM and ML-DSA upgrades.
    “OneKey is preparing end-to-end PQC upgrades, including ML-KEM, ML-DSA, and strengthened hashing.” onekey.so, read 2026-10-15
  • Blockstream Jade
    A published post-quantum plan for its own product. Blockstream will ship post-quantum signing to Jade as a firmware update, opt-in per output.
    “Post-quantum protection will deploy as a firmware update.” blockstream.com, read 2026-10-15
  • Blockstream Jade Core
    A published post-quantum plan for its own product. Blockstream will ship post-quantum signing to Jade as a firmware update, opt-in per output.
    “Post-quantum protection will deploy as a firmware update.” blockstream.com, read 2026-10-15
  • Tangem
    A published statement on quantum risk, no product change committed. Tangem says its wallet cannot make Bitcoin quantum-proof until Bitcoin upgrades its signature scheme.
    “If Bitcoin itself doesn't upgrade its signature scheme at the protocol level, the long-term quantum-signature vulnerability persists.” tangem.com, read 2026-10-15
  • BitBox02
    No post-quantum statement found on the pages read.
    Its support site warns that letters asking for a "Quantum Resistance" security update are a phishing scam; that warning is not a post-quantum statement.
  • BitBox02 Nova
    No post-quantum statement found on the pages read.
    Its support site warns that letters asking for a "Quantum Resistance" security update are a phishing scam; that warning is not a post-quantum statement.
  • Keystone
    No post-quantum statement found on the pages read.
    Pages read: keyst.one, 2026-10-15.
  • Keycard
    No post-quantum statement found on the pages read.
    Pages read: keycard.tech, 2026-10-15.
  • Keycard Shell
    No post-quantum statement found on the pages read.
    Pages read: keycard.tech, 2026-10-15.
  • Foundation Passport
    No post-quantum statement found on the pages read.
    Pages read: foundation.xyz, 2026-10-15.
    QuantumLink, on the same page, is the name of its encrypted Bluetooth link, not post-quantum cryptography.
  • Coldcard
    No post-quantum statement found on the pages read.
    Pages read: coldcard.com, coldcard.com/docs, 2026-10-15.
  • KeepKey
    No post-quantum statement found on the pages read.
    Pages read: keepkey.com, 2026-10-15.
  • Cypherock X1
    No post-quantum statement found on the pages read.
    Its blog post of 16 January 2025 discusses quantum-resistant hardware wallets in general and says nothing about the X1.
  • Satochip
    No post-quantum statement found on the pages read.
    Pages read: satochip.io, 2026-10-15.
  • GridPlus Lattice1
    No post-quantum statement found on the pages read.
    Pages read: gridplus.io, 2026-10-15.
  • CoolWallet Pro
    No post-quantum statement found on the pages read.
    Pages read: coolwallet.io, 2026-10-15.
  • CoolWallet
    No post-quantum statement found on the pages read.
    Pages read: coolwallet.io, 2026-10-15.
  • SafePal S1
    No post-quantum statement found on the pages read.
    Pages read: safepal.com/en, 2026-10-15.
  • SafePal X1
    No post-quantum statement found on the pages read.
    Pages read: safepal.com/en, 2026-10-15.
  • SecuX
    No post-quantum statement found on the pages read.
    Pages read: secuxtech.com, 2026-10-15.

Wallets

1 of 11 have published something on post-quantum readiness.

  • Coinbase Wallet
    A published statement on quantum risk, no product change committed. Coinbase says its post-quantum programme covers all of its infrastructure; nothing specific to the wallet is published.
    “Beyond CoreKMS, we've launched a comprehensive internal effort to prepare all of Coinbase's infrastructure for a post-quantum world.” coinbase.com, read 2026-10-15 in a browser
  • MetaMask
    No post-quantum statement found on the pages read.
    Pages read: metamask.io, 2026-10-15.
  • Rabby Wallet
    No post-quantum statement found on the pages read.
    Pages read: github.com/RabbyHub/Rabby, 2026-10-15.
  • Phantom
    No post-quantum statement found on the pages read.
    Pages read: phantom.com, phantom.com/learn/blog, 2026-10-15.
  • Trust Wallet
    No post-quantum statement found on the pages read.
    Pages read: trustwallet.com, 2026-10-15.
  • Solflare
    No post-quantum statement found on the pages read.
    Pages read: solflare.com, 2026-10-15.
  • Exodus
    No post-quantum statement found on the pages read.
    Pages read: exodus.com, exodus.com/support/en, 2026-10-15.
  • Rainbow
    No post-quantum statement found on the pages read.
    Pages read: rainbow.me, 2026-10-15.
  • Sparrow Wallet
    No post-quantum statement found on the pages read.
  • Electrum
    No post-quantum statement found on the pages read.
  • OKX Wallet
    No post-quantum statement found on the pages read.
    The Web3 terms (4.7.3) name quantum computing among the risks to every cryptographically-based system; they state no plan or measure.

MPC & Embedded Wallets

0 of 7 have published something on post-quantum readiness.

Smart Accounts & Multisig

0 of 7 have published something on post-quantum readiness.

Custody and exchanges

Institutional Custody

5 of 9 have published something on post-quantum readiness.

