The Public Record,
Without Filling Gaps

Wallets prove control with elliptic-curve signatures. Going from a private key to a public key is cheap; going back — the discrete logarithm — is not feasible on classical hardware.

A fault-tolerant quantum computer of cryptographically relevant scale could recover private keys from published public keys. That machine is not known to exist. The exposure is the dependency, not a present break.

NIST-standardised ML-DSA and SLH-DSA target classical and quantum attackers alike. Moving is expensive: signatures grow and verification costs shift. Below: schemes, dependencies and published migration work — no readiness scores.

Side by Side, Three Chains

Compiled from public sources, last reviewed October 2026.

Solana
Robinhood Chain
Ethereum
Signatures
Ed25519Accounts and validators
ECDSA · secp256k1Account transactions
ECDSA · secp256k1Account transactionsBLS12-381Validator attestations
Dependencies
Ed25519 keys double as account addresses
SHA-256 hashing
EVM account model and transaction format
Arbitrum-based layer 2: inherits settlement and data security from Ethereum
Keccak-256 hashing
KZG polynomial commitments for blob data
Pairing-based cryptography in consensus
Keccak-256 and SHA-256 hashing
Post-quantum initiatives
Optional hash-based one-time-signature vault program (Winternitz Vault)
Reported testnet experiments with post-quantum signatures
No chain-specific post-quantum initiative identified in the public sources reviewed.
Ethereum Foundation post-quantum programme
Hash-based signature research for consensus
Account abstraction as a route to alternative signature schemes
Migration status
Optional, application levelAn optional hash-based vault exists at the application level. Base-layer accounts and validators remain on Ed25519.
No published plan identifiedAccounts use conventional elliptic-curve signatures. As an Ethereum layer 2, its migration path is closely tied to Ethereum’s.
Research and specificationActive research and specification work. No post-quantum signature scheme is in production for accounts or consensus.

Absence of an identified initiative means none was found, not that none exists.

Signing Is Not the Same as Agreeing a Secret

A signature shows who authorised a transfer. A key-establishment mechanism lets two parties share a secret. Chains mostly need the first.

Milestones That Moved the Field

Newest first.

Lab Work Versus Live Networks

Stages are categories, not a ranking. An optional application-level tool does not make a network quantum-resistant.

What today’s crypto actually rests on

Account signatures are the obvious piece, not the only one. Consensus signatures, data-availability commitments and precompiles also sit on elliptic-curve or pairing assumptions, and each needs its own successor.

How a move could happen

Account abstraction lets an account pick its own verifier, so users can switch schemes without a new address format. Emergency-recovery drafts cover accounts that cannot move in time.

What exists in the lab

Prototype verifiers, hash-based aggregation and testnet trials exist across ecosystems. They prove cost and feasibility. They do not shield funds on live networks.

What is actually in production

No major smart-contract chain has swapped base-layer account signatures for a post-quantum scheme. Testnet or opt-in tooling is not the same as production quantum resistance.