Roughly $2.7 trillion in crypto assets sit behind encryption that a sufficiently powerful quantum computer could eventually crack. On September 9, the Quantus post-quantum blockchain went live with a different bet: instead of waiting for that threat to arrive and scrambling to patch it later, Quantus built quantum-resistant security into its very first block.
The launch matters because almost every major chain in use today, including Bitcoin and Ethereum, protects wallets and transactions with elliptic-curve cryptography. That math is unbreakable by classical computers, but a quantum computer running Shor’s algorithm could theoretically unravel it. Nobody has built a machine that powerful yet. Still, the industry has started treating the countdown as real.
Why Signatures Are the Weak Point
Elliptic-curve signatures work by hiding a private key behind a math problem that’s brutally hard to reverse on a normal computer. Quantum computers change the arithmetic. Once one reaches sufficient scale, it can derive a private key from a public one, and any coins tied to an exposed address become fair game. Researchers who track this risk, including the team behind the migration.fail tracker, put the exposed value across crypto at around $2.7 trillion.
How the Quantus Post-Quantum Blockchain Works
Quantus Labs, led by co-founder and CEO Christopher Smith, didn’t retrofit an existing chain. They built a proof-of-work network from scratch around ML-DSA, the digital signature standard NIST finalized in 2024 as part of its post-quantum toolkit. Every transaction on Quantus authenticates through ML-DSA-65 or ML-DSA-87. Quantus opened mining to the public the moment the network launched, with no head start reserved for the team. A privacy layer called Wormhole shields transaction details, and an aggregation layer aims to keep throughput reasonable even though quantum-safe signatures run heavier than the ones Bitcoin uses. Early testing hit 430 transactions per second, and each signed transaction weighs in around 7 kilobytes, compared to roughly 100 bytes for a typical Bitcoin transaction. That trade-off, bigger data for stronger math, is the price of building this way from day one. Security firms Neodyme, Eiger, Hashcloak, and V12 reviewed the code before launch, and Immunefi ran a public bug bounty competition ahead of mainnet.
Betting Early Instead of Retrofitting Later
Other networks have started down this road too, but none have gone all in from genesis. NEAR and Algorand have both shipped post-quantum transaction options, yet neither has finished converting its entire protocol. Ethereum has set its own firm 2029 deadline for quantum resistance, and Ripple is walking a similar path with a roadmap toward a quantum-resistant XRP Ledger. Smith frames the difference in timing as the whole point: “Being too early is much better than being even a little too late.”
Whether Quantus attracts real usage is a separate question from whether the engineering holds up. But the launch adds a live, audited proof of concept to a conversation that’s mostly been theoretical: a fully functioning chain where quantum resistance isn’t a future upgrade sitting on a roadmap. It’s the default from the first block. More details on the launch are available from Bitcoin.com News.