chain · quantum risk
Is Tezos (XTZ) Quantum Proof?
Verdict
Tezos is not quantum-proof. Account and baker keys use classical public-key schemes; on-chain governance does not equal PQC deployment for all wallets.
Overview
Tezos emphasizes formal upgradeability and multiple account crypto options. All common options today are classical from a CRQC perspective.
Bakers and large treasuries should inventory key types and custody.
Exposure summary: Accounts public; multiple address types mean mixed classical curves. Signature surfaces: tz1/tz2/tz3 account signature schemes (Ed25519/secp256k1/P-256 class options—verify); Baker consensus keys. Inventory holders, operators, and any bridge/issuer paths before treating XTZ as quantum-ready. Educational only.
Cryptographic profile
- Signatures: tz1/tz2/tz3 account signature schemes (Ed25519/secp256k1/P-256 class options—verify), Baker consensus keys
- Hash: Tezos operation hashing
- Public-key exposure: Accounts public; multiple address types mean mixed classical curves.
- Verify address-type crypto from Tezos docs.
What breaks
- Classical signatures authorizing XTZ value under Shor-class adversaries once public keys are known
- Custodial hot wallets and exchange operational keys
- Bridges, issuers, or operator sets outside ordinary user wallets
Mitigations
- Inventory every key that can move XTZ (self-custody, exchange, multisig, protocol roles)
- Name the host chain and bridge path for every balance
- Document operator/admin sets for L2s and apps
- Track ecosystem PQC research; branding is not deployment
- Use /assessment and claims methodology pages for program framing
FAQ
Does self-amendment make Tezos quantum-ready?
Governance agility helps future migration; it is not automatic PQC for existing keys.
Which tz address type?
Document the scheme for each treasury account—types differ.
Key concepts (technical dictionary)
Terms used on this page — open a definition: