# Avalanche (AVAX) Quantum Readiness Report

> Avalanche has a QRI score of 0/100 and is assessed at Stage 1 (Quantum Risk Assessed) with low evidence confidence.

Evaluation date: 2026-08-19. Review status: draft. Evaluated scope: Native asset (AVAX), consensus, P2P, bridge, and C-Chain EVM layer.

Avalanche relies entirely on classical cryptography across all critical layers. Spend authorization uses ECDSA (secp256k1), consensus and Avalanche Warp Messaging (AWM) use BLS12-381, and the Avalanche Bridge relies on ECDSA/TLS. The C-Chain's EVM compatibility means public keys are permanently exposed after the first transaction, creating a growing pool of long-exposure quantum-vulnerable value. While the fast finality of the network reduces the short-exposure attack window, there is currently no formal PQC migration roadmap, prototype, or deployed mitigation. No public cryptographic inventory or quantum threat model exists. The project is classified as Stage 1 (Quantum Risk Assessed) only because the threat is acknowledged in broader ecosystem discussions, but no meaningful production protection or migration mechanism is in place.

## Core resources

- [Avalanche QRI report](https://qrindex.org/projects/avalanche-2/): Human-readable assessment with score, stage, evidence, blockers, risks, and assurance notes.
- [Avalanche structured report data](https://qrindex.org/projects/avalanche-2/report.json): Complete report as JSON for deterministic machine processing.
- [QRI methodology](https://qrindex.org/methodology/): Scoring model, evidence handling, readiness stages, confidence, assurance, and report status.
- [All QRI project reports](https://qrindex.org/llms.txt): Score-ranked index of every published project assessment.
- [Avalanche official website](https://www.coingecko.com/en/coins/avalanche-2): Project-maintained website.



## Evidence sources

- [Evidence source 1](<https://build.avax.network/docs/rpcs/other/standards/cryptographic-primitives>): Public source cited by the Avalanche QRI assessment.
- [Evidence source 2](<https://github.com/ava-labs/avalanchego>): Public source cited by the Avalanche QRI assessment.
- [Evidence source 3](<https://github.com/ava-labs/audits>): Public source cited by the Avalanche QRI assessment.
- [Evidence source 4](<https://support.avax.network/en/articles/5462273-has-the-avalanche-code-been-audited-where-are-the-audit-reports>): Public source cited by the Avalanche QRI assessment.