r/QRL • • Apr 09 '26

Exchanges The "Definitive" Guide To Buying QRL In The USA / North America

31 Upvotes

Since QRL just got put on a lot more people's radar recently, I figured would make a quick post illustrating the many legit ways one can acquire QRL within the USA / North America, since at best it can be a little convoluted to many people.

*LEGIT QRL ONLY TRADES ON QRL/USDT PAIRS, BEWARE OF SCAMS\*

https://www.theqrl.org/markets/#markets

---

CEX

If you are able to source your own crypto / USDT, QRL currently only trades on one exchange that support North American customers: Biconomy. First, a few important notes about buying or selling there:

All the "satellite exchanges" (aka NOT MEXC) that list QRL are primarily serviced by a "market maker / arbitrage" bot that provides liquidity on both the buy and sell side. It's important to know how this works so you don't think "well I can't even buy more than 1000 QRL on this exchange at a normal price wtf is this?", because you absolutely can if you know how it works. The current bot uses both MEXC prices AND order book volume to determine how much it's offering to buy and sell at any given time. For retail accumulation / selling, it is recommended to pick off the best priced lots and wait for it to refresh. It should be noted that these bots interact with the MEXC exchange, so buying on a satellite exchange for example will trigger an equal purchase size on MEXC by the market maker. As a result, the price will likely rise slightly as you accumulate. After you've purchased, give the bots a minute or two to refresh and provide new order lots. I should note that the newer settings on these bots are very sensitive to both MEXC's order book AND volatility. This means that if there's not a lot of liquidity on the books near market rate on MEXC, the satellite bots may not offer you any good sized lots on one of the satellite exchanges until the price stabilizes in an area with some decent liquidity. Further, if there's high volatility on MEXC (someone pumping or dumping, etc) the satellite bots will COMPLETELY SHUT OFF for a period of time. There will be no lots until the price stabilizes, so if you see virtually no liquidity at the market rate when you go to check, this may be why.

The point here is that you can both buy and sell 10,000+ coins on these exchanges if you know how to work them correctly over a period of time. Occasionally the QRL / USDT side of things will get fully depleted but the market maker always refreshes, sometimes it just takes a couple days.

Biconomy only deals in crypto, so you will have to deposit your USDT to purchase QRL from another exchange / wallet.

Now onto the specifics...

BICONOMY

Despite it's lack of stature, this exchange has been 100% fine for most of us for a long time. I myself have been using it for almost a year now. I believe that you can register an account with an e-mail and that will be fine without KYC unless you are trying to withdraw more than .1 BTC worth of crypto in a given day. They do occasionally run a "Biconomy Earn" program that some of us have participated in previously without issue. That is to say we locked up some of our QRL and were paid the QRL we were supposed to. It seems that they pulled most of their offerings for QRL recently though, so maybe they are not offering it anymore because it wasn't working in their favor overall ;)

---

Some additional options:

OVER-THE-COUNTER

There are a number of community trusted / verified OTC providers in the Discord #trading-otc channel who will work in both fiat and crypto. Be sure to check the "Verified Trades" channel and speak PUBLICLY in the #trading-otc channel at first. Most legit providers will engage with you there first before moving to DM. It is much more likely that you are being scammed if you are engaging with someone who has DMed you right away rather than responded to your post publicly at first. If you are looking to avoid CEX, I definitely recommend this option as long as you connect with the right people.

DV CHAIN

https://www.dvchain.co/ContactUs

DV Chain offers brokered service for larger customers within the USA. If you are looking to accumulate a significant amount of QRL, they are a legitimate option if you are able to meet their minimums.

---

Alright, I think that's about it as far as legit USA / NA options go right now. Be aware that MEXC has 100% cracked down on non-compliant accounts recently, so I very much do not recommend using them anymore. The other two exchanges (XT and LBank) are both non-compliant for USA / NA folk as well. However, they offer no material advantages over the exchanges I listed above (unlike MEXC), so there's really not a great reason to use them for most purposes.

If anyone has any edits or additions that should be made, feel free to suggest below and I'll update accordingly. Also feel free to format this information however you want and spread it further. We all believe Tier 1 will come with time, but right now this is what we have to work with. The important thing to realize is that QRL is plenty accessible for USA / NA customers of all sizes with the options listed above, even if it's a little bit unusual compared to what people are used to.

o7


r/QRL • • 1d ago

Official Can AI Break ECDSA or ML-DSA? Reddit AMA with Dr. Joseph Kearney

23 Upvotes

We're hosting a Reddit AMA with Dr. Joseph Kearney (u/halcyon_jjk) on his recent article on whether AI can break ECDSA or ML-DSA.

Read it here: https://www.theqrl.org/blog/can-ai-break-ecdsa-or-mldsa/

In short (from the article):

  1. So far, AI has made existing attacks faster. It has not found a fundamentally new way to attack any scheme we rely on.
  2. Breaking ECDSA or ML-DSA would need a new kind of attack, not a faster version of an old one. That would be one of the biggest results in the history of cryptography. It could happen, but it is a different kind of event from anything we have seen.
  3. The more realistic risk from AI is to the software that implements these schemes, not to the maths behind them.
  4. On the quantum side, we are still running algorithms invented in the 1990s, just more efficiently. Inventing new quantum algorithms is the next step, and AI applied to that step is what I would watch most closely.

Leave your questions between now and Thursday, October 16th at 6pm UTC for Joseph below. Whether you're curious about the basics or want to get into the thick of things, both are welcome.


r/QRL • • 3d ago

Discussion Five reasons to take a closer look at Quantum Resistant Ledger ($QRL)

19 Upvotes

Five reasons to take a closer look at Quantum Resistant Ledger ($QRL):

šŸ”¬ Google Quantum AI researchers name QRL among post-quantum blockchains.
https://quantumai.google/static/site-assets/downloads/cryptocurrency-whitepaper.pdf

šŸ‡ŖšŸ‡ŗ A Europol report describes QRL’s quantum-resistant design and XMSS signatures. See PDF page 101.
https://www.europol.europa.eu/cms/sites/default/files/documents/Horizon-scanning-emerging-privacy-enhancement-tech.pdf

šŸ›°ļø A Lockheed Martin patent describes a secure communications system using a QRL blockchain.
https://patents.google.com/patent/US12627478B2/en

šŸ” Trail of Bits published an independent security assessment of QRL’s go-qrllib cryptographic library.
https://trailofbits.com/library/the-quantum-resistant-ledger-go-qrllib-library/

šŸ›”ļø Halborn audited QRL’s qrypto.js signature implementations: 13 informational findings, all resolved, with none rated low, medium, high or critical.
https://www.halborn.com/audits/qrl-quantum-resistant-ledger/qrl-quantum-resistant-ledger-37d3f1

Research references, a patent and scoped security audits each tell a different part of the story. They do not imply investment endorsements or confirmed commercial adoption.