  • Anchorage Digital
    Ships post-quantum cryptography or a quantum-exposure control today. Hash-based Bitcoin addresses that do not expose public keys, post-quantum TLS internally, and a stated migration strategy.
    “For Bitcoin, Anchorage Digital uses hash-based addresses which do not expose public keys” anchorage.com, read 2026-10-15
  • BitGo
    Ships post-quantum cryptography or a quantum-exposure control today. A quantum-exposure score for Bitcoin wallets and a sweep that moves funds off addresses whose public key is exposed.
    “When exposure is found, the Fix Exposed Addresses workflow generates a sweep.” bitgo.com, read 2026-10-15
  • Coinbase Prime
    A published post-quantum plan for its own product. Coinbase is building a post-quantum version of the key management system that holds its custody keys.
    “We have begun building a post-quantum version of this system, PQ-CoreKMS.” coinbase.com, read 2026-10-15 in a browser
  • Fireblocks
    A published statement on quantum risk, no product change committed. Fireblocks calls post-quantum cryptography a strategic priority and says its roadmap is being built.
    “PQC is a strategic priority, and we are actively building our roadmap and conducting research work.” fireblocks.com, read 2026-10-15
  • Fidelity Digital Assets
    A published statement on quantum risk, no product change committed. Fidelity Digital Assets publishes research on Bitcoin's path to quantum resistance; no custody change is stated.
    “Bitcoin's Path to Quantum Resistance” fidelitydigitalassets.com, read 2026-10-15 in a browser
  • Copper
    No post-quantum statement found on the pages read.
    Pages read: copper.co, 2026-10-15.
  • Zodia Custody
    No post-quantum statement found on the pages read.
    Pages read: zodia-custody.com, 2026-10-15.
  • Komainu
    No post-quantum statement found on the pages read.
    Pages read: komainu.com, 2026-10-15.
  • Gemini Custody
    No post-quantum statement found on the pages read.
    Pages read: gemini.com/institutions/custody, 2026-10-15.

Exchanges

1 of 17 have published something on post-quantum readiness.

  • Coinbase
    A published post-quantum plan for its own product. Coinbase is building a post-quantum version of the key management system that protects about 99.9% of the assets it holds.
    “We have begun building a post-quantum version of this system, PQ-CoreKMS.” coinbase.com, read 2026-10-15 in a browser
  • Binance
    No post-quantum statement found on the pages read.
    Its Academy article on quantum computers explains the risk in general and says nothing about how Binance holds keys.
  • Kraken
    No post-quantum statement found on the pages read.
    Pages read: kraken.com, blog.kraken.com, 2026-10-15.
  • OKX
    No post-quantum statement found on the pages read.
    Pages read: okx.com, 2026-10-15.
  • Bybit
    No post-quantum statement found on the pages read.
    Pages read: learn.bybit.com, 2026-10-15.
  • Bitstamp
    No post-quantum statement found on the pages read.
    Pages read: bitstamp.net/learn, 2026-10-15.
  • Upbit
    No post-quantum statement found on the pages read.
    Pages read: upbit.com/home, 2026-10-15.
  • Gemini
    No post-quantum statement found on the pages read.
    Pages read: gemini.com, gemini.com/security, 2026-10-15.
  • Luno
    No post-quantum statement found on the pages read.
    Pages read: luno.com, luno.com/en/security, 2026-10-15.
  • VALR
    No post-quantum statement found on the pages read.
    Pages read: valr.com/blog, 2026-10-15.
  • Bitso
    No post-quantum statement found on the pages read.
    Pages read: bitso.com, 2026-10-15.
  • Mercado Bitcoin
    No post-quantum statement found on the pages read.
    Pages read: mercadobitcoin.com.br, 2026-10-15.
  • Bitvavo
    No post-quantum statement found on the pages read.
    Pages read: docs.bitvavo.com, 2026-10-15.
    bitvavo.com answered our reader with a security check; only its API documentation could be read.
  • CoinDCX
    No post-quantum statement found on the pages read.
    Pages read: docs.coindcx.com, 2026-10-15.
    coindcx.com answered our reader with a security check; only its API documentation could be read.
  • Bit2Me
    No post-quantum statement found on the pages read.
    Pages read: bit2me.com, bit2me.com/security, 2026-10-28.
  • Gate EU
    No post-quantum statement found on the pages read.
    Pages read: gate.com/en-eu/about-us, 2026-10-28.
  • BSDEX
    No post-quantum statement found on the pages read.
    Pages read: bsdex.de/en, bsdex.de/en/security, 2026-10-29.

Signposts

Events that change the picture. When one enters this log, this page is reviewed again within 30 days.

  • 2024-08-13: NIST approves the first post-quantum standards: ML-KEM (FIPS 203), ML-DSA (FIPS 204) and SLH-DSA (FIPS 205). “The Secretary of Commerce has approved three Federal Information Processing Standards (FIPS ) for post-quantum cryptography” csrc.nist.gov, read 2026-10-15
  • 2026-03: Google Quantum AI estimates that breaking 256-bit elliptic-curve cryptography could need about 1,200 logical qubits, far fewer than earlier estimates. “In March 2026, Google Quantum AI published research estimating that breaking 256-bit elliptic curve cryptography (the type Ethereum uses for account signatures) could require roughly 1,200 logical qubits.” ethereum.org, read 2026-10-15
  • 2026-09-08: Ethereum's roadmap page states a 2029 target for full post-quantum protection. “roadmap targeting 2029 for full post-quantum protection” ethereum.org, read 2026-10-15
How this page is kept

Every fact quotes a page we read and the day we read it. “None found” means we found no statement on the pages listed; it does not mean a vendor has none. Facts are read again within 120 days, and this page within 30 days of a new signpost; the build fails otherwise, and fails if a chain, wallet or custodian we rank has no entry here. None of this changes a score or an order. Every fact is in /data/quantum-posture.json. Owner: ChainChoice editorial.