What is Quantus?
Quantus is a new proof-of-work blockchain whose coin, QTC, is signed with post-quantum cryptography instead of the elliptic-curve maths that protects Bitcoin and Ethereum. Its main network went live on 9 September 2026. This guide explains what it is, how it works, who is behind it, and what is still unproven.
Live market data
QTC began trading publicly in September 2026 and is listed on CoinGecko. The numbers below load live from CoinGecko's public API when it is reachable.
Fetching live data…
Quantus in 60 seconds
- What it is: a standalone layer-1 blockchain for money (payments and savings). It is deliberately not a smart-contract platform.
- The big idea: every transaction signature uses ML-DSA, a lattice-based scheme that NIST standardised in 2024 as FIPS 204. Large quantum computers are expected to break today's elliptic-curve signatures; ML-DSA is designed to resist them.
- How it stays secure: proof-of-work mining, like Bitcoin, but with a hash function called Poseidon2 that is friendly to zero-knowledge proofs.
- The coin: QTC. Hard cap of 21 million. 73% can only be mined; 27% was created at genesis for investors, founders, team and the company, most of it locked.
- Extras: optional "encrypted" transfers that hide the link between sender and receiver, delayed transfers you can cancel, guardian-protected accounts, and human-readable "check-phrases" for addresses.
- Who built it: Quantus Labs, led by co-founder and CEO Christopher Smith.
- How old it is: the mainnet started on 9 September 2026. That is weeks, not years. Treat every claim as early.
Don't mix these up
This site Quantus (QTC): a post-quantum proof-of-work blockchain, live since September 2026, website quantus.com.
Different Quant (QNT): a London company whose Overledger software connects banks and blockchains. It has nothing to do with quantum computing. See our sister site whatisquant.com.
Different QRL (Quantum Resistant Ledger): an older post-quantum blockchain, live since 2018. Compared below.
Careful Ticker confusion: the coin's ticker is QTC, but at least one exchange (SafeTrade) lists it as QUAN or QUANTUS. Tickers are not unique. Unrelated tokens and businesses also use the name "Quantus". Always confirm you are looking at the coin from quantus.com.
Your learning path
Sections tick off as you read them. Progress is saved in this browser only.
The quantum threat, explained for beginners
Quantus only makes sense if you understand the problem it is built for. This section is the background: what quantum computers can and cannot do to blockchains, and how soon.
How a blockchain proves you own your coins
Your wallet holds a private key, a secret number. From it, maths produces a public key, and from that an address. To spend, you sign a transaction with the private key and the network checks the signature against the public key. Bitcoin and Ethereum use elliptic-curve signatures (ECDSA and Schnorr on the secp256k1 curve). Solana and many others use a cousin called Ed25519.
The whole system relies on one assumption: going from public key back to private key is practically impossible. For ordinary computers that holds. For a large enough quantum computer, it does not.
Shor's algorithm: the real danger
In 1994 mathematician Peter Shor showed that a quantum computer could efficiently solve the two problems public-key cryptography leans on: factoring large numbers (RSA) and discrete logarithms (elliptic curves). With a machine big and stable enough, an attacker could take a public key and compute the private key. They could then sign transactions as if they were you.
Grover's algorithm: the smaller worry
Grover's algorithm (1996) speeds up brute-force searching, which affects hash functions and mining. But the speed-up is only quadratic: a 256-bit hash keeps roughly 128 bits of security, which is still considered safe. Most researchers treat Grover as a manageable issue and Shor as the serious one.
Which coins are actually exposed?
An attacker needs your public key. Whether it is visible depends on the address type and on whether you have ever spent from it.
- Always visible: early Bitcoin "pay-to-public-key" outputs (including coins attributed to Satoshi), Bitcoin Taproot addresses, and Solana addresses, which are the public key itself.
- Visible after first spend: most Bitcoin address types and every Ethereum account. Reusing an address after spending leaves the key on public record.
- Hidden until you spend: a hashed address that has only ever received funds. Even these are exposed for a short time while a transaction waits to be mined ("on-spend" attacks).
One analysis published in 2026 put roughly 6.7 million BTC in outputs with exposed public keys, of which about 1.7 million sit in the oldest pay-to-public-key format. Figures vary by method; the order of magnitude is the point.
"Harvest now, decrypt later"
For encrypted messages, an attacker can record traffic today and decrypt it once a quantum computer exists. Blockchains have their own version: every exposed public key is already stored on a public ledger forever. Nothing needs to be intercepted. The attacker just needs to wait for the machine.
Interactive: is this kind of address quantum-exposed?
A concept demo. Pick an address type, or type the first few characters of an address and we will guess the type. Nothing you type leaves your browser, and nothing is looked up on any blockchain.
How close is "Q-Day"?
Nobody knows, and honest experts disagree. A machine able to break 256-bit elliptic-curve keys is called a cryptographically relevant quantum computer (CRQC). None exists publicly today. What has changed is the estimated size of the machine required:
- March 2026: a Google Quantum AI paper estimated that 256-bit elliptic-curve keys could be broken with fewer than about 1,200 logical qubits and fewer than 500,000 physical qubits under standard assumptions, with attack runs measured in minutes on fast hardware. That was a large reduction from earlier estimates.
- Project Eleven's 2026 report models Q-Day at 2030 (optimistic for the attacker), 2033 (moderate) or 2042 (pessimistic), assuming no surprise breakthroughs.
- Expert surveys (the long-running Mosca and Piani "Quantum Threat Timeline" series) place most probability in the 2030s to 2040s.
- Ethereum researcher Justin Drake put the odds of Q-Day by 2032 at 10% or more in March 2026.
- Quantus's CEO has given far more aggressive odds (a 50% chance of a quiet first attack by 2028). He runs a project that benefits from urgency, so weigh that accordingly.
Sceptics, including well-known Bitcoin developers, argue that useful machines remain many years away and that there is time for orderly upgrades. Both camps agree on one thing: migration is slow, so it has to start well before the machine exists.
The new standards: FIPS 203, 204 and 205
In August 2024 the US standards body NIST finalised its first post-quantum standards after an eight-year public competition:
- FIPS 203, ML-KEM (formerly Kyber): key exchange, for encrypting connections.
- FIPS 204, ML-DSA (formerly Dilithium): digital signatures, built on lattice problems. This is what Quantus uses for transactions.
- FIPS 205, SLH-DSA (formerly SPHINCS+): signatures built only on hash functions. Very conservative, very large.
- FN-DSA (Falcon) is a fourth scheme with small signatures, still a draft standard (FIPS 206) at the time of writing.
NIST's transition guidance aims to deprecate today's elliptic-curve and RSA algorithms around 2030 and disallow them by 2035. The Quantus whitepaper also cites a June 2026 US executive order that pulls federal deadlines forward to 2030 and 2031; we could not independently confirm the details, so treat that as the project's citation.
A newer worry: AI and maths
In October 2026 Justin Drake urged the industry to calmly plan for what he called "bunker mode", arguing that AI-driven mathematical advances might weaken elliptic curves even before quantum hardware does. Related commentary notes that lattice schemes such as ML-DSA are young too and need continued scrutiny. Post-quantum does not mean proven unbreakable.
Interactive: the Q-Day race
Drag the slider to a hypothetical year when a cryptographically relevant quantum computer arrives. The list shows which published plans would be finished on paper by then. Dates are planning targets taken from each project's own statements, not guarantees.
What the big chains are doing (2025 to 2026)
Bitcoin
BIP-360 proposes a new output type, pay-to-Merkle-root (P2MR, addresses starting bc1z), that never puts a public key on-chain at creation. It was merged into the official BIPs repository in February 2026 as a draft. That is documentation, not activation. BIP-361 (April 2026, Jameson Lopp and co-authors) proposes phasing out old signatures and eventually freezing coins that never migrate, which critics call confiscation. No soft fork has been scheduled.
Ethereum
The Ethereum Foundation formed a dedicated post-quantum team in 2026. The "Lean Ethereum" plan would replace validator BLS signatures with hash-based ones (leanXMSS) and use account abstraction (EIP-8141, under consideration for the Hegotá upgrade) so each account can choose a post-quantum signature. Core infrastructure is targeted around 2029, full migration later. These are planning targets.
Solana
In April 2026 the Solana Foundation said its two main client teams, Anza and Firedancer, had independently settled on Falcon signatures and built early versions. No migration date is set. An opt-in hash-based "Winternitz Vault" has existed for a while.
Algorand
Uses Falcon in its State Proofs since 2022 and, per Algorand's roadmap, shipped native Falcon-1024 accounts on mainnet in August 2026. Consensus voting and its VRF still rely on elliptic curves, so it is partly, not fully, post-quantum.
NEAR
Added opt-in ML-DSA signing to mainnet accounts in July 2026 (release v2.13). Consensus is on its roadmap for later. NEAR matters here because Quantus chose NEAR Intents as QTC's first trading route.
QRL and Zcash
QRL has used hash-based XMSS signatures since its 2018 launch and is building "QRL 2.0", a proof-of-stake, EVM-style chain using ML-DSA-87; audits were about half done in mid-2026 and no mainnet date is set. Zcash is working on quantum-recoverable wallets first and fuller post-quantum protection afterwards.
Origins: where Quantus came from
Quantus grew out of a simple argument made by its founder: upgrading an existing blockchain to post-quantum cryptography is mostly a coordination problem, and coordination is exactly what decentralised networks are bad at. A messaging app can swap its encryption in a software update. A blockchain needs every holder to move their own coins to a new kind of address, including holders who are asleep, dead or lost their keys.
Rather than wait for Bitcoin to agree on a migration, the team chose to start a new chain where every address is post-quantum from the first block. The whitepaper dates the project's start to December 2024, when funding was secured and the team picked Substrate (the toolkit behind Polkadot) as its base.
Public test networks followed through 2025, each named after a physicist: Resonance (July 2025), Schrödinger (October 2025), Dirac (November 2025) and Planck (April 2026). A November 2025 press release announced the public testnet and said mainnet was planned for the first quarter of 2026. It slipped: the mainnet actually launched on 9 September 2026.
