ALREADY BROKEN

What the Builders Already Know About the Quantum Threat

Before any data. Before any table. Before any EternaX claim.

The industry’s own leading researchers are no longer describing the quantum threat as distant theory. Ethereum’s own post-quantum roadmap leadership now treats post-quantum readiness as a current engineering and market-structure issue, not a remote abstraction. That shift matters because it changes the decision rule for issuers, funds, and institutions.

These are not external critics of the industry. Drake leads Ethereum’s own post-quantum roadmap. Peikert has spent his career building the cryptographic standards the industry is now being told to adopt. When the architects of the infrastructure describe their own creation as a foundation that crumbles, the question is not whether to believe them. The question is what every institution building on that foundation has done in response.

The answer to that question is Section 5.

This is the report’s first core claim: the quantum threat is already validated by the industry’s own experts. The unresolved question is which institutions are still issuing as if post-quantum migration were optional.

The Privacy You Think You Have Is Not Post-Quantum Privacy

Every transaction you have ever made on a chain you believed was private - Monero, Zcash, any privacy layer - is already recorded on a permanent public ledger. A quantum adversary does not need to be present when you transact. It needs only to exist at some future point with access to the blockchain that is always there. The harvest is passive, structural, and already underway. The decryption is deferred. The exposure is current.

This is where Zcash and Monero become especially important. Privacy chains are often marketed as stronger forms of digital money because they hide transaction details, balances, or counterparties. But privacy that is not post-quantum safe is not durable privacy. Once the relevant cryptography fails, historical privacy can fail with it.

Monero’s own research team documents retroactive deanonymization as irreversible. Zcash’s ZIP-2005 acknowledges that upgrading the protocol may not restore the Balance property for historical transactions. The Federal Reserve Board and Federal Reserve Bank of Chicago have published a working paper warning explicitly that quantum computers could decrypt historical blockchain transactions and that post-quantum cryptography cannot retroactively protect data already recorded on public blockchains.

Zcash’s own ZIP-2005 is explicit that Orchard does not by itself make the protocol secure against quantum adversaries, that Sapling would also need to be disabled if discrete-log-breaking attacks became practical, and that the note commitment algorithms used by Sapling and Orchard are not post-quantum binding. That means Zcash is not post-quantum safe today in the way many readers would assume.

Monero’s own post-quantum research framing explicitly prioritizes retroactive deanonymization because it threatens today’s users before theft even becomes the main issue. In other words, Monero’s own research agenda acknowledges that quantum risk is not only about future theft. It is also about the historical privacy users believe they already have.

Migration addresses future transactions. It cannot un-reveal what is already recorded.

The privacy is already gone. Only the adversary has not arrived yet.

The $144 Trillion Post-Quantum Financial Infrastructure Problem

The standard framing of this risk is too small. $2.62 trillion in crypto market cap. $316 billion in stablecoins. These are the assets already on classical rails. They are evidence of what migration debt looks like at scale. They are not the target of this report. The target is the $144.4 trillion U.S. financial stack now actively choosing its cryptographic foundation.

The Financial Stack Now Opening to On-Chain Infrastructure

This stack is not waiting. DTCC tokenization services roll out H2 2026 covering the Russell 1000, major ETFs, and U.S. Treasury bills, notes, and bonds. Nasdaq received SEC approval for tokenized equity trading and settlement on March 18, 2026. NYSE is building 24/7 tokenized venues. OCC is approving bank charters. Wells Fargo filed a stablecoin trademark fourteen days before this report was published. Every dollar of the $144.4 trillion that lands on classical cryptographic rails extends the migration debt by one dollar. The PQ problem scales with the migration.

This is why the report focuses on post-quantum financial infrastructure, not only on crypto assets already reflected in market-cap tables. The larger issue is the next layer of stablecoins, tokenized treasuries, tokenized money market funds, tokenized securities, custody systems, and settlement flows now deciding where to live.

The Quantum Threat Timeline, Ethereum’s 2029 Target, and the Post-Quantum Migration Window

The Quantum Threat Timeline Report 2025, published by evolutionQ and the Global Risk Institute, surveyed 26 internationally recognized quantum computing experts under a structured elicitation methodology. Average estimated likelihood of a cryptographically relevant quantum computer capable of breaking RSA-2048 within five years: 15%. Within ten years: 49%. This is not an analyst’s forecast. It is the structured average probability estimate of 26 domain experts. 13 of 26 placed the ten-year likelihood at approximately 50% or higher.

Ethereum’s own post-quantum roadmap leadership is targeting 2029 for full post-quantum completion. That is a serious signal. It means Ethereum itself is still treating full post-quantum security as a live engineering target, not a completed condition. The relevant institutional question is no longer “When should we think about post-quantum?” The relevant question is “Why are we still issuing on rails that even their own core roadmap says are not fully post-quantum-complete yet?”

That has direct consequences for stablecoins, tokenized treasuries, tokenized money market funds, tokenized securities, custody systems, collateral systems, and settlement infrastructure already being launched on Ethereum and Ethereum-linked rails. If full post-quantum completion is still being targeted for 2029, then every new issuance before that date is knowingly launched inside a pre-upgrade exposure window. That is migration debt. It is also time-at-risk.

Craig Gidney’s 2025 peer-reviewed paper establishes that breaking RSA-2048 requires under one million physical qubits. In 2021 the estimate was approximately 20 million. A 20x compression in four years. That compression trend is what should matter most to institutions deciding whether they can safely issue first and migrate later.

Even the expert framing is shifting away from a clean, binary Q-Day. The more realistic risk is a compressed period in which the highest-value targets become vulnerable first, uncertainty spreads before certainty, and market repricing begins before the public gets a simple story. That makes post-quantum architecture a current issuance decision, not a future migration discussion.

NIST says full integration takes 10 to 20 years. The clock started in 2024. Optimistic end: full integration by 2034. The 26 domain experts say 49% probability the threat arrives by the same window. Ethereum is still targeting 2029. Institutions are still issuing now. The arithmetic does not close cleanly for anyone choosing classical rails in 2026.

The Regulatory and Industry Timeline

In other words, the post-quantum migration window for new issuance is already inside the quantum threat window.

27 Institutions. Zero Published Post-Quantum Migration Plans.

Every product in this table is a live production system, active regulatory filing, or live institutional architecture surface. Every one depends on classical cryptographic rails. Not one has published a concrete post-quantum migration plan with a deployment timeline.

This is the report’s core institutional point: the quantum threat is now public, post-quantum cryptography is now a real design variable, and yet major issuers, tokenization platforms, fund managers, and infrastructure providers are still hardening classical architecture anyway.

Why Post-Quantum Signatures Break Legacy Financial Rails

The natural response to the quantum threat is: we will just migrate to post-quantum cryptography later. This section explains why that answer is commercially weak on legacy rails.

That is why post-quantum-native day one matters commercially. If the retrofit is a non-starter, the market advantage belongs to the rail that does not need the retrofit in the first place.

The Ethereum Foundation researcher used the phrase “non-starter” to describe migrating his own chain. This report does not need to argue this point. Drake already argued it about himself.

NIST Post-Quantum Signature Standards vs. Current Infrastructure

TPS Loss Under System-Wide PQ Migration

If Ethereum itself is still targeting 2029 for full post-quantum completion, then the implication for institutions is obvious: every new stablecoin, tokenized fund, money market fund, or tokenized security launched before that point is entering a period in which migration remains unfinished and exposure remains live.

Eight Independent Post-Quantum Migration Perimeters

A chain upgrade addresses one perimeter. The other seven are independent programs no chain upgrade initiates.

When any one perimeter begins migrating, all others must follow simultaneously or the system fractures. PQ-safe and legacy USDC coexist on the same chain. Institutional participants refuse the legacy version. Liquidity fragments. Collateral reprices across Deribit, Binance, and CME simultaneously. Not sequentially. Simultaneously. In the same compressed window.

This is also why post-quantum-native issuance has a distribution advantage. The issuer that avoids creating this eight-perimeter migration burden has a cleaner story for enterprises, custodians, auditors, counterparties, exchanges, and long-duration capital from day one.

Nine Chains. Nine Post-Quantum Verdicts.

Bitcoin

BlackRock IBIT holds 577,919 BTC - the ETF filing added quantum computing risk disclosures in 2025. BIP 360, a Pay-to-Merkle-Root proposal introducing a quantum-resistant output type, was published in early 2026. It is described as step one. It has not been activated. No mainnet timeline exists.

4 to 6 million BTC are immediately exposed at rest via P2PK addresses and reused P2PKH addresses. Peer-reviewed research establishes that convincing a decentralized community to accept 50% capacity loss and 2 to 3 times fee increases could take 10 to 15 years.

Ethereum

Drake confirmed three independent vulnerability layers: ECDSA for user transactions, BLS for proof-of-stake consensus signatures, KZG polynomial commitments for data-availability blobs. Three independent programs. No single hard fork addresses all three simultaneously.

Assets on Ethereum include USDT, USDC, BlackRock BUIDL, Franklin Templeton BENJI, WisdomTree WTGXX, Fidelity FIDD, Goldman GS DAP, Securitize products, Centrifuge products, and multiple L2 ecosystems that multiply the signer and bridge perimeter count.

Ethereum’s 2029 PQ target has no committed hard-fork date. The Fellowship of Ethereum Magicians documented in March 2026 that the path to post-quantum Ethereum currently looks like Shibuya Crossing: too many proposals all trying to solve the same problem in different ways.

Solana

The Solana Foundation deployed a post-quantum transaction prototype on a testnet on December 16, 2025. An optional non-default Winternitz Vault was introduced in January 2025. Solana’s transaction size limit is increasing to 4,096 bytes in 2026. These facts are acknowledged completely and accurately.

What these facts do not constitute: a mainnet migration timeline, a protocol-level commitment, a system-wide cryptographic transition, or coverage for any of the $180B+ in assets currently on Ed25519 infrastructure.

The structural vulnerability is categorical: Solana and Ed25519-based chains face near-complete vulnerability because public keys are directly used as addresses. Every funded Solana account is permanently exposed. There is no transit window, no conditional safety, no partial protection.

Tron

$80 billion in Tether USDT - 98.34% of all Tron stablecoin volume. Daily transfer volume: $27.5 billion across 1.15 million active accounts. Monthly transfer volume: $600 billion, predominantly in transactions under $1,000 from Sub-Saharan Africa, Latin America, and Southeast Asia.

Zero migration preparation. No published roadmap. No proposed protocol upgrade. No research collaboration. No academic partnership. No community discussion thread on PQ migration in any forum. Zero preparation at any level of the protocol stack.

Base

$5.1 billion in stablecoins with 90.73% USDC dominance. Three independent migration programs presented as one L2: Ethereum L1, Coinbase sequencer, and bridge / admin multisig surfaces.

Coinbase Prime holds a very large concentration of crypto market infrastructure in MPC-based systems built on threshold ECDSA and EdDSA. If chartered or regulated institutions begin formal PQ migration programs, Coinbase faces a multi-surface transition touching sequencer, custody, and compliance infrastructure simultaneously.

Canton Network

JPMorgan Kinexys processing $1B+ daily. Goldman Sachs GS DAP. BNY Mellon. BNP Paribas. Canton’s documented signing infrastructure uses classical keys, with Ed25519 as an explicit signing algorithm.

The migration failure mode for Canton is institutional coordination impossibility. Every participant must agree. Every legal agreement must be re-papered. Every audit must be reconducted. Every regulator must be informed and must not object. The largest custody and bank participants set the speed of the whole network.

Hyperliquid

S&P 500, gold, and oil perpetual contracts live as of March 17, 2026. $4 trillion+ in cumulative trading volume. Approximately 60% of decentralized perpetuals market share. $4.4 billion in USDC locked on the platform.

