Quick Comparison
| Factor | NEAR Protocol (NEAR) | BMIC |
|---|---|---|
| Implicit account scheme | Ed25519 (public key = account ID) | ML-DSA (NIST FIPS 204) |
| Named account access keys | Ed25519 + secp256k1 | ML-KEM + ML-DSA (FIPS 203/204) |
| Validator/chunk producer keys | Ed25519 | ML-DSA / SLH-DSA (FIPS 204/205) |
| Quantum resistance | ❌ Not quantum-safe | ✅ NIST-standardised PQC |
| Unique risk: implicit accounts | Public key embedded directly in account ID — always harvestable without spend tx | No legacy ECC architecture |
| Sharding amplifier | Nightshade: one compromised chunk-producer key affects multiple shards | N/A |
| Mainnet genesis | October 2020 | TGE Q4 2026 |
| HNDL window | 5+ years (Oct 2020 → present) | None |
| Access key multiplicity | Multiple keys per account — full-access + per-dApp function-call keys all accumulate HNDL | N/A |
| PQC migration roadmap | None announced (Oct 2026) | Built-in from launch |
| Presale live | N/A — listed token | ✅ bmic.ai |
What is NEAR Protocol?
NEAR Protocol is a layer-1 proof-of-stake blockchain launched in October 2020 by the NEAR Foundation. Its core technical innovation is Nightshade sharding — a dynamic sharding mechanism that partitions the blockchain into parallel shards processed by "chunk-only producers", enabling high throughput without sacrificing single-chain composability. NEAR uses a human-readable account naming system (e.g., alice.near) alongside implicit hex accounts derived from public keys.
NEAR has grown into a significant ecosystem for DeFi, NFTs, gaming, and chain abstraction — the latter being a major 2024–2026 focus, allowing users to interact with multiple chains from a single NEAR account. The NEAR token is used for transaction fees, staking, and protocol governance.
The Implicit Account Risk: Public Key in the Address
A NEAR implicit account address is the 64-character hex representation of the raw Ed25519 public key — with no hash, no obfuscation. Unlike Ethereum (where the address is the last 20 bytes of the keccak256 hash of the public key), NEAR implicit account IDs expose the full 32-byte Ed25519 public key without any spending transaction required. Any wallet software that generates and broadcasts a NEAR implicit account address has made the full Ed25519 public key permanently harvestable on-chain.
Why This Matters for Quantum Security
For a quantum adversary running Shor's algorithm, the attack input is the public key. For Ethereum and Bitcoin P2PKH accounts, the attacker must wait until the owner broadcasts a spend transaction (which reveals the public key in the signature). For NEAR implicit accounts, no spend is necessary — the public key is the address itself, readable from day one.
This means every NEAR implicit account that has ever appeared on-chain (including funded but never-spent addresses) presents a passive HNDL target from the moment of its first appearance. An adversary harvesting NEAR implicit account IDs from chain history has a ready-made priority list of Ed25519 public keys to queue for quantum key recovery — sorted by account balance for maximum impact.
Named Account Access Keys: Multi-Key HNDL Accumulation
NEAR named accounts (e.g., alice.near) support multiple simultaneous access keys:
| Key Type | Crypto Scheme | Permission Level | Quantum Risk Profile |
|---|---|---|---|
| Full-access key | Ed25519 or secp256k1 | All actions including NEAR transfer, contract deployment, key management | Highest-value target: account drainable, keys addable/removed, contracts deployable |
| Function-call key (per dApp) | Ed25519 or secp256k1 | Limited to specific contract methods, optional allowance | Per-dApp key = each dApp interaction accumulates separate HNDL record; one key per browser session multiplies exposure |
| Validator staking key | Ed25519 | Block/chunk signing for validators | High-frequency signing per block/chunk; rich HNDL record; compromised key enables forged block proposals |
The Per-dApp Key Architecture HNDL Problem
NEAR wallets often issue a separate function-call access key to each dApp a user interacts with. A NEAR user who has been active since 2020 and has used 10 dApps may have 10 separate Ed25519/secp256k1 public keys permanently on-chain — each with its own signing history, each a separate HNDL target. Recovering any full-access key gives complete account control. The function-call keys can be used as pivot points: if a function-call key can call the "add_access_key" method on a contract, the attacker can escalate to full account control.
Nightshade Sharding: The Validator Key Amplifier
NEAR's Nightshade architecture divides the blockchain into shards, each processed by a set of chunk-only producers who sign "chunks" (shard blocks) with their Ed25519 validator keys. Cross-shard transactions are executed via receipts that propagate across shard boundaries. A compromised chunk-only producer key can inject forged chunks into one shard, causing invalid state transitions that flow into cross-shard receipts — potentially corrupting state across connected shards.
Cross-Shard Attack Propagation
Unlike single-chain architectures where a compromised validator key affects only that chain's state, NEAR's cross-shard receipt system means:
- Forged receipt in shard A → invalid state change propagates to shard B via cross-shard message.
- If the forged receipt includes a token transfer or contract call, the receiving shard processes it as valid (it was signed by a legitimate chunk producer key).
- Multi-shard DeFi operations (e.g., cross-shard liquidity pool interactions) could be selectively forged to drain one side of a swap while leaving the other side pending.
- The attacker need only compromise one chunk producer key per shard of interest — not the entire validator set.
Quantum Exposure Cards
🔴 Implicit Account: Zero-Spend Public Key Exposure
Ed25519 public key = account address. No transaction required for HNDL exposure. Every funded implicit account is a passive quantum target from creation. Largest passive HNDL surface outside Bitcoin P2PK.
🔴 Nightshade Sharding Amplifier
Compromised chunk-only producer Ed25519 key → forged shard chunks → cross-shard receipt injection → multi-shard state corruption. One key, multiple shards affected.
🔴 Multi-Key Per-Account HNDL Accumulation
Full-access + per-dApp function-call keys all accumulate separate HNDL records. 10-dApp user = 10+ HNDL targets per account. Any full-access key recovery = full account drain.
🟠 Validator Ed25519 Block Signing HNDL
Ed25519 validator keys sign every block/chunk proposal. 5+ years of high-frequency validator signing history since Oct 2020. Compromised key enables forged block proposals.
🟠 Chain Abstraction Risk Amplifier
NEAR chain abstraction aggregates control of multiple external chains (ETH, BTC, SOL) under one NEAR account key. Deriving the NEAR full-access key gives cross-chain access to all aggregated accounts.
🟡 No PQC Migration Roadmap
No announced post-quantum key scheme upgrade for NEAR as of October 2026. Implicit account architecture is fundamental — changing key derivation breaks account ID format. Hard to migrate.
BMIC's Post-Quantum Architecture
- ML-KEM (FIPS 203) — CRYSTALS-Kyber lattice key encapsulation. Not ECC-based.
- ML-DSA (FIPS 204) — CRYSTALS-Dilithium lattice signatures. Replaces Ed25519/secp256k1/ECDSA.
- SLH-DSA (FIPS 205) — SPHINCS+ hash-based signatures. Requires only hash function collision resistance.
NEAR vs BMIC: PQC Migration Feasibility
| Migration Layer | NEAR Challenge | BMIC Position |
|---|---|---|
| Implicit account key scheme | Implicit account ID = public key; changing key scheme changes account address format — breaks all existing implicit accounts and tooling | PQC from genesis — no migration required |
| Named account access keys | Each account may have multiple full-access + function-call keys to rotate; per-user coordination at scale; dApp front-ends must all be updated | N/A |
| Validator/chunk producer keys | Runtime upgrade + coordinated validator key rotation required during active block production; shard coordination adds complexity | N/A |
| Historical HNDL archive | 5+ years of Ed25519/secp256k1 implicit + named account signing permanently on-chain — irremediable; implicit account IDs expose public keys without any signing required | No historical ECC archive |
| Chain abstraction blast radius | Compromised NEAR account key → compromised all externally-controlled chains in the abstraction layer — unique to NEAR's architecture | N/A |
Related Comparisons
- BMIC vs Internet Computer (ICP) — BLS threshold + Chain Key Technology
- BMIC vs Stacks (STX) — Bitcoin-anchored PoX secp256k1
- BMIC vs Bittensor (TAO) — Sr25519 hotkey signing
- BMIC vs The Graph (GRT) — Web3 infrastructure signing HNDL
- BMIC vs Polkadot (DOT) — sr25519 Schnorr + parachain cascade
- BMIC vs Helium (HNT) — hardware-embedded key irremediability
- BMIC vs Avalanche (AVAX) — Subnet amplifier BLS12-381
- BMIC vs Chainlink (LINK) — oracle OCR secp256k1 exposure
- BMIC vs Ethereum (ETH) — secp256k1 EOA + validator BLS
- BMIC vs Bitcoin (BTC) — P2PK UTXO + Satoshi key risk
- BMIC vs Solana (SOL) — Ed25519 vote account exposure
- ← Back to BMIC Presale Home
BMIC: Post-Quantum Crypto — NIST FIPS 203/204/205
No Ed25519. No secp256k1. No implicit account public key embedding. Quantum-safe from genesis.
Buy BMIC at bmic.ai →DYOR. Not financial advice. Presale participation carries risk.