chain · quantum risk
Is Metis (METIS) Quantum Proof?
Verdict
Metis is not quantum-proof. Optimistic L2 user spends are classical secp256k1; operator and bridge keys remain high-value classical targets.
Overview
Metis is an Ethereum L2 with Andromeda/ecosystem product history. Quantum framing matches other EVM optimistic rollups.
Inventory EOAs, bridges, and sequencer-related keys explicitly.
Exposure summary: EVM accounts; decentralized sequencer narratives still use classical keys today. Signature surfaces: ECDSA-secp256k1 (EVM EOAs); Sequencer / DAC-class operator keys as deployed. Inventory holders, operators, and any bridge/issuer paths before treating METIS as quantum-ready. Educational only.
Cryptographic profile
What breaks
- Classical signatures authorizing METIS value under Shor-class adversaries once public keys are known
- Custodial hot wallets and exchange operational keys
- Bridges, issuers, or operator sets outside ordinary user wallets
- Sequencer / prover / upgrade keys on the L2 path
Mitigations
- Inventory every key that can move METIS (self-custody, exchange, multisig, protocol roles)
- Name the host chain and bridge path for every balance
- Document operator/admin sets for L2s and apps
- Track ecosystem PQC research; branding is not deployment
- Use /assessment and claims methodology pages for program framing
FAQ
Decentralized sequencer = PQC?
Decentralization is an ops property; algorithms are separate.
Related L2s?
Compare Arbitrum/Optimism pages for rollup inventory patterns.
Key concepts (technical dictionary)
Terms used on this page — open a definition: