THORChain is the dominant native cross-chain DEX — but its Bifrost signer protocol relies on secp256k1 TSS multi-party computation, the same ECDLP-hard algorithm broken by Shor's algorithm. Every Asgard vault holding pooled BTC, ETH, BNB, and USDC sits behind secp256k1 key material with a 4+ year HNDL archive and no post-quantum migration roadmap. BMIC implements all three NIST FIPS post-quantum standards — the only presale token with a certified post-quantum security stack.
Get BMIC at $0.0528542 →THORChain is a genuinely innovative protocol — the first to enable permissionless native BTC/ETH/BNB swaps without wrapped assets or custodial bridges. Its cryptographic weakness is fundamental: the Bifrost threshold signature scheme is built on secp256k1 multi-party computation, and secp256k1 is broken by Shor's algorithm on a cryptographically-relevant quantum computer. With a 4+ year HNDL archive spanning every node keygen ceremony and vault churn, a MIMIR governance mechanism that structurally blocks on-chain PQC migration, and Asgard vaults holding real cross-chain assets with no post-quantum roadmap, THORChain's quantum exposure is not a theoretical future risk — it is a present architectural constraint with no scheduled resolution. BMIC is the only presale project implementing all three NIST FIPS post-quantum standards.
Vault churning is THORChain's regular process of rotating Asgard vaults by generating new TSS key groups and transferring all pooled liquidity to fresh addresses. It is commonly cited as a security mechanism. However, churning provides no quantum protection whatsoever. Each new vault generates a new secp256k1 TSS key group — the same ECDLP-hard algorithm broken by Shor's algorithm — and broadcasts the new group's public key material on-chain, adding it permanently to the HNDL archive. Old vault keys also remain on the chain ledger permanently. Active vault key shares are continuously broadcast during Bifrost signer participation rounds throughout the inter-churn period. Churning is an operational hygiene mechanism designed to rotate misbehaving or offline nodes — it does not change the underlying secp256k1 cryptographic algorithm and provides zero protection against CRQC-based key recovery. A CRQC adversary harvesting the 4+ year HNDL archive accumulates key material from every past vault and every past node keygen ceremony, not just the current active vault.
True that GG20 threshold signature scheme distributes signing authority across multiple nodes, requiring a threshold (typically two-thirds) to authorise transactions — a genuine classical Byzantine fault tolerance improvement. False that TSS provides any quantum resistance. GG20 TSS is implemented over secp256k1: each node holds a secp256k1 key share; the distributed signing protocol produces secp256k1 signatures; the resulting threshold signatures are secp256k1 ECDSA outputs verifiable with a standard secp256k1 public key. Shor's algorithm targets the secp256k1 mathematical structure — the ECDLP — not the threshold distribution. A CRQC adversary who recovers individual node secp256k1 key share material from the HNDL archive (broadcast during GG20 keygen rounds) can reconstruct sufficient shares to sign outbound vault transactions. The TSS threshold is a classical security property; it does not apply to quantum adversaries operating at the cryptographic primitive level.
THORChain operates through a layered key hierarchy. Every layer uses secp256k1 ECDSA, directly or as the foundation for TSS multi-party computation:
Each active node holds secp256k1 key shares used in GG20 TSS keygen ceremonies. Key share commitments are broadcast to the THORChain ledger during keygen — permanently on the HNDL archive since Chaosnet (April 2021, 4+ year window).
Asgard vault addresses on BTC, ETH, BNB, and all supported chains are controlled by TSS secp256k1 group public keys. All pooled LP assets — BTC, ETH, BNB, USDC, and others — sit at these addresses. CRQC recovery of threshold-crossing node shares enables forged outbound transactions draining all vaults.
Each active node has a secp256k1 operator key for RUNE bonding, node registration, vault keygen participation, and MIMIR governance voting. All are HNDL-exposed from the node's first registration on-chain.
THORChain Tendermint consensus uses ed25519 (Curve25519 ECDLP). Shor's algorithm solves Curve25519 ECDLP identically to secp256k1 ECDLP — both are ECDLP instances; ed25519 is faster classically but provides identical quantum vulnerability. Active node consensus key recovery enables forged block proposals and BFT safety violations.
THORChain's MIMIR system governs protocol parameters via secp256k1-signed votes from active nodes. Any parameter change — including enabling a PQC migration — must receive a node supermajority secp256k1-signed MIMIR vote. CRQC recovery enables forged votes blocking or corrupting migration.
