Securing Blockchains against the Quantum Threat | Founder of @QuantusNetwork
The Holy Internet
Joined November 2024
- Tweets6.8K
- Following1.4K
- Followers5.6K
- Likes15.6K
Ethereum is taking quantum seriously but they are large and slow.
I built on top of Ethereum for years. I don’t want to see it die.
Devcon lookback:
1 - Ethereum is fully quantum pilled - considers it one of the fundamental pieces of tech they need to be working on right now
2 - Justin Drake's session was the p(doom) session - how bad it is - see below; we already knew that, however, some things stood out
Ethereum believes there's a 10% chance quantum computers will break Ethereum in 2029
They therefore believe they need to ship a fix in 2028
And to ship a fix in 2028, the code needs to be ready in 2027!
That's a very tight deadline!
3 - Kev spoke after Justin in the "how we will fix everything" in the session right after
My takeaway from this - and everyone not yet quantum pilled should take heed - this is a very hard problem to solve. Yes, Kev and the EF _have_ a plan, and it's a complete plan - it will fix Ethereum.
However, the plan contains several hard challenges, and makes changes to every part of the Ethereum stack. Each of these alone would be a pretty big project; together, they're, to put it mildly, highly ambitious for the timeline.
youtube.com/watch?v=L_Qon4Ny…
I still think Ethereum has a good chance, but only because their founders and core team members are fully committed, fully quantum pilled, and take the threat extremely seriously. They have motivation, funding, and of course, some of the best cryptographers on the planet.
Others... ahem... Bitcoin ... ahem... lack all these things. They have cryprographers, but they spend their time on X talking down the issue, or pretending it doesn't exist.
Also, I've heard the sentiment in the VC sphere that quantum is a current narrative, but - in their mind - these smart geeks will figure something out before that happens because surely, they won't let all their coins go to zero.
Wouldn't be so sure about that - it's a hard problem, and it's hard to update blockchains, and they're not prepared and not preparing
From a purely technical standpoint, making a post quantum chain was a lot of work - it wasn't easy either; but still a lot easier than migrating an existing chain.
1
11
457
Update iOS and macOS, and maybe just stop using PDFs while you’re at it
CVE-2026-112611 drops a public PoC: OOB write in CoreGraphics (PDF ShadingType 5).
Array mismatch between /n and /c0 triggers a clean heap overflow inside Apple's native rendering engine.
The timing couldn't be worse for Cupertino:
1. Weaponized entry: an unauthenticated CoreGraphics memory corruption bug, ideal for 0-click chains (iMessage/Safari/Mail).
2. Containment breach: chain it with the newly disclosed "worse_query" sandbox escape to break out and read/modify system and third-party app data.
Twenty years later, parsing complex media and legacy PDF formats in C/C++ remains a gift to exploit brokers.
The walled garden isn't just leaking; the bricks are turning to dust.
github.com/Rust505/CVE-2026-…
1
3
468
Foundations bring all the downsides of having a government with none of the benefits.
🚨 ETHEREUM FOUNDATION SUED OVER MANDATE REQUIRING EMPLOYEES TO PLEDGE TO “TAKE HIS OR HER OWN LIFE WITH A SWORD”
Former Ethereum Foundation employee Kayleen Fulton alleges she was fired just 13 days after disclosing her ovarian cancer diagnosis and 12 days after organizing opposition to the Foundation’s controversial Mandate.
According to the lawsuit:
• The Mandate contained a pledge to commit suicide with a sword for violating its terms.
• 79 employees voted to remove the provision, but the Foundation published it unchanged.
• Vitalik Buterin allegedly promised “significant changes” before the document was permanently inscribed on Ethereum.
• 53 employees signed a letter opposing forced affirmation of the Mandate. Both organizers were subsequently fired.
• The plaintiff alleges she was fired just 13 days after disclosing her cancer diagnosis and 12 days after organizing the protest.
The lawsuit alleges disability discrimination and retaliation. The allegations have not been proven in court.
3
415
Address poisoning attacks are serious, but largely preventable by using checkphrases.
Address poisoning happens when an attacker swaps the destination address with a lookalike. It can happen because malware got into your clipboard, or because they put a lookalike in your transaction history hoping you accidentally copy it.
The more advanced version will forward test transactions (small value) to the intended destination so you get confirmation from the recipient that it went thru. This is why when doing tests you should always check the txid with the recipient.
But using checkphrases makes this attack much harder to execute. The fundamental weakness being exploited by address poisoning is that humans have a hard time reading random data, so we generally just skip it.
A checkphrase is a human-readable phrase that is cryptographically bound to whatever data you derive it from. You can use it with any data, but the two most interesting usecases are crypto addresses and transaction ids.
If one letter changes in the input, on average all five words will change. For example, if your BTC address is
1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa
Then your checkphrase is
Age-Awake-Secret-Blossom-Hedgehog
But if you change one letter
1A1zP1eP5QGefi2DMPTfTL5SLmv7DixfNa
The checkphrase becomes
Innocent-Fitness-Joyful-Brown-Surge
In the default configuration this has about 55 bits of security and requires about 50k hashes to generate a single one, so if you are sending a large amount of money you should check the entire address, since collisions are possible for highly motivated attackers (quintillions of hashes).
It’s open source. Anyone can use it on any address type in any wallet. It’s entirely client side.
github.com/Quantus-Network/q…
🚨 IF YOU ARE IN CRYPTO, IGNORE THIS POST AT YOUR OWN RISK
A friend lost $535,000 USDT yesterday, and he even sent a test transfer first. His wallet wasn't hacked and his keys never leaked. He lost it to a bot.
The test transfer arrived fine. Within seconds, a bot sent 1 USDT to his wallet from a fake address that started and ended with the same characters as the real one. Now the fake address was sitting in his transaction history, right next to the real one.
When he went to send the full amount, he copied the address from that history and picked the fake one. The money was gone in under 30 seconds, swapped out of USDT before Tether could freeze it.
This is called address poisoning, and it's running at industrial scale. The bot that got him has run over 6 million transactions, and it goes after anyone moving large amounts.
Here's how to make sure it never happens to you:
• Never copy an address from your transaction history or a block explorer
• After a test transfer, copy the address again from the original message the receiver sent you
• Check every character, because these bots match both the start and the end
• Save verified addresses in your wallet's address book with names
Now open your wallet and go through your history. If there's a tiny deposit from an address you don't recognize, a bot has already marked you. Tell me below if you find one.
Repost this post and share this to the person you know who moves the most money on-chain.
This number just keeps going up. The crowdsourced quantum algorithm at ecdsa.fail uses only 30% of the resources of Google’s classified algorithm.
This is probably why Trump issued the Executive Order shortening the government’s own post-quantum timeline.
@grok plz explain
3
16
923
This is awesome! You can sync the Quantus blockchain on a GrapheneOS phone!
1/5
A Quantus Network full node — on a smartphone. 📱
I built an Android app that runs a non-validator $QTC node: it syncs the chain, verifies every block itself, and relays data to peers. No mining. No wallet.
v0.1.0 is out. Open source. 🧵
Quantus signatures have 256 bits of security, also known as NIST level 5, the highest security level. This is the same level of cryptography the government uses to protect the Epstein files.
Congratulations team, this took a lot to push over the line.
QTC swaps are now live in the Quantus wallet.
Swap into QTC from 180+ assets across 35+ chains, all without leaving the app.
Powered by @near_intents
The video isn’t terrible but as usual the title overstates it. The third point isn’t really valid. Yes cracking Satoshi’s keys would make the price go down. No that wouldn’t stop a quantum attacker.
- Satoshi’s keys might not be the first target. The largest single balance is actually Binance’s cold wallet.
- You don’t get a memo about how someone cracks your keys when it happens.
- Some attackers may have exogenous incentives, which could be geopolitical or financial.
And most importantly, there’s no guarantee that the migration happens in time. Keep applying pressure!
Probably nothing
🚨 JUST IN: Nasdaq-listed Next Technology Holding says its board just greenlit selling or pledging all 5,833 $BTC it holds, citing the Binance hack and quantum computing risk.
Crazy to see it laid out like this.
So many!
Just some of the crypto hacks in 2026. We need to rethink how we do security.
USDGambit and TLP - $1.5M
TMX TRIBE - $1.4M
IPOR Fusion - $336K
Truebit - $26.4M
FutureSwap - $395K
YO Protocol - $3.6M
Meteora DAMM V2 - $1.5M
Makina - $4.2M
Saga - $7M
Aperture LM - $3.67M
Matcha - $13.43M
Step Finance - $40M
CrossCurve - $3M
Moonwell Lending - $1.78M
Velar Perps - $401K
IoTeX - $4.4M
Blend Pools V2 - $10.97M
DGLD - $250K
Ploutos Money - $390K
FOOM Cash - $2.26M
SolvBTC - $2.7M
Aave V3 - $862K
Venus Core Pool - $3.7M
dTRINITY dLEND - $257K
Resolv USR - $24.5M
Cyrus Finance - $5M
BCE - $679K
GoonFi - $254K
LML/USDT staking - $950K
Drift Trade - $295M
Silo V2 - $359K
BSC TMM/USDT - $1.665M
SquidMulticall - $517K
Aethir - $400K
Hyperbridge - $2.5M
Dango - $1.9M
CoW Swap - $1.2M
Rhea Lend - $18.4M
Grinex - $13.74M
Kelp - $293M
Transit Finance - $257.8K
Volo Vault - $3.5M
Giddy - $1.3M
Purrlend - $1.5M
ZetaChain - $333,868
Singularity Finance - $413K
YieldCore-3rd-deal - $398,764
Aftermath Perps - $1.14M
Syndicate - $380K
Sweat Foundation - $3.5M
Wasabi Perps - $5.5M
Bisq - $550K
SquidRouterModule - $3.2M
Ekubo - $1.4M
TrustedVolumes - $6.7M
TAC Protocol - $2,854,486
Aurellion - $456,442
SQ Protocol - $346,137
Transit Finance - $1.88M
THORChain DEX - $10.7M
Adshares - $628K
Verus-Ethereum Bridge - $11.5M
Echo Bridge - $821K
RetoSwap - $2.7M
Polymarket - $700K
StablR - $2.8M
New Market Trading - $3.98M
SUPERFORTUNE AI - $15.18M
DxSale - $7.3M
Gravity Bridge - $5.4M
Alephium Bridge - $815K
AFI Protocol - $480K
AROS - $295K
Gnosis Pay - $1.5M
TesseraDAO - $2.4M
TSR - $2.5M
Syscoin Bridge - $10M
Humanity - $32M
Flooring Protocol - $500K
Token of Power - $1.58M
Raydium AMM - $1.34M
Axelar Secret IBC Bridge - $4.67M
Aztec Connect - $2.1M
RetoSwap - $2.7M
Little Boy Plus - $367K
Aztec Bridge - $2M
Secret Network - $4.67M
mySwap CL - $305K
Namada Shielded Pools - $600K
LABUBU/OLPC - $1.1M
JaredFromSubway MEV Bot - $7.5M
Taiko Bridge - $1.7M
Royal . io - $263K
SecondFi - $2.4M
Polymarket - $3M
Edel - $403K
Hinkal - $820K
Lazy Summer Protocol - $6.04M
BonkDAO - $20M
Bonzo Lend - $9.05M
BlueMove DEX - $529K
Lumi Finance - $270K
BarnBridge - $776K
TeleSwap - $735K
Ostium - $23.75M
Sonic ICP - $276K
Cascade Liquidity Strategy - $1.34M
DefiTuna Lending - $580K
Across - $4.5M
Allbridge Core - $1.65M
42DAO - $912K
Wanchain - $10M
Verus-Ethereum Bridge - $7.53M
AFX Bridge - $24.15M
Zilliqa - $1.64M
Solido Cash - $900K
Lien - $542K
Triple-A - $9.7M
Bankr - $479,885
Projekt - $560K
Garden - $450K
WEMIX . FI Lend - $737K
ChainConnect - $650K
Crypto DAO - $8.2M
LULA - $578K
Swan Treasury - $625K
COLDCARD - $116M
MOKE - $907K
LOOPSDAO - $693.5K
RISEx - $673,012
KITE Foundation - $13.34M
RRWallet - $2M
Oraichain - $1M
Coinsbuy - $7.9M
Harmony Bridge - $3.2M
Maya Protocol - $1.7M
BounceBit - $3M
TAC - $7.5M
The Sandbox - $675K
KiiChain - $9.7M
TermFinance Vaults - $8.5M
Nesa - $50M
CometDEX - $717K
Moonwell Lending - $8.7M
Ajna V2 - $775.4K
Virtue - $894.5K
Avici - $500,859
Fogo Foundation - $3M
Tectonic - $124.47M
Aquifer - $2,469,729
Ankr - $410K
Radix - $1,249,946
Notional V2 - $1,727,782
Rocket Perp - $287,666
Liquid Network - $320M
Balancer V1 - $250K
Nomic - $3.15M
Symbiosis - $336K
Chainflip AMM - $736,442.17
Flamincome - $595K
Nostra Money Market - $3.5M
Fetch . ai - $1.53M
NuNet - $462.73K
Drop - $4.4M
Astroport - $4.9M
Duelbits - $7M
Bitget - $387M
Limit Break Payment Processor - $1.8M
Payy Network - $1,828,589.38
Fake GIWA Bridge - $2.08M
FlashLoopAdapter - $305K
NEAR Intents - $3.8M
MakerDAO ETH-A Liquidation Keeper Bot - $538K
Ledger (Supply Chain) - $93M
Papertrade - $1.28M
Gamdom - $4.208M
Affluent - $1.053M
Qubic - $1.3M
CoinDCX - $16M
Initia - $2.6M
X100 - $4.75M
Bloom Trading Bot - $953K
Fence Finance - $1.01M
Predict Fun - $400K
zkLink Nova - $783.1K
Polymarket - $2.7M
Binance - $6.36B
1
14
989
Is this supposed to be clever? How does sending the funds back to previous addresses help at all?
@grok please steelman this
Our investigators are observing never-seen-before laundering patterns with the stolen funds from the Binance exploit. Thousands of transactions in a short period suggest that the attackers are using automation to obscure the trail of funds. Rather than simply moving funds onward, they repeatedly circulate them among addresses, often sending funds back to addresses involved earlier in the sequence.
Read more: chainalysis.com/blog/binance…
1
2
614
With autotranslate we could abolish the UN and just talk to each other.
I’m enjoying this international shit talking only recently made possible by X’s autotranslate feature.
Personally, it seems to me that China is extremely functional despite all its flaws, whereas Germany is trying to figure out which bathroom to use and if it’s ok to have a flag and children.
Of course providing a good product at a good price allows you to scale and make a good profit. Das ist keine Raketenwissenschaft.
Germans should kick out their parasitic politicians, violently if necessary. Then they will compete and eventually dominate in manufacturing again.
2
7
857
“Imagine how efficient the world would be if you just put me in charge pf everything” - definitely not a lizardboi
sam: local inference is a terrible allocation of scarce resources
“a lot of people want local inference, and somehow they assume that the problem is solved now because we have open-source models, we're going to be able to run them on our computers, and so we're not going to need all the stuff in the data centre
but from a global allocation perspective, actually it's quite terrible to have everybody, like, have a bunch of the world's limited supply of DRAM sitting in their own computer and being used five percent of the time
you want maximum utilisation in the cloud if you're trying to deal with this very supply-constrained environment
somehow many people's intuition is the opposite of that”
2
567