​
Wallet Scanning

The QuantumSafe wallet scanner analyzes any blockchain address across 19 supported chains and produces two scores: an Address Risk Score and a Chain Readiness Grade.
QuantumSafe is built on current NIST-standardized algorithms and does not guarantee absolute security. This is a quantum-readiness tool, not a quantum-proof solution.

​
Supported Chains

CategoryChainChain IDSignature SchemeReadiness Grade
MajorEthereumethereumECDSA (secp256k1)D
MajorBitcoinbitcoinECDSA (secp256k1)D
MajorSolanasolanaEdDSA (Ed25519)F
EVM L1BSCbscECDSA (secp256k1)D
EVM L1AvalancheavalancheECDSA (secp256k1)D
EVM L1GnosisgnosisECDSA (secp256k1)D
EVM L1CeloceloECDSA (secp256k1)D
EVM L2BasebaseECDSA (secp256k1)D
EVM L2ArbitrumarbitrumECDSA (secp256k1)D
EVM L2OptimismoptimismECDSA (secp256k1)D
EVM L2MantlemantleECDSA (secp256k1)D
EVM L2BlastblastECDSA (secp256k1)D
EVM L2SonicsonicECDSA (secp256k1)D
EVM L2LinealineaECDSA (secp256k1)D
EVM L2ScrollscrollECDSA (secp256k1)D
EVM L2 ZKPolygonpolygonECDSA (secp256k1)D
EVM L2 ZKzkSynczksyncECDSA (secp256k1)C
Non-EVMCosmoscosmosSecp256k1 / Ed25519D
Non-EVMTrontronECDSA (secp256k1)D
Sonic was previously known as Fantom. The chain rebranded in late 2024. Use sonic as the chain identifier.

​
Non-EVM Address Formats

Non-EVM chains use different address formats from the standard 0x-prefixed EVM addresses:
ChainFormatExampleValidation
SolanaBase58 (32-44 chars)9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWMBase58 alphabet, 32-44 characters
BitcoinLegacy (1), P2SH (3), Bech32 (bc1)bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlhPrefix + checksum validation
CosmosBech32 (cosmos1)cosmos1xy2kgdygjrsqtzq2n0yrf2493p83kkfj6mvnqdcosmos1 prefix + bech32 checksum
TronBase58Check (T prefix)TJCnKsPa7y5okkXvQAidZBzqx3QyQ6sxMWT prefix + base58check

​
How It Works

When you scan a wallet address, QuantumSafe:
  1. Resolves the chain and address type
  2. Checks public key exposure (has the address sent transactions?)
  3. Evaluates the balance and transaction patterns
  4. Assesses the chain’s PQC migration readiness
  5. Returns a composite risk score
// EVM chain scan
const scan = await qs.scan.wallet({
  address: "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18",
  chain: "ethereum",
});

console.log("Risk Score:", scan.riskScore);     // "W3"
console.log("Risk Label:", scan.riskLabel);      // "High"
console.log("Chain Grade:", scan.chainGrade);    // "D"

// Solana scan
const solScan = await qs.scan.wallet({
  address: "9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM",
  chain: "solana",
});

// Bitcoin scan
const btcScan = await qs.scan.wallet({
  address: "bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh",
  chain: "bitcoin",
});

​
Address Risk Score (W1-W4)

The risk score reflects how vulnerable the specific address is to quantum attack:
ScoreLabelDescription
W1LowNo public key exposure. Funds in hash-protected addresses.
W2MediumLimited public key exposure. Low balance or recent activity.
W3HighPublic key exposed via transactions. Significant balance at risk.
W4CriticalPublic key fully exposed. High-value address. Immediate action recommended.

​
Risk Factors

The scanner evaluates these factors:
  • Public key exposure — Has the address broadcast transactions that reveal its public key?
  • Balance at risk — How much value is held by the address?
  • Transaction frequency — Higher activity = more exposure points
  • Address type — Some address formats (P2PKH, P2TR) offer better hash protection
  • Re-use patterns — Address reuse increases exposure

​
Solana Special Case

On Solana, the wallet address is the public key (base58-encoded Ed25519 public key). This means:
  • W1 is always scored as 40 (public key is inherently exposed by design)
  • Every Solana address has its public key exposed by default
  • The risk score is primarily driven by balance and transaction activity
Solana addresses are always more exposed than EVM addresses that have never sent a transaction, because the Solana address format directly encodes the public key.

​
Bitcoin Special Case

Bitcoin uses the UTXO (Unspent Transaction Output) model, which affects scanning:
  • Unused addresses (no outbound transactions) are safe — public key is hash-protected
  • Spent UTXOs expose the public key, but if funds were moved to a new address, they are safe
  • P2TR (Taproot) addresses provide the best hash protection among Bitcoin address types
  • The scanner evaluates each UTXO individually for exposure

​
Chain Readiness Grade

The chain-level grade reflects how prepared the blockchain itself is for PQC migration:
GradeDescription
AActive PQC migration plan. Testnet implementations exist.
BPQC research acknowledged. Proposals or EIPs in progress.
CNo official PQC plan. Community discussion only.
DNo PQC activity. Vulnerable signature scheme with no migration path.
FPublic key inherently exposed by address format. No PQC plan.
Chain grades are updated monthly based on protocol development activity. See the Scoring Methodology for full details.

​
Scanning with Publishable Keys

Wallet scanning is the only endpoint accessible with Publishable (qs_pub_) keys, making it safe to call from frontend applications: 
// Frontend-safe
const qs = new QuantumSafe({
  apiKey: "qs_pub_live_pk_abc123...",
});

const scan = await qs.scan.wallet({
  address: "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18",
});

​
Next Steps