1 Signature scheme 0/10, weighted 30%
Band 0: Classical signatures only on mainnet, with nothing post-quantum protecting live funds. Short-lived devnets and one-off benchmarks sit here: they demonstrate research rather than something a user can hold keys on.
LUNC accounts sign with ECDSA on secp256k1: every signer in the first 100 of 13,071 mainnet transactions between heights 30,962,000 and 30,962,700, read from a public node on 23 October 2026, carried a secp256k1 key. Validators sign with Ed25519, the one key type the consensus parameters accept. Nothing post-quantum protects LUNC on mainnet.
source
2 Deployment stage 1/10, weighted 25%
Band 1: Tier 5: Exposed.
Tier 5: Exposed. The signatures securing LUNC are quantum-vulnerable, and the post-quantum document with standing is a roadmap RFC by a classic-terra/core contributor that its author posted as an informal, non-binding discussion, stating it is not a governance proposal. The governance proposal the author said would open the formal RFC has not been submitted. See the caveat below on why this is a judgement call. A community post of 23 July 2026, "LUNC Must Become Quantum Resistant", carries no authority over the chain.
source
3 NIST alignment 3/10, weighted 15%
Band 3 to 5: NIST schemes are referenced as candidates without a committed selection, or the work is bespoke research.
The pre-formal RFC selects ML-DSA, from the final FIPS 204, as the target for the consensus path and as the post-quantum half of a hybrid path for wallet and transaction signatures. It names no parameter set, and the decision log calls it a target profile in a document that is not yet in the formal RFC process.
source
Placement in the band The bottom of the band rather than a 4 or a 5: the document is a pre-formal draft with no governance standing, and it names the scheme without a parameter set. Above a 2, because a final NIST standard is named for the chain's own fund-protecting signatures by a contributor to its node software.
4 Migration path 3/10, weighted 15%
Band 3 to 5: Migration is acknowledged as a problem with no agreed mechanism, or the mechanism is contested.
No migration plan is adopted. Terra Classic has a working route for protocol change: governance has passed a run of software upgrades, including v4.0.0, which moved the chain to Cosmos SDK v0.53, in April 2026, and v4.1.1, which took effect at height 31,010,600 on 26 October 2026. The RFC sketches a hybrid ML-DSA path for wallets and a validator key binding before a consensus cutover, and it comes from a contributor to the chain's node, but it is a draft, and no mechanism for holders exists in the node.
source
Placement in the band The floor of the band rather than a 2: the RFC from a classic-terra/core contributor acknowledges the problem and sketches a route, as the Sonic and Kaspa profiles credit, and governance ships coordinated upgrades routinely. Not a 4, because the route is a pre-formal draft that has not been put to governance, and no mechanism exists in the code.
5 Exposure 2/10, weighted 10%
Band 0 to 2: Public keys are exposed for effectively all accounts, or a large, measured share of total supply sits in exposed addresses.
A Terra Classic address is a Bech32 hash of the secp256k1 public key, so an account that has never signed keeps its key off the chain. The key is recorded with the account's opening transaction, and staking LUNC needs a signed delegation, so actively held LUNC sits behind a revealed key. Validator consensus keys are published by design. No measurement of the exposed share has been published.
source
Placement in the band The top of the band rather than a 3: the address structure is the same as on other Cosmos SDK key-hash chains, where any send or delegation reveals the key. It is not a 0 or a 1 because never-used addresses do keep their keys hidden.
6 Verification 2/10, weighted 5%
Band 0 to 2: No post-quantum component exists, or the claims rest on marketing.
No post-quantum component protects Terra Classic, so there is nothing to verify: the RFC is a design document with no code, and neither v4.0.1-patch.3 nor v4.1.1 adds a key type. Under v1.8 the openness of the classical code earns nothing here.
source
Placement in the band The top of the band rather than a 0 or a 1: there is no post-quantum component to verify, but nothing about the chain is marketed as quantum-safe, so its position does not rest on marketing.