Alongside the chain, the team runs an education arm: a publication called Quantum Canary and the QDay podcast, both focused on quantum risk to digital money. That is useful context. Quantus is at once a software project and an advocate for the view that the quantum threat is close.
Deep dive: why not just fix Bitcoin?
The Quantus whitepaper lists the obstacles it sees. Bitcoin has roughly 170 million unspent outputs; moving all of them would take at least 80 days even if every block were filled with nothing else. Post-quantum signatures are 30 to 70 times larger than today's, so the same block space would carry far fewer transactions (the whitepaper estimates about 1.1 transactions per second for Bitcoin with ML-DSA-65 at today's block size). And an estimated 2.3 to 3.7 million BTC are lost and can never be moved by their owners, which forces a choice between leaving them for a quantum attacker or freezing them.
Bitcoin developers do not accept that this makes migration impossible. BIP-360 and BIP-361 are serious, active proposals, and newer hash-based schemes aim for much smaller signatures. The fair summary: migration is hard and contested, not hopeless.
Deep dive: the name, the ticker and the units
The network is usually called Quantus or Quantus Network; the company is Quantus Labs. The coin is QTC, with 12 decimal places. Addresses created in the official wallet start with qz. Press releases have carried a Sheridan, Wyoming dateline.
Timeline
Quantus's own milestones next to the science, the standards and what other chains did. Filter by thread.
How Quantus works
Five building blocks: lattice signatures, proof-of-work mining, an optional privacy layer that doubles as a scaling trick, safety features for ordinary users, and a deliberately narrow scope.
1. Post-quantum signatures (ML-DSA)
Every Quantus transaction is signed with ML-DSA, the lattice-based scheme in NIST's FIPS 204. Lattice cryptography hides a secret inside a high-dimensional grid of points; finding the hidden short vector is believed to be hard for both ordinary and quantum computers. The lattice motif on this page is a nod to that.
Two strengths are supported. The whitepaper says wallets default to ML-DSA-65 (NIST security level 3) and that ML-DSA-87 (level 5) is also available. Parts of the project's own documentation and wallet page describe ML-DSA-87 as the standard, an inconsistency an independent reviewer flagged at launch.
The cost is size. An elliptic-curve signature is about 64 to 72 bytes. An ML-DSA-65 signature is 3,309 bytes plus a 1,952-byte public key that must travel with every transaction. A simple Quantus transfer is roughly 5.4 KB to 7.3 KB, compared with about 100 bytes for a typical Bitcoin payment.
The team considered and rejected the alternatives for now: Falcon (small signatures, but tricky floating-point maths and not yet a final standard) and SLH-DSA (hash-based and conservative, but signatures of 8 KB to 17 KB). The chain is designed so that schemes can be added later.
Interactive: the signature size trade-off
Pick a scheme to compare what each transaction must carry. Bars use a logarithmic scale because the differences are huge.
2. Proof-of-work mining with Poseidon2
Quantus is mined, like Bitcoin. Miners compete to find a valid hash and the chain with the most accumulated work wins. Blocks target 12 seconds and difficulty adjusts every block. There is no separate finality system; the node software limits reorganisations to 100 blocks (about 20 minutes).
Instead of SHA-256, mining uses Poseidon2, a newer hash function. The project says plainly that this choice is about making the chain cheap to prove inside zero-knowledge circuits, not about quantum resistance. Poseidon2 has had far fewer years of public attack than SHA-256, which is a fair criticism.
Mining is open to anyone and is currently GPU-oriented. All block rewards and fees go to miners; there is no developer tax. A public pool page (Kryptex) reported a network hashrate around 44 TH/s on 11 October 2026, up from about 24 TH/s reported by the project on 30 September.
3. Encrypted transfers and proof aggregation ("wormhole")
Big signatures would normally mean low throughput. Quantus's answer is a mechanism modelled on an Ethereum proposal (EIP-7503, "zero-knowledge wormholes"):
Because hundreds of transfers share one proof, the per-transfer data falls sharply. The project's own figures: about 43 to 58 transactions per second for plain transparent transfers, and about 430 per second through the two-layer aggregated path, with a theoretical ceiling it puts near 2,800. These are project estimates and test results, not sustained mainnet load. The team coined a metric, QTPS ("quantum-secure transactions per second"), to make the comparison.
Privacy here is partial. The link between sender and receiver is broken, but amounts stay visible, and the project itself describes the privacy as probabilistic: someone who deposits and withdraws the same amount at the same time can be matched. The proofs use Plonky2, a hash-based (STARK-style) system with no trusted setup, which is considered quantum-resistant.
4. Safety features for humans
Check-phrases. A short string of ordinary words computed from an address, shown next to it. If one character of the address is wrong or has been swapped by malware, the words change. It is a checksum for people. It is not an address and cannot receive funds.
Time-locked (reversible) transfers. Any transparent account can attach a delay to an outgoing payment. Until the delay ends, the sender can cancel. After that it is final, as on any blockchain.
Advanced accounts with a guardian. An account can permanently opt into a mandatory delay on everything it sends and name a guardian (a hardware wallet, a multisig, or a trusted third party). The guardian can cancel pending transfers and pull funds to safety but cannot spend them. A cancelled transfer costs a 1% burn fee. The whitepaper also pitches this as a way to arrange inheritance.
Multisig. Up to 100 signers with a fixed threshold. Multisigs are transparent only.
One honest data point: on the Planck test network in mid-September 2026, an independent reviewer found that the reversible and high-security features had seen no recorded use. They exist; whether people want them is not yet known.
Interactive: a transfer you can cancel
A simulation. Send 10 QTC with a delay, then see what the sender or guardian can do before the clock runs out.
Interactive: check-phrase idea
Type or edit the address. The words change if even one character changes. This uses a toy hash and a tiny word list to show the idea; it is not Quantus's real algorithm.
5. What Quantus chose not to be
There are no smart contracts, no layer 2 and no DeFi on Quantus by design. The whitepaper compares the project to Bitcoin, Monero and Zcash, not to Ethereum or Solana. That keeps the attack surface small. It also means the chain's usefulness rests almost entirely on people wanting to hold and send QTC.
Deep dive: networking, wallets and upgrades
Node-to-node traffic is also post-quantum: peers identify themselves with ML-DSA-87 and encrypt connections with ML-KEM-768 (FIPS 203), with no elliptic-curve fallback.
Wallet key derivation ("HD-Lattice") lets one 24-word recovery phrase generate many lattice keys, in the spirit of Bitcoin's HD wallets.
Upgrades are "forkless": new runtime code is swapped in on-chain, a Substrate feature. A curated Technical Collective can propose or fast-track urgent technical changes but, per the whitepaper, has no say over monetary policy, and the company says it intends to retire the body over time. Until then, a small group holds real upgrade power. Design changes are discussed as QIPs (Quantus Improvement Proposals).
Deep dive: the throughput numbers do not all agree
Three figures circulate: 43 to 58 transactions per second (whitepaper, transparent transfers), 170 (an August 2026 project update) and 430 (homepage, aggregated path). An independent launch review recalculated from the chain's block constants and got about 45 to 62 for transparent transfers, matching the whitepaper but not the 170 figure, whose basis it could not determine. Use the whitepaper numbers, and remember none of them is a measured mainnet average.
QTC tokenomics
Cap: 21,000,000 QTC, the same number as Bitcoin. 12 decimal places.
Genesis allocation (27%, 5,670,000 QTC): created in the first block.
- 23% to investors, founders and team. Locked for one year after mainnet, then released evenly over 36 months.
- 4% to the company. 1% (210,000 QTC) was liquid at genesis to seed markets; 3% follows the same lock and 36-month release.
Mining (73%, 15,330,000 QTC): can only be earned by miners.
Emission curve: there are no halvings. Each block pays (cap − current supply) ÷ 50,000,000. The first block paid about 0.3066 QTC, and the reward shrinks a tiny amount every block. That works out to roughly 5% of the remaining unmined supply per year, a "half-life" of about 13 years, and around 785,000 QTC in year one.
Fees: a simple transparent transfer costs about 0.0062 QTC (ML-DSA-65), all to miners. Encrypted transfers cost 0.04% of the amount (minimum 0.01 QTC), half to miners and half burned. Burned coins widen the gap to the cap, so they are effectively re-issued to miners later.
| Bucket | Share | QTC | Terms |
|---|---|---|---|
| Mining rewards | 73% | 15,330,000 | Smooth decay, no halvings |
| Investors, founders, team | 23% | 4,830,000 | 1-year lock, then 36-month linear |
| Company, locked | 3% | 630,000 | 1-year lock, then 36-month linear |
| Company, liquid | 1% | 210,000 | Liquid at genesis for liquidity |
Interactive: QTC supply over time
A model built from the published formula and vesting terms. It ignores fee burns and assumes exact 12-second blocks, so real numbers will drift. Drag to move through time.
Deep dive: what did investors pay?
The whitepaper gives no amounts. Chinese-language outlet Foresight News reported two rounds: $1.65 million at a $20 million token valuation, and $770,000 at a $100 million token valuation led by Balaji Srinivasan. Bankless separately named Srinivasan as leading the second round, with AngelList co-founder Babak Nivi and Helius CEO Mert Mumtaz among investors. We could not confirm the dollar figures against a primary document, so treat them as reported, not established.
People and organisations
Quantus is a small team. Public information about it is thin compared with older projects, and we say where it runs out.
- ROLECo-founder and CEO, Quantus
- ALSOEditor-in-chief, Quantum Canary; host, QDay podcast
- EARLIERBitMesh, Lunyr, FactoryDAO
- WROTEQuantus whitepaper (with Jonathan Angle)
- ON X@YuviLightman
Christopher Smith
Christopher Smith, often "Chris", is the public face and chief architect of Quantus. His official biography describes more than a decade building tools for decentralised systems, contributions to early Bitcoin software and privacy tooling, and work across AI, blockchain and quantum computing. It lists three earlier crypto ventures: BitMesh, Lunyr (an Ethereum-era decentralised encyclopedia project) and FactoryDAO (DAO tooling). In a May 2026 interview he said he had spent his whole career in blockchain.
The biography does not give his education, exact titles or dates at those companies, and we found no independent profile that fills the gaps. Press material has called him "founder and core architect" (2025) and "co-founder and CEO" (2026).
What he argues
- Migration is a social problem. Centralised services can upgrade cryptography silently; blockchains need every user to act. He sees that coordination, not the maths, as the real obstacle.
- Signatures are the foundation. If signatures fail, nothing built on top is safe.
- The first attack may be quiet. He told Cointelegraph in August 2026 that an early quantum theft could look like an ordinary key leak, and that high-value administrative keys might be more tempting targets than Satoshi's coins.
- Privacy systems are exposed too. Zero-knowledge systems built on pre-quantum maths could let an attacker forge proofs.
- Engineering order of priorities: correct first, then fast, then beautiful.
"Being too early is much better than being even a little too late."Christopher Smith, quoted by Bitcoin.com News, September 2026
He has also described Quantus as a kind of Noah's Ark for a coming quantum flood. It is a vivid pitch, and a reminder that he is selling a lifeboat. His timeline estimates sit at the urgent end of the range. Listen to his arguments, and check them against researchers with no coin to promote.
Things to keep in mind
Smith is a builder with a long crypto history, not an academic cryptographer, and Quantus relies on NIST-standard algorithms and outside auditors rather than inventing its own primitives. His earlier projects were small and are not widely remembered; none is a guarantee of success or a mark against him. The honest position is that the track record that matters, running a live network with real money on it, started in September 2026.
Other named team members
Jonathan Angle
Co-author of the Quantus whitepaper alongside Smith. The project site has a team page for him; we found little independent biographical detail.
Joseph Mattia
Named as co-founder in the November 2025 testnet press release, where he was also the press contact. His comment then was that the encryption crypto was built on will not last forever.
Quantus Labs
The company behind the software. Industry profiles list it as US-based with one to ten full-time staff. It holds the 4% company allocation and currently has outsized influence over upgrades through the Technical Collective.
Investors (as reported)
Balaji Srinivasan
Former Coinbase CTO and investor. Reported by Bankless and Foresight News to have led Quantus's second funding round.
Babak Nivi
Co-founder of AngelList. Named as an investor by Bankless.
Mert Mumtaz
CEO of Solana infrastructure firm Helius and a prominent Zcash advocate. Named as an investor by Bankless. Several backers overlap with the 2025 Zcash revival crowd, which drew some scepticism.
Auditors and reviewers
| Who | What they looked at | When |
|---|---|---|
| Eiger (Equilibrium Group) | Proof-of-work and Poseidon2; wormhole ZK circuits; Substrate runtime and node | Oct 2025, Mar 2026, May 2026 |
| Neodyme | ML-DSA signatures and HD wallet code | Dec 2025 |
| Hashcloak | Threshold ML-DSA signatures (for the NEAR bridge work) | 2026 |
| Quantus team | Formal verification of the wormhole circuit in the Lean proof assistant | Jun 2026 |
| Immunefi | Public audit competition, reported $20,000 pool | Aug 2026 |
Source: Quantus whitepaper v0.4.1 and docs; Bitcoin.com News also names a firm called V12. Audit outcomes are self-reported by the project, and an independent reviewer noted that the docs and whitepaper disagreed on which audits were complete.
The wider cast
Peter Shor and Lov Grover
Authors of the two quantum algorithms (1994 and 1996) that started this whole field.
NIST
The US standards institute that ran the post-quantum competition and published FIPS 203, 204 and 205 in August 2024.
Google Quantum AI
Publisher of the March 2026 paper that sharply cut the estimated resources needed to break 256-bit elliptic curves.
Alex Pruden, Project Eleven
CEO of a quantum-security firm that raised a $20 million Series A in January 2026. Announced a custody partnership with Quantus in October 2026.
Alex Shevchenko, Defuse Labs
CEO of the team behind NEAR Intents, the system QTC first traded through.
Justin Drake and Vitalik Buterin
Ethereum researchers pushing Ethereum's own post-quantum plans, and voices of caution that lattice maths also needs watching.
Ecosystem: who uses it?
A month after launch, the honest answer is: miners, early holders and traders. There are no applications on Quantus because the chain does not run applications.
Miners
GPU miners secure the chain. The project homepage showed a few hundred active miners in early October 2026, and third-party pools such as Kryptex support QTC.
NEAR Intents and near.com
QTC's public trading launch on 6 to 7 October 2026 went through NEAR Intents, which lets people swap BTC, ETH, USDC, ZEC and many other assets into QTC without a traditional exchange listing.
Exchanges
CoinGecko listed 19 markets on 11 October 2026, led by NEAR Intents, Rhea Finance (a NEAR decentralised exchange) and BigONE (a centralised exchange). SafeTrade listed the coin earlier under the label QUAN.
Project Eleven Strongpoint
An institutional custody platform. On 8 October 2026 the two firms said Quantus support is targeted for Q1 2027, with Quantus as a development partner. Planned, not live.
Education and media
Quantum Canary and the QDay podcast (two dozen episodes) are the project's own channels. The team also held a "QDay" event around Token2049 Singapore in October 2026.