Every perpetual contract settles in USDC. During any CCTP or issuer-control migration, USDC on migrated chains and USDC on non-migrated chains can coexist simultaneously. For a perps venue where every position settles in a single stablecoin standard, settlement uncertainty during that migration window is an existential product risk.

Zcash

Zcash is not post-quantum safe today. That is not an outside accusation. It follows from Zcash’s own technical record. ZIP-2005 explicitly says Orchard does not by itself make the protocol secure against quantum adversaries, says Sapling would also need to be disabled if discrete-log-breaking attacks became practical, and explains that the note commitment algorithms used by Sapling and Orchard are not post-quantum binding.

The strategic consequence is severe. If a privacy chain is not post-quantum safe, then its privacy story is not just threatened at the edges. Historical privacy, note integrity, and balance integrity can all come under stress together. Justin Drake’s warning that privacy coins are natural early targets should be read in that context.

Monero

Monero is also not post-quantum safe today in the durable sense users may assume. Monero’s own research framing explicitly prioritizes retroactive deanonymization because it threatens current users before theft even becomes the main issue. That is the critical point.

A privacy chain facing the quantum threat does not only face future-loss risk. It faces the possibility that historical privacy assumptions weaken retroactively. Privacy without post-quantum safety is not durable privacy. It may be the place where the failure is most psychologically surprising.

$57B to $135B in First-Order Post-Quantum Migration Debt

This is the financial meaning of cryptographic migration debt.

The repricing mechanism already exists. It is operational today. It is dormant. It requires only one parameter change. Deribit already publishes explicit haircut tables for BlackRock’s BUIDL in its cross-collateral system. Binance integrates BUIDL as off-exchange collateral with its own margin parameters. The infrastructure for repricing quantum-exposed collateral is built into venue systems today.

If Q-Day is not a single black-and-white event, repricing becomes even more important. Institutions do not wait for perfect public clarity to change haircut tables, collateral eligibility, audit language, or board-level risk treatment.

The trigger is not a quantum computer suddenly appearing in public. The trigger is the repricing conversation. This report is that conversation.

This section explains the downside. The next section explains the remaining upside for institutions still early enough to avoid creating the debt, reduce pre-upgrade time-at-risk, and capture a distribution advantage instead.

The Open 2026 Decisions. Before Architecture Lock-In.

This section is the commercial core of the report. It identifies the institutions that still have a chance to choose post-quantum-native issuance before architecture lock-in.

The opportunity is not only to avoid future migration cost. It is to issue on infrastructure that enterprises, counterparties, auditors, custodians, and market participants can treat as the cleaner long-duration answer from day one. In that sense, post-quantum-native issuance is not only a risk response. It is a distribution decision.

The Issuance Decision Table - Architecture Still Mutable

Wells Fargo: What chain has Wells Fargo selected for WFUSD? Has the OCC filing addressed CISA-aligned cryptographic migration requirements for the signing infrastructure? What is the estimated migration cost if the architecture must change after the first token mints?

DTCC: What post-quantum readiness requirements are included in the allowlisted wallet signing standard being set during this pilot? If DTCC sets the standard on classical infrastructure, every institution that follows DTCC into tokenized entitlements inherits the migration debt simultaneously.

The G7 Ten-Bank Consortium: Which chains are under evaluation? What is the cryptographic infrastructure review process? If this product launches on classical rails it becomes one of the clearest migration-debt creation events in financial history.

Swift: Has Swift’s innovation team reviewed whether the blockchain pilot architecture should require post-quantum signing as a baseline condition before propagation to member institutions?

CME Group: Has CME’s risk committee reviewed post-quantum readiness as a condition of the tokenized collateral architecture before the partner stack locks?

If Ethereum itself is still targeting 2029 for full post-quantum completion, then every institution choosing classical Ethereum-linked rails before that target date is knowingly choosing both migration debt and pre-upgrade time-at-risk.

Post-Quantum Native Day One with EternaX

Post-quantum security is now both a defensive requirement and an offensive opportunity. Even Ethereum’s own post-quantum leadership now frames the issue not merely as a hurdle, but as a chance for the first global financial system to stand out on security. EternaX takes that logic one step further: not migrate later, but issue right the first time.

Post-Quantum Native Day One with EternaX means issuing on a post-quantum-secure chain from day one, rather than launching on classical rails and carrying migration debt forward.

ML-DSA and Falcon rely on computational hardness assumptions. Lattice problems are believed to resist quantum attack. Believed is the operative word. If AI-accelerated mathematical research finds a shortcut through lattice problems, those schemes require replacement again. Every institution that migrated to them would still carry migration debt - just a different kind.

EternaX’s scheme is presented here as information-theoretic. Unforgeability does not depend on any computational hardness assumption - not lattice, not discrete log, not factoring, not any class yet to be discovered or broken by AI. It does not require a belief about the future of mathematics. It is intended to be permanent by construction.

The Architecture Comparison

The commercial implication is larger than cost avoidance. If an issuer launches post-quantum-native day one, it does not only avoid migration debt and reduce pre-upgrade time-at-risk. It gains a cleaner answer for boards, regulators, auditors, enterprises, custodians, counterparties, exchanges, and long-duration capital. That cleaner answer is a distribution advantage.

What EternaX Avoids and What EternaX Enables

Zero migration debt. No forced migration programs. No compressed windows. No simultaneous coordination across eight independent perimeters.

Zero stablecoin fragmentation. No PQ-safe version versus legacy version. Stablecoins minted on EternaX are PQ-safe from the first mint.

Zero TPS cliff. Not 31% loss. Not 69% loss. Not 77% loss. Approximately 2%. Commercially viable throughput under post-quantum security.

Zero collateral repricing for legacy rail risk. Collateral issued on PQ-native rails does not receive the same PQ haircuts tied to classical infrastructure.

Zero fund governance re-papering caused by substrate replacement. Products registered on PQ-native rails do not need to rewrite the cryptographic substrate later.

Distribution advantage. Issuers and institutions can market a product as post-quantum-native from day one instead of promising future migration.

Enterprise confidence. Enterprises and institutional counterparties get a cleaner answer to long-duration infrastructure risk.

Audit clarity. Boards, auditors, and risk committees can point to issuance on post-quantum-native rails instead of a future retrofit plan.

Adoption leverage. In a market where many rails still imply migration debt and unfinished post-quantum migration, the rail that avoids creating that debt becomes easier to justify internally and externally.

Category leadership. If post-quantum-native issuance becomes a differentiator, the first infrastructure that offers it at market speed gains a natural security-driven distribution wedge.

Live today. Testnet launched November 2025. Over 1,000,000 transactions processed. Over 475,000 prediction bets placed. PQ-native L1 with PQ-EVM running. Migration vaults for Ethereum and EVM tokens deployed. PQ-safe wallet operational. Prediction markets live. Perpetuals next.

What Institutions Should Do Now

This is not a theoretical recommendation. It is a 2026 architecture checklist for institutions facing the quantum threat now.

If you are an OCC charter applicant: Address cryptographic migration risk as a material infrastructure consideration before your architecture commits.

If you are a stablecoin issuer: Disclose signing infrastructure and PQ migration planning status in your next reserve attestation.

If you are a tokenized fund manager: Add quantum exposure to your prospectus risk factors now.

If you are a custody provider: Include PQ migration planning in your internal control scope before examiners ask.

If you are an institutional investor: Ask every portfolio company for its cryptographic risk disclosures before the next board meeting.

If your architecture is still open: Evaluate post-quantum-native issuance before the first token mints.

The practical choice is now dual, not singular. Institutions must decide whether to avoid creating cryptographic migration debt and pre-upgrade time-at-risk. They must also decide whether to capture the distribution advantage available to the first issuers and infrastructure providers that can say they are post-quantum-native from day one.

Issue once. Issue right.