The quantum menace to Bitcoin will get the headlines, however it’s not a Bitcoin drawback. Nearly each cryptocurrency indicators transactions with elliptic curve arithmetic that a big quantum laptop would unravel, whether or not that’s the ECDSA behind Bitcoin or the Ed25519 behind most newer chains. The query of a quantum resistant cryptocurrency can be a query about the entire market, and the sincere reply in 2026 is that nearly not one of the cash individuals truly maintain are protected but. Constructing a quantum resistant cryptocurrency is now on the agenda of most critical initiatives, however agendas should not mainnet code.
This information maps the sphere. It explains why the menace is shared, lays out in a single desk precisely what every main cryptocurrency is doing about it, and separates the initiatives which have shipped a genuinely quantum resistant cryptocurrency from those which have solely printed roadmaps or slogans. For the Bitcoin-specific model of this story, our companion information on bitcoin and quantum computing goes deeper on that one chain.
The menace is shared throughout chains. Each ECDSA and Ed25519, which between them safe virtually your complete market, fall to Shor’s algorithm as soon as a succesful quantum laptop exists.
Just one main chain is quantum resistant in the present day. The Quantum Resistant Ledger has signed each transaction with hash-based cryptography since 2018. The whole lot else nonetheless protects person funds with weak signatures.
The large names are on roadmaps, not mainnet. Bitcoin, Ethereum, XRP, Cardano, Hedera and Polkadot all have plans, and none has a reside protocol-wide post-quantum signature for accounts.
Some defences are narrower than they sound. Solana’s vault and Algorand’s FALCON accounts are opt-in, and Algorand’s headline resistance protects historic state slightly than your steadiness.
Just a few are doing nothing or shifting backward. Litecoin has no funded effort, Monero is on the analysis stage, and IOTA truly eliminated its unique quantum resistance in 2021.
The clock is similar for all of them. Skilled timelines cluster within the early 2030s, and migrating a complete chain safely takes years, so the initiatives that begin late will end late.
Why the menace is shared throughout each chain
Nearly all cryptocurrency possession rests on the identical type of arithmetic. A pockets holds a personal key, publishes a public key or a hash of 1, and proves possession with a digital signature that’s straightforward to confirm however, classically, unimaginable to forge. Bitcoin makes use of ECDSA on the secp256k1 curve, whereas Ethereum, Solana, Cardano and most newer chains use Ed25519, and each are elliptic curve schemes that Shor’s algorithm can break.
That shared basis means a cryptographically relevant quantum computer wouldn’t threaten one coin in isolation. It might threaten the signature scheme beneath many of the market directly, on the day the neighborhood calls Q-Day. The publicity can also be already accumulating, as a result of the identical hazard driving banks and governments towards post-quantum cryptography applies to any public key sitting on a blockchain for an attacker to check.
The menace has a gradual fuse and a shared face. It’s the cause the broader fear about harvest now, decrypt later extends to on-chain knowledge, and the rationale each critical undertaking now has to reply the identical query about its personal signatures.
What each main cryptocurrency is doing
The desk under grades every main chain on what it truly runs in the present day, not on what it has introduced. A undertaking counts as shipped solely when the defence protects strange person funds on mainnet, which is a far greater bar than a testnet or a analysis program. Learn the standing column rigorously, as a result of a number of of probably the most assured advertising and marketing claims describe opt-in options or slender protections slightly than a really quantum resistant cryptocurrency.
| Cryptocurrency | Signature in the present day | Quantum-resistance effort | Standing |
|---|---|---|---|
| Bitcoin (BTC) | secp256k1 ECDSA, Schnorr | BIP-360 provides a quantum-safe handle kind and BIP-361 would sundown previous signatures, the primary assigned in late 2024 and the second in early 2026, with nothing on mainnet. | Proposed |
| Ethereum (ETH) | ECDSA accounts, BLS validators | A February 2026 roadmap targets account abstraction for signature agility plus STARK-based aggregation, with account-level agility drafted as EIP-8141, aimed toward roughly 2029. | Proposed |
| XRP (XRPL) | ECDSA and Ed25519 | A four-phase Ripple roadmap printed in April 2026 targets a full post-quantum transition by 2028, with candidate signatures on Devnet within the second half of 2026. | Proposed |
| Cardano (ADA) | Ed25519 | Enter Output’s 2026 analysis program goals to harden the Ouroboros consensus with lattice-based cryptography, nonetheless on the analysis stage with no mainnet code. | Analysis |
| Solana (SOL) | Ed25519 | The opt-in Winternitz Vault lets customers park funds beneath a hash-based signature, however default accounts keep on Ed25519 and it’s not a protocol-wide change. | Decide-in |
| Algorand (ALGO) | Ed25519 | FALCON-signed state proofs have been reside since 2022 however defend historic state slightly than balances, and opt-in FALCON accounts arrived in late 2025 with broad resilience focused for 2027. | Partial |
| Hedera (HBAR) | Ed25519 and ECDSA | An April 2026 roadmap plans hybrid Ed25519 and FALCON occasion signing and a brand new post-quantum key kind focused for 2027, with nothing but shipped for accounts. | Proposed |
| Polkadot (DOT) | sr25519 and Ed25519 | A Web3 Basis roadmap names lattice signatures for consensus and FALCON for account keys, framed as a ahead plan with out a mainnet deployment. | Proposed |
| Litecoin (LTC) | secp256k1 ECDSA | No funded migration exists, and an official declare that its MWEB addresses are quantum resistant that MWEB lead developer David Burkett has since walked again, so it’s best handled as advertising and marketing. | Nothing |
| Monero (XMR) | CLSAG ring signatures | The Monero Analysis Lab runs energetic post-quantum analysis, nonetheless on the analysis stage, and a privateness hedge reached a take a look at community in 2026, however no a part of its reside cryptography makes use of a post-quantum primitive. | Analysis |
| IOTA | Ed25519 | Its unique hash-based signatures had been quantum resistant, however a 2021 improve changed them with Ed25519 for usability, and no dated migration plan has adopted. | Regressed |
| Quantum Resistant Ledger (QRL) | XMSS hash-based | Each transaction has been signed with the hash-based XMSS scheme for the reason that 2018 mainnet, making it the one main chain that was quantum resistant from day one. | Native |
The sample is stark as soon as the noise is stripped away, and a really quantum resistant cryptocurrency stays the exception slightly than the rule. One chain is genuinely native, a cluster of significant initiatives are on multi-year roadmaps, two provide opt-in instruments that almost all customers won’t ever contact, and a number of other are doing little or nothing. The remainder of this information walks via every of these teams.
The one chain constructed quantum resistant
The Quantum Resistant Ledger is the one main cryptocurrency that was quantum resistant from the beginning. Since its 2018 mainnet it has signed each transaction with XMSS, a hash-based signature scheme standardised by the web requirements our bodies, which rests on the safety of hash features slightly than elliptic curves and so just isn’t damaged by Shor’s algorithm. That makes it the exception that proves how far behind everybody else is, some extent our profile of the Quantum Resistant Ledger explores in additional element.
The trade-off is actual slightly than beauty. XMSS is a stateful scheme, which implies a pockets has to trace which one-time keys it has already used, and reusing one is catastrophic, so the design calls for extra cautious pockets engineering than a standard chain. It’s a reminder that the one totally quantum resistant cryptocurrency in manufacturing purchased that security with real complexity, which is a part of why bigger chains have been gradual to comply with.
The large roadmaps, Ethereum to XRP
The largest chains are conscious of the issue and have dedicated to fixing it, however their defences reside in planning paperwork slightly than on mainnet. Ethereum’s founder Vitalik Buterin set out a post-quantum route in early 2026 that leans on account abstraction, in order that customers might decide into hash-based or lattice signatures, alongside STARK-based aggregation for validators, with account-level signature agility drafted as EIP-8141 and a sensible horizon round 2029. Nothing in that plan but secures a reside Ethereum account.
Ripple has been extra concrete about dates. Its April 2026 roadmap for the XRP Ledger units out 4 phases towards a full post-quantum transition no later than 2028, with candidate signatures due on a growth community within the second half of 2026, and the ledger’s built-in key rotation means accounts might migrate with out shifting funds, an method our protection of the XRP Ledger’s 2028 target examines. Cardano, Hedera and Polkadot sit in the identical class, every with a reputable printed plan constructed on the standardised lattice and hash-based schemes, and every nonetheless wanting a shipped account signature.
The opt-in half measures
Two chains provide actual post-quantum safety that nearly no one makes use of, as a result of it’s elective and separate from the default pockets. Solana has a Winternitz Vault, a hash-based building {that a} person can transfer funds into for security, however strange Solana accounts stay on Ed25519 and the vault is a single developer’s program slightly than a protocol change. Headlines calling Solana quantum resistant overstate what is basically an opt-in software.
Algorand is probably the most over-claimed of all. It has run FALCON-signed state proofs on mainnet since 2022, which is real post-quantum cryptography, however these proofs safe historic state and cross-chain attestations slightly than the steadiness in your account. Decide-in FALCON accounts arrived in late 2025 and broad resilience is focused for 2027, but each strange account, block proposal and committee vote nonetheless depends on Ed25519 in the present day. Calling Algorand a quantum resistant cryptocurrency is correct just for a slender layer, not for person funds.