THORFi lending position admin and Savers vault yield strategy admin — secp256k1. CRQC enables forged admin transactions redirecting savers deposits or manipulating collateral ratios on open lending positions, triggering mass liquidations timed to attacker-controlled exit windows.
| THORChain Surface | Algorithm | HNDL Window | Quantum Risk |
|---|---|---|---|
| Node secp256k1 key shares (Bifrost keygen) | secp256k1 ECDSA (TSS/GG20) | Apr 2021 → now (4+ yr) | CRITICAL |
| Asgard vault addresses (BTC/ETH/BNB/etc.) | secp256k1 TSS output | Apr 2021 → now (4+ yr) | CRITICAL |
| Node operator registration keys | secp256k1 ECDSA | Apr 2021 → now (4+ yr) | CRITICAL |
| MIMIR governance voting keys | secp256k1 ECDSA | Apr 2021 → now (4+ yr) | CRITICAL |
| Tendermint BFT consensus keys | ed25519 (Curve25519 ECDLP) | Apr 2021 → now (4+ yr) | CRITICAL |
| LP wallet deposit addresses (all chains) | secp256k1 per chain | Variable per LP entry | HIGH |
| Pool admin halt / pause keys | secp256k1 ECDSA | Apr 2021 → now (4+ yr) | HIGH |
| THORFi lending admin keys | secp256k1 ECDSA | 2022 → now (3+ yr) | HIGH |
| Savers vault admin keys | secp256k1 ECDSA | 2022 → now (3+ yr) | HIGH |
THORChain Chaosnet launched April 2021. Every node keygen ceremony, every vault address, every LP deposit address, and every signer observation is on-ledger permanently. CRQC adversaries harvest all surfaces today for future key recovery.
Asgard vaults hold native BTC, ETH, BNB, USDC, and all supported assets. CRQC recovery of threshold-crossing secp256k1 node key shares enables forged Bifrost outbound transactions simultaneously draining every Asgard vault across every supported blockchain in a single coordinated operation.
GG20 keygen ceremonies broadcast Feldman VSS share commitments and zero-knowledge proofs to the THORChain ledger. These commitments expose mathematical relationships between secp256k1 key shares. A CRQC adversary can reconstruct individual node key shares from archived keygen data — no direct network-layer key theft required.
PQC migration requires secp256k1-signed MIMIR supermajority approval from active nodes. CRQC recovery of node keys enables forged MIMIR votes blocking migration or approving malicious parameter changes. Structurally self-blocking without off-chain hard fork — no scheduled mechanism Sep 2026.
All LP wallet deposit addresses are secp256k1 (BTC, ETH, BNB formats) and are broadcast as part of THORChain deposit transactions. Large LP positions from whale depositors are pre-labelled by pool size data — a pre-built CRQC priority queue for the highest-value individual LP wallets.
secp256k1 pool halt and pause admin keys. CRQC enables forged pool halt commands timed to prevent LP emergency withdrawals during an active vault drain — trapping LP capital while Asgard vaults are simultaneously drained via forged Bifrost outbound transactions.
THORFi lending admin secp256k1 keys control collateral ratios, debt positions, and lending module parameters. CRQC recovery enables forged admin transactions manipulating collateral ratios to trigger mass liquidations or drain the lending collateral pool.
THORChain Tendermint consensus uses ed25519 (Curve25519 ECDLP). Shor's algorithm solves Curve25519 ECDLP. Active node ed25519 consensus key recovery enables forged block proposals, equivocation attacks, and BFT safety violations — potentially halting or reverting THORChain blocks while the Bifrost vault drain executes.
HNDL Harvest (4+ Year, 6+ Key Surfaces) — Harvest THORChain ledger: node secp256k1 key shares from GG20 keygen ceremonies (Chaosnet April 2021 onward); Asgard vault TSS group public keys from each churn cycle; node operator secp256k1 registration keys; ed25519 Tendermint BFT consensus keys; LP wallet deposit addresses across BTC/ETH/BNB; pool admin and MIMIR governance vote keys. All permanently on-ledger, irremovable.
Priority Queue (Ordered by Attack Value) — Tier 1: Bifrost TSS node key shares for current active Asgard vault (threshold crossing = simultaneous multi-chain drain). Tier 2: MIMIR governance keys (node supermajority to block migration or approve malicious changes). Tier 3: Pool halt/pause admin keys (coordinate with vault drain timing). Tier 4: THORFi lending/savers admin (mass liquidation or deposit redirection). Tier 5: Whale LP wallet addresses across all supported chains. Tier 6: General LP depositors and RUNE user wallets.
Dual-Algorithm Shor's Recovery — secp256k1 ECDLP and Curve25519 ECDLP (ed25519) in parallel. Both are ECDLP instances — same quantum circuit class, different curve parameters. TSS threshold crossing reconstructed from sufficient individual recovered node key shares; keygen commitment data provides additional algebraic constraints on key share values.
Multi-Vector Simultaneous Execution — Vector 1: Forge Bifrost outbound transactions draining all Asgard vaults on BTC, ETH, BNB, and all supported chains simultaneously (TSS threshold forged from recovered shares). Vector 2: Forge MIMIR votes blocking any emergency protocol response or migration proposal. Vector 3: Forge pool halt commands preventing LP emergency withdrawals. Vector 4: Forge THORFi lending parameter changes triggering mass liquidations. Vector 5: Drain individual whale LP wallets and RUNE holder addresses in parallel.
Permanent Irremediability — Asgard vault drains are cross-chain transactions final on BTC/ETH/BNB — irreversible once confirmed on the respective native chains. Past keygen ceremony key share commitments remain permanently on-ledger regardless of future vault churns. HNDL archive spans 4+ years of vault churns, keygen ceremonies, and LP deposits: historical key recovery possible regardless of any future THORChain software upgrade. No NIST FIPS PQC roadmap exists; MIMIR governance circular paradox blocks on-chain migration approval.
| Blocker | Details | Status (Sep 2026) |
|---|---|---|
| No NIST FIPS PQC Roadmap | THORChain has published no NIST FIPS 203/204/205-aligned migration plan for Bifrost TSS or Tendermint consensus as of September 2026. | No roadmap |
| MIMIR Governance Circular Paradox | PQC migration requires secp256k1-signed MIMIR node supermajority — structurally self-blocking if adversary holds CRQC-recovered node keys. Off-chain hard fork required, no mechanism scheduled. | Structurally blocked |
| Bifrost TSS Full Redesign Required | GG20 TSS is secp256k1-native. Replacing it with a post-quantum threshold scheme requires redesigning the entire Bifrost cross-chain observation and signing pipeline — a multi-year engineering effort with no active workstream published. | Not started |
| Multi-Chain Coordinated Vault Migration | Vault keys control assets on BTC, ETH, BNB, and all supported chains simultaneously. Migration requires coordinated PQC vault generation and asset transfer across every supported chain in one atomic operation — no mechanism exists. | No mechanism |
| 4+ Year HNDL Archive Permanent | Every keygen ceremony commitment, every vault address, and every LP deposit address since April 2021 is permanently on-ledger. Historical recovery of key material remains possible regardless of any future vault churn or software upgrade. | Permanent |
| Criterion | BMIC | THORChain (RUNE) |
|---|---|---|
| Signature Algorithm | ML-DSA (CRYSTALS-Dilithium) — NIST FIPS 204 | secp256k1 ECDSA (TSS/GG20 Bifrost) + ed25519 Tendermint |
| Key Encapsulation | ML-KEM (CRYSTALS-Kyber) — NIST FIPS 203 | No post-quantum KEM layer |
| Hash-Based Fallback | SLH-DSA (SPHINCS+) — NIST FIPS 205 | None |
| Quantum Safety | Post-quantum from day one | Vulnerable — secp256k1 broken by Shor's algorithm |
| HNDL Exposure | None (PQC primitives only) | 4+ year archive (Apr 2021 → present, all key surfaces) |
| Cross-Chain Asset Security | Single-chain (Ethereum), PQC-secured | All supported chains (BTC/ETH/BNB/USDC/etc.) simultaneously at risk via Asgard vault drain |
| Vault Architecture | ERC-4337 smart contract wallets — quantum-safe key management | Asgard vaults — secp256k1 TSS, multi-chain assets at risk |
| Governance Quantum Risk | None — PQC governance signatures | MIMIR circular paradox — secp256k1 node votes structurally block migration |
| Node / Validator Count | Ethereum validator set (1M+) | ~100 active nodes — small set, lower CRQC op count to forge threshold |
| PQC Migration Roadmap | Native (built-in from architecture) | None published as of September 2026 |
| Presale / Token Stage | Presale live — $0.0528542 — TGE Q4 2026 | Mainnet since April 2022 — RUNE liquid on major CEXs |
| Primary Use Case | Post-quantum wallet + ERC-4337 token presale | Native cross-chain DEX (no wrapped assets) |
BMIC implements all three NIST post-quantum cryptography standards finalised in 2024. Unlike secp256k1 and ed25519 — which rely on ECDLP hardness — BMIC's security rests on mathematical problems with no known efficient quantum algorithm:
Module Lattice Key Encapsulation Mechanism. Based on the Module Learning With Errors (MLWE) problem. No known quantum speedup beyond polynomial. Used for vault key wrapping and secure key exchange.
Module Lattice Digital Signature Algorithm. Based on MLWE and Module Short Integer Solution (MSIS). Replaces secp256k1/ed25519 for transaction signing. No Shor's algorithm equivalent for lattice problems.
