# XRP Ledger (XRP) Quantum Readiness Report

> XRP Ledger has a QRI score of 26.88/100 and is assessed at Stage 2 (Mitigation / Development) with medium evidence confidence.

Evaluation date: 2026-08-13. Review status: draft. Evaluated scope: Native XRP asset, consensus layer, P2P layer, account and transaction signing.

XRP Ledger is in Stage 2 (Mitigation / Development) with a QRI Score of 26.88, capped at 40 by classical-only spend authorization and testnet-only PQC status. The project has full credit for Security Assessment & Evidence Preparedness (5.0/5), reflecting a comprehensive public cryptographic inventory, detailed quantum threat model, and strong evidence record including official docs, XLS-295 specification, AlphaNet testnet, IEEE paper, and ripple codebase. However, all production cryptographic protection remains classical: mainnet transaction signatures use secp256k1 ECDSA and Ed25519 exclusively, validator consensus authentication is classical, and no PQ/hybrid-PQC path exists on mainnet. XRPL has advanced further in PQ planning than many L1 peers: a formal XLS specification (#295) proposes ML-DSA-44 (NIST FIPS 204) across all signing surfaces gated by a 'Quantum' amendment; an AlphaNet developer testnet has been running ML-DSA since December 2025 covering accounts, transactions, and consensus; and Ripple has published a 4-phase roadmap targeting full PQC transition by 2028. XRPL's architecture provides structural advantages for future migration: public keys are double-hashed (RIPEMD-160(SHA-256(pk))) so they remain unexposed until the first outgoing transaction, and native key rotation (SetRegularKey) allows accounts to update signing keys without moving funds. These design properties significantly reduce long-exposure value-at-risk for dormant accounts (only ~0.03% of circulating supply is in dormant accounts with exposed keys per third-party analysis). Despite these meaningful preparations, zero mainnet value is protected by PQC today. The computed Factor Score (26.88) binds below both the Stage 2 cap (40) and the Readiness & Risk cap (40 for ECC-only spend authorization and testnet-only PQC).

## Core resources

- [XRP Ledger QRI report](https://qrindex.org/projects/xrp/): Human-readable assessment with score, stage, evidence, blockers, risks, and assurance notes.
- [XRP Ledger structured report data](https://qrindex.org/projects/xrp/report.json): Complete report as JSON for deterministic machine processing.
- [QRI methodology](https://qrindex.org/methodology/): Scoring model, evidence handling, readiness stages, confidence, assurance, and report status.
- [All QRI project reports](https://qrindex.org/llms.txt): Score-ranked index of every published project assessment.
- [XRP Ledger official website](https://xrpl.org): Project-maintained website.
- [XRP Ledger source repository 1](https://github.com/XRPLF/rippled): Project source code referenced by QRI.



## Evidence sources

- [Evidence source 1](<https://xrpl.org/docs/concepts/accounts/cryptographic-keys>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 2](<https://ripple.com/insights/post-quantum-readiness-on-the-xrp-ledger/>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 3](<https://github.com/XRPLF/XRPL-Standards/discussions/295>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 4](<https://github.com/XRPLF/rippled/pull/6971>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 5](<https://cryptorank.io>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 6](<https://xrpl.org/docs/concepts/payment-types/payment-channels>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 7](<https://github.com/XRPLF/rippled>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 8](<https://github.com/XRPLF/rippled/blob/5b6e8b6f93b19c1e3f6a3467a25639031d9d9a53/src/libxrpl/protocol/AccountID.cpp>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 9](<https://github.com/XRPLF/XRPL-Standards/discussions/420>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 10](<https://xrpl.org/docs/concepts/consensus-protocol/consensus-principles-and-rules>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 11](<https://xrpl.org/docs/references/http-websocket-apis/peer-port-methods/validator-list>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 12](<https://github.com/ripple/validator-keys-tool/blob/master/doc/validator-keys-tool-guide.md>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 13](<https://xrpl.org/docs/references/protocol/binary-format>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 14](<https://xrpl.org/docs/infrastructure/configuration/server-modes/run-xrpld-as-a-validator>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 15](<https://www.projecteleven.com/blog/project-eleven-collaborates-with-ripple-to-secure-xrp-ledger-for-the-quantum-era>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 16](<https://softstack.io/case-study/xrp-ledger-security-audit-of-ripples-mpt/>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 17](<https://www.newsfilecorp.com/release/233317/XRP-Ledger-Security-Audit-Softstack-Validates-Ripples-MultiPurpose-Token-Implementation>): Public source cited by the XRP Ledger QRI assessment.
- [Evidence source 18](<https://forklog.com>): Public source cited by the XRP Ledger QRI assessment.