Many people don’t realize this, banks are further along in post-quantum migration than much of crypto.
Regulators have already pushed financial institutions into multi-year transition plans.
Crypto has a different challenge:
- Wallets
- Exchanges
- Custodians
- Bridges
- Smart contracts
- Users
That’s why post-quantum readiness is easier to design in than retrofit.
Original Tweet
X | LinkedIn | Medium | Docs
Regulators have already pushed financial institutions into multi-year transition plans.
Crypto has a different challenge:
- Wallets
- Exchanges
- Custodians
- Bridges
- Smart contracts
- Users
That’s why post-quantum readiness is easier to design in than retrofit.
Original Tweet
X | LinkedIn | Medium | Docs
❤2
Quantum computing is a geopolitical race now.
The US is putting ~$2B in CHIPS incentives into nine quantum companies and taking minority equity stakes. DOE is targeting a fault-tolerant system by 2028.
Japan invested heavily in quantum alongside a ~$7B chips-and-quantum package.
The UK added up to £2B in March.
Estimates put China's cumulative public spend as high as $15B, and Beijing put quantum first among its "future industries."
And Google's March paper dropped the qubit estimate for breaking secp256k1 below 500,000, roughly 20x lower than the prior best.
Governments are buying the sword and mandating the shield.
Original Tweet
X | LinkedIn | Medium | Docs
The US is putting ~$2B in CHIPS incentives into nine quantum companies and taking minority equity stakes. DOE is targeting a fault-tolerant system by 2028.
Japan invested heavily in quantum alongside a ~$7B chips-and-quantum package.
The UK added up to £2B in March.
Estimates put China's cumulative public spend as high as $15B, and Beijing put quantum first among its "future industries."
And Google's March paper dropped the qubit estimate for breaking secp256k1 below 500,000, roughly 20x lower than the prior best.
Governments are buying the sword and mandating the shield.
Original Tweet
X | LinkedIn | Medium | Docs
👍4❤2
Our CTO, Christopher Portmann, has been elected by the community to the 2026 Concordium Governance Committee.
Reflecting on the appointment, Christopher shared that his time with Concordium has shaped how he approaches L1 architecture - lessons he now applies while building QMS Network’s post-quantum-secure PoUW chain. He also said he’s excited to continue contributing as both ecosystems tackle overlapping challenges.
Original Tweet
X | LinkedIn | Medium | Docs
Reflecting on the appointment, Christopher shared that his time with Concordium has shaped how he approaches L1 architecture - lessons he now applies while building QMS Network’s post-quantum-secure PoUW chain. He also said he’s excited to continue contributing as both ecosystems tackle overlapping challenges.
Original Tweet
X | LinkedIn | Medium | Docs
❤6🔥3
The post-quantum transition cannot wait for a perfect signature algorithm. That is the central message of Cloudflare's latest analysis.
ML-DSA-44 is available today, but it carries real costs. Its signatures are 2,420 bytes, compared with 64 bytes for Ed25519, while its public keys are 1,312 bytes versus 32. NIST advanced nine additional candidates to a third round in June, yet Cloudflare estimates that several promising alternatives may not be widely available until 2033–35.
The deployment timeline matters just as much. Dilithium, the scheme that became ML-DSA, entered the NIST competition in November 2017 and was finalized as a standard in August 2024. The first CMVP certificates for an ML-DSA module followed in March 2026, while Cloudflare does not expect the first ML-DSA certificates in the WebPKI until early 2027.
Standardization is only the beginning. Protocol integration, software support, validation and ecosystem-wide migration take years.
Cloudflare is targeting 2029 to become fully post-quantum secure. The June 2026 US executive order adds further urgency: it directs OMB to require federal agencies to transition high-value assets and high-impact systems to post-quantum key establishment by December 31, 2030, and digital signatures by December 31, 2031.
The deeper lesson is architectural. No single post-quantum signature optimizes size, speed, security and implementation simplicity. Systems must be built around those trade-offs while preparing for a lengthy transition.
During that transition, continued support for classical-only authentication can enable downgrade attacks unless the protocol prevents or detects them. Cloudflare notes that simply switching classical cryptography off is not even an option for many sufficiently distributed systems, including the WebPKI.
This closely aligns with the design QMS is working on: block production requires no digital signatures, post-quantum finality runs asynchronously outside the block-production critical path, and PQ signatures for EVM accounts are introduced gradually.
Original Tweet
X | LinkedIn | Medium | Docs
ML-DSA-44 is available today, but it carries real costs. Its signatures are 2,420 bytes, compared with 64 bytes for Ed25519, while its public keys are 1,312 bytes versus 32. NIST advanced nine additional candidates to a third round in June, yet Cloudflare estimates that several promising alternatives may not be widely available until 2033–35.
The deployment timeline matters just as much. Dilithium, the scheme that became ML-DSA, entered the NIST competition in November 2017 and was finalized as a standard in August 2024. The first CMVP certificates for an ML-DSA module followed in March 2026, while Cloudflare does not expect the first ML-DSA certificates in the WebPKI until early 2027.
Standardization is only the beginning. Protocol integration, software support, validation and ecosystem-wide migration take years.
Cloudflare is targeting 2029 to become fully post-quantum secure. The June 2026 US executive order adds further urgency: it directs OMB to require federal agencies to transition high-value assets and high-impact systems to post-quantum key establishment by December 31, 2030, and digital signatures by December 31, 2031.
The deeper lesson is architectural. No single post-quantum signature optimizes size, speed, security and implementation simplicity. Systems must be built around those trade-offs while preparing for a lengthy transition.
During that transition, continued support for classical-only authentication can enable downgrade attacks unless the protocol prevents or detects them. Cloudflare notes that simply switching classical cryptography off is not even an option for many sufficiently distributed systems, including the WebPKI.
This closely aligns with the design QMS is working on: block production requires no digital signatures, post-quantum finality runs asynchronously outside the block-production critical path, and PQ signatures for EVM accounts are introduced gradually.
Original Tweet
X | LinkedIn | Medium | Docs
❤2👍2
QMS Network Official
The post-quantum transition cannot wait for a perfect signature algorithm. That is the central message of Cloudflare's latest analysis. ML-DSA-44 is available today, but it carries real costs. Its signatures are 2,420 bytes, compared with 64 bytes for Ed25519…
Valuable and timely analysis from the Cloudflare team:
https://blog.cloudflare.com/ml-dsa-will-have-to-do/
https://blog.cloudflare.com/ml-dsa-will-have-to-do/
Cloudflare Blog
Why we cannot wait for better post-quantum signature algorithms
NIST is advancing nine new post-quantum signature algorithms as potential candidates for future standardization. We take a closer look at all of them, and argue that while they are in the works and show great potential, we should use ML-DSA for now — the…
❤2
Meet Egeyar Özlen Saiu, our Lead Protocol Engineer.
Fun fact: the world's most widely used compiler and linker include code she wrote.
Egeyar has spent more than 9yrs building the lower layers of distributed systems, with a focus on consensus protocols and applied cryptography.
Her path to QMS:
→ Core consensus engineering at DFINITY during the design and launch of the Internet Computer
→ Led the development of a distributed secret-management and disaster-recovery system at Lit Protocol
→ Now implementing and hardening QMS’s novel consensus and finality layers
Egeyar joined us in March, and we're truly happy to have her on the team!
Original Tweet
X | LinkedIn | Medium | Docs
Fun fact: the world's most widely used compiler and linker include code she wrote.
Egeyar has spent more than 9yrs building the lower layers of distributed systems, with a focus on consensus protocols and applied cryptography.
Her path to QMS:
→ Core consensus engineering at DFINITY during the design and launch of the Internet Computer
→ Led the development of a distributed secret-management and disaster-recovery system at Lit Protocol
→ Now implementing and hardening QMS’s novel consensus and finality layers
Egeyar joined us in March, and we're truly happy to have her on the team!
Original Tweet
X | LinkedIn | Medium | Docs
❤4
QMS Network Official
Meet Egeyar Özlen Saiu, our Lead Protocol Engineer. Fun fact: the world's most widely used compiler and linker include code she wrote. Egeyar has spent more than 9yrs building the lower layers of distributed systems, with a focus on consensus protocols and…
If you'd like to learn more, here’s Egeyar's LinkedIn profile: https://www.linkedin.com/in/egeyar/
❤2🔥2
Qubits needed to break RSA-2048:
2019: ~20M
2025: under 1M
2026: research claims under 100k
What happens by 2027?
Original Tweet
X | LinkedIn | Medium | Docs
2019: ~20M
2025: under 1M
2026: research claims under 100k
What happens by 2027?
Original Tweet
X | LinkedIn | Medium | Docs
👀3❤2
Think of a quantum computer as a very sensitive musical instrument that constantly slips out of tune.
Until now, engineers often had to stop the computation, retune the machine, and restart it.
