.@andyyy, co-founder of @therollupco, will be at Quantum & Privacy Day. For years, Andy has been in the middle of the conversations moving crypto forward. The Rollup has recorded more than 1,000 podcast episodes with the people building digital assets. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

CTO of @midnightfdn, @SebastienGllmt, will be speaking at Quantum & Privacy Day. Midnight is a zero-knowledge blockchain built around selective disclosure, which lets users prove what matters without exposing the underlying data. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

CEO and co-founder of @Bitwise, @HHorsley, will be at Quantum & Privacy Day. Bitwise launched the world’s first crypto index fund in 2017 and was among the first firms to bring a U.S. spot Bitcoin ETF to market. October 8 | Tower Club, Singapore Join us in Singapore: luma.com/jtof4o9b

Managing Partner at @dragonfly_xyz, @hosseeb, will be at Quantum & Privacy Day. He brings the investor's view of the quantum threat to crypto and whether the industry can move fast enough to meet it. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

This would definitely work on me

Privacy is a human right. We’re excited to welcome @vizorwallet to Quantum & Privacy Day this October. Vizor is an open-source, self-custody Zcash wallet from the team behind Keplr. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

We're excited to welcome @ns as a sponsor of Quantum & Privacy Day this October. Network School is a community of founders and engineers who live and build together, and it was home to our first QDay event. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

Founder of @NS, @balajis, will be at Quantum & Privacy Day. Former Coinbase CTO, Balaji led the launch of USDC and is the author of The Network State, a blueprint for how internet-native communities can become real-world institutions. October 8 | Tower Club, Singapore Be in the room: luma.com/jtof4o9b

Founder of @Zcash and Chief Product Officer at Shielded Labs, @zooko, will be at Quantum & Privacy Day. Zcash launched in 2016 and brought zero-knowledge cryptography to production. October 8 | Tower Club, Singapore Join us in Singapore: luma.com/jtof4o9b

The U.S. just put $215 million behind fault-tolerant quantum computers. Does Bitcoin have an answer to the quantum question? “Bitcoin’s big superpower is that it’s decentralized. In the case of upgrading the network, it is its biggest weak point.”

Last week in quantum: Quantus picked @NEARProtocol as QTC's first route into the wider crypto market @QuantusNetwork named @near_intents as the first venue planned for access to QTC following its September 9th mainnet launch. The integration gives the post-quantum-native chain a route toward cross-chain liquidity without relying on centralized custodians. Bitcoin's post-quantum defense is starting to take shape. Researcher @christine_dkim mapped four proposals now being discussed around Bitcoin's quantum migration: BIP-360, SHRINCS, Lifeboat and DropKick. BIP-360 and SHRINCS focus on preventing future exposure with new output and signature designs. Lifeboat and DropKick are proposed rescue mechanisms for users who fail to migrate before a quantum attack becomes possible. None are active on Bitcoin today, but together they show the migration problem moving from one proposal into a broader set of prevention and recovery tools. The @ENERGY opened a competition worth up to $215 million for 100-logical-qubit machines The Department of Energy launched the Quantum Genesis Q Competition for fault-tolerant systems with at least 100 logical qubits capable of hundreds of millions of fault-tolerant operations. The funding includes a $100 million pool for reaching 100 logical qubits, with additional $50 million pools for systems that reach 150 and 200. @Ledger stress-tested what SHRINCS would mean for Bitcoin wallets Ledger reviewed SHRINCS, the draft hash-based post-quantum signature proposal for Bitcoin, from the wallet and custody side. Its current stateful signatures range from 548 to 4,619 bytes, with a 5,777-byte stateless fallback. The harder problem is state management, because reusing a one-time signing slot can let someone forge signatures. @Oracle shipped post-quantum key exchange into Java 27 Java 27 added hybrid post-quantum key exchange to TLS 1.3, combining ML-KEM with existing elliptic-curve cryptography. Applications using Java's standard TLS APIs can benefit by default without rewriting their code. That puts post-quantum migration inside software infrastructure used across enterprise applications. Post-quantum migration is becoming an implementation problem. Java can easily ship new cryptography in a software release. Bitcoin has to coordinate signatures, wallets, recovery rules and consensus across an entire network.

