# Pump.fun (PUMP) Quantum Readiness Report

> Pump.fun has a QRI score of 3.5/100 and is assessed at Stage 1 (Quantum Risk Assessed) with medium evidence confidence.

Evaluation date: 2026-06-05. Review status: draft. Evaluated scope: SPL token (PUMP) on Solana mainnet, inheriting Solana L1 cryptographic posture; token-specific admin/governance keys evaluated separately per QRI §7.2 Token Inheritance rule.

Pump.fun (PUMP) is a standard SPL token on Solana with no custom cryptographic or cross-chain dependencies. Per QRI §7.2 Token Inheritance, it shares Solana's base-layer (L1) quantum posture. As of 2026-06-05, Solana has no production post-quantum cryptographic protection: all spend authorization uses Ed25519, consensus uses BLS12-381, and all account addresses are exposed Ed25519 public keys (long-exposure attack surface). Token-specific admin authorities (global authority, fee recipients, withdraw authority, set_creator_authority, fee sharing config admins) are all standard Ed25519 keypairs, creating an additional quantum-critical vulnerability independent of the base layer. Solana's quantum research is well-documented (Falcon-512 identified as leading PQC candidate, Anza migration proof-of-concept at ~400kB/55ms, Blueshift Winternitz Vault opt-in on mainnet, SIMD-0461 Falcon syscall proposed), but none of this constitutes material production protection. The QRI Score of 4 reflects Stage 1 (Quantum Risk Assessed): quantum risk is acknowledged through Solana ecosystem work, but there is no meaningful production protection for PUMP token holders or admin authorities. Approximately $642M in market cap and $74M daily volume remain protected only by quantum-vulnerable Ed25519 signatures. Confidence is Medium: the quantum-critical vulnerabilities are well-established from primary sources (public code, official documentation, Solana research publications), but no Pump.fun-specific quantum assessment or PQC migration work exists.

## Core resources

- [Pump.fun QRI report](https://qrindex.org/projects/pump-fun/): Human-readable assessment with score, stage, evidence, blockers, risks, and assurance notes.
- [Pump.fun structured report data](https://qrindex.org/projects/pump-fun/report.json): Complete report as JSON for deterministic machine processing.
- [QRI methodology](https://qrindex.org/methodology/): Scoring model, evidence handling, readiness stages, confidence, assurance, and report status.
- [All QRI project reports](https://qrindex.org/llms.txt): Score-ranked index of every published project assessment.
- [Pump.fun official website](https://www.coingecko.com/en/coins/pump-fun): Project-maintained website.



## Evidence sources

- [Evidence source 1](<https://solana.com/news/quantum-readiness>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 2](<https://www.anza.xyz/blog/securing-solana-against-a-powerful-quantum-adversary>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 3](<https://www.helius.dev/blog/solana-post-quantum-cryptography>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 4](<https://jumpcrypto.com/resources/quantum-migration-paths-for-solana>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 5](<https://blueshift.gg/research/quantum-proofing-solana>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 6](<https://github.com/anza-xyz/cryptography/pull/10>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 7](<https://github.com/solana-foundation/solana-improvement-documents/pull/461>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 8](<https://github.com/pump-fun/pump-public-docs>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 9](<https://github.com/pump-fun/pump-public-docs/blob/1059c0d9/docs/PUMP_PROGRAM_README.md>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 10](<https://github.com/pump-fun/pump-public-docs/blob/1059c0d9/idl/pump.ts>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 11](<https://coinmarketcap.com/currencies/pump-fun/>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 12](<https://www.coingecko.com/en/coins/pump-fun>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 13](<https://github.com/pashov/audits/blob/master/team/md/Pump-security-review_2025-03-18.md>): Public source cited by the Pump.fun QRI assessment.
- [Evidence source 14](<https://github.com/pashov/audits/blob/master/team/md/Pump-security-review_2025-10-08.md>): Public source cited by the Pump.fun QRI assessment.