--- title: Is Neo quantum-safe? chain: Neo ticker: NEO hardy_score: 17 rank: 33 of 80 tier: "4: Debating" url: "https://hardyindex.com/chains/neo" updated: 2026-10-22 reviewed: 2026-11-13 methodology_version: 1.8 --- # Is Neo quantum-safe? **Hardy Score 17.0 / 100. Rank 33 of 80. Tier 4: Debating. Last editorial review 22 October 2026; sources checked 13 November 2026.** No. Neo N3 accounts and the dBFT consensus committee sign with ECDSA on the secp256r1 curve, also known as P-256, and smart contracts can also check secp256k1 signatures through the native CryptoLib contract. A sufficiently large quantum computer would break both. Post-quantum work on Neo is at the research stage. Co-founder Erik Zhang's Neo 4 roadmap, opened in September 2025, lists research and integration of quantum-resistant primitives, and an open issue in the core repository, filed on the Neo 4.0 milestone, sets out the tasks: compare Dilithium and Falcon, define an upgrade path, prototype and draft a Neo Enhancement Proposal. Developers have discussed ML-DSA and Falcon-512, and a pull request adding ML-DSA-65 was closed unmerged after Erik Zhang said the solution had to be finalised before any code. No scheme has been selected, no proposal has been drafted and no date has been published. NeoQS, a lattice-based research project announced in 2018, was never deployed. > This is a security-readiness assessment, not investment advice. ## Summary Neo N3 signs accounts and consensus with ECDSA on secp256r1, and post-quantum signatures are an open research item on the Neo 4 milestone with no scheme selected and no date. ## Where we are making a judgement call Tier 4 rests on reading a tracked issue in the core repository, filed on the Neo 4.0 milestone and referenced from co-founder Erik Zhang's roadmap, as a public research programme by people with authority over the chain. It is not a formal Neo Enhancement Proposal, and none has been drafted. A reader who requires a formal proposal would place Neo in Tier 5, with a deployment score of 1 and a Hardy Score of 14.5 instead of 17.0. Separately, verification scores 2 because Neo does not market itself as quantum-safe today; a reader who counts the 2018 NeoQS announcements as quantum-safety marketing would score it 1, which lowers the Hardy Score by 0.5. ## Score breakdown | # | Dimension | Score | Weight | Contribution | |---:|---|---:|---:|---:| | 1 | Signature scheme | 0/10 | 30% | 0.0 | | 2 | Deployment stage | 2/10 | 25% | 5.0 | | 3 | NIST alignment | 3/10 | 15% | 4.5 | | 4 | Migration path | 3/10 | 15% | 4.5 | | 5 | Exposure | 2/10 | 10% | 2.0 | | 6 | Verification | 2/10 | 5% | 1.0 | | | **Hardy Score** | | | **17.0** | ### 1. Signature scheme: 0/10 Anchor band 0: Classical signatures only on mainnet, with nothing post-quantum protecting live funds. Short-lived devnets and one-off benchmarks sit here: they demonstrate research rather than something a user can hold keys on. Neo N3's System.Crypto.CheckSig, which standard accounts use, verifies ECDSA on secp256r1, and multi-signature checks use the same curve. No post-quantum signature is implemented on mainnet or on any test network. Source: https://github.com/neo-project/neo/blob/master/src/Neo/SmartContract/ApplicationEngine.Crypto.cs ### 2. Deployment stage: 2/10 Anchor band 2: Tier 4: Debating. Tier 4: Debating. Post-quantum cryptography is a tracked research item on the Neo 4.0 milestone in the core repository, opened by a neo-project member and referenced from co-founder Erik Zhang's Neo 4 roadmap. It is not Tier 3: neither names a scheme, and no plan or proposal has been adopted. Source: https://github.com/neo-project/neo/issues/4239 ### 3. NIST alignment: 3/10 Anchor band 3 to 5: NIST schemes are referenced as candidates without a committed selection, or the work is bespoke research. The research issue names NIST schemes as candidates, Dilithium and Falcon, and the discussion has weighed ML-DSA against Falcon-512 without a decision. A pull request adding ML-DSA-65 was closed unmerged. Placement in the band: The bottom of the band rather than a 4 or a 5: the candidates are NIST schemes, but the Falcon-512 recommendation and the ML-DSA-65 pull request came from the same contributor, Wi1l-B0t, and members have