THIS IS THE LAST POST IN THE THREAD BEWARE OF SCAMS THERE IS NO OFFICIAL VENUE TO TRADE QTC YET THE ONLY PLACE TO CLAIM THE QUANTUS AIRDROP IS IN THE OFFICIAL MOBILE APP For now, the only way to get QTC is to mine it

The QTC airdrop is live. Eligible miners across Resonance, Schrödinger, Dirac, and Planck testnets share a 10,000 QTC airdrop. The ONLY way to check or claim your airdrop is via the Quantus mobile wallet. A thread on eligibility and how to claim 🧵

Is your wallet post-quantum? @conordeegan, CTO and co-founder of @projecteleven, joins Quantum & Privacy Day. His work focuses on the post-quantum key management wallets depend on. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

“There’s a convergence happening of AI, quantum, and blockchain. The big story is ECDSA.fail. Google published research on a much more efficient version of Shor’s algorithm, backed by a zero-knowledge proof without releasing the underlying circuit. Then @eigenlabs made the work public. They started behind Google, and it only took them three days to catch up to Google’s result.” Shoutout to these geniuses: @sreeramkannan @soubhikdeb @bbuddha_xyz @gajesh nitter.net/eigenlabs/status/20980…

Users cannot wait for every L1 to upgrade. @cadillion, co-founder and CEO of @QuipNetwork, will speak at Quantum & Privacy Day. Quip gives assets on Bitcoin, Ethereum, and Solana a path into post-quantum protection before their base layers upgrade. Colton also tracks the hardware and circuit results that keep changing quantum-risk estimates. October 8 | Tower Club, Singapore Join us in Singapore: luma.com/jtof4o9b

Post-quantum money is coming to near.com. Quantus will launch with @near_intents as its day-one listing partner, making near.com the first venue where users can access QTC. Hear about it first at: quantus.com/launch

.@cadillion on what he would do as CEO of Bitcoin, and how a quantum attack could turn migration into a block-space crisis: “I’d be paying a lot of attention to BIP 360 and the work supporting migration to quantum-resistant algorithms…” “…Any of these people who don’t have any connection to a post-quantum key now have to reveal a new post-quantum key in a credible way that proves they have control of that asset. And if you want to do that, you’re just going to take months and months and months of blocks.” nitter.net/QuantusNetwork/status/…

We’re excited to welcome @projecteleven to Quantum & Privacy Day this October. Project Eleven are leaders building post-quantum security and migration infrastructure for digital assets. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

Last week in quantum: Quantus mainnet is live @QuantusNetwork launched mainnet which is fully post-quantum from genesis. Every transaction is signed with post-quantum signatures. There are no legacy ECDSA accounts to migrate. Ethereum set a 2029 target for post-quantum readiness The @ethereumfndn Protocol cluster is aiming to make Ethereum L1 quantum-resistant across execution, consensus, and data by December 2029. Its roadmap includes post-quantum transactions, a public-key registry, and account changes that make new signature schemes easier to introduce. @IonQ mapped a secp256k1 attack end to end IonQ estimates that a proposed trapped-ion quantum computer could run Shor’s algorithm against secp256k1, the elliptic curve used by Bitcoin and Ethereum signatures. The model requires about 19,397 physical qubits and 1,457 logical qubits, with a 25.7-day runtime per attempt. No machine capable of running the attack exists today. ECDSA.Fail cut a key Shor benchmark by 86.1% More than 100 researchers and AI agents optimized secp256k1 point addition, one core operation in Shor’s algorithm. They reduced its Q×T resource benchmark by 86.1%. The benchmark measures one circuit component in a full Shor attack. The race is now visible in both directions. Defense and attack are moving at the same time. Networks are beginning to deploy post-quantum systems and set migration deadlines, while quantum researchers are making the building blocks of an attack cheaper.

GM of @NEARIntents, @AlexAuroraDev, is joining Quantum & Privacy Day. Alex builds private cross-chain execution and works on the hard question behind post-quantum adoption: how the wider ecosystem gets ready for new cryptography. October 8 | Tower Club, Singapore Apply to attend: luma.com/jtof4o9b

Quantus COO and Co-Founder, @JoeMattia, will speak at Quantum & Privacy Day. Joe has spent the last two years building Quantus and making the case for post-quantum crypto. October 8 | Tower Club, Singapore Register to join us in Singapore: luma.com/jtof4o9b

.@apruden08, CEO and co-founder of @projecteleven and Chairman of @aleoHQ, takes the stage at Quantum & Privacy Day. Google Quantum AI’s paper on quantum risks to blockchain cryptography acknowledges Alex Pruden for discussions on the quantum vulnerabilities of cryptocurrencies. He’ll join the conversation on keeping money private and digital assets secure through the post-quantum transition. October 8 | Tower Club, Singapore Register to join us in Singapore: luma.com/jtof4o9b

QTC It’s BTC but: • Post Quantum • Private • Scalable

“Correct. Fast. Beautiful. In that order. If the cryptography fails, it doesn’t really matter how fast it is. You’ve got a high TPS. Cool. What’s your QTPS?”

Quantus CEO and Co-Founder, @yuvilightman, will speak at Quantum & Privacy Day. He’ll make the case for private, post-quantum money built to scale. October 8 | Tower Club, Singapore Register to join us in Singapore: luma.com/jtof4o9b

THIS IS THE LAST POST IN THE THREAD BEWARE OF SCAMS THERE IS NO OFFICIAL DISCORD NO QUANTUS TOKEN IS TRADABLE YET For now, the only way to get Quantus is to mine it Learn more here: docs.quantus.com

Quantus is live Quantum secure encrypted money Only way to get it is to mine it Tradable soon Welcome to Quantus

Getting more liquid so he can start mining Quantus

.@ilblackdragon, co-founder of @NEARProtocol, takes the stage at Quantum & Privacy Day. A former Google Research engineer, Illia co-authored Attention Is All You Need, the paper that introduced the Transformer architecture behind modern AI chatbots. He’ll address how money, data, and AI can remain private and user-controlled through the post-quantum transition. October 8 | Tower Club, Singapore Register to join us in Singapore: luma.com/jtof4o9b

Last week in quantum: @FireblocksHQ made post-quantum signatures 6.6× cheaper on Ethereum Fireblocks published a FIPS 204-compliant ML-DSA-44 verifier that runs on today’s EVM at 1.23 million gas per verification, down from 8.09 million. Post-quantum accounts still carry costs. This makes them more usable without waiting for a new Ethereum protocol primitive. @tezos previewed a fully post-quantum network Tezos contributors announced a previewnet designed to replace quantum-vulnerable cryptography across the network. It is under internal testing, with a public previewnet planned for September. @DigitalAssets publishes a Bitcoin quantum-resistance roadmap Fidelity Digital Assets published a guide to Bitcoin’s post-quantum options, including stateful and stateless signature designs. Its central trade-off is simple: quantum-resistant signatures consume far more block space. A Bitcoin migration will need to balance security with transaction capacity. @quipnetwork launches post-quantum cross-chain swaps Quipnetwork launched QuipSwap, which it says protects both legs of a direct cross-chain swap with post-quantum cryptography. The web app is live following an Oak Security audit. Its order book is preparing to open for broader trading. Post-quantum cryptography is moving past “which signature should we use?” Now the work is making those signatures usable in real networks.

Every time you tap your card, you may not realize it, but there is an invisible box next to your name that says “allowed to transact.” If you’ve never noticed it before, it’s because it has always been marked with a green checkmark. But your ability to transact shouldn’t depend upon staying in the good graces of the State. Separate Money and State.

Quantum & Privacy Day @QuantusNetwork 🤝 @NEARProtocol Keep it secret, keep it safe October 8 | Tower Club, Singapore

Bitcoin, AI, and Quantum Computing (Full Breakdown) with @quipnetwork's CEO @cadillion Timestamps: 01:07 – Colton’s Entry into Quantum 04:04 – Quantum Computing Architectures 15:29 – Quantum Skeptics 17:23 – Google’s 9-Minute Estimate 18:33 – AI impacts & ECDSA.fail 24:32 – How to fix Bitcoin 44:25 – The Quip Roadmap 46:19 – Quantum Game Theory

Mainnet 9/9/26 Quantum Secure Encrypted Money

Should your finances be permanently recorded on an immutable ledger? Would you like every transaction you’ve ever made to be public information? Your money should be encrypted. Reveal information when you want, private by default. Quantum secure encrypted money. nitter.net/QuantusNetwork/status/…

@cadillion on what it would take for a quantum computer to crack a Bitcoin private key before the next block: “Google said that they had gotten it down to 500,000 physical qubits, and that in that scenario, where they have 500,000 physical qubits, they would be able to break an elliptic-curve private key of 256 bits within nine minutes. "So, within the space of time it takes to finalize a Bitcoin block or get to the next Bitcoin block." "That means that as soon as you reveal your transaction on-chain, in theory, a quantum computer can break your key."

Q-Day is near.

Last week at Bitcoin Asia. Hong Kong got a preview of Q-Day. @YuviLightman took on the question Bitcoin cannot postpone. "How Bitcoin Survives Quantum."

Last week in quantum @StarkWareLtd says it put a quantum-safe Bitcoin transaction on mainnet. The transaction was mined on Bitcoin without a fork or consensus change. It used StarkWare’s QSB construction and was submitted through @MARAFoundation_’s Slipstream because it was non-standard. It is not a full migration path, but it is a live test of one. @Blockstream turned SHRINCS into a concrete Bitcoin proposal. Researchers published a full draft specification for SHRINCS, a SHA-256-based post-quantum signature scheme designed specifically for Bitcoin. The latest parameters bring the fallback signature down to about 5.7 KB while cutting verification cost compared with SLH-DSA. Ethereum proposed making validator deposits crypto-agile. A new proposal would let future validator deposits use different credential types instead of locking the deposit system to BLS credentials. That creates a path for Ethereum to add post-quantum validator keys later without redesigning the whole deposit system again. @Monad proposed accounts that can change their cryptography without changing address. The account model separates a permanent address from the key controlling it. That means users could rotate from today’s signatures into a future post-quantum scheme without moving assets to a new wallet. The post-quantum problem in crypto is moving past “which signature should we use?” Now the work is about how networks migrate.

.@apruden08, CEO of @projecteleven, on pre-quantum stablecoins. “There’s a giant pot of money sitting on chain. What is that to a quantum adversary? A big fat payday waiting to happen. It’s going to be inevitable that people start to realize A. Migration is complicated B. PQC is going to be a must-have feature for anyone serious deploying applications”

Bitcoin doesn’t just need to be post-quantum before a quantum computer arrives. It needs to complete its MIGRATION before Q-Day. There is a lag between shipping a post-quantum address type, and every user moving their coins into a new post-quantum address. That idea is called “Mosca's inequality.” X = how long your secret needs to stay secure (in this case how long it takes Bitcoin to ship a PQC solution) Y = how long the migration takes Z = how long until the quantum machine exists if X + Y > Z you’re cooked else everything is fine

At Bitcoin Asia, @YuviLightman spoke with The Standard about quantum risk, public-keys on-chain, and why crypto migration has to start before Q-Day. Read the full feature: thestandard.com.hk/finance/a…

Last week in quantum: @YukonResearch’s ECDSA.fail keeps reducing the cost of an ECDSA attack. Yukon Research (ecdsa.fail) crosses 61% ahead of Google's circuit benchmark. The open leaderboard tracks the smallest known quantum circuit for breaking elliptic curve cryptography. On August 21, a single AI-assisted submission cut the best score by nearly 15% in one step. @ethereumfndn launches better.codes to improve SNARK security proofs. The open challenge lets researchers use AI agents to improve machine-checked soundness bounds for koalaIRS12, a component used in proof systems behind zk-rollups, zkVMs, and Ethereum’s post-quantum roadmap. @googlecloud previews quantum-safe key import for Cloud KMS. It secures a specific migration boundary: software key material in transit to the KMS. The import process uses hybrid public key encryption, with X-Wing, ML-KEM-768, or ML-KEM-1024 for the KEM layer. That protects the import path. It does not, by itself, replace the key being imported. @SuiNetwork published the design behind its post-quantum signature plans. Sui chose ML-DSA-65 for native account authentication and SLH-DSA-SHA2-128s for high-value vaults built in Move. The two schemes come from different mathematical families, so a weakness in one does not carry into the other. Quantum-safe vaults are targeted for mainnet this year. @Algorand moves native post-quantum accounts toward mainnet. Its v5.0.0 upgrade has passed and is due to go live soon, bringing Falcon-1024 accounts into the protocol. The release also introduces usage-based fees, accounting for the extra block space these larger signatures require. Algorand’s post-quantum migration is addressing key generation, wallet authentication, and protocol capacity separately.

.@apruden08 on Q-Day: “there were folks very high at Google, who are in touch with the government, who were putting pressure on the authors to not publish that paper.” “going forward it’s unlikely we get a public warning that this is happening” “our base case is: the chance is greater than not that a cryptographically relevant quantum computer exists before 2032. I think there is a reasonable chance that by 2030 we are already there.”

Quantum threat

Last week in quantum: @FortuneMagazine quoted @yuvilightman on the scale of what is actually exposed to quantum risk. “Over $2 trillion in digital assets is secured by elliptic curve cryptography, which has been known to be quantum-vulnerable for over 30 years,” he told Fortune, in a piece framing the coming industry shift as “the great quantum migration.” @VitalikButerin laid out Ethereum’s updated roadmap. He compared Ethereum’s older roadmap with the Foundation’s current Strawmap and noted that quantum safety has moved higher up the priority list. The updated roadmap now includes post-quantum signature work, proof aggregation, and protocol changes stretching through 2029. @Algorand released native post-quantum account signatures for mainnet and testnet. Go-Algorand 5.0.0 brings Falcon-1024 account signatures, PQ delegated LogicSigs, and new PQ key-management commands into the protocol release. That moves Algorand beyond earlier LogicSig-based work toward native post-quantum account support. The debate has moved to how fast pre-quantum chains can coordinate the migration.