Network footprint
Foresight News cited about 11,700 accounts in early October 2026. That is tiny next to established chains, and expected for a network this young.
Roadmap and what comes next
Stated or scheduled
- Until 1 December 2026: an airdrop for testnet miners is claimable in the mobile app, per the project site.
- In-app buying: the site marks a route for swapping other crypto into QTC inside the wallet (via NEAR Intents) as coming soon.
- Cross-chain bridge: planned through NEAR's chain-abstraction system using threshold ML-DSA signatures, still in development and under audit.
- Q1 2027: target for Quantus support on Project Eleven's Strongpoint custody platform.
- September 2027: the one-year lock on the genesis allocation ends and 36 months of linear unlocks begin.
- Over time: the company says it will wind down the Technical Collective's upgrade powers as confidence grows. No date.
Open questions that will decide its future
- Does anyone need a separate post-quantum coin if Bitcoin and Ethereum migrate in time?
- If they do not migrate in time, will holders actually flee to a small new chain, or to something else?
- Can a 12-second proof-of-work chain attract enough hashrate to be costly to attack?
- Will the wormhole circuits hold up with real value at stake?
- Will ML-DSA stay unbroken? The chain can add schemes, but a break would still be a crisis.
- Can the market absorb insider unlocks from late 2027?
Quantus vs other approaches
There are two ways to get a quantum-safe blockchain: build a new one, or retrofit an old one. Quantus and QRL took the first path. Everyone else is on the second. Scroll the table sideways on small screens.
| Quantus (QTC) | QRL | Algorand | Bitcoin | Ethereum | Solana | NEAR | |
|---|---|---|---|---|---|---|---|
| User signatures today | ML-DSA for every account, from block one | XMSS (hash-based) for every account since 2018 | Ed25519 by default; Falcon-1024 accounts available since Aug 2026 | ECDSA and Schnorr only | ECDSA only | Ed25519 only | Ed25519 by default; opt-in ML-DSA-65 since Jul 2026 |
| Post-quantum plan | Nothing to migrate | QRL 2.0 moves to ML-DSA-87; in audit | Extend Falcon to consensus; details expected late 2026 | BIP-360 (P2MR) and BIP-361 are drafts; nothing activated | Lean Ethereum: hash-based validator signatures, account abstraction; core target about 2029 | Falcon chosen by client teams; no date | Consensus and cross-chain signing on roadmap for 2027 onward |
| Consensus | Proof of work (Poseidon2) | Proof of work now; proof of stake in 2.0 | Proof of stake | Proof of work (SHA-256) | Proof of stake | Proof of stake | Proof of stake |
| Is consensus itself post-quantum? | Largely: hash-based mining, ML-DSA and ML-KEM networking | Hash-based mining and signatures | Not yet (Ed25519 votes, elliptic-curve VRF) | Mining is hash-based; Grover gives only a modest speed-up | Not yet (BLS signatures, KZG commitments) | Not yet | Not yet |
| Smart contracts | None, by design | Not in 1.x; planned in 2.0 | Yes | Limited scripting | Yes | Yes | Yes |
| Privacy | Optional unlinkable transfers; amounts visible | None built in | None built in | None built in | None built in | None built in | Confidential swaps via Intents |
| Track record | About one month of mainnet | Eight years | Since 2019 | Since 2009 | Since 2015 | Since 2020 | Since 2020 |
| Main caveat | Unproven, illiquid, 27% insider allocation | Stateful signatures are awkward; 2.0 not shipped | Only partly post-quantum; accounts must opt in | Slow governance; lost coins dilemma | Huge migration across accounts and DeFi | Performance cost of bigger signatures | Opt-in; old keys remain unless removed |
Quantus vs Quant: not the same thing
The names differ by two letters and the projects have nothing in common. Quant (QNT) is enterprise interoperability software from a UK company founded in 2015; its token is an ERC-20 on Ethereum, protected by the same elliptic-curve signatures as everything else there. Quantus (QTC) is a 2026 proof-of-work chain about quantum-safe money. If you came here looking for QNT, head to whatisquant.com.
Other post-quantum projects
Research write-ups in 2026 also list Abelian (lattice-based, privacy-focused), IOTA (historically used Winternitz one-time signatures), QANplatform (Dilithium, EVM-compatible), Aptos (an opt-in SLH-DSA proposal), XRP Ledger (a phased plan targeting 2028), TRON (testnet work) and Zcash (quantum-recoverable wallets, with its Tachyon upgrade path). We have not verified each in depth; statuses change quickly.
Deep dive: Quantus vs Zcash, the comparison investors keep making
Bankless framed it this way in October 2026: Bitcoin has the most credibility but little privacy and a real migration problem; Zcash has strong privacy, a decade of history and a quantum roadmap; Quantus offers quantum resistance and some privacy today but has no credibility yet. Its author wrote that Quantus "could easily be a nonevent". Zcash's privacy is also much stronger: it hides amounts, which Quantus does not.
Wallets guide
QTC needs a wallet that understands ML-DSA keys, so your usual Bitcoin or Ethereum wallet will not hold native QTC. Options are limited and young.
