--- title: Is TON quantum-safe? chain: TON ticker: TON hardy_score: 13 rank: 19 of 23 tier: "5: Exposed" url: "https://hardyindex.com/chains/toncoin" updated: 2026-08-12 methodology_version: 1.1 --- # Is TON quantum-safe? **Hardy Score 13.0 / 100. Rank 19 of 23. Tier 5: Exposed. As of 12 August 2026.** No. TON accounts are secured by Ed25519, which a sufficiently large quantum computer would break. We found no published post-quantum roadmap, named replacement scheme or research programme for TON at the time of writing. TON does have a structural property worth stating, because it is the same property that gives Ethereum and Starknet their migration route: on TON, a wallet is a smart contract, and the signature checking logic lives in that contract rather than being fixed by the protocol. In principle a new wallet contract could verify a post-quantum signature without any consensus change at all. That is genuine optionality, and it is not the same as a plan. We found no evidence of anyone having built or proposed such a wallet. > This is a security-readiness assessment, not investment advice. ## Summary Signs with Ed25519 and has no published post-quantum roadmap, though its wallet-as-smart-contract model means a new signature scheme could be adopted without changing the protocol. ## Where we are making a judgement call TON sits in Tier 5 because its mainnet signatures are quantum-vulnerable and no post-quantum roadmap, proposal or research programme was found. Its migration score of 3 is higher than peers with the same absence of a plan, because the wallet-as-contract architecture genuinely could support a post-quantum wallet without a consensus change. We are crediting the architecture, not treating it as progress. ## Score breakdown | # | Dimension | Score | Weight | Contribution | |---:|---|---:|---:|---:| | 1 | Signature scheme | 0/10 | 30% | 0.0 | | 2 | Deployment stage | 1/10 | 25% | 2.5 | | 3 | NIST alignment | 0/10 | 15% | 0.0 | | 4 | Migration path | 3/10 | 15% | 4.5 | | 5 | Exposure | 3/10 | 10% | 3.0 | | 6 | Verification | 6/10 | 5% | 3.0 | | | **Hardy Score** | | | **13.0** | ### 1. Signature scheme: 0/10 TON wallets verify Ed25519 signatures, which are broken by Shor's algorithm. Nothing post-quantum protects TON on mainnet today. Source: https://github.com/ton-blockchain/ton ### 2. Deployment stage: 1/10 Tier 5: Exposed. TON signs with Ed25519 and no post-quantum roadmap, proposal or research programme was found. See the caveat below on its wallet architecture. Source: https://github.com/ton-blockchain/ton ### 3. NIST alignment: 0/10 No post-quantum scheme has been named or proposed for TON, so there is nothing to assess against a NIST standard. Source: https://csrc.nist.gov/pubs/fips/204/final ### 4. Migration path: 3/10 TON's wallets are smart contracts and the signature check lives in contract code, so a post-quantum wallet could in principle be deployed without a consensus change. That is a materially better structural position than a protocol-fixed signature scheme, but no plan, proposal or implementation was found. Source: https://github.com/ton-blockchain/ton ### 5. Exposure: 3/10 A TON address is derived from a hash of the wallet contract's initial state, which includes the public key, so the address does not publish the key directly. The key becomes visible once the wallet is deployed and used, which is true of essentially every funded wallet. Source: https://github.com/ton-blockchain/ton ### 6. Verification: 6/10 The TON node implementation is open source and the signature scheme is verifiable from the code and from standard wallet contracts. There is no post-quantum claim to verify. Source: https://github.com/ton-blockchain/ton ## Signature scheme - **On mainnet today:** Ed25519, verified inside wallet smart contracts - **Post-quantum scheme:** None proposed. No TON-specific post-quantum work was found. - **NIST standard:** None adopted - **Readiness tier:** Tier 5: Exposed. The signatures securing funds on mainnet today are quantum-vulnerable, and no public post-quantum plan, proposal or research programme could be found. ## Roadmap - **No published position** (proposed): No post-quantum roadmap, proposal or research programme for TON was found at the time of writing. Source: https://github.com/ton-blockchain/ton ## Exposure A TON wallet address is derived from a hash of the contract's initial state, which embeds the owner's public key, so the address itself does not hand an attacker the key. In practice the key becomes readable once the wallet contract is deployed on-chain, and a wallet must be deployed to be used, so essentially every funded and active TON wallet has a visible key that can be recorded today. The position is somewhat better than chains where the address simply is the key, and considerably worse than a UTXO chain where unspent funds keep their keys private. ## Frequently asked questions ### Is TON quantum-safe? No. TON accounts are secured by Ed25519, which a sufficiently large quantum computer would break. We found no published post-quantum roadmap, named replacement scheme or research programme for TON at the time of writing. TON does have a structural property worth stating, because it is the same property that gives Ethereum and Starknet their migration route: on TON, a wallet is a smart contract, and the signature checking logic lives in that contract rather than being fixed by the protocol. In principle a new wallet contract could verify a post-quantum signature without any consensus change at all. That is genuine optionality, and it is not the same as a plan. We found no evidence of anyone having built or proposed such a wallet. ### Is TON quantum-safe? No. TON wallets verify Ed25519 signatures, which a sufficiently large quantum computer would break. We found no published post-quantum roadmap or proposal for TON at the time of writing. ### Could TON adopt post-quantum signatures without a hard fork? In principle yes, and this is TON's main structural advantage. Wallets on TON are smart contracts and the signature verification happens in contract code rather than in the protocol, so a new wallet contract could verify a post-quantum signature without a consensus change. No such wallet has been proposed or built as far as we could find. ### Does TON's address model protect holders? Only slightly. A TON address is a hash of the wallet contract's initial state, which contains the public key, so the address does not reveal the key directly. But a wallet contract has to be deployed on-chain to be used, and once deployed the key is readable, so nearly all active wallets are exposed. ### What would raise TON's score? A published position would raise the tier. A proposed or deployed post-quantum wallet contract would raise the signature and NIST dimensions substantially, and because that route needs no consensus change, TON could move faster than chains that must coordinate a protocol upgrade. ## What this rating means if you hold TON Plain-language guidance from the same publication, with no product recommendation attached. - [Is my crypto safe from quantum computers?](https://hardyindex.com/guides/is-my-crypto-safe-from-quantum-computers.md) - [How to protect your crypto from quantum computers](https://hardyindex.com/guides/how-to-protect-crypto-from-quantum-computers.md) - [All guides](https://hardyindex.com/guides.md) Nothing on this profile is sponsored and nothing on it is an affiliate link. See https://hardyindex.com/how-we-make-money.md. ## Sources 1. [TON blockchain node implementation](https://github.com/ton-blockchain/ton): TON Blockchain (GitHub) (primary, checked 12 August 2026) 2. [FIPS 204: Module-Lattice-Based Digital Signature Standard (ML-DSA)](https://csrc.nist.gov/pubs/fips/204/final): NIST (primary, checked 12 August 2026) 3. [Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly](https://research.google/blog/safeguarding-cryptocurrency-by-disclosing-quantum-vulnerabilities-responsibly/): Google Research (primary, checked 12 August 2026) --- Methodology: https://hardyindex.com/methodology (v1.1). Cite as: The Hardy Index, "TON", https://hardyindex.com/chains/toncoin, as of 12 August 2026.