--- title: Is Nexus quantum-safe? chain: Nexus ticker: NXS hardy_score: 73 rank: 11 of 80 tier: "2: Shipping" url: "https://hardyindex.com/chains/nexus" updated: 2026-10-23 reviewed: 2026-11-13 methodology_version: 1.8 --- # Is Nexus quantum-safe? **Hardy Score 73.0 / 100. Rank 11 of 80. Tier 2: Shipping. Last editorial review 23 October 2026; sources checked 13 November 2026.** **Flag: Claims unverified.** This chain markets itself as quantum-safe, but no primary source confirms a post-quantum scheme protecting its funds. Its tier records what the evidence supports, not what the project claims. Not by default. Nexus accounts are signature chains, and its node accepts two key types for them at the consensus level: ECDSA over the brainpoolP512t1 curve and Falcon-512, a lattice-based scheme selected by NIST for standardisation as FN-DSA. When an API call names no scheme, the node uses Brainpool. A holder can choose Falcon by passing scheme=falcon, including from the API console in the released Nexus wallet, but in our reading of the source the next call that omits the parameter switches the chain back to Brainpool, and mining and staking transactions are built without it. Of the transactions we sampled in blocks 6,906,897 to 6,911,385, up to 23 October 2026, almost all were mining and staking transactions, which the node builds with the Brainpool default; about 170 were holder transactions, and none of those carried an 897-byte Falcon key either. Older releases had a setting that kept an account on Falcon, so Falcon signature chains may exist outside that window. The homepage lists "571-bit" under "Quantum Resistant", which describes sect571r1, a classical curve, so the profile carries the "Claims unverified" flag. What Nexus does have is a design that limits harvest-now-decrypt-later exposure: each transaction reveals a key whose hash the previous one committed to, and commits to the hash of a fresh key for the next, so a public key read off the chain no longer controls anything. > This is a security-readiness assessment, not investment advice. ## Summary Nexus accepts Falcon-512 signatures on mainnet as an opt-in key type for its signature chains, but its node defaults every account to ECDSA over the Brainpool P-512 curve, every holder transaction we sampled was signed that way, and its "Quantum Resistant" headline describes a classical curve. ## Where we are making a judgement call Nexus ranks outside the seventy-five largest layer 1s and is covered on both the position and the deployment tests: it markets quantum resistance, and a post-quantum signature is accepted on its mainnet. We confirmed the chain was live on 23 October 2026, when its explorer's node reported block 6,911,365 at 06:30 UTC. The row carries the "Claims unverified" flag: the homepage lists "571-bit" under "Quantum Resistant", which describes a classical curve, every fund-protecting signature we observed was Brainpool ECDSA, and no source shows NXS behind Falcon. The flag sits on the rung the evidence supports, which is Tier 2, because Falcon is accepted on mainnet and reachable with released software. Several readings are ours, each with the Hardy Score the other reading gives, from 73.0. One: the Tier 2 placement rests on demanding tools, the API console of the released wallet, as the Solana profile's rests on a command-line tool; a reader who finds that not usable in practice would hold Nexus back, as Pearl is held back, because a chain with a post-quantum signature live on mainnet fits no rung below Shipping. Two: signature is a 7; read as an experimental option it would be a 5, giving 67.0. Three: migration is an 8, because in our reading of the source a holder who moves to Falcon is switched back by any call that omits the scheme, including staking; a 9 gives 74.5. Four: exposure is a 7; on signature chains the literal reading of the anchors would allow a 9, giving 75.0, while the rule for UTXO key-hash chains would give 4, or 70.0. Five: verification is a 2 under the flag; a 3 gives 73.5. The behaviour of the scheme parameter is our reading of Tritium Core 5.1.6, not something we ran. ## Score breakdown | # | Dimension | Score | Weight | Contribution | |---:|---|---:|---:|---:| | 1 | Signature scheme | 7/10 | 30% | 21.0 | | 2 | Deployment stage | 8/10 | 25% | 20.0 | | 3 | NIST alignment | 8/10 | 15% | 12.0 | | 4 | Migration path | 8/10 | 15% | 12.0 | | 5 | Exposure | 7/10 | 10% | 7.0 | | 6 | Verification | 2/10 | 5% | 1.0 | | | **Hardy Score** | | | **73.0** | ### 1. Signature scheme: 7/10 Anchor band 