Where and how to get QTC
QTC is live and tradable, but only on a handful of venues, with no listing on the largest exchanges that we could confirm as of 11 October 2026. This is a description of how it works, not a recommendation to buy.
Route A: swap through NEAR Intents
- Go to quantus.com and follow its official link to the trading venue (near.com was the launch venue). Do not search for it in an app store or click ads.
- Create or connect an account you control. Check whether the service is available where you live.
- Choose what you are swapping from. The launch announcement listed BTC, ETH, USDC, ZEC and 180+ other assets across 30+ chains.
- Review the quote. With a thin market, large orders move the price; compare the quote with the CoinGecko price above.
- Confirm the swap. You will hold QTC inside the NEAR account at this point.
- To hold native QTC on the Quantus chain itself, withdraw to an address from your Quantus Wallet (starts with qz). Send a small test amount first and compare the check-phrase.
Route B: a centralised exchange
- CoinGecko's markets tab lists where QTC trades. On 11 October 2026 BigONE had the largest centralised volume; SafeTrade also lists it (as QUAN). These are smaller exchanges; research them before depositing.
- Open an account, turn on two-factor authentication, deposit USDT or another supported asset.
- Buy QTC, using a limit order so you control the price.
- Withdraw to your own Quantus Wallet. Select the Quantus network. Test with a small amount.
Route C: mine it
73% of supply only ever reaches the market through miners. Mining needs a GPU, the node and miner software from the project's GitHub, and some patience with command-line tools. Rewards are paid to a wormhole-type address. Pools exist. Check electricity costs honestly; most small miners of most coins do not profit.
Deep dive: is QTC on NEAR as safe as QTC on Quantus?
Not automatically. While QTC sits in a NEAR account or on an exchange, its security is that of the place holding it, not of the Quantus chain. NEAR accounts can opt into ML-DSA signing, but NEAR's consensus is not yet post-quantum, and a centralised exchange is simply an IOU. If the reason you want QTC is post-quantum self-custody, that only fully applies once the coins are in a Quantus address you control.
Deep dive: how to follow the project safely without buying
Read the whitepaper and the weekly updates on the official blog; look at the block explorer (explorer.quantus.com); listen to the QDay podcast with a critical ear; and read sceptical takes too. You can also install the wallet and look around without funding it.
Risks and criticisms
A frank list. Several of these come from the project's own whitepaper, which deserves credit for stating them.
1. It is brand new
About a month of mainnet history. No track record under stress, no long-term data on hashrate, bugs or governance. Most new layer-1 chains fade.
2. The threat may arrive late, or others may adapt first
If useful quantum computers are 15 years away, or Bitcoin and Ethereum migrate smoothly, the main reason to hold QTC weakens. Quantus is a bet on a specific timeline.
3. Insider allocation and unlocks
27% of the cap went to investors, team and company at genesis. From September 2027 those coins unlock over three years, likely faster than new coins are mined.
4. Thin, volatile market
Around 1.3% of the cap is circulating. Price swung from about $10 to above $180 within five weeks. The fully diluted value is many times the market cap. Small markets are easy to move.
5. Circuit and implementation bugs
The wormhole system re-mints burned coins on the strength of a proof. A flaw could mean counterfeit coins. Audits and partial formal verification reduce, but do not remove, that risk.
6. Young cryptography
ML-DSA is standardised but has far less real-world mileage than elliptic curves. Poseidon2 has only a few years of public analysis. Plonky2's security rests on conjectures. In July 2026 an AI system was reported to have improved an attack on a different post-quantum candidate (HAWK), a reminder that the field is still moving.
7. Proof-of-work security at small scale
A small network can be attacked cheaply with rented hardware. There is no finality gadget, only a 100-block reorganisation limit in the node software.
8. Centralised early governance
Forkless upgrades plus a curated Technical Collective mean a small group can change the rules quickly. That is useful for emergency fixes, and a trust assumption.
9. Privacy is limited
Amounts are visible and timing can link deposits to withdrawals. Do not treat encrypted transfers as strong anonymity.
10. Inconsistent documentation
Reviewers found mismatches between the docs, whitepaper and website on signature level, audit status and throughput. Not fatal, but not what you want from security software.
11. Narrow utility
No smart contracts means no apps, lending or stablecoins. Demand depends on people wanting QTC as money or as a hedge.
12. Fear as a marketing tool
The project, its podcast and its publication all promote urgency about quantum risk. The risk is real; the incentive to amplify it is too.
Myths vs facts
Tap a card to see the fact behind the claim.
Glossary
Test yourself
Twelve questions with explanations. Your best score is remembered in this browser.
Frequently asked questions
What is Quantus in one sentence?
Quantus is a proof-of-work layer-1 blockchain, live since 9 September 2026, whose coin QTC is secured with ML-DSA post-quantum signatures instead of the elliptic-curve signatures used by Bitcoin and Ethereum.
Is Quantus the same as Quant (QNT)?
No. Quant (QNT) is a UK company whose Overledger software connects banks and blockchains, and it has nothing to do with quantum computing. Quantus (QTC) is a separate, much newer blockchain focused on quantum-resistant money.
What is the Quantus token called and how many will exist?
The coin is QTC. Supply is capped at 21 million. 73% can only be mined and 27% was allocated at genesis to investors, founders, team and the company, mostly under a one-year lock followed by 36 months of linear release.
Is the Quantus mainnet live?
Yes. The mainnet started on 9 September 2026, after test networks called Resonance, Schrödinger, Dirac and Planck. An earlier target of the first quarter of 2026 was missed.
Who founded Quantus?
Quantus Labs is led by co-founder and CEO Christopher Smith, who also wrote the whitepaper with Jonathan Angle. A 2025 press release named Joseph Mattia as a co-founder. Smith previously worked on BitMesh, Lunyr and FactoryDAO.
Who invested in Quantus?
Bankless reported that Balaji Srinivasan led the second funding round and that Babak Nivi and Mert Mumtaz are investors. Foresight News reported rounds of $1.65 million and $770,000. The project itself has not published an investor list or amounts.
Is Quantus really quantum-proof?
Nothing is proven unbreakable. Quantus uses ML-DSA, a signature scheme standardised by NIST in 2024 and designed to resist known quantum attacks, plus hash-based proofs and mining. These are well-regarded but younger and less battle-tested than the cryptography they replace.
Can quantum computers break Bitcoin today?
No. No publicly known quantum computer can break 256-bit elliptic-curve keys today. A March 2026 Google paper estimated that fewer than 500,000 physical qubits could be enough, far fewer than earlier estimates, and published forecasts for when such a machine might exist range from about 2030 to the 2040s.
Where can I buy QTC?
As of 11 October 2026 QTC traded through NEAR Intents and near.com, on the NEAR decentralised exchange Rhea Finance, and on smaller centralised exchanges including BigONE and SafeTrade, which labels it QUAN. We could not confirm a listing on the largest exchanges. Always start from quantus.com and beware of fake tokens.
Which wallet holds QTC?
The official Quantus Wallet for iOS and Android, in public beta, holds native QTC and creates addresses starting with qz. Ordinary Bitcoin or Ethereum wallets cannot hold native QTC because they do not support ML-DSA keys.
Can I mine Quantus?
Yes. Mining is open to anyone and currently suits GPUs. It uses a Poseidon2-based proof of work with 12-second blocks and a reward of roughly 0.3 QTC per block that shrinks gradually. Pools such as Kryptex support it. Profit is not guaranteed.
Does Quantus have smart contracts or DeFi?
No. Quantus is deliberately limited to payments and savings, with no smart contracts and no layer 2. Its extra features are built into the protocol: optional encrypted transfers, cancellable time-locked transfers, guardian accounts and multisig.
Are Quantus transactions private?
Partly. Optional encrypted transfers break the on-chain link between sender and receiver using zero-knowledge proofs, but amounts stay visible and the project describes the privacy as probabilistic, not absolute.
What are the biggest risks?
The network is about a month old, the market is thin and volatile, 27% of supply went to insiders and starts unlocking in September 2027, the privacy circuits could contain bugs, and the whole case depends on quantum computers arriving before older chains upgrade.
Sources and further reading
Everything here was checked against these pages in October 2026. Project documents are the project's own claims. Where sources disagreed we said so.
- Quantus official site
- Quantus whitepaper v0.4.1 (9 Sep 2026)
- Quantus documentation
- Christopher Smith, official bio
- Quantus blog and weekly updates
- CoinGecko: Quantus (QTC)
- Bitcoin.com News: mainnet launch (11 Sep 2026)
- "Quantus Network: What Actually Shipped", independent review (15 Sep 2026)
- Bankless: Quantus takes aim at Bitcoin's quantum problem (6 Oct 2026, sponsored placement)
- Foresight News via AiCoin: background, funding and tokenomics analysis
- The Quantum Insider: QTC launches on near.com (7 Oct 2026)
- The Quantum Insider: Project Eleven and Quantus (8 Oct 2026)
- Testnet press release via DL News (11 Nov 2025)
- Blockchain Reporter: interview with Christopher Smith (27 May 2026)
- ForkLog: Quantus CEO on undetectable quantum hacks (10 Aug 2026)
- Kryptex Pool: QTC mining data
- Kryptex: how to create a Quantus wallet
- The Quantum Insider: Google's March 2026 resource estimate
- Google Quantum AI: Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities
- Project Eleven: The Quantum Threat to Blockchains, 2026 report
- PostQuantum.com: Bitcoin's post-quantum migration roadmap (BIP-360, BIP-361)
- ethereum.org: quantum resistance roadmap
- Decrypt: Justin Drake on "bunker mode" (7 Oct 2026)
- CoinDesk: Solana's post-quantum plan (27 Apr 2026)
- Algorand: post-quantum cryptography roadmap
- QRL: eight-year update and QRL 2.0 status (26 Jun 2026)
- DropsTab Research: which chains are quantum-ready (31 Jul 2026)
- NIST FIPS 204: ML-DSA standard
Keep exploring
This guide is part of a family of independent single-project explainers. The hub is thecoingalaxy.com. Good next reads from here: