1 Signature scheme 0/10, weighted 30%
Band 0: Classical signatures only on mainnet, with nothing post-quantum protecting live funds. Short-lived devnets and one-off benchmarks sit here: they demonstrate research rather than something a user can hold keys on.
Qtum spends are authorised by ECDSA on secp256k1, and since the v22.0 hard fork Taproot outputs by Schnorr signatures on the same curve. Proof-of-stake blocks carry an ECDSA signature by the staker's key, which the node checks against the block key published in the coinstake output. Nothing post-quantum protects QTUM on mainnet.
source
2 Deployment stage 1/10, weighted 25%
Band 1: Tier 5: Exposed.
Tier 5: Exposed. The signatures securing QTUM and signing its blocks are quantum-vulnerable, and the Qtum Improvement Proposals, which are filed as issues in the qips repository, include none on post-quantum signatures. No roadmap or research programme addressing them was found on qtum.org or in the node repository.
source
3 NIST alignment 0/10, weighted 15%
Band 0 to 2: No post-quantum scheme named for the chain’s fund-protecting signatures, or a proprietary scheme with no public cryptanalysis.
No post-quantum scheme has been named for Qtum's spend signatures or its block signatures, so there is nothing to assess against a NIST standard.
source
Placement in the band The floor of the band rather than a 1 or a 2: no scheme of any kind has been named for Qtum's fund-protecting signatures, standardised or otherwise, so there is nothing for the band's upper values to credit.
4 Migration path 2/10, weighted 15%
Band 0 to 2: No agreed migration path, or the proposals on the table would strand or freeze holder funds.
No migration plan exists. Qtum has shipped a run of mandatory hard forks: v22.0 activated Taproot and Schnorr signatures at block 2,080,512, v27.1 forked at block 4,590,000 in February 2025, and v29.1 at block 5,483,000 in January 2026. None changed the signature scheme away from secp256k1. Its Decentralised Governance Protocol adjusts fee and block parameters, not keys.
source
Placement in the band The top of the band rather than a 0 or a 1: repeated coordinated hard forks, including one that added a signature type, are direct evidence that Qtum can ship the kind of change a migration needs. Not a 3, because nobody with authority over the chain has acknowledged quantum migration as a problem to solve.
5 Exposure 4/10, weighted 10%
Band 3 to 5: Most active accounts have revealed a public key, or the chain has no live supply to assess.
Qtum has its own ledger, begun with a genesis block of 6 September 2017, and follows Bitcoin's UTXO model, where a standard address is a key hash and the key is revealed when an output is spent. Staking adds exposure: every block's signature reveals the staker's public key, and a coinstake output that changes form must be a pay-to-public-key output.
source
Placement in the band A 4 rather than a 5, on the same address-model reasoning as Litecoin and Dogecoin: never-spent coins at key-hash addresses have published no key, but reuse, spending and staking reveal keys. Not a 3, because no measurement of the share of supply behind revealed keys exists, and staking coins that have not yet produced a block have revealed nothing.
6 Verification 2/10, weighted 5%
Band 0 to 2: No post-quantum component exists, or the claims rest on marketing.
No post-quantum component protects Qtum, so there is nothing post-quantum to review or audit. Under v1.8 the openness of the Qtum node, which tracks Bitcoin Core, earns nothing here, because it is classical code that a quantum computer would break.
source
Placement in the band The top of the band rather than a 0 or a 1: there is no post-quantum component to verify, but nothing about Qtum is marketed as quantum-safe, so its position does not rest on marketing.