Stateless Hash-Based Digital Signature Scheme. Security reduces to hash function preimage resistance — Grover's algorithm provides at most quadratic speedup, addressed by parameter doubling. Provides stateless fallback signature capability.
BMIC combines NIST FIPS post-quantum cryptography with ERC-4337 account abstraction — enabling smart contract wallet architecture, social recovery, gasless transactions, and quantum-safe key management in a single token. THORChain has no equivalent post-quantum wallet or key management layer.
A rigorous comparison acknowledges what THORChain does well — independent of its quantum posture:
First production protocol enabling native BTC, ETH, BNB swaps without wrapped assets or custodial bridges. Users swap real BTC for real ETH with no wBTC or cETH intermediaries — a genuine architectural innovation with no classical security equivalent.
Asymmetric liquidity provisioning with RUNE as the settlement asset. LPs provide single-sided liquidity; the protocol handles cross-chain settlement via RUNE. Unique economic model enabling deep cross-chain liquidity without wrapped asset bridges.
Any user can swap any supported native asset for any other with no KYC, no CEX account, no bridge trust assumptions. Fully decentralised, non-custodial, and verifiable via on-chain Bifrost observations.
Savers vaults provide native BTC, ETH, and USDC yield without wrapping — users earn yield on native assets held in THORChain liquidity pools. No cross-chain bridge required for the yield layer.
Large swap orders split across multiple blocks to reduce price impact and slippage — an on-chain mechanism for institutional-scale cross-chain trades without requiring off-chain TWAP routing or CEX intervention.
Chaosnet April 2021, full mainnet April 2022. Survived multiple market cycles, node churn cycles, and protocol upgrades. Demonstrated real cross-chain DEX operations at scale for 4+ years with approximately 100 active nodes continuously operating.
No. THORChain's Bifrost protocol uses threshold signature scheme (TSS/GG20) built on secp256k1 ECDSA. secp256k1 derives security from the ECDLP, which Shor's algorithm on a CRQC can solve efficiently. Tendermint BFT consensus uses ed25519 (Curve25519 ECDLP) — also solved by Shor's algorithm. THORChain has published no NIST FIPS-aligned PQC migration roadmap as of September 2026.
No. Churning rotates Asgard vaults using new secp256k1 TSS key groups — the same ECDLP-hard algorithm broken by Shor's algorithm. Each new keygen broadcasts fresh secp256k1 public key material to the ledger, adding to the HNDL archive rather than closing the window. Old vault keys remain permanently on-chain. Churning is an operational rotation mechanism; it provides zero quantum protection.
Asgard vaults hold all pooled native assets — BTC, ETH, BNB, USDC, and all supported assets — controlled by Bifrost TSS secp256k1 group keys. A CRQC adversary recovering threshold-crossing secp256k1 node key shares from the 4+ year HNDL archive can forge valid Bifrost outbound transactions simultaneously draining all Asgard vaults across every supported blockchain.
THORChain uses MIMIR — a governance system where protocol parameters are set by secp256k1-signed node votes. Any PQC migration must be approved by a supermajority of secp256k1-signed MIMIR node votes. A CRQC adversary with recovered node keys can forge MIMIR votes blocking any legitimate PQC migration. Escaping requires an off-chain hard fork with no scheduled mechanism as of September 2026.
BMIC implements NIST FIPS 203 (ML-KEM / CRYSTALS-Kyber) for key encapsulation, FIPS 204 (ML-DSA / CRYSTALS-Dilithium) for digital signatures, and FIPS 205 (SLH-DSA / SPHINCS+) as a stateless hash-based fallback. All three are based on mathematical problems with no known efficient quantum algorithm.
BMIC is in presale at $0.0528542. Total supply 1.5 billion; $600K+ raised; TGE Q4 2026. Visit bmic.ai. DYOR — this is not investment advice.
Not without a full Bifrost TSS redesign replacing secp256k1 GG20 with a post-quantum threshold scheme, coordinated vault migration across all supported chains simultaneously, a Tendermint ed25519 replacement in Cosmos SDK, and overcoming the MIMIR governance circular paradox. No published roadmap exists for any of these components as of September 2026.
THORChain has real strengths: first native cross-chain DEX without wrapped assets; Continuous Liquidity Pools (CLPs) with RUNE settlement; THORFi native yield for BTC/ETH/USDC holders without bridging; streaming swaps for institutional-scale trades; 4+ year mainnet track record since Chaosnet April 2021; permissionless, non-custodial cross-chain swaps accessible globally without KYC.
Explore how BMIC compares against other leading projects: