industry · quantum risk
Ondo admin keys & Quantum Risk
Verdict
Ondo admin/issuer keys are not quantum-proof. RWA products add issuer controls on top of holder host-chain signatures.
Overview
Tokenized funds combine on-chain roles with traditional rails—both domains need crypto and operational inventory.
Cryptographic profile
- Signatures: Host-chain account signatures for role holders (typically classical ECDSA/Ed25519), Multisig/module keys as deployed
- Hash: Host-chain dependent
- Public-key exposure: Issuer admins, freeze/mint roles, transfer agents as designed
- Hosts/context: RWA token controllers
What breaks
- Compromise of admin keys related keys for Ondo
- Equating role separation or multisig with post-quantum algorithms
- Untracked multi-chain deployments of the same protocol
Mitigations
- Document privileged addresses from official docs per chain
- Hardware/MPC for guardians, admins, and large governors
- Return to /is-quantum-proof/ondo for protocol context
- Use category hubs: lending, dex, perps, stablecoins
FAQ
Protocol page?
/is-quantum-proof/ondo
Related?
/is-quantum-proof/rwa-tokens
Key concepts (technical dictionary)
Terms used on this page — open a definition: