blockchain network

Tidecoin TDC

Tidecoin is assessed as a PQ-native production proof-of-work UTXO network for native TDC. Public code, protocol documentation, component repositories, and mainnet artifacts support mandatory Falcon-512 transaction authorization from genesis, no retained classical native-ownership namespace, hash-based state mechanisms, hardened PQ wallet derivation, and no validator-signature authentication layer. Native ECC-to-PQC migration is therefore complete by design. Confidence is Medium because no independent audit was supplied, PQHD and implementation-specific Falcon behavior lack located formal review, and operational assurance documentation is limited. A separate wTDC representation on BNB Smart Chain is outside the native scope and should not be assumed to inherit Tidecoin L1 protection.

PQ-NativePQ-Resistant
Stage Migration Complete / Quantum-Ready
Confidence Medium
Urgency [No Action Needed] for native TDC; [Monitor for Updates] for wrapped representations, independent review, and FN-DSA upgrade details
Review Status Draft
Evaluated 2026-08-20
Scope Native TDC on the production Tidecoin Layer 1 as of 2026-08-20, covering spend authorization, address and key exposure, proof-of-work consensus, UTXO state integrity, P2P transport, first-party wallet workflows, and native-asset migration. The external wTDC representation on BNB Smart Chain is excluded from native-L1 scoring and treated as an unverified wrapper dependency.
AI-generated report. This report was produced by the evaluator and synthesis pipeline. Review status: draft.

Category breakdown

QRI Factors

Algorithm & Implementation Assurance 12.25 / 20
Migration Mechanism, Governance & Ecosystem Coordination 13.5 / 15
Migration Status & Value-at-Risk 25 / 25
Production Cryptographic Protection 35 / 35
Security Assessment & Evidence Preparedness 5 / 5

Critical Quantum Blockers

  • None identified for this report scope.

Key Risks

  • Holders of the separate wTDC representation may depend on BNB Smart Chain accounts, contracts, administrators, custodians, or bridge signers using classical cryptography. The supplied evidence does not establish the wrapper's control model, activity, value-at-risk, or whether it supports unrestricted two-way flow.
  • The absence of independent cryptographic and implementation review leaves residual assurance risk around Falcon integration, PQHD derivation, SHA-512 witness extensions, and ML-KEM transport, although the principal native quantum-security properties are inspectable through public code and documentation.
  • Legacy Falcon-512 compatibility behavior, including documented nonce reuse across retries, warrants independent assessment. The canonical evidence does not show that it enables key recovery, forgery, or a current quantum attack.
  • A future backward-incompatible transition to finalized FN-DSA may require careful coordination, although current native quantum protection does not depend on completing that future PQ-to-PQ upgrade.
  • No documented quantum-specific emergency response process was located for a newly discovered weakness in Falcon, PQHD, ML-KEM integration, or related implementation code.

Assurance Notes

  • Public source code, protocol documentation, component repositories, and mainnet explorer evidence support mandatory Falcon-512 authorization from genesis and no classical native-ownership path.
  • No independent cryptographic or implementation audit covering Falcon integration, PQHD derivation, SHA-512 witness extensions, or ML-KEM transport was supplied. This limits confidence but does not itself reduce readiness where the production design is publicly verifiable.
  • The custom PQHD hardened-only derivation construction has public documentation and code but no located independent formal review.
  • The tide-fn-dsa repository documents legacy Falcon-512 compatibility behavior, including nonce reuse across signing retries and potential backward incompatibility when adopting finalized FN-DSA. No supplied evidence establishes a current key-recovery, forgery, or quantum-enabled attack path.
  • No formal performance and resource-impact analysis covering signature size, verification cost, mempool behavior, validation throughput, or archival growth was supplied.
  • No public quantum-specific emergency disclosure, incident-response, or governance process was located. A height-gated upgrade mechanism is documented, but the organizational process is not.
  • A wTDC token is reported on BNB Smart Chain, but the canonical record does not establish its provenance, bridge operators, mint and redemption controls, restrictions, activity, value-at-risk, or whether unrestricted two-way flow exists.

Non-Scoring Caveats

  • No independent audit was found for the current quantum-critical implementation.
  • Formal independent review of PQHD derivation and the modified legacy Falcon signing path was not found.
  • Future transition from legacy Falcon-512 compatibility to finalized FN-DSA may require a backward-incompatible protocol upgrade, but this is a PQ-to-PQ upgrade rather than an incomplete native migration.
  • The separate wTDC representation may expose its holders to BNB Smart Chain's classical cryptographic dependencies. The supplied record does not establish an official or unrestricted two-way bridge, so that possibility is not treated as settled fact or as a native-L1 blocker.
  • The distribution of native value between hash-protected and bare public-key Falcon outputs was not measured. Both documented output types use Falcon rather than classical ownership signatures.
  • No formal quantum-specific emergency process or comprehensive performance benchmark was supplied.
  • Missing exchange, custodian, HSM, or hardware-wallet attestations do not establish a classical native fallback because Tidecoin's documented consensus rules do not admit classical native ownership.

Evidence record

Claims and Caveats

Security Assessment & Evidence Preparedness

Public cryptographic inventory and quantum threat model

Claim: Public documentation inventories Falcon-512 and upgrade options, ML-KEM-512, SHA-512 witness mechanisms, and PQHD across relevant layers and discusses quantum threat assumptions including public-key exposure and harvest-now-decrypt-later.

Coverage basis: The whitepaper, core source documentation, and public integration inventory describe native transaction, wallet, transport, and state mechanisms for a chain launched with PQ authorization.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: The detailed inventory is project-controlled, with part of it hosted in an integration or staging fork, and has no independent audit; the primary whitepaper and repository corroborate it.

No classical ECDSA native-spending path is identified in the supplied protocol evidence.

Security Assessment & Evidence Preparedness

Public evidence record supporting the assessment

Claim: Public source code, specifications, mainnet explorer artifacts, component repositories, package documentation, and third-party research support Tidecoin's production PQ-native assessment.

Coverage basis: The record includes primary protocol and implementation artifacts plus evidence of a live production network.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: No independent audit or third-party implementation verification is included, preventing High overall confidence.

Academic recognition is descriptive corroboration, not an audit.

Production Cryptographic Protection

Spend authorization / transaction signatures

Claim: Native mainnet transactions use mandatory Falcon-512 signatures, with no retained ECDSA native-spending path documented in the protocol.

Coverage basis: Core source, protocol documentation, Falcon component code, and live explorer evidence support production PQ authorization from genesis.

Implementation score: 1 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

Assurance: Deployment and mandatory design are supported by source and mainnet artifacts, though implementation correctness has not been independently audited.

The future Falcon-to-FN-DSA transition is a PQ-to-PQ upgrade, not evidence of a current classical fallback.

Production Cryptographic Protection

Account, address, public-key exposure, and key derivation

Claim: Native ownership uses Falcon keys, with documented hash-protected and bare Falcon public-key outputs and hardened, hash-based PQHD derivation; no ECC key-recovery path is present.

Coverage basis: Protocol documentation describes PQHD, Falcon output types, and production address formats; exposed native public keys are post-quantum keys rather than classical keys.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: PQHD lacks a supplied independent review, and the value distribution between bare and hash-protected outputs was not measured.

Bare P2PK-Falcon exposure differs operationally from hash-protected addresses but is not a classical quantum-vulnerable ownership path.

Production Cryptographic Protection

Consensus-critical authentication

Claim: Tidecoin uses proof of work and has no validator signatures, validator set, VRF, threshold finality, or block-certificate authentication layer.

Coverage basis: Mining and research sources identify YesPoWerTIDE proof-of-work consensus rather than public-key validator authentication.

Implementation score: 0 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

Assurance: Quantum effects on proof-of-work economics are distinct from compromise of a consensus-authentication mechanism under this subfactor.

Transaction authorization is separately applicable and evaluated above.

Production Cryptographic Protection

State-integrity and data-availability mechanisms

Claim: The transparent UTXO and script state uses hash-based mechanisms, including SHA-512 witness-script hashing, with no identified quantum-vulnerable pairing or commitment dependency.

Coverage basis: Public inventory and Rust script documentation identify ScriptPubKey, ScriptSig, WitnessScript, P2WSH-512, and native validation extensions.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: No independent review of the full state-binding and witness implementation was supplied.

The canonical dossier identifies no KZG, pairing, trusted-setup, or native bridge-verification dependency.

Production Cryptographic Protection

Privacy and proof layers

Claim: Tidecoin is a transparent UTXO chain without a native shielded pool, zero-knowledge authorization system, note encryption, viewing keys, or shielded state.

Coverage basis: Script documentation and the whitepaper describe transparent script-based spending rather than a separate privacy or proof layer.

Implementation score: 0 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

Assurance: Lack of transaction privacy is a product characteristic, not a quantum break of an implemented privacy layer.

Transaction authorization and state hashing are evaluated in their applicable rows.

Production Cryptographic Protection

P2P transport, node identity, and peer authentication

Claim: The production implementation documents ML-KEM-512 for P2P transport, while peer identity is not a spend, bridge, custody, or consensus authorization mechanism.

Coverage basis: Core code, the whitepaper, and the public cryptographic inventory identify ML-KEM-512 P2P support.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: No independent audit, packet-level validation, or detailed authenticated-channel analysis was supplied.

The evidence supports PQ key encapsulation but does not establish resistance to every network-level impersonation or denial-of-service scenario.

Production Cryptographic Protection

Critical wallet, custody, HSM, signer, and hardware-wallet workflows

Claim: The reference wallet supports Falcon signing and hardened-only PQHD derivation, and native on-chain custody cannot select a classical ownership path.

Coverage basis: Core source, whitepaper, cryptographic inventory, and Falcon component code document native wallet signing and derivation.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: No independent wallet audit, HSM certification, hardware-wallet review, or exchange custody attestation was supplied; none establishes a classical native fallback.

This finding does not extend to custody of wTDC on BNB Smart Chain.

Migration Status & Value-at-Risk

Percentage of economically relevant value-at-risk protected

Claim: Native TDC was issued into a protocol using Falcon ownership authorization from genesis, so native value does not require ECC-to-PQC migration.

Coverage basis: Genesis documentation, core source, and mainnet artifacts support the absence of a classical native ownership namespace or legacy native balances.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: The existence, activity, control model, and value of wTDC do not alter the native protocol design and were not established sufficiently to treat the wrapper as a legacy native pool.

Coverage follows from enforced native design rather than an inferred migration percentage.

Migration Status & Value-at-Risk

Critical wallets migrated, protected, or inherently PQ-native

Claim: Native treasuries, exchanges, custodians, foundations, and major holders must use the same Falcon-authorized output rules as other native TDC holders.

Coverage basis: The native protocol has no documented alternate classical address or privileged account type for high-value wallets.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: No operational attestations for specific exchanges, custodians, HSMs, or treasury procedures were supplied.

External wrapper custodians or administrators are not covered by this native-wallet conclusion.

Migration Status & Value-at-Risk

Legacy vulnerable pools identified, measurable, deprecated, migrated, frozen, or absent by design

Claim: No legacy classical native TDC pool, account namespace, UTXO ownership type, or contract path is identified because Falcon authorization was mandatory from genesis.

Coverage basis: The primary repository and whitepaper describe replacement of ECDSA from genesis and no retained classical native path.

Implementation score: 1 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

Assurance: The negative claim is supported by public protocol design and source but not independently audited.

The external wTDC representation is not a legacy native Tidecoin balance.

Migration Mechanism, Governance & Ecosystem Coordination

Public migration or protection roadmap

Claim: Genesis deployment supplied completed native PQ protection, while documentation also describes height-gated mechanisms and future Falcon-1024 or ML-DSA upgrades.

Coverage basis: No native ECC-to-PQC migration remains to be sequenced; future roadmap items concern PQ-to-PQ evolution rather than current protection.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: Future upgrade details are partly supported by a secondary announcement and are not credited as present production protection.

The future FN-DSA transition is treated as an operational and assurance matter.

Migration Mechanism, Governance & Ecosystem Coordination

Migration accessibility and defaults

Claim: Falcon account creation, wallet derivation, and transaction authorization are the native defaults, with no user-selectable classical fallback.

Coverage basis: Core source and wallet documentation describe Falcon signing and PQHD derivation as the native wallet path.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: The breadth of third-party wallet, hardware-wallet, HSM, and institutional product support was not established, but this does not create a classical native fallback.

External wTDC tooling does not inherit this conclusion.

Migration Mechanism, Governance & Ecosystem Coordination

Migration enforcement and ecosystem coordination

Claim: Consensus rules enforce Falcon native spending because no classical signature path exists, eliminating the need for a native migration deadline or unsafe fallback policy.

Coverage basis: Protocol source and documentation state that Falcon replaces ECDSA throughout native transaction authorization.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: The canonical evidence does not establish restrictions or coordination for the separate wTDC representation.

Wrapper existence alone is insufficient to infer an official or unrestricted two-way bridge.

Migration Mechanism, Governance & Ecosystem Coordination

Emergency disclosure, incident response, or quantum governance

Claim: A height-gated technical upgrade mechanism is documented, but no public quantum-specific emergency disclosure, incident-response, security-contact, or governance process was located.

