Chain profile
Tested ML-DSA-44 signatures on its own network and published the cost honestly: throughput fell around 40 per cent and blocks grew nearly eighteenfold.
No. BNB Chain accounts are secured by ECDSA on the secp256k1 curve, the same scheme Ethereum uses, and a sufficiently large quantum computer would break it. BNB Chain has done more experimental work than most chains in this group. It tested post-quantum signatures while preserving full EVM compatibility, using ML-DSA-44 from the finalised FIPS 204 standard for transaction signatures paired with a proof-aggregation approach for consensus. The result was published rather than buried, and it is the most useful contribution BNB Chain has made to this question: throughput fell by roughly 40 per cent and blocks grew close to eighteen times larger. That is the real cost of a naive migration on a high-throughput EVM chain, and it is why aggregation matters. We could not find a funded roadmap with public dates for deploying any of this to mainnet, which is why BNB Chain sits in Tier 4 rather than Tier 3.
Where we are making a judgement call BNB Chain is placed in Tier 4 despite doing more hands-on post-quantum engineering than several Tier 3 chains. The tier measures published commitment, not effort: without a funded roadmap carrying public dates, the spine puts a chain in Debating however good its research is. A reader who weights demonstrated engineering above published schedules would reasonably rank BNB Chain higher.
ECDSA on secp256k1, for EVM compatibility
ML-DSA-44 tested for transaction signatures, with proof aggregation explored for consensus. Not deployed.
FIPS 204 (ML-DSA), finalised August 2024
Tier 4: Debating. The threat is acknowledged and proposals exist, but there is no consensus and no published timeline.
| No. | Dimension | Score | Weight | Contribution |
|---|---|---|---|---|
| 1 | Signature scheme | 0 | 30% | 0.0 |
| 2 | Deployment stage | 2 | 25% | 5.0 |
| 3 | NIST alignment | 5 | 15% | 7.5 |
| 4 | Migration path | 3 | 15% | 4.5 |
| 5 | Exposure | 2 | 10% | 2.0 |
| 6 | Verification | 7 | 5% | 3.5 |
| Hardy Score | 22.5 | |||
BNB Chain signs with ECDSA on secp256k1 for EVM compatibility, and nothing post-quantum protects live funds. The ML-DSA work was a test on a non-production network. source
Tier 4: Debating. The threat is acknowledged and real engineering has been done, but we found no funded roadmap with public dates for mainnet deployment, which is what Tier 3 requires. source
The testing used ML-DSA-44, a parameter set of the final FIPS 204 standard, which is a specific and sound selection. The score is held at the midpoint because a scheme used in a test is not the same as a scheme a chain has committed to adopt. source
BNB Chain's validator set is comparatively concentrated, which in principle makes coordinating a protocol change faster than on a more diffuse network. Against that, no migration plan for existing holders was found, and the published performance results suggest a naive migration is not viable without aggregation work. source
As an EVM chain, a BNB Chain address is a hash of the public key, so a funded account that has never sent a transaction keeps its key private. In practice nearly every account holding meaningful value has transacted and published its key. source
BNB Chain published performance results that make its own preferred approach look expensive, including a 40 per cent throughput drop and an eighteenfold block size increase. Publishing an inconvenient measurement is a stronger signal of good faith than publishing a roadmap. source
The deployment dimension is not a separate judgement. It is Tier 4 expressed as a number. See the tier mapping.
BNB Chain tests post-quantum signatures with full EVM compatibility using ML-DSA-44, and publishes the cost: throughput down roughly 40 per cent and blocks nearly eighteen times larger. source
Mainnet deployment of post-quantum signatures. No funded roadmap with public dates was found at the time of writing. source
Exposure measures how much of the chain's value already sits behind a public key that an attacker can record today and break later. This is the part of the threat that a future upgrade cannot undo.
BNB Chain inherits Ethereum's address model, where an address is derived from a hash of the public key. A funded account that has never sent a transaction has not published its key and is not harvestable. That protection disappears on first use, and on a chain built for high-frequency activity almost every account of consequence has transacted many times. The practical position is therefore close to full exposure for economically active supply, even though the address model is better than the account-model chains where the address is the key.
What this rating means for you
BNB Chain has acknowledged the threat without agreeing a plan, so nothing is going to change for holders in the near term. That makes address hygiene the part worth attending to.
Editorial guidance from the Hardy Index. Nothing on this profile is sponsored and nothing on it is an affiliate link. The guides carry disclosed affiliate links, which never affect a rating. How we make money.
No. BNB Chain uses ECDSA on the secp256k1 curve, which a sufficiently large quantum computer would break. It has tested post-quantum signatures on a non-production network, but nothing post-quantum protects funds on mainnet.
That a straightforward swap is expensive. Using ML-DSA-44 for transaction signatures while keeping full EVM compatibility cut throughput by roughly 40 per cent and made blocks nearly eighteen times larger. That result is the strongest available evidence that high-throughput EVM chains cannot migrate without signature aggregation.
Because Tier 3 requires a funded roadmap with public dates, and we could not find one. The five-tier spine measures published commitment rather than research effort. We flag this as a judgement call on the profile, because BNB Chain has done more practical work than several chains ranked above it.
In principle, yes. A more concentrated validator set makes coordinating a protocol upgrade faster than on a widely distributed network, which is a genuine advantage for a change of this size. It does nothing about the harder problem, which is moving existing holders off exposed keys.
This is a security-readiness assessment, not investment advice.