Explore the original sources and judge for yourself.


r/QRL • • 4d ago

Discussion Draft QIP to keep QRL 1.0 running alongside QRL 2.0, feedback wanted

12 Upvotes

I’ve submitted a draft QIP proposing that QRL 1.0 keeps running after the QRL 2.0 snapshot instead of being archived.

https://github.com/theQRL/qips/pull/48

Everyone still gets their full balance on 2.0 as planned and keeps their 1.0 coins too. 2.0 keeps the QRL ticker and 1.0 takes a new one.

The Foundation is the preferred steward, running 1.0 in maintenance mode with security fixes only. If it prefers not to, it can hand its 1.0 coins to a new maintainer. Neither chain needs a consensus change. The only addition is a safety rule in the 2.0 claim tool, so a one-time key is never used on both chains.

Holders keep both hash-based proof-of-work and lattice-based proof-of-stake, nobody is forced to move, and 1.0’s record of running without interruption since 2018 carries on.

It’s an alternative to the token idea in PR #47. The draft is open for at least two weeks of discussion. Please read it and comment on GitHub so your feedback becomes part of the QIP record.


r/QRL • • 4d ago

Discussion QRL Alternative business uses

7 Upvotes

Considering recent discussion here and developments that have unfolded this week regarding AIs growing capability to expose established IPs and cryptographic risks, I’ve been thinking about QRL from a slightly different perspective recently.

Most discussions understandably focus on the threat quantum computing poses to Bitcoin, Ethereum and other cryptocurrencies. But if there is a broader opportunity for QRL that isn’t receiving as much attention, from the team mainly but also the community.

What if QRL’s long-term value proposition extends beyond securing cryptocurrency, into becoming part of the wider post-quantum cybersecurity ecosystem?

Some or all of these cases could be provided by Zond/QRL 2.0, so Im opening this here for discussion, because if something like this may already be in the works for QRL and i think its good to get these ideas out there, and if not, do we have a good reason not to pursue these projects?

1. Commercial adoption without direct token usage
QRL has developed open-source cryptographic libraries and tools, including its ML-DSA software-signing GitHub Action, which can be used to authenticate software releases with post-quantum signatures.
Potential applications extend into software supply chains, firmware authentication, secure communications, digital identity and verification of sensitive records.
None of these necessarily requires a company to purchase QRL tokens or interact with its blockchain.
However, couldn’t broader adoption still create indirect value?
If organizations begin integrating QRL-associated technology, that could strengthen the project’s credibility, increase developer exposure, attract additional partnerships and ultimately generate greater interest in its public blockchain.
Essentially, commercial adoption could act as a distribution and reputation channel for QRL’s wider ecosystem.
Of course, there’s no guarantee that this translates into token appreciation, directly at least.

2. Quantum Future Limited

QRL’s 2024 Primary Report discussed funding Quantum Future Limited as a separate commercial entity responsible for developing the wider ecosystem.
Looking at Quantum Future’s website, it currently advertises post-quantum risk assessments and migration advisory services, alongside a Post-Quantum Attestation Service (PQAS) in development.
The attestation concept is especially interesting because it proposes using post-quantum signatures and blockchain anchoring to create independently verifiable records.
Potential applications could include financial audit trails, insurance records, intellectual property provenance, regulatory documentation and software authentication.
Importantly, Quantum Future is a separate commercial entity, and its revenue would not automatically flow to QRL tokenholders. Its attestation architecture is also provider-agnostic, meaning QRL network adoption isn’t guaranteed.
Still, it seems worth investigating whether commercial activity could support broader ecosystem development and eventually create demand for QRL’s public infrastructure.

3. Institutional interest and possible developments behind the scenes

The Lockheed Martin patent referencing QRL-related secure communications architecture - another example of how this technology could be relevant beyond cryptocurrency.
That said, a patent does not establish an operational deployment, commercial partnership or token purchases.
There have also been comments about ongoing NDAs involving the QRL team. While potentially interesting, I wouldn’t assign much investment value to undisclosed conversations without evidence of actual commercial arrangements.
Nevertheless, it raises the question of what kinds of institutional opportunities might be under consideration, some of which could possibly be things already mentioned here or in previous posts.

4. This market is not uncontested
A significant caveat is that QRL doesn’t have a monopoly on post-quantum cryptography.
NIST-standardized algorithms are publicly available, and major technology organizations are developing their own migration solutions.
Sigstore announced on October 2 that it was accelerating its integration of post-quantum cryptography into software supply-chain security.
This is both encouraging and challenging. It demonstrates that there’s a genuine market developing, but also that competitors with established distribution and developer ecosystems are moving into the same territory.
A concern I would air here is that I would imagine this type of market gap will be filled quickly by the bigger established players, Google, Crowdstike, which would mean the team needs to move quickly on this angle, and moving quickly is definitely not part QRL teams style as most of us likely know by now.

So the investment argument cannot simply be that organizations need post-quantum cryptography. It has to explain why they’d choose QRL-associated technology over alternatives.

5. The bigger question: indirect versus direct value creation
I’m interested in whether there could be a reinforcing cycle:
Enterprise adoption of QRL-associated technology → increased credibility and developer exposure → greater ecosystem interest → additional commercial opportunities → potential demand for QRL infrastructure and tokens.

Instead of simply hoping for:

Quantum compooter break bitcoin → be rich

My point is, this is an emerging frontier level risk, that require significant skill and knowledge, which the QRL team has, there has to be other opportunities to capitalise on?

That doesn’t mean every stage will materialize or that commercial success automatically produces tokenholder value.
But perhaps evaluating QRL exclusively through blockchain transactions and cryptocurrency adoption overlooks other potential catalysts.

The questions I am trying to answer:
Which industries or applications offer the strongest opportunities for QRL-associated technology beyond cryptocurrency?
Could open-source adoption generate enough credibility and exposure to meaningfully benefit the token indirectly?
How much commercial activity could realistically migrate onto QRL 2.0, rather than remaining on private or conventional infrastructure?
Are there developments, competitors or structural limitations that undermine this thesis?
I’m particularly interested in hearing from developers or anyone familiar with enterprise cryptographic adoption.
Not suggesting this is some undiscovered goldmine, and I’m certainly not arguing that institutional adoption is inevitable. I’m trying to understand whether we’re overlooking alternative pathways through which QRL’s technology and wider ecosystem could generate value.
Interested to hear both the bull and bear cases.


r/QRL • • 6d ago

Discussion QRL Weekly, 2026-October-09

14 Upvotes

Status

  • September 18th: QRL Release Verifier audit complete
  • September 11th: Ledger app audit and remediation complete
  • August 4th: Audit results published for go-qrllib
  • April 3rd: Audit complete of 2 cryptographic libraries
  • March 31st: QRL 2.0 Testnet V2 released
  • Audits & Remediation: 60%

QRL 2.0 Testnet V3 checklist from that update:

  • Config parameters
  • [done] Upstream bug fixes
  • Testnet V2 scoped audits

QRL v2.0

go-qrllib

Major cryptography work. Upstream PR #131 added/updated FALCON-1024 with the NIST API and bit-exact reference behaviour, byte-for-byte PQClean cross-verification across amd64/GOAMD64-v3/arm64, signed-message bound fixes and expanded tests; it also corrected ML-DSA-87 poly_uniform behaviour and ACVP coverage. PR #130 hardened public-API preconditions and pinned QRL v1 mainnet parity. Follow-on work added weak-key rejection, field-by-field weak-key vector tests, NTRU-equation checks on key import, sampler bounds, frozen signature encoding, and clarified ML-DSA secret-key validation semantics.

go-QRL

Broad client cleanup and hardening: added a legacy QRL XMSS signature-verification precompile; removed proof-of-work, merge-transition, unused HD-derivation and obsolete downloader/mining paths; fixed txpool chain-head subscription, malformed bad-block handling, devp2p IPv6/UDP behaviour and flaky Catalyst tests; also merged storage-key conformance and cross-runner work.

Qrysm

Added an alltools image containing every command binary, adjusted the gocognit limit for the block-batch path, and added further SSZ input validation for hand-written merkleization helpers.

Hyperion

Add xmssverify builtin for legacy QRL XMSS signatures PR #20.

QRL v1.0 -> v2.0 Migration

QRL v1 archive

Began implementation and testnet-rehearsal framework. Added rehearsal warnings/status material, placeholder transport-test assets and documentation for the planned canonical archive: exact block protobuf export, independent integrity/signature verification, versioned canonical/SQLite/Parquet schemas, golden fixtures, rebuildable derived data and signed archive releases.

QRL v1 archive explorer

Created the read-only archive explorer scaffold for testnet rehearsals. The planned explorer will search archived blocks, transactions and addresses, show balances at the archive cutoff and serve immutable data without a live QRL v1 node.

QRL v1.0

webtools

Updated dependencies and the build process, including the ML-DSA signing action, and replaced the previous single-file bundler with a custom in-house solution.

dice

Dependency refresh and associated lockfile/build maintenance.


r/QRL • • 6d ago

Quantum News Quantum Computing and Cryptocurrencies' report by @Europol

Thumbnail europol.europa.eu
12 Upvotes

r/QRL • • 6d ago

Questions Any exchange planning to add QRL soon?

8 Upvotes

r/QRL • • 6d ago

Caution Don’t trust the exchanges with your QRL holdings

Post image
8 Upvotes

I assume Biconomy is in the same boat but I would not trust CEXes with your QRL holdings. They haven’t adopted post-quantum cipher suites, making them a juicy target for ā€œharvest now decrypt laterā€attackers. Even if CEXes adopt quantum-secure encryption immediately, a password change js needed because attackers with recorded network sessions can still decrypt captured traffic at a future date and reveal your login credentials.


r/QRL • • 6d ago

Discussion If you’ve made it this far, congratulations.

15 Upvotes

If you’ve made it this far, you’ve probably followed a path similar to mine. You bought Bitcoin or some other cryptocurrency. You read a lot, listened to a lot of people, and at some point, you came across a question nobody seems able to answer properly: what happens to digital signatures when a real quantum computer exists? You went looking for answers, and your search ended here.

You’ll hear a lot along the way. That there’s still plenty of time. That developers will figure it out when the time comes. That there’s a proposal, that someone is working on it, that the community is large enough to find a solution. I heard all of that too, delivered with the confidence of people discussing an already solved problem. So I went looking for what had actually been solved, and what I found were discussions, drafts, and timelines nobody wants to commit to.

My conclusion is simple, and I imagine you’ll reach it yourself if you take a careful look. Traditional networks were built on a type of digital signature that quantum computers can break, and that vulnerability is embedded in the very first block of each of them. You can delay, propose, and vote. But you cannot work around this problem without giving something important up along the way. Someone will have to between protecting the network and preserving the rule that nobody can tamper with someone else’s coins. And choosing one means giving up the other.

Meanwhile, QRL was designed from day one for precisely this moment, and it doesn’t depend on anyone agreeing on anything to keep working. It’s a network that exists, works today, and already has the answer other networks are still trying to find.

No matter how hard they try to convince you otherwise, and they will, keep verifying things for yourself. Those who do their own research tend to end up in the same place.

If you’ve made it this far, stay ..


r/QRL • • 7d ago

Discussion Quantum Resistant Ledger (QRL) vs. Quantus

19 Upvotes

Quantus has been getting a lot of attention lately, so here's how it stacks up against QRL. Sources are linked at the bottom.