7 to 9: A post-quantum signature is available on mainnet at the protocol level as a first-class account type. Falcon-512 is a protocol-level key type for Nexus signature chains: Transaction::Verify in Tritium Core 5.1.6 checks a FALCON or BRAINPOOL signature by the transaction's key type, with no activation gate, and FLKey generates keys at Falcon degree 512. It is opt-in. ExtractScheme returns BRAINPOOL when no scheme parameter is given, and no holder transaction in our mainnet sample used Falcon. Placement in the band: The bottom of the band rather than an 8: Falcon is a consensus-level account key type, which is what this band describes, but it is reachable only through a per-call API parameter, the code reverts to Brainpool when the parameter is left out, and we found no Falcon-signed transaction on mainnet. Read as an experimental option on those grounds, it would be a 5. Source: https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/transaction.cpp#L515-L547 ### 2. Deployment stage: 8/10 Anchor band 8: Tier 2: Shipping. Tier 2: Shipping. A Falcon-512 signature is accepted on mainnet for signature-chain transactions, and a holder can select it with released software, without anyone's permission: the stable Nexus wallet, v3.1.5 with installers for Windows, macOS and Linux, bundles Core 5.1.4 and an API console that accepts scheme=falcon. Brainpool ECDSA remains the default. Source: https://github.com/Nexusoft/NexusInterface/releases/tag/v3.1.5 ### 3. NIST alignment: 8/10 Anchor band 6 to 8: The scheme is NIST-selected but the standard is not yet final, or a NIST-approved scheme is named but not yet deployed. Falcon was selected by NIST for standardisation as FN-DSA in FIPS 206, which was not final at the time of writing. Nexus vendors the Falcon project's 2017 to 2019 reference implementation at degree 512, whose sampler table matches the version fixed in September 2019, and the consensus code accepts it on mainnet today. It is not the FN-DSA standard, which had not been published. Placement in the band: The top of the band rather than a 7: the scheme is the NIST selection and is accepted by mainnet consensus now, not merely named for later. It cannot reach 9 because FN-DSA was not final at the time of writing. Source: https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/LLC/flkey.cpp ### 4. Migration path: 8/10 Anchor band 6 to 8: A credible published plan exists with a mechanism identified, but key parts are unbuilt or undated. The mechanism exists: every Nexus transaction names the key type of the next one, so a holder can move a signature chain to Falcon in place, keeping the account, with the documented scheme parameter. Keeping it there is the gap. In our reading of create.cpp, a transaction built without the parameter sets the next key type back to Brainpool, mining and stake blocks are built that way, and the wallet exposes the parameter only through its API console. Placement in the band: An 8 rather than the 9 that holders being able to move today would otherwise earn: a holder can switch, but the released software switches them back on any call that omits the parameter, including staking, so a migrated account does not stay migrated without care at every step. It is above a 7 because the rotation mechanism is built into every transaction rather than proposed. Source: https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/create.cpp#L100-L128 ### 5. Exposure: 7/10 Anchor band 6 to 8: Addresses are key hashes and exposure is limited to spent outputs, keeping a meaningful share of supply unexposed. Each signature-chain transaction reveals the public key whose SK256 hash the previous transaction committed to as its next hash, and commits in turn to the hash of a fresh key derived from the holder's credentials. Consensus rejects a transaction whose key does not match that commitment, so a Brainpool key read off the chain has already been retired and the key that controls the funds stays hidden. The pre-2019 legacy UTXO layer, whose transactions blocks still carry, uses Bitcoin-style key-hash addresses with ECDSA over sect571r1. Placement in the band: A 7 rather than an 8 or a 9: on signature chains a revealed key protects nothing, which would read as the band above, but the legacy UTXO cohort keeps Bitcoin's address model and no measurement of its size or exposure has been published. It is above a 6 because the signature chains, where Tritium-era balances sit, never leave a controlling key exposed. Source: https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/transaction.cpp#L950-L975 ### 6. Verification: 2/10 Anchor band 0 to 2: No post-quantum component exists, or the claims rest on marketing. A post-quantum component exists and is open source under the MIT licence: the vendored Falcon-512 code and the consensus path that verifies it. We found no outside review or audit of it, and no holder transaction using it in our mainnet sample. The project's headline claim, "571-bit" listed under "Quantum Resistant" on its homepage, matches the default curve of the node's elliptic-curve key, sect571r1, which Shor's algorithm breaks. Placement in the band: The top of the band rather than a 0 or 1: a real post-quantum component is open source and accepted by consensus, where a chain flagged with no such component sits at 0. Not a 3, because nothing outside the project has verified the component and the headline quantum-resistance claim rests on marketing about a classical curve. Source: https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/LLC/flkey.cpp ## Nearest chains in the ranking The chains Nexus sits among, out of 80 rated. The last column is the gap in Hardy points from Nexus. | Rank | Chain | Tier | Hardy | vs NXS | |---:|---|---|---:|---:| | 7 | [Abelian](https://hardyindex.com/chains/abelian) | 1: Native | 84.0 | +11.0 | | 8 | [NEAR Protocol](https://hardyindex.com/chains/near) | 2: Shipping | 80.0 | +7.0 | | 9 | [Algorand](https://hardyindex.com/chains/algorand) | 2: Shipping | 77.0 | +4.0 | | 10 | [Nervos CKB](https://hardyindex.com/chains/nervos-ckb) | 2: Shipping | 76.0 | +3.0 | | 11 | **Nexus** | 2: Shipping | 73.0 | this chain | | 12 | [Bitcoin Cash](https://hardyindex.com/chains/bitcoin-cash) | 2: Shipping | 62.0 | -11.0 | | 13 | [Solana](https://hardyindex.com/chains/solana) | 2: Shipping | 53.0 | -20.0 | | 14 | [XRP Ledger](https://hardyindex.com/chains/xrp-ledger) | 3: Committed | 43.0 | -30.0 | | 15 | [Sui](https://hardyindex.com/chains/sui) | 3: Committed | 42.0 | -31.0 | ## Signature scheme - **On mainnet today:** ECDSA over brainpoolP512t1 by default for signature-chain transactions; Falcon-512 accepted as an opt-in key type; ECDSA over sect571r1 for the legacy UTXO layer - **Post-quantum scheme:** Falcon-512 (Falcon reference implementation, 2019), selectable per transaction through the node API's scheme parameter - **NIST standard:** Falcon, selected by NIST for standardisation as FN-DSA (FIPS 206); standard not final at the time of writing - **Readiness tier:** Tier 2: Shipping. A post-quantum signature is live on mainnet and usable by ordinary holders. ## Cryptography in use - **Account signatures:** [ECDSA on brainpoolP512t1](https://hardyindex.com/algorithms/ecdsa-brainpoolp512t1.md) (brainpoolP512t1). Mainnet, default. The default when no scheme is given, and verified in consensus at transaction.cpp lines 535 to 546. Every sampled transaction carried a 65-byte key. Source (source code or release): https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/API/extract.cpp#L424-L428 - **Account signatures:** [ECDSA on sect571r1](https://hardyindex.com/algorithms/ecdsa-sect571r1.md) (sect571r1, legacy UTXO outputs). Mainnet, opt-in. The legacy CheckSig builds an elliptic-curve key on the default curve, NID_sect571r1 (src/LLC/eckey.cpp lines 271 to 276). Legacy transactions are still accepted in Tritium blocks; how much supply remains in legacy outputs is unmeasured. Source (source code or release): https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/Legacy/signature.cpp#L146-L163 - **Account signatures:** [FN-DSA](https://hardyindex.com/algorithms/fn-dsa.md) (Falcon-512). Mainnet, opt-in. Accepted by consensus for signature-chain transactions and selectable with scheme=falcon. No holder transaction in our mainnet sample used it. Source (source code or release): https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/transaction.cpp#L515-L547 - **Validator consensus:** [ECDSA on brainpoolP512t1](https://hardyindex.com/algorithms/ecdsa-brainpoolp512t1.md) (brainpoolP512t1). Mainnet, default. The miner or staker signs each block with its producer key, built with the Brainpool default. Source (source code or release): https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/tritium.cpp#L547-L586 A role not listed here is not evidenced either way. See https://hardyindex.com/algorithms.md. ## Roadmap - **10 April 2026** (shipped): Tritium Core 5.1.6 is released. Its consensus code accepts Falcon-512 and Brainpool P-512 signatures on signature chains, and its API defaults to Brainpool when no scheme is named. The release notes describe security, scaling and denial-of-service work and no change to signature schemes. Source: https://github.com/Nexusoft/LLL-TAO/releases/tag/5.1.6 ## If holders never migrate **No stated policy.