Which Cryptocurrencies Are Quantum-Resistant? (2026)

A few blockchains let you authorize transactions with signatures designed to resist known quantum attacks. Many more carry the label without enforcing it at the ledger, and several popular rankings are out of date. Bitcoin and Ethereum don’t yet have complete protocol-wide quantum protection, and both still sign with schemes that Shor’s algorithm would break.

This guide sets out what the label has to mean, names the chains that meet it to different degrees, flags the ones commonly listed by mistake, and gives you a way to test any claim yourself. For the underlying defense, see the plain-English guide to post-quantum cryptography.

What quantum-resistant transaction authorization means

Start with the precise version of the claim. Transaction authorization is quantum-resistant when spending requires a signature scheme believed to resist known quantum attacks, with suitable parameters and no classical-only bypass. A network can offer protected accounts while other accounts, or its consensus layer, stay quantum-vulnerable. So “this account is protected” and “the whole chain is quantum-resistant” are different statements, and most of the confusion in coin rankings comes from treating them as one.

The protected schemes are hash-based signatures such as XMSS, WOTS+, or SLH-DSA, or lattice-based signatures such as ML-DSA (derived from Dilithium) or Falcon. A sufficiently capable quantum computer running Shor’s algorithm could recover private keys from exposed ECDSA or Ed25519 public keys.

Four questions separate substance from marketing:

1. Does spending require the post-quantum scheme, with no classical-only path? A hybrid that needs both a classical and a post-quantum signature preserves protection. One that accepts either leaves a bypass.
2. Is it the transaction-signing layer, not just state proofs, bridges, or identity credentials?
3. Is it live on the main network, not a testnet or a roadmap?
4. Do consensus and the chain’s other critical cryptography also resist quantum attack, before anyone calls the entire network resistant?

Many of these blockchain implementations are relatively new, even though the underlying math varies in maturity. Hash-based signatures have a long research history, and NIST recommended XMSS and LMS back in 2020. Resistance means no known attack under current cryptanalysis, which can change.

Built post-quantum from the start

QRL (Quantum Resistant Ledger): Its mainnet launched in June 2018 signing with the hash-based XMSS scheme instead of elliptic-curve cryptography. XMSS is stateful: each one-time signing key inside its tree may be used only once, and a wallet signs many transactions under the same XMSS address by advancing through unused signing indices, with the default tree providing 1,024. The roadmap adds ML-DSA-87 across a developing stack and builds QRL 2.0 as an EVM-compatible post-quantum proof-of-stake network; that development work is separate from the deployed QRL 1.x chain. On review, an audit announced in April 2026 examined QRL’s JavaScript implementations of ML-DSA-87 and Dilithium5, and Halborn’s published report lists 13 informational findings, all resolved. A later QRL announcement describes a Trail of Bits assessment of its go-qrllib library with 15 findings, including one high, reported resolved.

Mochimo (MCM): Live since 2018, with WOTS+ hash-based signatures required on transactions per its current whitepaper, on a proof-of-work ledger. Its community voted in May 2026 to pursue a move to proof-of-stake, though this isn’t yet a complete mainnet upgrade. Its wallet advances change to the next signing key after a spend, an operational model of its own that should not be read as identical to QRL’s index management.

Abelian (ABEL): A layer-1 that pairs post-quantum cryptography with privacy. Its native layer uses custom lattice-based constructions inspired by CRYSTALS-Dilithium and CRYSTALS-Kyber, including privacy-preserving linkable ring signatures and zero-knowledge systems. Kyber is a key-encapsulation mechanism, not a transaction signature. Abelian’s separate QDay layer-2 describes staged protection over time, so an EVM layer doesn’t automatically inherit the base layer’s guarantees. The project’s “world’s first” and “provably secure” descriptions are its own, and its custom constructions warrant their own review.

A larger network with live post-quantum accounts

Algorand (ALGO): Algorand introduced Falcon-signed State Proofs in 2022 and demonstrated Falcon-authorized mainnet transactions through its LogicSig mechanism in November 2025. Its documentation says native Falcon-1024 accounts became available on mainnet in August 2026, so a user can adopt post-quantum transaction authorization today. Ordinary Ed25519 accounts and quantum-vulnerable consensus components remain in place, and the Foundation targets broader quantum resilience by the end of 2027. Google’s 2026 cryptocurrency analysis discusses Algorand’s deployed protections.

Post-quantum signing with host-chain limits

QANplatform (QANX): QANplatform documents Dilithium-based signing through its QAN XLINK system and has enterprise and public-testnet deployments. That doesn’t make QANX quantum-resistant when you hold it as an ERC-20 or BEP-20 token, because those holdings follow their host network’s authorization rules, which are classical. A live public-mainnet classification needs separate evidence of deployment and enforced post-quantum signing.

Cellframe (CELL): Cellframe documents support for several post-quantum signature schemes, including Falcon, Dilithium, and SPHINCS+, and maintains current technical material and release notes. Its native CF-20 CELL must be distinguished from wrapped CELL on Ethereum or BSC, which follow those chains’ classical rules. Algorithm support is not the same as mandatory protection, so a firm verdict depends on which signatures the relevant network enforces and whether a classical-only spending path remains.

Networks whose ordinary transaction signatures remain quantum-vulnerable

IOTA: Older rankings call IOTA quantum-resistant because it originally used Winternitz one-time signatures. That is out of date, as IOTA removed Winternitz during its Chrysalis upgrade and moved ledger signing to classical schemes. Current documentation lists several, including Ed25519 and ECDSA variants (secp256k1 and secp256r1). The cited post-quantum support concerns optional IOTA Identity credentials, which doesn’t establish post-quantum protection for ordinary ledger transactions.

Solana: Project Eleven announced a post-quantum Solana prototype in December 2025. In April 2026 the Solana Foundation described Falcon implementations developed by Anza and Firedancer as migration research. Those efforts are separate from the current transaction format, which still requires Ed25519 signatures.

Bitcoin and Ethereum: Neither has complete protocol-wide quantum protection yet. Bitcoin’s migration is debated through drafts like BIP-360 and BIP-361, and Ethereum’s roadmap covers account signatures along with consensus signatures and certain proof systems, with a stated 2029 target. Bitcoin’s ECDSA and Schnorr spending signatures, and Ethereum’s standard-account ECDSA signatures, remain quantum-vulnerable pending migration. What Is Q-Day? covers the threat behind all of this.

The wallets-and-keys angle

A chain’s protection reaches your coins only through the wallet that signs for you, and two practical points follow. QRL and Mochimo use schemes that require each one-time signing key to remain single-use. Their wallets manage this differently, so correct key handling and recovery procedures are part of the security model. And post-quantum signatures often increase transaction size and verification cost.

The effect on fees depends on the network’s charging rules, and backup requirements depend on how the wallet reconstructs keys from a seed and preserves any signing state, since an ML-DSA key can run to thousands of bytes yet regenerate from a 32-byte seed. A post-quantum token you hold on an exchange or move across a bridge is only as protected as that custody layer. Seed phrases vs PQC and hot wallets vs cold wallets cover the storage side.

How to check a claim yourself

Before trusting a “quantum-resistant” label, work through five checks:

1. Name the signature scheme: Look for XMSS, WOTS+, SLH-DSA, ML-DSA (Dilithium), or Falcon. Spending authorized solely by ECDSA or Ed25519 is quantum-vulnerable. If a post-quantum signature is also mandatory, assess the complete authorization rules.
2. Rule out a classical-only spending path that would bypass the post-quantum signature.
3. Find out what it protects: Transaction authorization directly controls who can spend; consensus and other components must also stay secure before the whole network counts.
4. Check mainnet versus testnet, and whether the protected account type is live.
5. Look for independent implementation review: A recognized algorithm name doesn’t prove the implementation is sound, so prefer schemes with a published external audit or open specification.
6. Go to the source: the project’s documentation, GitHub, and a block explorer. Avoid aggregator lists, which still miscategorize chains such as IOTA.

Identifying the scheme is quick, but establishing its deployment, its parameters, and the absence of alternative spending paths can take substantial digging.

Bottom line

The verifiable picture is narrower than the lists suggest. QRL and Mochimo were built on hash-based signatures from the start, Abelian uses custom lattice-based constructions, and Algorand now offers live post-quantum accounts on mainnet while its consensus and classical accounts still need migration. QANX held as an ERC-20 or BEP-20 token follows its host chain’s classical rules, and Cellframe’s status depends on which signatures the relevant network enforces. Bitcoin and Ethereum are not there yet. For your own holdings, what settles the answer is the scheme enforced on the account you spend from, and you can verify that at the source.

Keep going

New to the threat? Start with What Is Q-Day?

Continue the series:

• Post-Quantum Cryptography: A Plain-English Guide
• NIST’s PQC Standards, Explained
• Lattice-Based vs Hash-Based vs Code-Based Signatures

Browse all post-quantum cryptography guides.

This article is educational and does not constitute security or investment advice.

// FAQ

Which cryptocurrencies have post-quantum plans?

QRL and Mochimo were built on hash-based signatures from the start, Abelian uses custom lattice-based constructions, and Algorand now offers live post-quantum accounts on mainnet. Bitcoin and Ethereum have migrations in progress. This guide assesses each one.

Is Ethereum quantum-resistant?

Not yet. Ethereum’s standard accounts sign with ECDSA, which Shor’s algorithm would break, and its roadmap targets quantum resistance across accounts, consensus, and proof systems around 2029. It’s working on the problem, not finished with it.

Is Monero, XRP, or Solana quantum-safe?

None of them is quantum-resistant at the transaction-signing layer today. Solana has Falcon migration research underway, while XRP and Monero rely on classical signatures pending their own upgrades. Approach “quantum-safe” claims as something to verify per chain.

What's the difference between quantum-safe and quantum-resistant coins?

The labels are used loosely; what matters is whether spending requires a post-quantum signature scheme with no classical-only bypass. A coin can have post-quantum features in one layer while ordinary transactions stay quantum-vulnerable.

How can I check if my coin supports PQC?

Find the signature scheme its transactions use (look for XMSS, WOTS+, SLH-DSA, ML-DSA, or Falcon), confirm it’s live on mainnet, and check the project’s own docs rather than aggregator lists. The guide includes a five-point checklist.