QRL 1.0

  • āœ… Mainnet live since 2018, no downtime in 8+ years
  • XMSS signatures (hash-based)
  • āŒ No smart contracts
  • Proof-of-work
  • X41 D-Sec and Red4Sec audits complete
  • Built for store of value and payments
  • Run by a non-profit Swiss foundation

Quantus

  • Mainnet live since Sept 2026
  • ML-DSA-87 signatures
  • āŒ No smart contracts
  • Proof-of-work
  • āš ļø Audits incomplete, 2 of 4 still in progress after launch
  • Built for store of value and payments
  • Run by a venture-funded company
  • āš ļø Investor and team tokens unlock from Sept 2027

QRL 2.0

  • Mainnet expected early 2027, after audits finish (testnet live now)
  • ML-DSA-87 signatures, SPHINCS+ (hash-based) planned
  • āœ… EVM-compatible smart contracts
  • Proof-of-stake
  • Trail of Bits and Halborn audits published, more due before mainnet
  • Built for smart contracts and dApps
  • Run by a non-profit Swiss foundation

Quantus does what QRL 1.0 has done since 2018. QRL 2.0 adds post-quantum smart contracts, which neither has.

Sources

Disclosure: I hold QRL.


r/QRL • • 8d ago

Discussion Justin Drake says the math protecting your coins could break "in the worst case in months not years."

15 Upvotes

🚨SHOCKING: AI could crack Bitcoin before Q-Day, possibly within MONTHS, with Satoshi's 1 MILLION BTC exposed.

Ethereum Foundation researcher Justin Drake says the math protecting your coins could break "in the worst case in months not years."

That's before Q-Day, the day quantum computers become powerful enough to break it.

By "break," he means fast private key recovery, for example in one week on a large GPU cluster.

Whoever has your private key controls your coins.

"Yesterday's OpenAI drop made it clear that mathematical superintelligence is upon us," he said.

Here's who's exposed:

Most wallets reveal their public key the first time they send a transaction.

That public key is the starting point to work back to your private key.

Satoshi has 20,000 exposed addresses holding 50 BTC each, about 1 MILLION BTC.

Then he went further:

He points to the "striking under-representation of cryptographic breakthroughs" among the 722 math results OpenAI published.

"I've witnessed first-hand the US government censoring academic quantum cryptanalysis results."

"Backroom interventionism is my base case."

What he says to do:

Holders, starting with large ones, should consider moving most of their funds to addresses that have never sent a transaction.

After sending from one, move what's left to a new address, which can come from the same seed phrase.

He calls it "a simple, preventative step" that needs no new wallet or new cryptography.


r/QRL • • 8d ago

Casual Idea on why financial institutions love BTC so much

11 Upvotes

I’m somewhat convinced the reason financial institutions love Bitcoin so much and why its success dwarfs every other crypto asset is due to two reasons:

1) It’s the original native crypto asset - There have been no major deviations or significant internal hard forks ever since its original inception and whitepaper release. It’s been running 23 years since the last internal hard fork.

2) Project maturity - it’s been around the longest meaning it’s had the most number of technical eyes on the original whitepaper looking for hidden vulnerabilities and exploits in its protocol implementation and codebase.

Where I’m going with this… financial institutions including banks love stability. Deviations and hard forks represent instability. Regardless of how Q-Day turns out, it’s going to be very interesting watching how banks and financial institutions react to the BTC-pocalypse, i.e. what moves they will make and how they respond. I personally think they will be among the first to exit and do a little self-promotion by jumping into stablecoins they back or own and ride things out. Will there be scams, pump-n-dump schemes, and plenty of laughs along the way while people lose real money? Absolutely! But any early investor can tell you: high risk comes with high reward.

How QRL fits in… they check both boxes. It doesn’t have to be ā€œthe firstā€ but it’s the purest in its crypto class by being native. Physical currency isn’t meant to encounter breaking protocol changes because when they do, there’s a run on the banks and into things like precious metals. Take gold, the most basic monetary unit and a substance found in nature. It doesn’t break. You could hammer it, melt it down, warp it into oblivion, but it still retains its core physical element and I think that’s what QRL aims to be. 🄰


r/QRL • • 11d ago

Discussion ChatGPT, Grok and Gemini All Chose QRL as the Best Quantum-Secure Blockchain

26 Upvotes

On 3 October 2026, I asked ChatGPT, Grok and Gemini the same question:
"What is in your opinion the best quantum-secure blockchain project? Name only one. Explain why."

All three named QRL.

ChatGPT:
https://chatgpt.com/share/6ac1540a-bf38-83ed-adcb-f73eadb6efc9

Grok:
https://x.com/i/grok/share/6a8752f4640d43d7baf16ae5be8636e9

Gemini:
https://share.gemini.google/a6OFzb8IXKHF


r/QRL • • 12d ago

Discussion Behind every step forward QRL takes, there's someone dedicated to making it happen.

22 Upvotes

I sent in the points this week that I think need adjusting in the project, but staying only on criticism would be unfair. There are people putting in real work to keep this ecosystem moving, and that deserves to be said with the same weight. What follows is just my own view, built from following closely and taking part in the discussions for a while, not an official position, not absolute truth, just the read of someone who's around almost every day.

Jack builds sites and tools that brought organization to an ecosystem that used to be scattered and hard to follow. Work nobody sees happening, but that holds up a lot of the pieces, on top of being, 95% of the time, the bridge of communication for what's going on behind the scenes. A guy who deserves every bit of admiration. Ryan is always in the discussions, alongside his partner Michael Strike, constantly getting content out to the public, answering questions from newcomers, holding the space together even when everyone else goes quiet for weeks, presence that often goes unnoticed precisely because it never fails. They deserve full admiration for that.

Robyer and bsnoot keep the communities running, which isn't trivial in a space full of speculation and noise all the time. Answering the same question for the hundredth time without losing patience is the kind of work nobody thanks you for, but it's what keeps the place breathable.

Joseph is the one who masters the technical side and manages to explain what most people can't translate.

ChillerID is, without exaggeration, the one who carries the most consistent promotion of the project. While everyone talks about marketing as some distant concept, he simply shows up, every week, period after period, with or without a favorable market. He's the clearest example that regular presence pays off more than any one-off campaign.

And there's Kaushal, writing the code alongside JPLomas that makes all of this actually exist. Dense, extremely consistent work, the kind that backs up any criticism we raise about communication and visibility. I'd guess the complaints about those weak spots would be two or three times louder if it weren't for you.

Beyond the people I've named, I know there are others working behind the scenes that I simply have no way of crediting here, because I don't know enough about what they do to speak fairly about it. Still, the respect holds just the same, named or not.

Pushing for improvements and recognizing the people carrying the project are not opposing positions, that balance is what keeps a community standing.

Let's support everyone putting their time into the success of this project of global significance. The world will know QRL soon.

If there's someone whose work you know and admire that I didn't mention here, drop their name in the comments and give them the credit they deserve.

#GoQRL


r/QRL • • 13d ago

Discussion QRL Weekly, 2026-October-02

10 Upvotes

​

2nd October 2026

Weekly Development Snapshot

Status

September 18th: QRL Release Verifier audit complete

September 11th: Ledger app audit and remediation complete

August 4th: Audit results published for go-qrllib

April 3rd: Audit complete of 2 cryptographic libraries

March 31st: QRL 2.0 Testnet V2 released

Audits & Remediation: 60%

QRL 2.0 Testnet V3 checklist from that update:

Config parameters

[done] Upstream bug fixes

Testnet V2 scoped audits

QRL 2.0

qrysm

Improved fork-choice and block-import recovery, preserving votes, finalization and execution validation across partial failures, cancellations and reorganizations

Fixed handling of skipped-slot checkpoints, duplicate blocks and state recovery when blocks disappear during reads

Improved state snapshot isolation and cache consistency, and released detached validator references to avoid retaining unused memory

Hardened deposit processing and execution RPC handling against malformed responses, failed batches and timeouts

Corrected SSZ encoding bounds and Merkle proof construction, and preserved signatures, deposit commitments and proposer slashings during copying and conversion

Fixed voluntary exits to load custom chain configuration, so exits use the correct network’s signing parameters

Added regression coverage for the fixes

qrl-tests

Added automated consensus and staking test suite, covering deposits, validator activation, attestations, voluntary exits and withdrawals on a live test network

Added the suite to nightly testing, with deposit waits derived from the live chain configuration and exits signed through the validator keymanager API

go-qrllib

Added an additional Falcon-1024 tests, covering randomized encoding and FFT operations, sampling, key derivation and signing

Included checks for architecture-sensitive key derivation; the upstream Falcon-1024 integration remains in review

Updated the upstream Codecov CI action to v7.1.1

rust-qrllib

Added ML-DSA tests confirming that signing fails after secret-key zeroization, repeated zeroization is safe, and the public key can still verify earlier signatures

Refreshed Rust crates, demo dependencies and CI action pins

qrypto.js

Updated development dependencies and CI action pins, including Mocha 12 and refreshed linting, formatting, build and browser-test tooling

QRL 1.x

QRL

Corrected multisig test seed descriptors on the same branch

qryptonight / qrandomx

Switched Linux builds to portable CPU targets, improving compatibility across x86-64 and ARM64 hardware

Preserved optimized Argon2 runtime selection in qrandomx while using the portable build baseline

Fixed source-distribution builds and version metadata; published pyqryptonight 0.99.13 and pyqrandomx 0.3.4

qrl-docker / qrl-docker-ci

Documented the portable CPU baseline and how operators can verify their images

Removed temporary compiler-wrapper workarounds from the Bionic and Focal images after the mining-library fixes became available

Added Clang 18 to the Noble CI image for ThreadSanitizer testing

qrl-v1-docker-cluster

Added a tool for running disposable QRL 1.x test networks across multiple Docker images

Checks node health, mining, agreement on block hashes, wallet persistence and CPU instruction compatibility, then saves a report and logs


r/QRL • • 13d ago

Discussion Is the post-quantum crypto gold rush starting?

17 Upvotes

It’s early days, but a post-quantum crypto gold rush seems to be starting.

The timeline for Q-Day remains uncertain, but IonQ expects it to arrive in the 2020s. Legacy chains need to prepare. If that timeline holds, many could be caught unprepared. Moments like that challenge the status quo and create new opportunities.

I often see people saying that Bitcoin and other legacy chains can simply upgrade. I believe they can, but the big question is whether they will do it in time. It’s not only about changing the cryptography. Wallets, exchanges, custody solutions and users need to move along too. Then there is the question of what happens to old wallets that never migrate. I wouldn’t underestimate the amount of work and coordination needed.

Personally, I’ve focused on QRL. After extensive due diligence, I believe it offers the strongest technical solution. I like that quantum resistance has been the starting point of the project. With QRL 2.0, I’m especially interested in seeing what developers will build and how the ecosystem develops.

Marketing and exchange availability are the weak points in my view, but the team is working on improving those areas. Good technology needs visibility and people need an easy way to access it. There is still plenty of work to do on that side.

I also think that getting developers involved early and listening to their feedback will be important. A technically strong platform needs to be something people actually enjoy building on. The same applies to wallets and the overall user experience.

Quantus has been making waves recently, suggesting a growing appetite for quantum-resistant crypto. I like the project’s marketing. They’re doing a great job. The trading activity on SafeTrade has caught my attention, and it’ll be interesting to see how things develop now that mainnet is live.

Before investing, I would need to explore the technical solution more closely. I’d want to understand what has been independently reviewed, how the network works under load and what the team still needs to deliver. Marketing can attract attention, but eventually the technology needs to meet expectations.

More broadly, I expect more coins to benefit from this attention. Mochimo, for example, is another project to keep an eye on. The technology seems solid to me, although I have questions about the small team and how development is funded over the longer term.

I don’t think there needs to be only one winner. Different projects could find different uses and communities. Competition could also be good for the whole sector by bringing more attention, developers and pressure to improve.

That said, I’m sure we’ll see a whole new category of PQ shitcoins too. A quantum-resistant label alone won’t make a project worth backing, so staying informed matters. I want to understand what already works, what is still a promise and why anyone would actually use it.

One interesting question is what happens before Q-Day. The market doesn’t necessarily need to wait until a major blockchain is attacked. If the threat starts looking close enough, people may begin looking for alternatives much earlier.

Of course, if legacy chains upgrade successfully, these projects will still need to compete on usability, applications, liquidity and adoption. Quantum resistance gets attention, but there needs to be more behind it.

Buckle up and enjoy the show. My prediction: we’re in for some huge moves over the next few years.

What do you think? Which PQ projects are you following, and what makes them stand out?


r/QRL • • 17d ago

Discussion NEW TO QRL. HOW TO GET INVOLVED

7 Upvotes

hi new here


r/QRL • • 18d ago

Discussion All that’s left for us is to make up stories about pigs and believe.

27 Upvotes

I've been part of the QRL community for three years, and in that time I've watched the same script repeat itself dozens of times. Someone asks what's going on, another shows up with a theory about listing on a bigger exchange, a third swears there's a major partnership being negotiated in secret, and at the end of the day nobody actually knows anything concrete. That's not communication, that's the community trying to fill, with hope and speculation, a space that should be occupied by real information coming from the project itself. And every time someone from the team responds, the answer is basically the same recycled line we've heard for years: they're working on something important, they can't reveal details yet, they ask for patience. Except that patience has now dragged on far too long, and the supposed turning point never comes. We don't know what the next steps are, we don't know the timelines, we don't even know if there's a real schedule behind these vague promises. And the worst part is that this silence has a cost that's rarely discussed: every bull cycle that passes without QRL capitalizing on visibility is a lost opportunity that doesn't come back, because investor attention is the scarcest resource in crypto, and we've been leaving it on the table for years.

On marketing, I recognize the good intentions of the people producing the technical content and the videos. They're competent people who genuinely understand the subject and are dedicated to the project. But good intentions aren't the same as results, and it's time to face that head-on. A video explaining hash-based signatures or resistance to Grover's algorithm, on a channel with a small audience, isn't marketing, it's a technical lecture for people who are already convinced and already understand the problem QRL solves. It doesn't attract anyone new, it just reinforces the opinion of people who are already inside. Real marketing is the ability to convert the attention of people who have never heard of the project and have neither the patience nor the interest to learn cryptography before deciding where to put their money. It's constant presence where people already are, not where we wish they were. It's strategic partnerships, it's specialized and mainstream press coverage, it's creators outside the crypto-technical bubble, it's a narrative simple enough to spread on its own, without needing an explanation. The decision to buy crypto almost never comes down to deep technical understanding, it comes down to fear of missing out, social trust, and a story simple enough to repeat to someone else in thirty seconds. Insisting on heavy technical education as the main growth strategy is repeating a bet that has already proven to be a losing one over the past few years, and QRL's market volume compared to other projects with far weaker technical fundamentals is proof of that.

And here's a point I consider central: practically nobody truly understands quantum computing, outside a very narrow circle of specialists. Not the average investor, not most of the people who comment on the subject with apparent confidence on social media. Even Trump himself has publicly commented on the topic, which shows how far this discussion has already leaked into the mainstream in a shallow, surface-level, sensationalized way. That's not a problem in itself, it's simply the reality of how complex information spreads. The mistake is insisting on explaining the subject with technical depth to an audience that doesn't want depth at all, it wants simplicity and a sense of urgency. Saying that Bitcoin wallets could become vulnerable and emptied overnight convinces and scares far more people than any explanation of lattice-based cryptography or hash-based signatures ever will. As long as the team and the content creators keep speaking the language of people who already understand the subject, they'll essentially keep talking to themselves, inside a bubble that isn't growing.

There's another point that has bothered me for a long time: I haven't seen a real statement from our CEO in over two years. A genuine address, clearly stating where the project stands, where it's headed, what to expect in the coming months, and what the concrete milestones are along the way. It's exactly this void that feeds the theories, because when nobody speaks, the community fills the space on its own with what it wants to hear, not with what's actually happening.

And this brings me to the point that bothers me the most of all: time. QRL is no longer a new project trying to establish itself in the market, this is eight years of existence, eight years of development, eight years of promises that the turning point is just around the corner. Honestly, I don't understand what's still being waited for before a concrete action is taken. What kind of market condition, partnership, or signal is still missing after nearly a decade. If the justification is always "it's not the right time yet" or "we're waiting for the ideal conditions," at some point that waiting stops being strategy. No serious project, with a thesis as strong as quantum resistance, needs eight years to decide to act. The market doesn't wait for anyone, and every year that passes in this reactive posture is another year in which other projects, often with weaker technical fundamentals, occupy the visibility and relevance that QRL should have earned long ago.


r/QRL • • 18d ago

Discussion The Third Little Pig’s Portfolio: A Case for a Quantum Hedge

12 Upvotes

Read the article on X: https://x.com/chillerid76/status/2104176098619666923?s=20

The first little pig built with straw. The second chose sticks. The third invested more effort in bricks.

On a sunny afternoon, all three had shelter. The extra preparation revealed its value when the wolf arrived.

Investors face a similar question: how much is preparation worth before a threat becomes reality?

My interest in post-quantum assets began while exploring what quantum computing might disrupt. That led me to the cryptography protecting digital assets.

Most major blockchains rely on elliptic-curve cryptography (ECC) for the digital signatures that authorize transactions. These signatures let users prove they control their funds without revealing their private keys.

A sufficiently powerful quantum computer could undermine that protection by calculating a private key from an exposed public key, potentially allowing someone else to spend the funds.

My first reaction was probably familiar: surely blockchains can just upgrade?

The more I read, the more complicated that answer became.

ā€œJust upgradeā€ involves people

The tools for migration already exist. NIST (National Institute of Standards and Technology) finalized its first three post-quantum cryptography standards in 2024. Its transition plan proposes deprecating certain weaker public-key configurations after 2030.

But migration takes more than new cryptography.

Banks face complex upgrades, but can centrally coordinate changes, help customers recover access and, in some cases, freeze or reverse fraudulent transfers. Public blockchains must coordinate developers, validators, exchanges, wallets and users without a single authority. Once funds are stolen, there is generally no central administrator who can restore them.