Google’s latest research, published July 22, introduces an AI “technician” that listens to a machine’s error signals and adjusts it while it keeps operating.
The breakthrough: the system can detect its own hardware drift and continuously recalibrate itself during computation. This matters because useful quantum computations will eventually need to run uninterrupted for long periods.
Google demonstrated this on Willow in quantum-memory experiments. While not yet with a long, commercially useful algorithm, they’re making quantum hardware more capable of operating like reliable infrastructure.
Original Tweet
X | LinkedIn | Medium | Docs
Until now, engineers often had to stop the computation, retune the machine, and restart it.
Google’s latest research, published July 22, introduces an AI “technician” that listens to a machine’s error signals and adjusts it while it keeps operating.
The breakthrough: the system can detect its own hardware drift and continuously recalibrate itself during computation. This matters because useful quantum computations will eventually need to run uninterrupted for long periods.
Google demonstrated this on Willow in quantum-memory experiments. While not yet with a long, commercially useful algorithm, they’re making quantum hardware more capable of operating like reliable infrastructure.
Original Tweet
X | LinkedIn | Medium | Docs
❤5
"Quantum doesn’t matter yet. The machines aren’t here."
That misses how the threat works.
For encrypted data, the risk is Harvest Now, Decrypt Later: capture ciphertext today, decrypt it when the hardware arrives.
On blockchains, transaction histories, signatures, and exposed public keys remain in a permanent public archive. The harvesting is already done on the ledger.
Replacing vulnerable software with quantum-resistant versions is complicated and takes time. That's another reason we need to act before quantum computers are here.
Original Tweet
X | LinkedIn | Medium | Docs
That misses how the threat works.
For encrypted data, the risk is Harvest Now, Decrypt Later: capture ciphertext today, decrypt it when the hardware arrives.
On blockchains, transaction histories, signatures, and exposed public keys remain in a permanent public archive. The harvesting is already done on the ledger.
Replacing vulnerable software with quantum-resistant versions is complicated and takes time. That's another reason we need to act before quantum computers are here.
Original Tweet
X | LinkedIn | Medium | Docs
❤2👍2
This media is not supported in your browser
VIEW IN TELEGRAM
1️⃣ BlackRock, Fidelity, and Coinbase are now paying for Bitcoin's quantum migration.
On 23 July, nine firms launched the Bitcoin Security Consortium: BlackRock, Fidelity Digital Assets, Coinbase, Strategy, Block, Blockstream, Anchorage Digital, ARK Invest, and Galaxy.
$15M over three years for Bitcoin security researchers and open-source developers. Post-quantum preparation is a named focus. Each member funds independently, and the group takes no position on protocol changes.
Migration on a live chain is a collective-action problem. It moves when the biggest holders start writing checks. Even then, the money funds research, nobody can buy a protocol change.
2️⃣ The same day, Coinbase published its post-quantum custody plan: a PQ successor to the key management system securing roughly 99.9% of the assets it custodies, plus a quantum-safe signing pipeline (secure enclaves + threshold cryptography) due within a year.
Custody can re-engineer itself in a year. The settlement layer underneath needs consensus and years. That asymmetry is the retrofit problem in one picture.
QMS is built around this assumption: the next generation of blockchain infrastructure should be quantum-resistant by design and capable of turning network compute into useful work.
Original Tweet
X | LinkedIn | Medium | Docs
On 23 July, nine firms launched the Bitcoin Security Consortium: BlackRock, Fidelity Digital Assets, Coinbase, Strategy, Block, Blockstream, Anchorage Digital, ARK Invest, and Galaxy.
$15M over three years for Bitcoin security researchers and open-source developers. Post-quantum preparation is a named focus. Each member funds independently, and the group takes no position on protocol changes.
Migration on a live chain is a collective-action problem. It moves when the biggest holders start writing checks. Even then, the money funds research, nobody can buy a protocol change.
2️⃣ The same day, Coinbase published its post-quantum custody plan: a PQ successor to the key management system securing roughly 99.9% of the assets it custodies, plus a quantum-safe signing pipeline (secure enclaves + threshold cryptography) due within a year.
Custody can re-engineer itself in a year. The settlement layer underneath needs consensus and years. That asymmetry is the retrofit problem in one picture.
QMS is built around this assumption: the next generation of blockchain infrastructure should be quantum-resistant by design and capable of turning network compute into useful work.
Original Tweet
X | LinkedIn | Medium | Docs
🔥3❤2
QMS Network Official
1️⃣ BlackRock, Fidelity, and Coinbase are now paying for Bitcoin's quantum migration. On 23 July, nine firms launched the Bitcoin Security Consortium: BlackRock, Fidelity Digital Assets, Coinbase, Strategy, Block, Blockstream, Anchorage Digital, ARK Invest…
Keeping an eye on SBC'26 at Stanford this week: Monday's quantum threat session (Google, Ledger, Circle), Tuesday's talk on the economics of proof-of-useful-work, and Friday's affiliated Bitcoin cryptography workshop on post-quantum signatures.
👀3❤2
Even if quantum computers never break a single Bitcoin key, preparing for the threat still comes with two costs.
First, migration.
A Chaincode Labs report estimates that moving the full UTXO set into quantum-resistant outputs could take 305 to 568 days if migration receives 25% of block space.
Then, ongoing overhead.
Depending on the scheme Bitcoin adopts, post-quantum signatures can be roughly 10x to more than 100x larger than today’s 64-byte Schnorr signatures.
The exact bill depends on the design. But retrofitting a live monetary network consumes block space, fees, bandwidth, and coordination before the first key is ever broken.
Original Tweet
X | LinkedIn | Medium | Docs
First, migration.
A Chaincode Labs report estimates that moving the full UTXO set into quantum-resistant outputs could take 305 to 568 days if migration receives 25% of block space.
Then, ongoing overhead.
Depending on the scheme Bitcoin adopts, post-quantum signatures can be roughly 10x to more than 100x larger than today’s 64-byte Schnorr signatures.
The exact bill depends on the design. But retrofitting a live monetary network consumes block space, fees, bandwidth, and coordination before the first key is ever broken.
Original Tweet
X | LinkedIn | Medium | Docs
❤3
How Proof-of-Useful-Work Rewards the QMS Community
Proof of work has always had one economic problem: the work itself has no value beyond securing the chain. Miners spend energy on hashes no one else wants. The protocol pays for them because no one else will.
QMS keeps the security logic of PoW and puts a second customer beside the protocol. Miners run solvers on real optimization problems posted by enterprise clients, and the same solver run earns from both. One computation, two revenue streams.
The loop is bigger than miners. Finalizers stake the native token and earn a share of every minted block for making history final. Clients pay only for solutions that clear their own bar. Users transact on security that useful work helps fund. Holders sit behind three burn flows — base fees, a fraction of every solution reward, and every unearned finality share — designed to offset dilution as the marketplace grows.
This article covers:
→ The three income streams a QMS miner earns — block rewards, EIP-1559 priority fees, and client solution payments
→ How finalizers, clients, users, and holders each hold a position in the same loop
→ The Ofelimos-based construction that ties every payout to verifiable work — seeded search, checkpoint trails, and a quality-blind lottery
→ Why QUBO is the launch problem class, and how quantum annealers and QAOA machines plug into the same math natively
Every token paid on QMS traces back to work that really happened. When quantum hardware clears client thresholds, it earns through the same marketplace — no protocol change required.
Read the full piece here: https://qms.finance/news/how-proof-of-useful-work-rewards-the-qms-community
X | LinkedIn | Medium | Docs
Proof of work has always had one economic problem: the work itself has no value beyond securing the chain. Miners spend energy on hashes no one else wants. The protocol pays for them because no one else will.
QMS keeps the security logic of PoW and puts a second customer beside the protocol. Miners run solvers on real optimization problems posted by enterprise clients, and the same solver run earns from both. One computation, two revenue streams.
The loop is bigger than miners. Finalizers stake the native token and earn a share of every minted block for making history final. Clients pay only for solutions that clear their own bar. Users transact on security that useful work helps fund. Holders sit behind three burn flows — base fees, a fraction of every solution reward, and every unearned finality share — designed to offset dilution as the marketplace grows.
This article covers:
→ The three income streams a QMS miner earns — block rewards, EIP-1559 priority fees, and client solution payments
→ How finalizers, clients, users, and holders each hold a position in the same loop
→ The Ofelimos-based construction that ties every payout to verifiable work — seeded search, checkpoint trails, and a quality-blind lottery
→ Why QUBO is the launch problem class, and how quantum annealers and QAOA machines plug into the same math natively
Every token paid on QMS traces back to work that really happened. When quantum hardware clears client thresholds, it earns through the same marketplace — no protocol change required.
Read the full piece here: https://qms.finance/news/how-proof-of-useful-work-rewards-the-qms-community
X | LinkedIn | Medium | Docs
❤3
Protocol-wide post-quantum signatures deployed by major L1s:
0
Bitcoin has draft BIPs, Ethereum and Solana have roadmaps. The progress is real but production migration is still pending.
As Q-Day approaches, the gap between "planned" and "deployed" becomes the risk.
Original Tweet
X | LinkedIn | Medium | Docs
0
Bitcoin has draft BIPs, Ethereum and Solana have roadmaps. The progress is real but production migration is still pending.
As Q-Day approaches, the gap between "planned" and "deployed" becomes the risk.
Original Tweet
X | LinkedIn | Medium | Docs
❤3
A chain where only miners earn doesn't grow. QMS gives every participant a stake in the loop.
Miners and finalizers earn directly. Clients, users, and holders gain from the same loop without running hardware.
Original Tweet
X | LinkedIn | Medium | Docs
Miners and finalizers earn directly. Clients, users, and holders gain from the same loop without running hardware.
Original Tweet
X | LinkedIn | Medium | Docs
❤2
QMS Network Official
How Proof-of-Useful-Work Rewards the QMS Community Proof of work has always had one economic problem: the work itself has no value beyond securing the chain. Miners spend energy on hashes no one else wants. The protocol pays for them because no one else will.…
Find out more in our latest research article 👆
❤1
Meet the people building QMS.
Allan Brøndum Rasmussen is our Lead Cryptography Engineer.
Allan holds a Master's degree in Mathematics from Aarhus University, covering advanced analysis, number theory, and algebra, followed by a Bachelor's degree in Computer Science. He specialises in high-assurance Rust, cryptographic protocol implementation, and the design of complex distributed systems.
He spent seven years at Systematic A/S as technical lead on large-scale healthcare software, developing strong skills in performance-critical backend systems, database design, and reliable distributed architecture. He then joined Concordium as a Senior Systems Engineer, where he led the rewrite of the blockchain node's execution layer from Haskell to Rust and collaborated with researchers on implementing cryptographic protocols, including zero-knowledge-based identity systems.
Allan joined QMS Network in April, and he's is responsible for ensuring that the security properties established at the research and design level translate faithfully into the implementation.
Original Tweet
X | LinkedIn | Medium | Docs
Allan Brøndum Rasmussen is our Lead Cryptography Engineer.
Allan holds a Master's degree in Mathematics from Aarhus University, covering advanced analysis, number theory, and algebra, followed by a Bachelor's degree in Computer Science. He specialises in high-assurance Rust, cryptographic protocol implementation, and the design of complex distributed systems.
He spent seven years at Systematic A/S as technical lead on large-scale healthcare software, developing strong skills in performance-critical backend systems, database design, and reliable distributed architecture. He then joined Concordium as a Senior Systems Engineer, where he led the rewrite of the blockchain node's execution layer from Haskell to Rust and collaborated with researchers on implementing cryptographic protocols, including zero-knowledge-based identity systems.
Allan joined QMS Network in April, and he's is responsible for ensuring that the security properties established at the research and design level translate faithfully into the implementation.
Original Tweet
X | LinkedIn | Medium | Docs
❤7
QMS Network Official
Meet the people building QMS. Allan Brøndum Rasmussen is our Lead Cryptography Engineer. Allan holds a Master's degree in Mathematics from Aarhus University, covering advanced analysis, number theory, and algebra, followed by a Bachelor's degree in Computer…
Allan’s fun fact lands a little too well: “Just here to get some useful work done.” (pun intended) 😄
❤5😁2
Compute mining’s economic model can carry into a quantum future, even as the machines change.
Quantum processors will enter as specialized accelerators in hybrid classical-quantum systems, rather than as drop-in replacements for today’s mining rigs.
What carries forward is the coordination layer: route useful optimization work to miners and reward qualifying solutions, regardless of the hardware behind them.
In QMS, quantum hardware can first improve a classical miner’s search. Direct quantum mining follows once probabilistic quantum work can be verified securely.
Original Tweet
X | LinkedIn | Medium | Docs
Quantum processors will enter as specialized accelerators in hybrid classical-quantum systems, rather than as drop-in replacements for today’s mining rigs.
What carries forward is the coordination layer: route useful optimization work to miners and reward qualifying solutions, regardless of the hardware behind them.
In QMS, quantum hardware can first improve a classical miner’s search. Direct quantum mining follows once probabilistic quantum work can be verified securely.
Original Tweet
X | LinkedIn | Medium | Docs
❤3