Doing nothing, or going backward
On the different finish of the sphere are the initiatives with no significant defence. Litecoin has no funded post-quantum effort, and an official assertion that its privateness sidechain addresses are quantum resistant, a declare its personal MWEB lead developer David Burkett later walked again by noting that no cryptocurrency is quantum protected, so it’s best learn as advertising and marketing slightly than a shipped safety. A coin inheriting Bitcoin’s signature scheme inherits Bitcoin’s publicity with out Bitcoin’s energetic proposals.
Monero is on the pure analysis stage, with energetic post-quantum work on the Monero Analysis Lab and a privateness hedge reaching a take a look at community in 2026, however none of its reside signing or commitments run on a post-quantum primitive. IOTA is the starkest case, as a result of it as soon as used hash-based signatures that had been quantum resistant after which changed them with Ed25519 in 2021 for a smoother person expertise, giving up that safety with no dated plan to revive it. Progress on quantum resistance just isn’t assured to maneuver in a single route.
What it means in the event you maintain crypto
The sensible takeaway is that no mainstream coin will defend you robotically but, so the smart steps are the identical ones that cut back publicity on any chain. Keep away from reusing addresses, as a result of reuse publishes your public key and turns a hidden key into an uncovered one, and like wallets whose groups are actively monitoring their chain’s post-quantum plan. Neither behavior is a full defence, however each purchase time.
It is usually price being sincere about what a migration will demand of holders. On most chains you’ll finally have to maneuver funds into a brand new post-quantum handle kind, and on some the neighborhood is already debating whether or not cash that by no means migrate ought to be frozen, precisely the battle now taking part in out over Bitcoin. Following the roadmaps of the particular cash you maintain, slightly than trusting a blanket declare of quantum security, is probably the most helpful factor an strange holder can do whereas the engineering catches up.
Ceaselessly requested questions
Is any cryptocurrency truly quantum resistant in the present day?
Sure, however just one main chain. The Quantum Resistant Ledger has used hash-based XMSS signatures since its 2018 launch and is the one massive cryptocurrency that protects person funds towards quantum assaults by default. The whole lot else both depends on weak elliptic curve signatures or affords post-quantum safety solely as an opt-in characteristic.
Which quantum resistant cryptocurrency initiatives are furthest alongside?
Past the Quantum Resistant Ledger, the chains with funded groups and dated plans are furthest alongside. Ripple’s XRP Ledger targets a full transition by 2028, Ethereum goals for roughly 2029, and Algorand already runs FALCON for a slender layer. These are roadmaps and testnets slightly than shipped account safety, so none but makes the coin totally quantum resistant.
Are Ethereum and Solana quantum resistant?
Not but in any significant sense to your funds. Ethereum has a 2026 roadmap and a draft proposal aimed toward round 2029 however nothing reside on its important community. Solana affords an opt-in Winternitz Vault, but default accounts stay on Ed25519, so headlines calling Solana quantum resistant describe an elective software slightly than the chain itself.
Why is the quantum menace the identical for therefore many cash?
As a result of they share the identical cryptography. Bitcoin makes use of ECDSA and most newer chains use Ed25519, and each are elliptic curve signature schemes that Shor’s algorithm can break as soon as a succesful quantum laptop exists. A single sufficiently massive machine would threaten the signatures beneath many of the market on the identical time.
When would a quantum laptop have the ability to break these signatures?
Credible knowledgeable timelines cluster within the early 2030s, with surveys giving a better-than-even likelihood of a succesful machine inside fifteen years and regulators planning to disallow in the present day’s signatures after 2035. As a result of migrating a complete chain safely can take years, the sensible deadline to start is nicely earlier than any machine truly arrives.
What ought to I do to guard my crypto now?
No mainstream coin protects you robotically but, so the helpful steps are to keep away from reusing addresses, which retains your public key hidden till you spend, and to favour wallets whose groups are actively engaged on their chain’s post-quantum plan. Neither is a whole defence, however each cut back your publicity whereas the migrations are constructed.
Has any undertaking gone backward on quantum resistance?
Sure. IOTA initially used hash-based signatures that resisted quantum assaults, then changed them with Ed25519 in 2021 to enhance usability, giving up that safety with out a dated plan to revive it. It’s a reminder that quantum resistance is a design alternative a undertaking can drop in addition to undertake.
Might unmigrated cash be frozen just like the Bitcoin proposals recommend?
It’s attainable on some chains and already being debated. Bitcoin’s BIP-361 proposes finally sunsetting previous signatures so unmigrated cash can now not be spent, and different communities might face the identical alternative between letting uncovered cash be stolen and freezing them. The argument is as a lot about property rights and governance as it’s about cryptography.
Each grade right here displays what protects strange person funds on mainnet in the present day, not what a basis has introduced or funded for a later date. A roadmap, a testnet, or an opt-in vault is actual progress, but none of them is similar as a default account {that a} quantum laptop might by no means loot.