Coverage basis: There is partial technical capacity for coordinated cryptographic change, but the surrounding emergency process is undocumented.

Implementation score: 0.5 · Evidence confidence: Low

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: Absence of a formal playbook is not a readiness cap because no current vulnerable native fallback depends on it. Partial credit reflects the documented activation mechanism only.

This row does not claim that an organizational disclosure or governance process exists.

Algorithm & Implementation Assurance

Standardized, standards-track, or broadly reviewed PQC algorithm selection

Claim: Tidecoin uses Falcon-512 from the FN-DSA lineage for signatures and ML-KEM-512 for key establishment, with SHA-2-family hashing and documented PQ signature upgrade options.

Coverage basis: The principal algorithms are standardized or standards-track mechanisms suited to signatures, key encapsulation, and hashing.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: none · Score treatment: not applicable

Assurance: The deployed signature implementation predates finalized FN-DSA, and project-specific PQHD remains unreviewed; these are implementation and upgrade caveats rather than evidence that the primary signature primitive is bespoke.

Official claims of NIST validation are not relied upon as sole algorithm-assurance evidence.

Algorithm & Implementation Assurance

Independent cryptographic and implementation audit

Claim: No independent cryptographic or implementation audit covering Tidecoin's current quantum-critical production scope was found in the canonical dossier.

Coverage basis: No audited coverage was supplied for Falcon integration, PQHD, ML-KEM transport, or SHA-512 witness extensions.

Implementation score: 0 · Evidence confidence: None

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: Audit absence lowers this dedicated assurance subfactor and limits overall confidence, but does not impose a readiness cap because principal native quantum-security properties are verifiable from public code, design, and mainnet evidence.

Third-party descriptive research is not an implementation audit.

Algorithm & Implementation Assurance

Open-source, reproducible implementation

Claim: The core protocol, Falcon and FN-DSA components, Python bindings, and Rust crates are publicly available for inspection and reproduction.

Coverage basis: Multiple public repositories and package artifacts expose the protocol and quantum-critical integration.

Implementation score: 1 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

Assurance: No independent deterministic-build result or third-party reproducible-build attestation was supplied.

Open-source availability supports inspection but is not equivalent to an independent security audit.

Algorithm & Implementation Assurance

Parameter agility and future upgrade path

Claim: Documentation describes upgrade paths from Falcon-512 to Falcon-1024 and ML-DSA, including height-gated activation mechanisms.

Coverage basis: Public documentation and compatibility code describe alternative PQ signature parameters and schemes.

Implementation score: 1 · Evidence confidence: Medium

Issue classification: assurance-only caveat · Score treatment: note-only

Assurance: Finalized FN-DSA adoption may break backward compatibility, and the dossier does not show all alternative schemes activated on mainnet.

The documented upgrade path satisfies this subfactor; future PQ-to-PQ transition uncertainty does not diminish current native migration completion.

Algorithm & Implementation Assurance

Stateful-signature, side-channel, fault-injection, HSM, and custody implementation risks

Claim: Hardened PQHD derivation and inspectable cryptographic code provide some design controls, but side-channel, fault-injection, nonce, hardware-wallet, HSM, and custody hardening lack independent validation.

Coverage basis: Partial implementation-risk treatment is documented; the FN-DSA repository also identifies legacy signing compatibility behavior requiring further review.

Implementation score: 0.5 · Evidence confidence: Low

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: Documented nonce reuse across retries and unreviewed PQHD warrant independent analysis. No supplied evidence establishes a key-recovery, forgery, or quantum-enabled compromise path.

Falcon is stateless, so XMSS or LMS signing-state exhaustion controls are not applicable; side-channel and fault resistance remain relevant.

Algorithm & Implementation Assurance

Performance and resource-impact analysis

Claim: Public implementation artifacts show the PQ path operating on mainnet, but no formal analysis quantifies signature size, verification cost, block validation, mempool policy, storage growth, or node-resource impact.

Coverage basis: Operational artifacts support practical deployment, while published resource analysis remains limited to incidental implementation detail.

Implementation score: 0.25 · Evidence confidence: Low

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: No evidence shows resource constraints preventing safe use of the mandatory PQ path; the missing formal benchmark therefore does not create a readiness cap.

Formal analysis of verification throughput, transaction size, mempool behavior, archival growth, and low-end node requirements would improve assurance.

Report metadata

Generation Details