1 Signature scheme 0/10, weighted 30%
Band 0: Classical signatures only on mainnet, with nothing post-quantum protecting live funds. Short-lived devnets and one-off benchmarks sit here: they demonstrate research rather than something a user can hold keys on.
Kaia's account keys support the S256 curve and nothing else, so every account type, from legacy to role-based, verifies ECDSA on secp256k1. Validators sign committed seals with secp256k1 keys. Nothing post-quantum protects KAIA or any asset on Kaia today.
source
2 Deployment stage 1/10, weighted 25%
Band 1: Tier 5: Exposed.
Tier 5: Exposed. The signatures protecting funds and finalising blocks are quantum-vulnerable. The Kaia DLT Foundation has signed a commercial agreement for a vendor's post-quantum stablecoin product, but it is neither a formal improvement proposal nor a public research programme, and it publishes no plan for the chain's own signatures. See the caveat below on why this is a judgement call.
source
3 NIST alignment 0/10, weighted 15%
Band 0 to 2: No post-quantum scheme named for the chain’s fund-protecting signatures, or a proprietary scheme with no public cryptanalysis.
No post-quantum scheme has been named for Kaia's account or validator signatures. The September 2026 announcement of the BTQ agreement names no scheme, and no Kaia Improvement Proposal mentions one.
source
Placement in the band The floor of the band rather than a 1 or a 2: no one with authority over Kaia has named a scheme for its signatures. BTQ describes its stablecoin product elsewhere as dual-signing issuer operations with ML-DSA, but that secures issuer controls, which v1.8 does not count, and the Kaia agreement does not name it.
4 Migration path 3/10, weighted 15%
Band 3 to 5: Migration is acknowledged as a problem with no agreed mechanism, or the mechanism is contested.
Kaia has a live mechanism for replacing an account's key in place: an account update transaction swaps the key behind an address for a new public key, a weighted multisig or a role-based set, without moving funds. The Kaia DLT Foundation's chairman has acknowledged that infrastructure must be ready for threats years away. But every key type the chain accepts is secp256k1, so a post-quantum key would need a new account key type through a hard fork, and nothing has been proposed.
source
Placement in the band The floor of the band rather than a 4 or a 5: the rotation mechanism is real and keeps the address, which is the hard part of migration, but it reaches only classical keys and no post-quantum key type has been proposed. Above a 2, because the mechanism exists on mainnet and the foundation has acknowledged the threat.
5 Exposure 2/10, weighted 10%
Band 0 to 2: Public keys are exposed for effectively all accounts, or a large, measured share of total supply sits in exposed addresses.
A legacy Kaia account derives its address from the hash of its public key, as on Ethereum, so it keeps its key private until it signs. Accounts in use have signed, a key published on any EVM chain exposes the same address on Kaia, and an account that has updated its key stores the new public key in account state, where it is visible before it ever signs.
source
Placement in the band The top of the band rather than a 1: never-signed legacy accounts keep their keys hidden. Not a 3, because almost all economically active KAIA sits behind a key that has signed or is stored in account state, and no measurement of the unexposed share has been published.
6 Verification 2/10, weighted 5%
Band 0 to 2: No post-quantum component exists, or the claims rest on marketing.
No post-quantum component exists for Kaia's signatures: no code, specification or testnet implementation was found in the node, the KIPs or Kaia's forums. BTQ's product for Kaia is announced, not deployed, and no code for it is public. Kaia's node is open source, but under v1.8 the openness of classical code earns nothing here.
source
Placement in the band The top of the band rather than a 0 or a 1: there is no post-quantum component to verify, and the post-quantum claim in view is a vendor's announcement of a future product rather than a claim that Kaia is quantum-safe today.