Cardano markets itself as one of the most academically rigorous blockchains. Yet as of October 2026, every ADA wallet, every stake pool, every Plutus contract relies on ed25519 — a curve broken by Shor's algorithm. No post-quantum primitive has shipped to mainnet. BMIC ships NIST FIPS 203/204/205 from day one.
Get BMIC — Quantum-Safe from Day One →| Criterion | BMIC | Cardano (ADA) |
|---|---|---|
| Signature scheme | ML-DSA (FIPS 204 / Dilithium) | ed25519 (Curve25519 ECDLP) |
| Key encapsulation | ML-KEM (FIPS 203 / Kyber) | Not applicable / not deployed |
| NIST FIPS PQC standard | FIPS 203 + 204 + 205 ✅ | None deployed on mainnet ❌ |
| Quantum threat to wallets | None (lattice-based) | Critical — ed25519 private keys recoverable via Shor |
| HNDL archive since | N/A (PQC) | 2017 (ITN) / 2020 (mainnet Shelley) — 6+ years |
| Stake pool key exposure | Not applicable | All KES certificates broadcast on-chain — harvestable |
| Smart contract risk | ML-KEM/DSA protected | Plutus scripts use ed25519 auth — CRQC forgeable |
| PQC roadmap status | Deployed at launch | Research published; mainnet: 0 deployed primitives |
| Token standard | ERC-4337 (Ethereum) | Native Cardano multi-asset ledger |
| TGE / Presale | Presale LIVE → TGE Q4 2026 | Live since 2021 |
Cardano's Extended Unspent Transaction Output (eUTxO) model uses BIP-32-style hierarchical deterministic key derivation built on Ed25519 (Edwards Digital Signature Algorithm on Curve25519). Payment keys, staking keys, and script credentials all derive from this single elliptic-curve base. There are no alternative signature schemes available for standard ADA wallets as of October 2026.
Ed25519 relies on the hardness of the elliptic-curve discrete-logarithm problem (ECDLP) on Curve25519. Shor's algorithm, running on a sufficiently large CRQC, solves ECDLP in polynomial time — recovering private keys from public keys and archived signatures. This is mathematically certain; only the timeline for capable CRQCs is debated.
Cardano's Incentivized Testnet (ITN) launched in 2019 and mainnet Shelley (with staking) launched in July 2020. Since then, over 3,000 stake pools have each issued thousands of Key-Evolving Signature (KES) certificates — each containing ed25519 public keys broadcast across the global network. Every ADA wallet transaction since 2020 has published a payment key signature. This creates a dense multi-year archive of harvestable ed25519 material.
Cardano's Ouroboros protocol requires stake pool operators to periodically rotate their operational keys using Key-Evolving Signatures (KES). While KES rotation mitigates some classical key-compromise scenarios, each KES certificate epoch still uses ed25519 for the cold key signature that authorises the rotation. Cold keys have signed every KES certificate since the pool's registration — every one of those signatures is permanently on-chain and cannot be deleted. A CRQC adversary recovering the cold key can forge future KES certificates and take control of pool block production.
IOHK (now Input Output Global) has published academic papers on post-quantum cryptography integration for Cardano, referencing hash-based schemes (SPHINCS+, XMSS) and lattice approaches. However, publishing research and deploying production code are fundamentally different. As of October 2026, no post-quantum signature scheme has been activated on Cardano mainnet. All wallets, all stake pools, all DeFi protocols built on Cardano remain ed25519-dependent.
Cardano's rigorous use of Haskell, Plutus, and Agda formal verification is a genuine engineering strength for classical security. But formal verification proves that code correctly implements a specification — it cannot make the underlying mathematical primitive (ed25519 / ECDLP) quantum-resistant. These are orthogonal properties.
Plutus scripts frequently use signature verification as an authorisation mechanism. When the underlying ed25519 keys controlling a Plutus contract are recoverable via CRQC, an adversary can produce cryptographically valid signatures that the Cardano ledger accepts as legitimate — authorising arbitrary spending from script-locked UTxOs without the original key holder's participation.
Module Lattice Key Encapsulation Mechanism. Used to wrap vault and backup encryption keys. Lattice-based — no elliptic-curve structure. No known quantum attack.
Module Lattice Digital Signature Algorithm. Replaces ed25519/secp256k1 for all BMIC transaction signing. Security based on Module Learning With Errors (MLWE).
Stateless Hash-Based Digital Signature. Hash-function-only security — no algebraic structure for quantum algorithms to exploit. Backup layer for maximum assurance.
No. As of October 2026, Cardano uses ed25519 for all wallet signing — an elliptic-curve scheme broken by Shor's algorithm on a CRQC. No post-quantum primitive has been deployed to Cardano mainnet despite years of published research.
For classical security threats, yes. Formal verification ensures code correctly implements its specification. But it cannot protect ed25519 from Shor's algorithm — that is a mathematical property of the underlying primitive, not a code-correctness issue.
Cardano's roadmap includes PQC research but no committed mainnet deployment date has been publicly confirmed as of October 2026. "Eventually" is not the same as "before CRQCs become capable." Every year of delay extends the HNDL archive.
BMIC implements NIST FIPS 203/204/205 from day one — no roadmap gap. BMIC is in active presale with TGE targeted Q4 2026. See bmic.ai for current price and raise stats. DYOR — this is not financial advice.
See our full comparison series below. Each page covers the quantum exposure profile of a specific competing chain in technical depth.