Key Takeaways
- Quantus launched its PoW mainnet with ML-DSA post-quantum security and a 21M QTC supply cap.
- The network targets a $2.7T crypto security risk as quantum and AI threats challenge legacy cryptography.
- Quantus must prove its 7KB transactions and 430 TPS design can scale without sacrificing security.
Quantus Builds Quantum Defense Into Crypto From Day One
A new blockchain is making an unusually specific bet: that crypto’s next security crisis will come from quantum computing.
Quantus launched its mainnet on Wednesday, Sept. 9, with privacy-preserving transactions, a 21 million coin supply cap, and open proof-of-work mining from day one. Unlike most major blockchains, it uses post-quantum cryptography designed to resist attacks from sufficiently powerful quantum computers.
The network uses ML-DSA, the digital-signature standard finalized by the U.S. National Institute of Standards and Technology in 2024. Quantus specifically relies on ML-DSA-65 and ML-DSA-87 to authenticate transactions.
“We have known for over 30 years that if anyone builds a sufficiently large quantum computer, then elliptic curves will fail,” Quantus co-founder and CEO Christopher Smith said.
Quantus Targets a $2.7 Trillion Security Problem
Most crypto networks still rely heavily on elliptic-curve cryptography. A sufficiently capable quantum computer could, in theory, undermine those signature systems.
Quantus estimates that roughly $2.7 trillion of crypto market value remains exposed to that long-term risk. NEAR and Algorand have introduced post-quantum transaction security, but neither has completed a protocol-wide transition.
Quantus is trying to avoid that migration problem altogether.
“We call upon the industry leaders to be proactive in migrating to post-quantum cryptography. Being too early is much better than being even a little too late,” Smith said.
Already, key institutional players, including Grayscale, Fidelity Investments, and Bitmine’s Tom Lee, have warned that cryptocurrencies such as bitcoin face future quantum risks, due to a lack of immediate planning.
The network also runs two additional layers. Wormhole provides transaction privacy, while an aggregation layer is designed to improve throughput. Quantus targets 12-second blocks and says testing reached as much as 430 transactions per second.
Bigger Transactions Create a Trade-Off
Post-quantum security is not free. A Quantus ML-DSA transaction is roughly 7 kilobytes, compared with about 100 bytes for a typical bitcoin transaction. Quantus addresses that difference by aggregating activity on its layer one (L1) and posting succinct proofs onchain.
The design aims to become more efficient as transaction volume increases.
Its native QTC coin is distributed through proof-of-work mining, with no built-in mining advantage for Quantus Labs. Before launch, Neodyme, Eiger, Hashcloak, and V12 reviewed the network, while Immunefi hosted a public audit competition.
AI is Already Stress-Testing Cryptography
The timing is notable because AI is becoming increasingly capable at cryptographic research.
In July, Anthropic said Claude Mythos Preview improved the best-known attack on HAWK, a post-quantum signature candidate, after about 60 hours of work. HAWK had already survived two rounds of expert review over two years.
Anthropic stressed that the result had no practical impact on production systems. Still, it showed how AI can accelerate the discovery of cryptographic weaknesses.
That is the market Quantus is positioning for: a crypto industry where quantum risk may still be distant, but the tools capable of testing security are advancing much faster.
