You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| Transaction Signatures | B | 🔧 | In Development |
17
-
| Consensus |D|⚠️ |Discussed|
18
-
| P2P Networking |F|❌|Not Discussed|
19
-
| On-Chain Logic |A|✅|Shipped|
17
+
| Consensus |C|🗺️ |Roadmapped|
18
+
| P2P Networking |C|🗺️|Roadmapped|
19
+
| On-Chain Logic |B|🔧|In Development|
20
20
| Other Features | ➖ | ➖ | Not Applicable |
21
-
| EC Sunset |C|🗺️|Roadmapped|
21
+
| EC Sunset |B|🔧|In Development|
22
22
23
-
Arc is a [Circle-developed stablecoin-native L1](https://www.circle.com/blog/introducing-arc-an-open-layer-1-blockchain-purpose-built-for-stablecoin-finance) built with USDC as its native gas token. Circle has published a comprehensive [post-quantum security roadmap](https://www.arc.network/blog/arcs-quantum-resistant-design-and-roadmap-why-it-matters) for Arc, and has since released a [detailed technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) describing the cryptographic strategy in depth. The paper covers a three-phase migration model — Readiness (current), Transition (hybrid PQ+classical mode), and Switch (full PQ) — and names specific algorithms and mechanisms for each surface. Phase 1 is live on testnet with opt-in quantum-resistant wallets and an **SLH-DSA-SHA2-128s** EVM precompile; Arc mainnet is forthcoming.
23
+
Arc is a [Circle-developed stablecoin-native L1](https://www.circle.com/blog/introducing-arc-an-open-layer-1-blockchain-purpose-built-for-stablecoin-finance) built with USDC as its native gas token. Circle has published a comprehensive [post-quantum security roadmap](https://www.arc.network/blog/arcs-quantum-resistant-design-and-roadmap-why-it-matters) for Arc, and has released a [detailed technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf)(co-authored with Dan Boneh of Stanford) describing the cryptographic strategy in depth. The paper covers a three-phase migration model — Readiness (current), Transition (hybrid PQ+classical mode), and Switch (full PQ) — and names specific algorithms and mechanisms for each surface. Phase 1 includes opt-in quantum-resistant wallets and an **SLH-DSA-SHA2-128s** EVM precompile, available on testnet and in the pre-mainnet codebase. Arc mainnet has not yet launched (summer 2026 target).
24
24
25
25
The roadmap is a Circle corporate commitment rather than a community vote — Arc has no on-chain governance at launch. The Switch phase includes an explicit published commitment to reject ECDSA transactions at the protocol level, making Arc one of the few chains with a named EC retirement commitment in the public record.
26
26
@@ -48,47 +48,47 @@ The Switch phase of Circle's roadmap includes an explicit protocol-level commitm
48
48
49
49
## 2. Consensus
50
50
51
-
**Grade: D ⚠️**
51
+
**Grade: C 🗺️**
52
52
53
-
Arc uses Malachite BFT consensus (Tendermint-style). Validator signing is currently ECDSA-based. Circle's [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) explicitly commits to upgrading validator signatures: "We are working toward upgrading Arc's validator signatures to a post-quantum scheme." The same paper identifies the key blocking dependency — no drop-in post-quantum replacement for BLS aggregate signatures currently exists. BLS aggregate signatures are the scheme used in Ethereum-style consensus; their absence from the post-quantum standardized family is a known open problem across the broader PoS ecosystem, not specific to Arc.
53
+
Arc uses Malachite BFT consensus (Tendermint-style). Validator signing is currently ECDSA-based. Circle's [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) explicitly commits to upgrading validator signatures: "We are working toward upgrading Arc's validator signatures to a post-quantum scheme." The same paper identifies the key blocking dependency — no drop-in post-quantum replacement for BLS aggregate signatures currently exists. BLS aggregate signatures are the scheme used in Ethereum-style consensus; their absence from the post-quantum standardized family is a known open problem across the broader PoS ecosystem, not specific to Arc. A final candidate has not been selected.
54
54
55
55
**Current state.** Validator signatures use ECDSA. No post-quantum consensus implementation has been published for Arc.
56
56
57
57
**Planned future work.** Circle's Transition phase lists validator PQ signing as a roadmap item, contingent on a suitable aggregate signature scheme becoming available. No algorithm or schedule has been announced.
58
58
59
59
## 3. P2P Networking
60
60
61
-
**Grade: F ❌**
61
+
**Grade: C 🗺️**
62
62
63
-
Arc uses libp2p with the Noise Protocol for peer-to-peer communication. Noise uses X25519 ECDH for the key exchange and Ed25519 for node identity — both EC-based schemes. Circle's [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) explicitly identifies this surface as a quantum risk and states that the libp2p project has PQ networking "under active exploration" as of its 2025 annual report. The Transition phase of Circle's roadmap lists a "libp2p/Noise Protocol PQ upgrade" as a named work item.
63
+
Arc uses libp2p with the Noise Protocol for peer-to-peer communication. Noise uses X25519 ECDH for the key exchange and Ed25519 for node identity — both EC-based schemes. Circle's [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) explicitly identifies this surface as a quantum risk and states that the libp2p project has PQ networking "under active exploration" as of its 2025 annual report. The Transition phase of Circle's roadmap lists a "libp2p/Noise Protocol PQ upgrade" as a named work item, and specifies **X25519MLKEM768** (a hybrid of X25519 and **ML-KEM-768**, FIPS 203) for TLS transport as part of the same transition.
64
64
65
65
**Current state.** libp2p with Noise Protocol (X25519 ECDH + Ed25519). No post-quantum handshake or node identity scheme deployed.
66
66
67
-
**Planned future work.** The Transition phase roadmap includes a libp2p PQ upgrade. The [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) indicates **X25519MLKEM768**(a hybrid of X25519 and **ML-KEM-768**, FIPS 203) for TLS transport as part of the same transition. No specific PR or implementation timeline has been published.
67
+
**Planned future work.** The Transition phase roadmap includes a libp2p PQ upgrade and **X25519MLKEM768** for external TLS communication. No specific PR or implementation timeline has been published.
68
68
69
69
## 4. On-Chain Logic
70
70
71
-
**Grade: A ✅**
71
+
**Grade: B 🔧**
72
72
73
-
The [Arc node source](https://github.com/circlefin/arc-node) contains an EVM precompile for **SLH-DSA-SHA2-128s** signature verification at `crates/precompiles/src/pq.rs`. Any smart contract on Arc can call this precompile to verify post-quantum signatures on-chain without custom cryptographic code. The interface is described in the source as the "Experimental post-quantum cryptography precompile interface" as of a May 2026 update. Test vector generation and test vectors are also present in the codebase.
73
+
The [Arc node source](https://github.com/circlefin/arc-node) contains an EVM precompile for **SLH-DSA-SHA2-128s** signature verification at `crates/precompiles/src/pq.rs`. Any smart contract on Arc can call this precompile to verify post-quantum signatures on-chain without custom cryptographic code. The precompile uses `slh-dsa 0.2.0-rc.5` (Rust) and its interface is described in the source as the "Experimental post-quantum cryptography precompile interface" as of a May 2026 update. Test vector generation and test vectors are also present in the codebase.
74
74
75
-
This precompile is confirmed in the testnet codebase. Arc's public mainnet had not yet launched as of the date this report was generated; once mainnet activates with the precompile live, this rating will be eligible to advance.
75
+
Arc's public mainnet has not yet launched. The precompile is confirmed in the testnet codebase and is part of the pre-mainnet `arc-node` source. Once mainnet activates with the precompile live, this category will be eligible to advance.
76
76
77
77
**Current state.****SLH-DSA-SHA2-128s** EVM precompile implemented in Arc testnet node source (`pq.rs`). The precompile interface is labeled "Experimental." Mainnet activation pending.
78
78
79
79
**Planned future work.** Mainnet activation. Circle's [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) describes the precompile as the foundation for Phase 1 opt-in PQC wallets and on-chain PQ signature verification.
80
80
81
81
## 5. Other Features
82
82
83
-
Arc does not support any special features.
83
+
Arc is building new PQC-first features (encrypted memos via **X-Wing HPKE**, TEE privacy layer, ECRecoverOverride, encrypted mempool) with no prior EC-based versions to migrate. There are no chain-specific EC cryptographic primitives to sunset in this category.
84
84
85
85
## 6. EC Sunset
86
86
87
-
**Grade: C 🗺️**
87
+
**Grade: B 🔧**
88
88
89
-
> Adding PQC alongside EC is not the same as retiring EC. For reference, Arc's PQC-adoption ratings per category are: Tx Signatures 🔧, Consensus ⚠️, P2P ❌, On-Chain ✅, Other ➖.
89
+
> Adding PQC alongside EC is not the same as retiring EC. For reference, Arc's PQC-adoption ratings per category are: Tx Signatures 🔧, Consensus 🗺️, P2P 🗺️, On-Chain 🔧, Other ➖.
90
90
91
-
Circle's [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) contains the most concrete EC retirement commitment available in Arc's public record. The Switch phase includes: "Arc and USDC smart contracts will reject transactions signed with ECDSA" and "ecrecover transitions to post-quantum-only mode." The Transition phase names a specific engineering mechanism — an ECRecoverOverride contract deployed via hard fork at the `ecrecover` precompile address — that would support both ECDSA and PQ schemes simultaneously before the full switch. Validator signing is also scheduled for a PQ upgrade during the Transition phase.
91
+
Circle's [technical paper](https://6778953.fs1.hubspotusercontent-na1.net/hubfs/6778953/PDFs/quantum_paper.pdf) contains the most concrete EC retirement commitment available in Arc's public record. The Switch phase includes: "Arc and USDC smart contracts will reject transactions signed with ECDSA" and "ecrecover transitions to post-quantum-only mode." The Transition phase names a specific engineering mechanism — an ECRecoverOverride contract deployed via hard fork at the `ecrecover` precompile address — that would support both ECDSA and PQ schemes simultaneously before the full switch. Validator signing is also scheduled for a PQ upgrade during the Transition phase. The ECRecoverOverride mechanism is specifically named and described as an engineering deliverable, indicating active development work beyond a policy statement alone.
92
92
93
93
No dates have been published for either the Transition or Switch phases, and the final algorithm selections for several categories remain open. But the commitment to remove ECDSA is explicit and on the public record, not merely implied by the presence of a PQC roadmap.
94
94
@@ -108,7 +108,7 @@ Arc has no on-chain governance at launch; protocol decisions are made by Circle
108
108
109
109
---
110
110
111
-
_Generated on 03 Jun 2026 based on information as of 25 May 2026._
111
+
_Generated on 04 Jun 2026 based on information as of 01 Jun 2026._
112
112
113
113
_[Propose a correction or update](https://github.com/tectonic-labs/quantum-tracker-data/issues/new?template=data-correction.yml)_
0 commit comments