A quantum-resistant Winternitz vault has run on Solana mainnet for over two years, but protocol-level migration to Falcon is explicitly conditional and carries no published dates.
Is Solana quantum-safe?
Not by default, though Solana is one of the few chains where a quantum-resistant primitive is already running on mainnet. The Blueshift Winternitz Vault, which uses Winternitz one-time signatures over a truncated Keccak256 hash, has been live on Solana for over two years and was cited by Google's Quantum AI team in 2026 as a notable quantum resilience solution. It is also opt-in, experimental, and was used by fewer than 300 accounts on mainnet-beta as of April 2026. Ordinary Solana accounts use Ed25519, and because a Solana address is the public key, every account's key is exposed on-chain from the start. In April 2026 the Solana Foundation published a quantum readiness roadmap co-authored with Anza and Jump Crypto's Firedancer team, converging on Falcon as the chosen post-quantum scheme, with both client teams having built initial implementations. That roadmap is conditional by design: it commits to adopting a post-quantum scheme only 'if quantum becomes a credible threat', and it names no dates.
Where we are making a judgement call Solana's Tier 2 placement is the most contestable call in this index. The tier requires post-quantum features live on mainnet and a migration underway. Solana clearly satisfies the first condition and clearly does not satisfy the second: its own roadmap makes protocol-level adoption conditional on quantum becoming a credible threat and publishes no dates. We placed Solana by the visible mainnet artefact and took the deduction in the migration and NIST dimensions instead of in the tier. A reader who weights a dated commitment above a live experimental primitive would reasonably place Solana in Tier 3.
At a glance
On mainnet today
Ed25519 for all standard accounts
Post-quantum scheme
Winternitz one-time signatures (Blueshift vault, application-level, live); Falcon selected for protocol-level adoption, not deployed
NIST standard
Falcon, selected by NIST for standardisation as FN-DSA; standard not final at time of writing
Readiness tier
Tier 2: Shipping. Post-quantum signature features are live on mainnet and a migration for existing holders is underway.
Score breakdown
Each dimension scored 0 to 10. The weight beside it is its share of the
total score.
The Winternitz Vault is a genuine quantum-resistant primitive protecting real funds on mainnet, but it is an application-level program rather than a protocol feature, is described by Solana as experimental, and was used by fewer than 300 accounts as of April 2026. Falcon implementations exist in Anza and Firedancer but are not deployed.
source
2 Deployment stage 8/10, weighted 25%
Tier 2: Shipping, on the strength of a quantum-resistant primitive live on mainnet and in use. This is the most generous placement in the index and the caveat below explains why a reader might reasonably score it lower.
source
3 NIST alignment 6/10, weighted 15%
Falcon, the scheme Anza and Firedancer independently converged on, is NIST-selected but not yet finalised as FN-DSA. The primitive actually deployed on mainnet, Winternitz one-time signatures, is a well-understood hash-based construction but is not itself a NIST-standardised scheme.
source
4 Migration path 5/10, weighted 15%
Two independent validator client teams reached the same conclusion on Falcon and both have working implementations, which is real engineering capacity. The published plan is nonetheless explicitly conditional, committing only to adopt a post-quantum scheme 'if quantum becomes a credible threat', and it contains no dates for either new-wallet adoption or existing-wallet migration.
source
5 Exposure 2/10, weighted 10%
Solana is an account-model chain where the address is the Ed25519 public key. Every account's public key is therefore on-chain from creation, so effectively all classical SOL and SPL balances are harvestable today regardless of transaction history.
source
6 Verification 8/10, weighted 5%
The Winternitz Vault is open source and independently recognised: Google's Quantum AI team cited it in 2026 as a notable quantum resilience solution. The roadmap is public and co-authored with Anza and the Firedancer team rather than issued unilaterally by a foundation.
source
The deployment dimension is not a separate judgement. It is Tier 2
expressed as a number. See the tier mapping.
How it compares
All 23 rated chains on the 0 to 100 scale.
Solana is marked. Select any point to open that profile.
The Blueshift Winternitz Vault goes live on Solana mainnet, using Winternitz one-time signatures over a truncated Keccak256 hash offering 224 bits of preimage resistance.
source
27 April 2026shipped
The Solana Foundation publishes a quantum readiness roadmap co-authored with Anza and Jump Crypto's Firedancer team, converging on Falcon.
source
Ongoing, no date publishedin-progress
Continue quantum research and keep evaluating Falcon and its alternatives.
source
Conditional, no date publishedproposed
If quantum becomes a credible threat, adopt a post-quantum scheme for new wallets, then migrate existing wallets to it.
source
Exposure
Exposure measures how much of the chain's value already sits behind a public key that an
attacker can record today and break later. This is the part of the threat that a future
upgrade cannot undo.
A Solana address is an Ed25519 public key encoded in base58. There is no hashing step, so every account's public key is legible on-chain the moment the address is used or funded, and an attacker can begin harvesting today against a future quantum computer. Never transacting does not help, unlike on Bitcoin or Cardano. The Winternitz Vault is the available mitigation, and fewer than 300 mainnet-beta accounts had adopted it as of April 2026.
What this rating means for you
If you hold Solana
Solana has post-quantum signatures live on mainnet, but they are not the default, so holders have to opt in. That makes this one of the few chains where you can act today rather than wait.
Editorial guidance from the Hardy Index. Nothing on this profile is sponsored and nothing on it
is an affiliate link. The guides carry disclosed affiliate links, which never affect a rating.
How we make money.
Questions
Is Solana quantum-safe?
Not by default. Standard Solana accounts use Ed25519, which a sufficiently large quantum computer would break, and the address is the public key so the key is exposed from the start. Solana does have a quantum-resistant option on mainnet, the Blueshift Winternitz Vault, but it is opt-in and experimental, with fewer than 300 accounts using it as of April 2026.
What is the Solana Winternitz Vault?
It is an on-chain program that holds lamports under a Winternitz one-time signature scheme rather than Ed25519. It uses a truncated Keccak256 hash offering 224 bits of preimage resistance, which stays robust against Grover's algorithm. Because it is hash-based rather than elliptic-curve based, Shor's algorithm does not break it. Google's Quantum AI team cited it in 2026 as a notable quantum resilience solution.
Has Solana committed to a post-quantum signature scheme?
It has converged on one without committing to a date. Anza and Firedancer, Solana's two main validator client teams, independently selected Falcon and both have built initial implementations. The Solana Foundation's April 2026 roadmap frames adoption as conditional: new wallets would move to a post-quantum scheme 'if quantum becomes a credible threat'. It gives no timeline for either step.
Why is Solana ranked in Tier 2 if its migration has no dates?
Because the Tier 2 test is a post-quantum signature live on mainnet, and Solana has one protecting real funds. We took the deduction for the undated, conditional roadmap in the migration dimension, which scores 5, rather than in the tier. This is a judgement call and we state it openly on the profile: a reader who weights dated commitments more heavily would place Solana in Tier 3.
This is a security-readiness assessment, not investment advice.
Cookies. We use Google Analytics to count how many people read a page. That is
the only thing this site measures: no advertising, no profiling, no third-party marketing tags.
Until you choose, nothing is stored on your device.
What we would set, in full.