# Cosmos Hub (ATOM) Quantum Readiness Report

> Cosmos Hub has a QRI score of 12.78/100 and is assessed at Stage 2 (Mitigation / Development) with medium evidence confidence.

Evaluation date: 2026-06-02. Review status: draft. Evaluated scope: Native asset (ATOM), consensus layer, IBC bridge verification, account/transaction layer, P2P networking.

Cosmos Hub (ATOM) relies entirely on classical elliptic curve cryptography in production: secp256k1 for user account transaction signatures and Ed25519 for validator consensus authentication. No PQC or hybrid-PQC protection exists on mainnet as of June 2026. The IAVL state tree uses SHA-256 hashing which provides adequate quantum resistance for state commitments, but all ownership authorization and consensus authentication paths remain quantum-vulnerable. Third-party hackathon work (DoraFactory/pqc-cosmos) demonstrates a Dilithium prototype integrated into Tendermint, and community forum discussions outline a potential gradual migration path, but no official governance proposal, foundation roadmap, or production PQC deployment exists. IBC light client verification also depends on Ed25519 validator signatures, extending quantum vulnerability to cross-chain settlement. The project qualifies for Stage 2 due to ecosystem-level prototype and research work, but production users receive no quantum protection.

## Core resources

- [Cosmos Hub QRI report](https://qrindex.org/projects/cosmos/): Human-readable assessment with score, stage, evidence, blockers, risks, and assurance notes.
- [Cosmos Hub structured report data](https://qrindex.org/projects/cosmos/report.json): Complete report as JSON for deterministic machine processing.
- [QRI methodology](https://qrindex.org/methodology/): Scoring model, evidence handling, readiness stages, confidence, assurance, and report status.
- [All QRI project reports](https://qrindex.org/llms.txt): Score-ranked index of every published project assessment.
- [Cosmos Hub official website](https://www.coingecko.com/en/coins/cosmos): Project-maintained website.



## Evidence sources

- [Evidence source 1](<https://forum.cosmos.network/t/post-quantum-security/16975>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 2](<https://docs.cometbft.com/main/spec/core/encoding>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 3](<https://github.com/cosmos/cosmos-sdk>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 4](<https://docs.cosmos.network/sdk/v0.50/learn/beginner/accounts>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 5](<https://pkg.go.dev/github.com/cosmos/cosmos-sdk/crypto/keys/secp256k1>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 6](<https://cosmos-docs.mintlify.app/sdk/latest/reference/architecture/adr-028-public-key-addresses>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 7](<https://docs.tendermint.com/v0.34/tendermint-core/validators.html>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 8](<https://github.com/cometbft/cometbft/blob/main/spec/core/data_structures.md>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 9](<https://docs.cometbft.com/v0.38/spec/p2p/legacy-docs/peer>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 10](<https://docs.rs/cometbft-p2p>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 11](<https://docs.cosmos.network/cometbft/latest/docs/experimental/lib-p2p>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 12](<https://docs.cosmos.network/hub/latest/validators/kms/kms_ledger>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 13](<https://www.coingecko.com/en/coins/cosmos-hub>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 14](<https://coinmarketcap.com/currencies/cosmos/>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 15](<https://www.coinbase.com/earn/staking/cosmos>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 16](<https://messari.io/project/cosmos-hub>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 17](<https://github.com/cosmos/incidents/blob/main/ibc/2025/0409_galaxy.md>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 18](<https://github.com/DoraFactory/pqc-cosmos>): Public source cited by the Cosmos Hub QRI assessment.
- [Evidence source 19](<https://github.com/cometbft/cometbft>): Public source cited by the Cosmos Hub QRI assessment.