Post-quantum security matters today
Nearly every digital asset in existence is secured by the same mathematics: elliptic-curve cryptography. A private key controls a wallet, and no classical computer can work backwards from a public address to the key that controls it.
A sufficiently powerful quantum computer can. Running Shor's algorithm, it could derive a private key from a public one and with it, get full control of the wallet.
Blockchains are unusually exposed to the quantum threat. Every transaction ever made is public and permanent. The moment a wallet transacts, its public key is written to a ledger that anyone can copy and keep. Researchers estimate that between 25% and 40% of all circulating Bitcoin already sits in addresses whose public keys are exposed on-chain. Those assets can be recorded today and attacked whenever the hardware arrives, a strategy known as harvest now, decrypt later.
The timeline is no longer speculative. In June 2026, President Trump signed an executive order requiring US federal agencies and contractors to move to post-quantum cryptography by the end of 2030, pulling an existing federal deadline of 2035 forward by five years. Google, IBM and Microsoft have set internal 2029 deadlines for their own migration.
The blockchain industry is aware of the problem, but has not yet solved it. No top-20 blockchain currently runs post-quantum cryptography on mainnet. Ethereum's target for its base layer is 2029. Bitcoin's community remains divided when it comes to the best path to migration. Migrating a blockchain's signature scheme requires network-wide consensus, and could take years.
Quantum-safe digital assets with qVAULT.xyz
qVAULT.xyz, a quantum-safe vault operating today, adds an additional layer of security on top of a user's existing wallet, built on Falcon (FN-DSA), a quantum-resistant algorithm selected by the U.S. National Institute of Standards and Technology (NIST). Even if a wallet's key is stolen today or broken by a quantum computer tomorrow, assets inside the vault stay protected with an additional private key.
The vault is developed on 01 Quantum Inc.’s (OTCQB: OONEF) patent-pending QCW (Quantum Crypto Wrapper) and QDW (Quantum DeFi Wrapper) technologies, which provide the integration layer for Falcon (FN-DSA) signatures and post-quantum transaction flows.
qVAULT.xyz never holds user funds, nothing about the underlying chain changes, and protection is opt-in. qVAULT.xyz currently supports HYPE on HyperEVM and qONE, with Ethereum-native assets and stablecoins including USDT and USDC to follow.
The quantum-safe vault is powered by its utility token qONE that pays for quantum-safe transaction verification. The design ties demand for the token directly to demand for the protection: as more assets are secured, more qONE is required to secure them.
Security audits and assessments
qVAULT.xyz's smart contracts were audited by Fairyproof, an established Web3 security firm, one of only five official audit partners of Coinmarketcap.com, the most widely used price-tracking site for cryptocurrencies.
Its Falcon implementation was reviewed by TechSlayers, a firm specialising in applied cryptography. Falcon is widely regarded as the most demanding of the NIST-selected signature schemes to implement correctly.
As recommended by the auditor, qVAULT.xyz verifies Falcon signatures directly in the contract, instead of compressing the Falcon proofs and implementing only a Groth16 verifier in the contract. This fix ensures that even an adversary with a quantum computer must produce Falcon signatures that pass validation so that ideally, the system’s security rests on the post-quantum security of Falcon directly.
The review did not find any security issues in the new Falcon implementation itself. Several remaining recommendations are being taken into account together with the upcoming V2 edition of qVAULT.xyz.
Find audit report by Fairyproof: https://www.fairyproof.com/report/QONE
Find audit report by TechsLayers: The consolidated report to be shared soon.