Lost private keys create another dilemma: owners cannot move their coins to quantum-resistant addresses. Leaving those coins untouched could expose them to future theft, while freezing or disabling them raises difficult questions about ownership.

What happens to coins attributed to Satoshi? What if someone wakes from a coma to discover that a migration deadline has passed and their coins are no longer spendable? Who decides, and who bears responsibility for the consequences?

These are technical, governance and ethical challenges that no software update alone can resolve.

That realization led me to QRL, whose mainnet launched with post-quantum signatures in June 2018.

While other networks work through migration, could a small allocation to one already built with this threat in mind make sense?

Why pay attention now?

Q-Day refers to the point when a quantum computer can practically break widely used public-key cryptography.

The quantum threat is evolving from both directions: companies are developing more powerful machines, while researchers are finding more efficient ways to attack existing cryptography.

ECDSA is a digital-signature scheme used by Bitcoin and Ethereum to authorize transactions. A sufficiently capable quantum computer could derive a private key from an exposed public key, enabling forged signatures.

On the algorithm side, ECDSA.fail is an open challenge to improve quantum attack circuits, using Google’s research as a benchmark. Its September 27 leaderboard shows a 792-qubit circuit for an elliptic-curve calculation used within an attack.

On the hardware side, IonQ’s roadmap targets 800 logical qubits in 2027, 1,600 in 2028 and 8,000 in 2029. These circuit widths and planned hardware capacities are entering a similar numerical range, although they are not directly interchangeable.

800 logical qubits would not automatically make a machine capable of breaking Bitcoin. A complete attack requires additional resources and reliable operations throughout its runtime. Nevertheless, IonQ’s CEO has publicly argued that the Q-Day horizon is shifting from the 2030s into the 2020s.

Public announcements provide an incomplete picture. Research can precede publication, and we cannot assume that corporate roadmaps reveal the full extent of work in China or elsewhere. That uncertainty makes confident predictions about who will achieve what first difficult.

The practical concern is that hardware capacity could rise while attack requirements fall. Even if a blockchain introduces quantum-resistant transactions in 2029, moving existing users and assets could take years. Funds left under vulnerable signatures could remain exposed during that transition.

What QRL brings

QRL’s mainnet launched in 2018, following independent audits by Red4Sec and X41 D-Sec. It uses XMSS, a hash-based post-quantum signature scheme covered by NIST’s SP 800-208 recommendation, supported by wallets, explorers, developer libraries and hardware-wallet integration.

The upcoming QRL 2.0 / Zond brings proof-of-stake and EVM-friendly smart contracts using NIST-standardized ML-DSA signatures. As of the September 25, 2026 development update, audits and remediation were at 60%, with reviews involving Trail of Bits and Halborn, established firms with experience in cryptographic software and blockchain security.

For comparison, as checked on September 27, 2026, the Blockchain Quantum Readiness Index ranks QRL first among 126 evaluated projects, scoring 98/100 with a ā€œQuantum-Readyā€ classification.

QRL has used post-quantum signatures since its first block, while crypto-agile design allows additional signature schemes to be introduced as cryptography evolves. Its advantage is avoiding the same urgent transition away from quantum-vulnerable signatures that legacy networks face, while retaining the ability to upgrade.

QRL Foundation and Quantum Future Limited

The Foundation has a history of substantial financial resources since initial coin offering (ICO) in May 2017. Its May 2021 transparency report disclosed approximately $35 million in assets, while published tokenomics, checked on September 27, 2026, separately lists 8.45 million QRL in Foundation reserves. These holdings could provide flexibility to support future development.

Alongside the Foundation, Quantum Future Limited operates as an independent commercial arm of the ecosystem, offering post-quantum advisory and migration-readiness services while developing further infrastructure. The Foundation stewards the open protocol; Quantum Future pursues commercial applications.

Limited exchange access

QRL still faces limited exchange access and liquidity. MEXC is a principal trading venue, but excludes US users and certain other jurisdictions. Using a VPN does not remove those restrictions. Alternatives include Biconomy and LBank, although regional restrictions, service availability and liquidity vary.

The team is working to improve access. Its Chainalysis KYT integration allows exchanges and financial institutions to monitor QRL within existing compliance workflows, addressing an important consideration for potential listings. The team has stated that further work is underway.

What could a 1% allocation represent?

Expected utility theory helps frame the underlying question: a risk-averse investor may value protection against a severe outcome even when its timing and probability are uncertain.

So, what if crypto investors would get prepared and allocate 1% of funds to post-quantum assets?

Using rounded reference values of $2.99 trillion for crypto:

1% Ɨ $2.99 trillion = $29.9 billion.

That hypothetical allocation to post-quantum assets is roughly 586 times QRL’s reference market capitalization ($51 million).

Reference values are from CoinGecko snapshots consulted on September 27, 2026: total crypto market capitalization and QRL market capitalization. Prices fluctuate, and the snapshots were not synchronized live quotes.

This illustrates scale of potential for a leading post-quantum blockchain. Demand could spread across multiple projects, and inflows do not translate directly into market capitalization.

Preparation without guarantees

QRL is not an insurance policy. Its price could fall during a crypto crisis. Other networks could migrate successfully, and adoption, liquidity and execution still matter.

The potential asymmetry depends on investors increasingly valuing deployed post-quantum security. A small position limits the capital committed while providing exposure to that possibility.

The third little pig prepared before the knock at the door.

Investors can examine quantum risk before its timing becomes certain, too.

Disclosure: I hold QRL and have a financial interest in its success. This article shares my perspective, not a recommendation to buy.


r/QRL • • 20d ago

Discussion QRL Weekly, 2026-September-25

11 Upvotes

Status

  • September 18th: QRL Release Verifier audit complete
  • September 11th: Ledger app audit along with its remediation is complete
  • August 4th: Audit results published for go-qrllib
  • April 3rd: Audit complete of 2 cryptographic libraries
  • March 31st: QRL 2.0 Testnet V2 Released
  • Audits & Remediation: 60%

QRL 2.0 Testnet V3 remaining work:

  • Config parameters
  • [done] Upstream bug fixes
  • Testnet V2 scoped audits

QRL 2.0

go-qrl

  • Updated docs
  • drop unused light client and checkpoint constants
  • drop unsupported block header fields
  • drop history filter for the removed personal namespace
  • Upgraded fastssz upstream library and replace obsolete merkleization API

qrysm

  • Fix reward and penalty order
  • Added several fix related to fork recovery & fork choice

go-qrllib

  • Implemented additional tests for Falcon 1024

qrlft — Updated go-qrllib

  • vendored Dilithium changes with linting fixes
  • bumped the CI signing-action version

QRL 1.x

QRL — Added regression coverage and documentation/CI cleanup

  • fixed PyPI upload behaviour
  • added Prospector configuration
  • several bug fixes

qrllib — multisig fixes

  • repaired PyPI release workflow

qrl-docker

  • Major refresh of the Docker operator documentation and repository layout: Ubuntu branch/image strategy
  • 5 LTS version images
  • latest (Resolute)/Noble guidance, TEST vs upstream dependencies
  • persistent volumes and wallet migration
  • port/security guidance, multi-architecture notes

https://www.theqrl.org/weekly/2026-september-25/


r/QRL • • 20d ago

Questions what wallets support qrl excluding the official wallet (for ios, preferably foss)

9 Upvotes

the qrl wallet seems to not be available on ios


r/QRL • • 21d ago

Discussion Built a post-quantum crypto lib in Python (ML-KEM + AES). Feedback?

1 Upvotes

Hi everyone,

I've been working on a personal project called ChaosCrypt-Hybrid, a research-grade post-quantum cryptographic library in Python. My goal was to implement the new NIST standards while paying special attention to real-world implementation flaws, specifically side-channel attacks.

Key features I've implemented:

\- šŸ›”ļø NIST FIPS 203 (ML-KEM-768) for quantum-resistant key encapsulation.

\- šŸ”’ AES-256-GCM for authenticated symmetric encryption.

\- ā±ļø Constant-time operations to mitigate timing attacks.

\- 🧪 36 comprehensive tests, including 13 dedicated timing attack resistance tests.

\- šŸ“Š Benchmarks showing \~8,500 ops/sec for key generation and \~497 MiB/s for AES-256-GCM.

I've also documented the threat model using the STRIDE methodology in the repo.

GitHub: [https://github.com/uslumurat405-oss/chaoscrypt-hybrid\](https://github.com/uslumurat405-oss/chaoscrypt-hybrid)

I'm sharing this here because I would highly value feedback from this community, especially regarding:

  1. Are there any edge cases in my constant-time implementation that I might have missed?

  2. Any suggestions for improving the hybrid key derivation process?

Thanks in advance for your time and insights!


r/QRL • • 22d ago

Discussion Gerund effect.

3 Upvotes

Quantum computing is suffering from the ā€œgerund effect.ā€

ā€œWe are developing.ā€
ā€œWe are researching.ā€
ā€œWe are advancing.ā€
ā€œWe are monitoring.ā€
ā€œWe are preparing.ā€

The technology always seems to be on its way, but never seems to arrive.

The debate remains stuck in the future: when computers become larger, when the technology matures, when the threat becomes concrete, when costs come down.

This narrative reduces the sense of urgency and limits investment in the sector. If everything is still ā€œhappening,ā€ it seems there is still plenty of time to wait.

However, it is obvious that moving from an experimental technology to widespread adoption requires years of research, infrastructure, testing, standardization, and adaptation. The risk most people face is recognizing the need to prepare only when the window of opportunity is already closing.

When we finally move out of the gerund and start seeing tangible events and concrete facts, the broader public will make quantum computing a priority, and QRL could take off. But that is only a bet.

The world is built on bets. That is what created prediction markets.

Who will you bet on: QRL or Bitcoin?


r/QRL • • 23d ago

Quantum News IonQ Demonstrates Industry’s First End-to-End Real-Time Quantum Error Decoder

14 Upvotes

September 22, 2026

Breakthrough removes a major bottleneck in fault-tolerant quantum computing, enabling real-time error correction across millions of operations without slowing down execution time.

COLLEGE PARK, Md.--(BUSINESS WIRE)-- IonQ (NYSE: IONQ), the world’s leading full-stack quantum platform and foundry, today announced a major milestone in fault-tolerant quantum computing. Researchers demonstrated the development and successful testing of the industry’s first end-to-end real-time quantum error correction decoder that runs on a single standard off-the-shelf central processing unit (CPU).

Quantum error correction is essential for building practical, fault-tolerant quantum computers because physical qubits are inherently sensitive to environmental noise. However, finding and fixing those errors in real time has historically presented a significant computing challenge. In conventional approaches, the classical computers tasked with decoding errors can easily become overwhelmed. That creates a processing bottleneck that forces the quantum computer to pause and wait. IonQ’s breakthrough demonstrates that a single, standard computer processor can manage this complex workload continuously in the background, keeping the quantum system running at full speed.

"Successfully validating real-time decoding across hundreds of logical qubits and over millions of logical operations is an important milestone. Moreover, the fact that our decoder runs on a single CPU provides a practical path to commercial-scale fault-tolerant quantum computing," said Nicolas Delfosse, paper co-author and quantum research lead at IonQ.

In technical research published on arXiv, IonQ evaluated its dual-decoder architecture across complex benchmark circuits simulating up to 408 logical qubits across 88 memory blocks and magic factories. These circuits were executing more than 31.5 million individual quantum operations at the 'MegaQuOp' scale. Under standard operational noise, IonQ's decoder introduced as little as 0.02% 'stretch' time. That means the decoding overhead added virtually no delay to the overall quantum computation.

"IonQ is enabling cost-effective quantum system scaling through direct verification of each component," said John Gamble, Vice President at IonQ Architecture. "Empirical evidence like this supports our vision for fault tolerance where time-to-solution, cost-to-solution, and energy-to-solution are always our North Star."

This achievement validates a core pillar of IonQ’s proprietary Walking Cat architecture and confirms that classical hardware overhead does not need to scale exponentially as quantum systems grow wider in logical qubits or deeper in operations. The breakthrough establishes a key technological foundation for IonQ’s roadmap beyond 256 physical qubits toward industrial-scale platforms controlling thousands of qubits.

About IonQ