leaned without deciding, with vncoelho calling Dilithium "a first good start" and raising Falcon's floating-point arithmetic, and Erik Zhang pointing to threshold Dilithium. No one has selected a scheme. Source: https://github.com/neo-project/neo/issues/4239 ### 4. Migration path: 3/10 Anchor band 3 to 5: Migration is acknowledged as a problem with no agreed mechanism, or the mechanism is contested. Defining upgrade paths and backward compatibility is listed as a task in the Neo 4 research issue, and contributors have discussed a new wallet type and a two-step address hash for post-quantum keys. No mechanism has been agreed. Placement in the band: A 3 rather than a 2 or a 4: the problem is acknowledged on the core repository's milestone with options on the table, but nothing has been chosen, and a contributor has warned that weak hardware-wallet support could make migration unworkable. Source: https://github.com/neo-project/neo/issues/4239 ### 5. Exposure: 2/10 Anchor band 0 to 2: Public keys are exposed for effectively all accounts, or a large, measured share of total supply sits in exposed addresses. A Neo N3 address is the hash of a verification script that contains the public key, so the key stays private until the account signs. Every transaction carries the verification script as a witness, so an account that has spent has published its key, and the consensus committee's keys are public by design. Placement in the band: At the top of the band rather than a 0 or a 1: hashing the verification script protects accounts that have never signed, a structural protection the floor of this band lacks, though almost no active supply benefits from it. Source: https://developers.neo.org/docs/n3/foundation/Wallets ### 6. Verification: 2/10 Anchor band 0 to 2: No post-quantum component exists, or the claims rest on marketing. No post-quantum component exists to verify: the one implementation offered, ML-DSA-65 support in pull request 4307, was closed without being merged. The NeoQS lattice project announced in 2018 produced no deployed component. Placement in the band: The top of the band rather than a 0 or a 1: there is nothing post-quantum to verify, but Neo's current material does not market the chain as quantum-safe, and the 2018 NeoQS announcement was presented as research rather than a deployed feature. Source: https://github.com/neo-project/neo/pull/4307 ## Nearest chains in the ranking The chains Neo sits among, out of 80 rated. The last column is the gap in Hardy points from Neo. | Rank | Chain | Tier | Hardy | vs NEO | |---:|---|---|---:|---:| | 29 | [Monad](https://hardyindex.com/chains/monad) | 4: Debating | 20.0 | +3.0 | | 30 | [XDC Network](https://hardyindex.com/chains/xdc-network) | 4: Debating | 20.0 | +3.0 | | 31 | [Bittensor](https://hardyindex.com/chains/bittensor) | 4: Debating | 19.0 | +2.0 | | 32 | [Monero](https://hardyindex.com/chains/monero) | 4: Debating | 17.5 | +0.5 | | 33 | **Neo** | 4: Debating | 17.0 | this chain | | 34 | [Dash](https://hardyindex.com/chains/dash) | 5: Exposed | 16.5 | -0.5 | | 35 | [Bitcoin](https://hardyindex.com/chains/bitcoin) | 4: Debating | 14.5 | -2.5 | | 36 | [Sonic](https://hardyindex.com/chains/sonic) | 5: Exposed | 14.5 | -2.5 | | 37 | [Terra Classic](https://hardyindex.com/chains/terra-classic) | 5: Exposed | 14.5 | -2.5 | ## Signature scheme - **On mainnet today:** ECDSA on secp256r1 (P-256) for accounts and dBFT consensus; contracts can also verify secp256k1 signatures through CryptoLib - **Post-quantum scheme:** None selected. Dilithium (ML-DSA) and Falcon are research candidates in the Neo 4 issue, and an ML-DSA-65 pull request was closed unmerged. - **NIST standard:** None adopted - **Readiness tier:** Tier 4: Debating. Post-quantum work on the chain’s own signatures is documented by people with authority over it, in a formal improvement proposal or a public research programme, but no scheme is agreed and no timeline is published. ## Cryptography in use - **Account signatures:** [ECDSA on secp256r1](https://hardyindex.com/algorithms/ecdsa-secp256r1.md). Mainnet, default. Standard accounts verify through System.Crypto.CheckSig and CheckMultisig on secp256r1. An account is a script hash, so a contract account can verify differently. Source (source code or release): https://github.com/neo-project/neo/blob/master/src/Neo/SmartContract/ApplicationEngine.Crypto.cs - **Validator consensus:** [ECDSA on secp256r1](https://hardyindex.com/algorithms/ecdsa-secp256r1.md). Mainnet, mandatory. dBFT committee and validator keys are secp256r1 points. Source (source code or release): https://github.com/neo-project/neo/blob/master/src/Neo/ProtocolSettings.cs - **Contract level:** [ECDSA on secp256k1](https://hardyindex.com/algorithms/ecdsa-secp256k1.md). Mainnet, opt-in. Available to contracts through CryptoLib verifyWithECDsa. Source (source code or release): https://github.com/neo-project/neo/blob/master/src/Neo/SmartContract/Native/CryptoLib.cs - **Account signatures:** [ML-DSA](https://hardyindex.com/algorithms/ml-dsa.md). Proposed. Dilithium is named as a research candidate in the issue's task list. Pull request 4307 adding ML-DSA-65 was closed unmerged, and on it a member called Dilithium "a first good start". Source (statement or write-up): https://github.com/neo-project/neo/issues/4239 - **Account signatures:** [FN-DSA](https://hardyindex.com/algorithms/fn-dsa.md). Proposed. Falcon is named as a research candidate in the issue's task list. One contributor recommended Falcon-512, and a member raised Falcon's floating-point arithmetic as a problem for a decentralised network. Source (statement or write-up): https://github.com/neo-project/neo/issues/4239 A role not listed here is not evidenced either way. See https://hardyindex.com/algorithms.md. ## Roadmap - **17 October 2018** (shipped): Neo Global Development announces a research partnership with Arqit to accelerate NeoQS, a lattice-based cryptographic mechanism. Nothing from NeoQS was deployed. Source: https://neonewstoday.com/general/ngd-and-arqit-announce-research-partnership-focused-on-quantum-resistance/ - **28 September 2025** (shipped): Erik Zhang opens the Neo 4 roadmap, which lists research and integration of quantum-resistant primitives for the execution layer. It names no scheme and no date. Source: https://github.com/neo-project/neo/issues/4198 - **22 October 2025** (in-progress): The [N4] Post-Quantum Cryptography issue is opened on the Neo 4.0 milestone, tasking research into NIST schemes, a 512-bit hash, upgrade paths, prototypes and a draft Neo Enhancement Proposal. Source: https://github.com/neo-project/neo/issues/4239 - **No date published** (proposed): A selected scheme, a draft Neo Enhancement Proposal and any deployment. A pull request adding ML-DSA-65 was closed unmerged in November 2025, and the Neo 4.0 milestone carries no due date. Source: https://github.com/neo-project/neo/pull/4307 ## If holders never migrate **No stated policy.** Neither the Neo 4 roadmap nor the post-quantum research issue states what would happen to accounts that never move to post-quantum keys. Upgrade paths are listed as a research task. As of 22 October 2026. Source: https://github.com/neo-project/neo/issues/4239 ## Exposure Neo N3 derives an address from a hash of a verification script, which for a standard account is a CheckSig script containing the compressed secp256r1 public key. An account that has been funded but has never signed has not revealed that script or the key in it. Every transaction an account signs carries its verification script in the witness, so once an account has spent, its public key is on-chain for good, and the keys of the consensus committee are published by design. NEO holders claim GAS and vote for committee members through signed transactions, so active holders have generally revealed their keys, and those keys can be recorded today against a future quantum computer. ## Frequently asked questions ### Is Neo quantum-safe? No. Neo N3 accounts and the dBFT consensus committee sign with ECDSA on the secp256r1 curve, also known as P-256, and smart contracts can also check secp256k1 signatures through the native CryptoLib contract. A sufficiently large quantum computer would break both. Post-quantum work on Neo is at the research stage. Co-founder Erik Zhang's Neo 4 roadmap, opened in September 2025, lists research and integration of quantum-resistant primitives, and an open issue in the core repository, filed on the Neo 4.0 milestone, sets out the tasks: compare Dilithium and Falcon, define an upgrade path, prototype and draft a Neo Enhancement Proposal. Developers have discussed ML-DSA and Falcon-512, and a pull request adding ML-DSA-65 was closed unmerged after Erik Zhang said the solution had to be finalised before any code. No scheme has been selected, no proposal has been drafted and no date has been published. NeoQS, a lattice-based research project announced in 2018, was never deployed. ### Is Neo quantum-safe? No. Neo N3 accounts and its dBFT consensus committee sign with ECDSA on secp256r1, which a sufficiently large quantum computer would break. Post-quantum signatures are a research item for Neo 4, with no scheme selected and no date published. ### What happened to NeoQS? NeoQS, short for Neo Quantum Safe, was a lattice-based cryptography research project that Neo Global Development promoted in 2018, including a research partnership with Arqit. It was never deployed on any Neo network, and the current Neo 4 work starts again from the NIST standards. ### Which post-quantum scheme will Neo use? None has been chosen. The Neo 4 research issue names Dilithium, standardised as ML-DSA, and Falcon. One contributor recommended Falcon-512 for its smaller signatures and later wrote a pull request adding ML-DSA-65, which was closed after Erik Zhang said the solution had to be finalised before any code. Members have leaned towards Dilithium, one calling it a first good start and raising Falcon's floating-point arithmetic as a concern, and Erik Zhang pointing to threshold Dilithium, but no scheme has been selected. ### Are Neo public keys visible on-chain? Once an account has signed, yes. A Neo address is a hash of a verification script containing the public key, so a never-used account keeps its key private, but every signed transaction includes that script, and claiming GAS or voting both need signed transactions. ## What this rating means if you hold Neo Plain-language guidance from the same publication, with no product recommendation attached. - [Is my crypto safe from quantum computers?](https://hardyindex.com/guides/is-my-crypto-safe-from-quantum-computers.md) - [How to protect your crypto from quantum computers](https://hardyindex.com/guides/how-to-protect-crypto-from-quantum-computers.md) - [All guides](https://hardyindex.com/guides.md) ## Sources 1. [[N4] Post-Quantum Cryptography (issue 4239)](https://github.com/neo-project/neo/issues/4239): Neo Project (GitHub) (primary, checked 22 October 2026) 2. [NEO 4 Roadmap: A Blockchain Platform for the Real World (issue 4198)](https://github.com/neo-project/neo/issues/4198): Neo Project (GitHub) (primary, checked 22 October 2026) 3. [Add: ML-DSA65 support (pull request 4307)](https://github.com/neo-project/neo/pull/4307): Neo Project (GitHub) (primary, checked 22 October 2026) 4. [ApplicationEngine.Crypto.cs](https://github.com/neo-project/neo/blob/master/src/Neo/SmartContract/ApplicationEngine.Crypto.cs): Neo Project (GitHub) (primary, checked 22 October 2026) 5. [Wallets (Neo N3 developer documentation)](https://developers.neo.org/docs/n3/foundation/Wallets): Neo (primary, checked 22 October 2026) 6. [NGD and Arqit announce research partnership focused on quantum resistance](https://neonewstoday.com/general/ngd-and-arqit-announce-research-partnership-focused-on-quantum-resistance/): Neo News Today (secondary, checked 22 October 2026) ## How to cite this rating A rating is only true as of the day it was reviewed, so both forms carry the review date and the methodology version. If you are quoting the score, quote those too. The Hardy Index (2026). Neo: quantum readiness assessment. Hardy Score 17.0 of 100, Tier 4: Debating. Methodology v1.8. Last reviewed 22 October 2026; sources checked 13 November 2026. https://hardyindex.com/chains/neo ```bibtex @misc{hardyindex_neo_2026, author = {{The Hardy Index}}, title = {Neo: quantum readiness assessment}, year = {2026}, howpublished = {\url{https://hardyindex.com/chains/neo}}, note = {Hardy Score 17.0 of 100, Tier 4: Debating. Methodology v1.8}, urldate = {2026-11-13} } ``` --- Methodology: https://hardyindex.com/methodology (v1.8). Cite as: The Hardy Index, "Neo", https://hardyindex.com/chains/neo, as of 13 November 2026.