** Nexus has published no plan to make Falcon the default key type, to retire Brainpool signature chains, or to deal with legacy UTXO outputs that never move. As of 23 October 2026. ## Exposure Nexus balances sit in accounts owned by signature chains, and a signature chain uses a new key for every transaction. Each transaction reveals the public key whose hash the previous transaction committed to, signs with it, and commits to the hash of the next key, which the node derives from the holder's username, password and PIN. A quantum adversary who recorded every Nexus public key would therefore hold only retired keys: the key that controls a balance is never on-chain until the moment it is used. That is a real limit on harvest-now-decrypt-later exposure, and it holds for Brainpool chains as well as Falcon ones. It does not cover the window in which a signed transaction is waiting to confirm, which the project's own site puts at about 500 milliseconds, and it does not cover the legacy UTXO layer from before the Tritium upgrade, whose transactions blocks still accept and which uses Bitcoin-style key-hash addresses with ECDSA over sect571r1. No measurement of how much supply remains in legacy outputs has been published. ## Frequently asked questions ### Is Nexus quantum-safe? Not by default. Nexus accounts are signature chains, and its node accepts two key types for them at the consensus level: ECDSA over the brainpoolP512t1 curve and Falcon-512, a lattice-based scheme selected by NIST for standardisation as FN-DSA. When an API call names no scheme, the node uses Brainpool. A holder can choose Falcon by passing scheme=falcon, including from the API console in the released Nexus wallet, but in our reading of the source the next call that omits the parameter switches the chain back to Brainpool, and mining and staking transactions are built without it. Of the transactions we sampled in blocks 6,906,897 to 6,911,385, up to 23 October 2026, almost all were mining and staking transactions, which the node builds with the Brainpool default; about 170 were holder transactions, and none of those carried an 897-byte Falcon key either. Older releases had a setting that kept an account on Falcon, so Falcon signature chains may exist outside that window. The homepage lists "571-bit" under "Quantum Resistant", which describes sect571r1, a classical curve, so the profile carries the "Claims unverified" flag. What Nexus does have is a design that limits harvest-now-decrypt-later exposure: each transaction reveals a key whose hash the previous one committed to, and commits to the hash of a fresh key for the next, so a public key read off the chain no longer controls anything. ### Is Nexus quantum-safe? Not by default. The node defaults signature-chain accounts to ECDSA over the Brainpool P-512 curve, which Shor's algorithm breaks. Falcon-512, a post-quantum scheme, is accepted on mainnet as an opt-in key type, but no holder transaction in our recent mainnet sample used it. ### Can I put my NXS behind Falcon today? With released software, yes, if you are comfortable with an API console: the stable Nexus wallet bundles one, and its documented scheme parameter accepts falcon; the consensus code verifies Falcon-512 signatures with no activation gate. In our reading of the source, though, the next transaction built without that parameter switches the account back to Brainpool, and mining and staking transactions are built without it. ### Why does Nexus score well on exposure when its keys are classical? Because of how signature chains rotate keys. Every transaction reveals a key that the previous transaction committed to by hash, and commits to the hash of a fresh key for the next one. A public key visible on the chain has therefore already been used up, and the key controlling the balance stays hidden until it signs. The score stops short of the top band because the older legacy UTXO layer keeps Bitcoin's address model and its exposure has not been measured. ### Does Nexus use Lamport signatures? We found no sign of it. The node source we read contains Falcon-512, Brainpool P-512 ECDSA and sect571r1 ECDSA, and no Lamport implementation. The project's own documentation names Falcon and Brainpool for signature chains. ### Why does Nexus carry the "Claims unverified" flag? Because its headline quantum-resistance claim does not describe what protects funds. The homepage lists "571-bit" under "Quantum Resistant", a figure that matches sect571r1, a classical elliptic curve. Every holder transaction we sampled was signed with Brainpool ECDSA, and we found no NXS behind Falcon. The flag says the claim is not confirmed; the tier records what is deployed, which is an opt-in Falcon path. ## What this rating means if you hold Nexus Plain-language guidance from the same publication, with no product recommendation attached. - [Is my crypto safe from quantum computers?](https://hardyindex.com/guides/is-my-crypto-safe-from-quantum-computers.md) - [How to protect your crypto from quantum computers](https://hardyindex.com/guides/how-to-protect-crypto-from-quantum-computers.md) - [All guides](https://hardyindex.com/guides.md) ## Sources 1. [Tritium Core 5.1.6 release](https://github.com/Nexusoft/LLL-TAO/releases/tag/5.1.6): Nexus (primary, checked 23 October 2026) 2. [LLL-TAO 5.1.6: src/TAO/Ledger/transaction.cpp](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/transaction.cpp): Nexus (primary, checked 23 October 2026) 3. [LLL-TAO 5.1.6: src/TAO/API/extract.cpp (default key scheme)](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/API/extract.cpp#L423-L429): Nexus (primary, checked 23 October 2026) 4. [LLL-TAO 5.1.6: src/TAO/Ledger/create.cpp](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/create.cpp): Nexus (primary, checked 23 October 2026) 5. [LLL-TAO 5.1.6: src/TAO/Ledger/include/enum.h (signature types)](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/include/enum.h): Nexus (primary, checked 23 October 2026) 6. [LLL-TAO 5.1.6: src/LLC/flkey.cpp (Falcon keys)](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/LLC/flkey.cpp): Nexus (primary, checked 23 October 2026) 7. [LLL-TAO 5.1.6: src/LLC/eckey.cpp (elliptic-curve keys)](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/LLC/eckey.cpp): Nexus (primary, checked 23 October 2026) 8. [LLL-TAO 5.1.6 API documentation: TEMPLATES.MD (scheme parameter)](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/docs/API/TEMPLATES.MD): Nexus (primary, checked 23 October 2026) 9. [Nexus homepage](https://nexus.io/): Nexus (primary, checked 23 October 2026) 10. [Nexus: Blockchain (Quantum Resistance section)](https://nexus.io/blockchain): Nexus (primary, checked 23 October 2026) 11. [Quantum Resistance](https://nexus-wiki.org/index.php/Quantum_Resistance): Nexus Wiki (primary, checked 23 October 2026) 12. [Nexus explorer: node status](https://explorer.nexus.io/api/v1/mainnet/system/get/info): Nexus Blockchain Explorer (primary, checked 23 October 2026) 13. [Nexus explorer: sample transaction in block 6,911,320](https://explorer.nexus.io/scan/01a718e7b3e7de65aff0fc826b844f286b8e6000888bb06c961406b0fad51f1b6fea218c047028ee16e84b7ec4b6e819f6e6dd7aa40ead650b0dead29986dfa2): Nexus Blockchain Explorer (primary, checked 23 October 2026) 14. [Post-Quantum Cryptography project](https://csrc.nist.gov/projects/post-quantum-cryptography): NIST (primary, checked 23 October 2026) 15. [Nexus wallet v3.1.5 release](https://github.com/Nexusoft/NexusInterface/releases/tag/v3.1.5): Nexus (primary, checked 23 October 2026) 16. [Tritium Core 5.1.4 release](https://github.com/Nexusoft/LLL-TAO/releases/tag/5.1.4): Nexus (primary, checked 23 October 2026) 17. [LLL-TAO 5.1.6: src/Legacy/signature.cpp](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/Legacy/signature.cpp): Nexus (primary, checked 23 October 2026) 18. [LLL-TAO 5.1.6: src/TAO/Ledger/tritium.cpp](https://github.com/Nexusoft/LLL-TAO/blob/5.1.6/src/TAO/Ledger/tritium.cpp): Nexus (primary, checked 23 October 2026) ## How to cite this rating A rating is only true as of the day it was reviewed, so both forms carry the review date and the methodology version. If you are quoting the score, quote those too. The Hardy Index (2026). Nexus: quantum readiness assessment. Hardy Score 73.0 of 100, Tier 2: Shipping. Methodology v1.8. Last reviewed 23 October 2026; sources checked 13 November 2026. https://hardyindex.com/chains/nexus ```bibtex @misc{hardyindex_nexus_2026, author = {{The Hardy Index}}, title = {Nexus: quantum readiness assessment}, year = {2026}, howpublished = {\url{https://hardyindex.com/chains/nexus}}, note = {Hardy Score 73.0 of 100, Tier 2: Shipping. Methodology v1.8}, urldate = {2026-11-13} } ``` --- Methodology: https://hardyindex.com/methodology (v1.8). Cite as: The Hardy Index, "Nexus", https://hardyindex.com/chains/nexus, as of 13 November 2026.